Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/E6dX_dx-UNYbrMYjvW7HNH4pZNw.roa
File: E6dX_dx-UNYbrMYjvW7HNH4pZNw.roa (raw, json)
Hash identifier: A1k7bPapaEemDHkqUPiM/pfbmbXosBknJLuvair0MNU=
Subject key identifier: 13:A7:57:FD:DC:7E:50:D6:1B:AC:C6:23:BD:6E:C7:34:7E:29:64:DC
Certificate issuer: /CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Certificate serial: 019EDED50D333500BCF593419842EC88E4CF
Authority key identifier: F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/E6dX_dx-UNYbrMYjvW7HNH4pZNw.roa
Signing time: Fri 19 Jun 2026 07:42:44 +0000
ROA not before: Fri 19 Jun 2026 07:42:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208378
IP address blocks: 193.138.29.0/24 maxlen: 24
2001:67c:c4c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:de:d5:0d:33:35:00:bc:f5:93:41:98:42:ec:88:e4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f
Validity
Not Before: Jun 19 07:42:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13a757fddc7e50d61bacc623bd6ec7347e2964dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:4b:4b:e6:6e:32:8d:0f:a8:6b:ce:96:a8:
d9:8e:86:cf:10:2a:0d:2d:1f:f5:61:ff:64:8d:a8:
95:cf:73:d4:bc:5e:9d:3f:28:6e:ba:01:46:da:7a:
48:2c:2d:de:be:91:ce:e5:59:73:00:45:c7:e4:e2:
d5:9d:f3:10:aa:c1:3d:25:fe:79:91:d0:04:64:ad:
d8:01:4b:16:e6:8f:b7:93:84:fc:77:8c:5a:16:fd:
39:02:df:bf:f2:a2:ed:36:cb:2d:8c:f5:87:32:e4:
14:f7:fa:0b:cf:b0:73:14:17:40:5a:9e:15:24:13:
78:72:a0:4c:33:b2:d1:c7:f7:3c:17:14:35:a3:98:
69:8f:fd:23:25:fb:27:29:82:17:e1:6d:c7:e3:fc:
aa:06:d0:2a:4b:11:53:0f:6c:e6:f7:96:48:7b:5d:
18:8f:28:4c:ca:fa:24:0d:bc:8d:e8:d2:ba:7a:56:
01:8a:f8:45:e8:28:88:d7:65:a3:74:71:45:fc:8b:
da:21:55:2c:4a:07:e2:d0:e4:ce:63:b7:19:a9:9c:
35:45:76:d6:cd:d6:08:3d:47:23:bc:e8:4d:a4:50:
ba:8d:21:c6:14:0a:fd:ba:ed:e9:f9:27:53:95:45:
b3:f0:1b:0a:4c:4e:04:ce:aa:98:11:e2:b9:48:da:
f4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A7:57:FD:DC:7E:50:D6:1B:AC:C6:23:BD:6E:C7:34:7E:29:64:DC
X509v3 Authority Key Identifier:
keyid:F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/E6dX_dx-UNYbrMYjvW7HNH4pZNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.29.0/24
IPv6:
2001:67c:c4c::/48
Signature Algorithm: sha256WithRSAEncryption
cb:b9:c6:68:87:95:45:d4:dd:e2:4b:98:73:ea:30:0c:17:d2:
5b:90:b7:d6:f5:32:87:76:45:81:01:ba:36:a3:ac:fa:0c:f0:
12:f9:81:55:be:f4:d9:8e:4f:1b:5b:97:28:4a:b3:ed:e9:1c:
7f:52:70:87:6d:fe:6e:15:9f:67:65:85:b6:86:b2:e6:61:96:
40:e6:80:98:c5:61:95:05:ae:11:ca:bd:dd:2c:04:4b:25:ae:
7f:40:1f:50:7c:90:ee:86:5f:4a:77:6a:7d:2d:db:98:89:a1:
81:cd:35:66:78:23:c3:e7:4a:4f:55:08:c6:89:62:03:36:32:
c3:c1:c4:06:cc:8d:85:91:10:f7:d9:b5:f5:ec:55:65:dc:6a:
96:d1:2f:04:2f:66:4b:23:d1:2d:a5:ea:72:d1:b6:be:d2:ea:
cc:c6:27:7f:b7:41:a2:a8:12:a2:af:7c:99:b2:cd:41:83:ca:
a6:ae:ba:71:92:60:19:c7:6b:07:66:7d:f4:6f:3d:82:f8:53:
ae:c9:39:0b:86:85:68:52:65:97:7b:68:8c:0a:e4:c2:1c:b4:
19:ac:7f:72:24:d4:91:00:c5:60:01:41:0b:fc:c9:bf:a2:93:
c7:e5:c3:80:00:3d:e3:6f:33:ec:73:54:38:de:fe:25:38:f8:
90:26:1e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:27:46 2026 by rpki-client