Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/6oO-6-1bcA6Z8QJD_0vrHo8wkko.roa
File: 6oO-6-1bcA6Z8QJD_0vrHo8wkko.roa (raw, json)
Hash identifier: h1cCLwhcJyDdaYQ6GZavGUNAZX6iLc3GmTH9bJpo39Y=
Subject key identifier: EA:83:BE:EB:ED:5B:70:0E:99:F1:02:43:FF:4B:EB:1E:8F:30:92:4A
Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Certificate serial: 01A1D3E6E04FA96C03912C6B88E65D620B07
Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/6oO-6-1bcA6Z8QJD_0vrHo8wkko.roa
Signing time: Fri 13 Nov 2026 07:54:45 +0000
ROA not before: Fri 13 Nov 2026 07:54:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41745
IP address blocks: 178.251.205.0/24 maxlen: 24
178.251.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d3:e6:e0:4f:a9:6c:03:91:2c:6b:88:e6:5d:62:0b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Validity
Not Before: Nov 13 07:54:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea83beebed5b700e99f10243ff4beb1e8f30924a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:93:5b:c4:2c:29:27:5f:9a:3d:08:d8:fb:1c:
1d:de:5b:b6:20:38:05:4d:12:ed:23:1b:49:1d:8c:
a6:80:b5:0b:ea:62:1c:74:bd:fe:89:cc:5b:0a:9e:
ea:c9:23:f9:dd:08:28:b6:86:92:91:52:26:71:ba:
9a:17:33:b7:f5:ea:db:49:c6:73:04:a3:1d:90:3e:
2a:4b:9f:67:9a:83:b7:09:1f:55:67:e2:7f:45:8f:
8f:47:0e:83:03:be:fd:02:c5:ed:64:df:e9:17:94:
23:55:0a:53:7b:c9:35:84:67:19:2a:de:9e:de:22:
28:57:b1:09:d6:9d:34:70:cf:ba:4a:30:da:90:49:
81:20:4a:61:17:fc:f0:d0:ef:f6:23:12:f0:cb:6d:
aa:20:f3:ea:3b:c2:50:db:32:9b:f2:33:0e:92:51:
ac:8e:17:a0:f6:69:2f:ec:16:7e:80:e9:55:3c:a0:
b3:b3:86:bb:31:94:8a:00:7d:25:81:c1:22:63:4e:
fd:95:6b:b7:dc:cf:e0:85:f3:bc:e6:73:a5:0b:f5:
53:03:f1:26:3b:ce:9f:ba:d3:1f:b8:fe:8b:7f:1f:
52:7a:e0:90:73:a9:1d:1e:8c:df:41:ed:7b:10:fa:
e1:c1:af:b3:3f:3f:09:21:ee:3e:58:90:3b:3a:f6:
fa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:83:BE:EB:ED:5B:70:0E:99:F1:02:43:FF:4B:EB:1E:8F:30:92:4A
X509v3 Authority Key Identifier:
keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/6oO-6-1bcA6Z8QJD_0vrHo8wkko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.205.0-178.251.206.255
Signature Algorithm: sha256WithRSAEncryption
a5:ad:3e:58:7b:ef:b8:65:6e:30:74:98:0d:8c:0f:c6:6e:de:
fb:90:97:07:fb:1a:29:c8:14:2f:b4:04:85:8a:cc:d3:ff:0c:
d6:46:2c:b8:a0:39:c2:30:22:ce:79:15:46:15:55:1e:fa:d0:
4d:a9:f8:e7:36:5f:20:89:09:73:a6:45:2a:10:23:d2:5f:e5:
01:9a:2b:2c:0d:d7:0d:5c:25:f0:40:5e:f0:6b:66:f4:23:6b:
ca:5f:4e:bb:64:2b:60:4f:70:e3:a4:5b:05:2d:fc:c4:43:17:
8c:9d:18:1f:0f:03:2b:7f:2e:de:06:5a:66:d7:07:41:e8:85:
ba:e3:85:81:cc:b8:d0:bd:92:b1:86:aa:5f:13:10:5a:b2:4e:
c0:54:b4:48:4a:0d:4c:cd:f7:e3:bb:dd:05:4a:e0:82:00:52:
25:b5:7e:1a:b8:96:ac:a6:f7:85:65:9f:05:1d:b0:7c:e7:d1:
82:1f:90:49:a3:30:04:9c:c8:da:bc:d4:63:8b:11:e9:f2:ba:
51:ca:32:5f:49:81:14:3e:15:19:7b:93:06:e4:a8:79:e3:a0:
bd:21:11:6f:9c:75:f6:14:33:7c:90:7f:1d:d6:69:b1:22:92:
4a:27:9c:2d:98:b1:a5:14:04:96:31:29:60:5d:ed:88:21:39:
f9:18:9a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:51:52 2026 by rpki-client