Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/6NWI8tWoiAKYnMJPFI3mMZ_1eAI.roa
File: 6NWI8tWoiAKYnMJPFI3mMZ_1eAI.roa (raw, json)
Hash identifier: D/c2b1WbMcOgPkzlLewHnilhGheUhsHHl0kxWbrIPZE=
Subject key identifier: E8:D5:88:F2:D5:A8:88:02:98:9C:C2:4F:14:8D:E6:31:9F:F5:78:02
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 01A0C413CDF2E325103C23252336E933C44E
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/6NWI8tWoiAKYnMJPFI3mMZ_1eAI.roa
Signing time: Mon 21 Sep 2026 13:07:07 +0000
ROA not before: Mon 21 Sep 2026 13:07:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1101
IP address blocks: 145.99.0.0/16 maxlen: 16
145.102.4.0/23 maxlen: 23
145.102.131.0/24 maxlen: 24
145.111.0.0/16 maxlen: 16
145.192.0.0/12 maxlen: 12
145.208.0.0/13 maxlen: 13
145.220.0.0/16 maxlen: 16
2001:610:360::/48 maxlen: 48
2001:67c:6ec::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:42:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:13:cd:f2:e3:25:10:3c:23:25:23:36:e9:33:c4:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Sep 21 13:07:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8d588f2d5a88802989cc24f148de6319ff57802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d9:50:c0:05:98:49:00:d0:d8:f8:cf:88:31:
c8:5b:f6:dc:f0:be:dd:5c:70:e9:30:e0:cc:32:d4:
9c:3f:b2:86:41:3b:15:da:30:ed:2e:79:63:4a:07:
93:1c:de:b3:1e:38:3e:95:09:dd:76:59:25:93:8d:
99:d5:fc:a1:1e:d1:d1:91:6e:b4:b4:7e:06:c5:7f:
ac:ec:79:9e:e0:64:2c:45:e8:db:18:83:76:41:c9:
64:05:fd:b1:e4:19:85:66:5d:7a:b9:da:8b:e8:98:
a5:8c:0d:c8:5d:1e:2c:14:91:d1:91:70:be:93:19:
20:a1:08:7c:c2:c1:85:a8:54:ad:50:db:e8:34:7f:
08:7b:5f:b4:bb:5e:0b:a7:88:6e:67:04:3e:67:f3:
be:ed:56:f8:14:51:08:f3:b0:87:cc:39:dd:b9:b7:
7d:f9:c5:96:82:2f:eb:bf:42:bd:2b:28:33:a1:44:
f6:1e:bf:c4:40:5c:5e:e3:d6:6f:d9:d4:0f:85:32:
58:e8:66:64:7f:12:ad:07:72:f8:7d:48:56:e6:d2:
9a:95:67:dc:66:fe:17:30:9c:37:64:d6:7f:9f:dc:
15:71:37:d5:78:cb:08:3b:b2:44:58:bb:52:d2:dc:
70:74:f3:a0:21:38:e1:3b:ea:8a:62:78:70:c0:d2:
1d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D5:88:F2:D5:A8:88:02:98:9C:C2:4F:14:8D:E6:31:9F:F5:78:02
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/6NWI8tWoiAKYnMJPFI3mMZ_1eAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.99.0.0/16
145.102.4.0/23
145.102.131.0/24
145.111.0.0/16
145.192.0.0-145.215.255.255
145.220.0.0/16
IPv6:
2001:610:360::/48
2001:67c:6ec::/48
Signature Algorithm: sha256WithRSAEncryption
49:2e:51:9c:e2:60:58:3a:fb:10:c4:72:1f:c9:8b:9b:0f:3d:
1d:1f:b2:99:7f:cb:ce:70:c8:12:b3:e1:28:5d:6a:d2:06:09:
14:c7:db:2f:cb:78:31:5f:4a:3d:d0:7a:e9:67:6e:5f:fb:fc:
d6:2f:1b:0f:df:7f:26:42:69:3e:e3:d5:2e:de:1f:b3:44:df:
b9:88:18:67:28:34:17:a5:a5:46:f3:98:8f:a6:c2:4a:ff:6e:
2d:6e:29:26:0a:01:a1:78:4f:b3:20:9d:b1:ed:c7:62:33:4f:
fe:38:68:08:3b:4f:8a:cd:ad:63:c3:d0:be:2b:9c:85:e0:85:
8d:32:8b:78:e4:6a:cb:a4:30:63:c2:37:a9:cd:4d:9b:aa:90:
69:f7:c7:a4:21:2e:b1:f2:df:af:93:75:ba:79:db:89:e8:c2:
58:49:d3:07:57:32:a6:bb:3d:31:ff:7e:ff:f7:04:30:d4:cc:
85:8a:89:72:2a:71:4a:09:b5:9d:b1:e4:cb:a5:51:3c:14:a9:
b9:8a:ba:46:64:26:b6:f7:6b:97:bd:05:12:bf:b8:aa:dc:00:
5b:53:a1:e5:b1:39:e0:36:2f:67:0d:53:8f:b6:89:ee:e1:df:
09:3a:26:be:03:b1:be:f2:a9:19:3e:da:93:86:11:b4:ef:cb:
db:22:cf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:20:31 2026 by rpki-client