Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/6DhiRoSri1m7BTjsOkZsMEE-nL8.roa
File: 6DhiRoSri1m7BTjsOkZsMEE-nL8.roa (raw, json)
Hash identifier: UIQpRWd01qPzQr+o5Q7d4Q39IzJAwlCAT/Glf6A1EUw=
Subject key identifier: E8:38:62:46:84:AB:8B:59:BB:05:38:EC:3A:46:6C:30:41:3E:9C:BF
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01A09EB130246606EBEF8B5571D682B13842
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/6DhiRoSri1m7BTjsOkZsMEE-nL8.roa
Signing time: Mon 14 Sep 2026 06:53:27 +0000
ROA not before: Mon 14 Sep 2026 06:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218685
IP address blocks: 2a03:5840:165::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 04:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:b1:30:24:66:06:eb:ef:8b:55:71:d6:82:b1:38:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Sep 14 06:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e838624684ab8b59bb0538ec3a466c30413e9cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dd:8c:20:20:e7:77:fb:a9:77:83:37:b0:09:
dc:89:62:da:7a:99:f1:a9:5d:66:8c:14:73:0a:56:
20:c9:5e:1c:6d:08:bc:e8:18:1f:6b:23:3e:98:6f:
b7:c0:9b:83:56:fd:a9:72:c1:20:99:7b:aa:1c:fd:
d0:e6:f5:2a:c8:61:b3:c0:84:f5:1c:7e:73:a8:00:
ad:3c:f1:42:da:62:09:13:a8:d5:28:cc:1f:00:0e:
28:0d:92:07:4f:a5:e1:d6:fd:99:79:73:fa:d6:d0:
7a:05:d9:65:07:88:da:2c:92:92:87:31:04:fc:87:
ca:0c:9f:4c:b0:2e:0b:9f:e7:02:4c:32:f8:e1:7c:
e3:51:df:51:90:27:de:78:b0:f7:5a:d9:73:a8:c6:
e7:e9:3c:f3:7d:df:7b:6d:67:c2:36:fb:59:c4:38:
1d:90:e0:c7:e3:2d:46:80:23:57:c4:04:8b:1e:a1:
13:1d:de:49:7e:f8:15:f4:a1:85:ec:60:05:b0:a3:
22:39:97:38:72:f2:b1:62:42:17:37:80:3d:53:70:
af:bf:71:13:96:d3:72:86:b3:98:1c:24:92:24:ca:
6b:08:d9:d5:94:e2:95:63:44:f7:ef:63:2e:22:a1:
d0:23:41:50:08:c0:6b:03:4e:95:e5:7b:d2:0a:e8:
55:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:38:62:46:84:AB:8B:59:BB:05:38:EC:3A:46:6C:30:41:3E:9C:BF
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/6DhiRoSri1m7BTjsOkZsMEE-nL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:165::/48
Signature Algorithm: sha256WithRSAEncryption
a2:d7:d4:70:6d:fb:45:03:61:83:01:63:1f:f1:18:47:2d:44:
79:f0:a9:25:68:dd:ad:26:0d:0f:01:42:7e:3b:98:6c:7d:75:
04:43:d0:fc:d2:a2:26:9e:25:d3:52:cc:56:3d:f6:8c:6d:d1:
99:9a:ec:a4:46:e7:91:d9:10:33:2c:89:d4:f3:0e:e1:05:05:
40:50:91:65:50:91:12:b1:0c:fe:0f:ad:c6:ca:e0:39:fd:cb:
82:9f:db:84:3f:c4:51:96:bb:dd:e4:87:47:d6:b8:44:38:96:
05:dd:d1:b2:6d:5d:b8:55:b3:ce:1a:95:50:fc:6f:af:cb:6d:
bf:26:02:6f:a9:a1:35:70:8a:d1:61:b8:7d:d5:8f:9c:c2:10:
99:5c:50:c3:62:b4:3d:88:1e:52:33:6c:5c:5d:59:30:b3:49:
bd:15:1e:1f:7d:80:cc:c7:bb:f7:62:50:51:35:73:f9:78:7a:
18:bb:d3:dd:64:bf:bf:9b:f9:e6:a8:02:e0:29:aa:d7:12:88:
ef:0a:af:5a:1a:33:b4:c8:7e:7b:bb:a4:e7:28:90:7a:19:8d:
ef:dc:68:2e:ba:75:33:29:01:ee:26:56:13:69:ea:e4:1e:73:
91:69:89:d9:ab:5d:61:54:57:23:4f:ca:2d:88:89:6d:1d:aa:
e0:f9:a0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:29:06 2026 by rpki-client