Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/w0AJq88G0b45InPd0XGlN7mjMM4.roa
File: w0AJq88G0b45InPd0XGlN7mjMM4.roa (raw, json)
Hash identifier: +j6mILqA2jp1dcaVwp5mYLIcIAfO+j6O78pcKnaBvJM=
Subject key identifier: C3:40:09:AB:CF:06:D1:BE:39:22:73:DD:D1:71:A5:37:B9:A3:30:CE
Certificate issuer: /CN=6fe142f6be009a070c7d7e277851e05862765286
Certificate serial: 019F2368389DC2AEDE9E25D787F5E526734E
Authority key identifier: 6F:E1:42:F6:BE:00:9A:07:0C:7D:7E:27:78:51:E0:58:62:76:52:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-FC9r4AmgcMfX4neFHgWGJ2UoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/w0AJq88G0b45InPd0XGlN7mjMM4.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216353
IP address blocks: 193.105.186.0/24 maxlen: 24
2a03:6f80:f000::/36 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/b-FC9r4AmgcMfX4neFHgWGJ2UoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/b-FC9r4AmgcMfX4neFHgWGJ2UoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-FC9r4AmgcMfX4neFHgWGJ2UoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:38:9d:c2:ae:de:9e:25:d7:87:f5:e5:26:73:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe142f6be009a070c7d7e277851e05862765286
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c34009abcf06d1be392273ddd171a537b9a330ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a0:1f:53:bc:a9:2e:9b:9d:c0:08:79:c6:71:
0d:cd:ea:74:2d:3a:1f:df:80:e6:51:ff:4a:11:e8:
74:3b:c6:d3:c1:54:a3:ff:49:92:f3:f2:49:4f:ca:
64:bf:7f:bd:f5:29:19:db:8c:84:79:23:98:8e:6f:
71:c9:c2:6b:48:22:86:2f:f1:a0:d7:16:b6:3a:48:
62:ff:4c:66:64:a1:ec:78:a6:29:84:a8:4b:01:36:
3e:84:f4:1b:37:33:5d:2a:ba:6f:3d:bf:5c:ff:fb:
7c:49:f2:87:82:d1:08:de:3e:cb:80:e8:8b:0c:f2:
43:46:05:3e:a9:df:9e:7f:0f:5b:fb:07:ba:f7:a2:
7d:a4:23:1c:82:fa:4c:b4:3c:1d:8c:10:27:5f:ed:
15:22:f3:16:ce:6c:32:f2:45:f0:d7:ca:dd:d7:38:
e8:aa:c9:53:b0:cf:ee:ca:37:53:a7:f5:a3:61:09:
fd:f0:fa:f1:28:65:70:4c:ca:ac:f3:a4:ec:51:3e:
50:fb:8c:87:50:cd:65:84:6b:98:60:1d:7a:56:34:
2c:ab:02:c3:fa:32:2f:79:74:58:dc:63:bf:34:c2:
d7:20:e8:1c:d4:fd:d0:28:75:5d:27:d1:ac:93:07:
75:7b:9c:3e:e7:3c:c3:eb:82:59:74:9d:bb:7f:70:
ca:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:40:09:AB:CF:06:D1:BE:39:22:73:DD:D1:71:A5:37:B9:A3:30:CE
X509v3 Authority Key Identifier:
keyid:6F:E1:42:F6:BE:00:9A:07:0C:7D:7E:27:78:51:E0:58:62:76:52:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-FC9r4AmgcMfX4neFHgWGJ2UoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/w0AJq88G0b45InPd0XGlN7mjMM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/b-FC9r4AmgcMfX4neFHgWGJ2UoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.186.0/24
IPv6:
2a03:6f80:f000::/36
Signature Algorithm: sha256WithRSAEncryption
aa:a4:4c:70:3d:31:b5:87:e0:b3:43:9b:7d:3e:15:e2:26:cc:
dc:0d:bf:8d:78:ac:43:d1:08:de:14:95:5d:f6:ca:80:51:22:
aa:8f:a6:5c:74:81:db:2b:21:c2:dc:97:fd:cb:a3:02:83:ad:
a9:9f:e7:c9:02:37:2f:0f:28:5e:69:e9:d0:c1:11:54:52:5e:
52:6c:0f:f4:b5:43:e4:74:55:93:b1:db:93:9e:e1:63:d1:de:
12:0b:f0:fa:da:ef:b7:1d:11:d7:b8:78:37:2a:82:44:25:58:
c7:79:03:56:db:03:85:99:b4:4b:4e:b9:65:da:db:8e:b8:54:
31:dc:f2:9a:fa:67:f0:a7:8a:b9:46:7d:f8:05:1e:63:7b:e8:
d7:3c:39:3b:86:6f:52:1b:7d:94:49:19:8b:7c:c8:ee:cf:75:
c1:23:a0:7c:f8:da:b0:70:ce:f9:cf:25:6b:dc:d1:53:79:cd:
78:de:39:ac:4a:61:0a:98:e1:b6:31:7d:e0:f9:39:88:fa:d6:
c1:17:8c:62:f2:92:7a:2c:c0:52:1d:cb:c3:18:9b:81:b0:ec:
c7:f7:64:ba:71:bd:55:47:01:ee:c1:3c:98:67:4e:af:3d:de:
9a:25:8f:50:14:a9:97:0c:c6:c1:ae:74:06:0f:39:cc:82:8e:
18:fb:42:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:37 2026 by rpki-client