Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/6kERmgZGL5UqVKqbENAa-FNSgHc.roa
File: 6kERmgZGL5UqVKqbENAa-FNSgHc.roa (raw, json)
Hash identifier: AClJH/YtHZ63QiXgfCJgcjixUw8nfxsUu8O75U0YUJI=
Subject key identifier: EA:41:11:9A:06:46:2F:95:2A:54:AA:9B:10:D0:1A:F8:53:52:80:77
Certificate issuer: /CN=d4a7522d27e62ae23a460143eba6733b79b24477
Certificate serial: 019F47670D4E678F53B73124AFAA41A156B2
Authority key identifier: D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/6kERmgZGL5UqVKqbENAa-FNSgHc.roa
Signing time: Thu 09 Jul 2026 15:02:43 +0000
ROA not before: Thu 09 Jul 2026 15:02:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152900
IP address blocks: 45.11.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:67:0d:4e:67:8f:53:b7:31:24:af:aa:41:a1:56:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a7522d27e62ae23a460143eba6733b79b24477
Validity
Not Before: Jul 9 15:02:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea41119a06462f952a54aa9b10d01af853528077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:74:9d:08:8e:4c:77:e3:c4:4e:9f:d9:46:f5:
54:43:80:25:7c:c4:92:79:31:b4:47:7d:cd:b7:68:
ca:ba:e9:27:66:c3:73:99:b1:7d:7a:f2:44:22:6c:
ad:4f:18:b3:f5:12:48:7b:a1:4e:93:75:b9:82:30:
60:c2:0a:47:db:19:58:b3:a7:11:5f:01:65:0c:49:
cf:37:08:df:f6:9e:bd:f6:0a:9a:ef:b3:53:43:9e:
90:d5:2e:e5:f6:cc:82:b0:0e:a8:cf:d3:ab:08:72:
c1:e2:28:67:2a:49:fd:58:c0:fb:7b:69:94:7c:52:
4d:9e:fc:79:02:e2:58:ae:31:79:0d:fb:f5:62:d7:
27:c1:8c:16:2b:84:e1:a1:0d:cf:16:65:05:c7:a1:
6e:02:8a:1d:0f:8e:a4:1e:8f:9d:5b:08:34:76:c5:
09:b8:97:a8:e5:76:68:6d:c8:4c:9f:02:66:f9:10:
04:22:e3:07:4a:67:db:e0:b1:1f:be:08:85:6d:1c:
6e:17:92:96:b8:6c:ba:65:88:26:4d:2f:91:dc:e8:
9d:d0:45:a3:dc:35:82:7f:07:eb:c3:e1:e5:9f:e7:
01:a8:58:f5:13:0a:77:76:43:2c:89:53:a0:38:ae:
d6:c0:bc:3f:a9:de:6f:6f:2a:3a:f7:ec:65:41:c8:
8a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:41:11:9A:06:46:2F:95:2A:54:AA:9B:10:D0:1A:F8:53:52:80:77
X509v3 Authority Key Identifier:
keyid:D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/6kERmgZGL5UqVKqbENAa-FNSgHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.89.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:54:f9:b3:ae:5b:85:d0:74:bb:67:3c:22:d8:9a:8b:1b:b5:
59:70:77:6d:61:71:09:53:73:cc:fb:4e:71:85:98:89:ac:59:
ec:c4:bb:a0:c0:bf:01:8a:ab:48:3c:5c:81:0e:fe:7c:f8:2d:
0a:bc:90:12:2b:ce:9f:ad:f4:f5:60:73:45:c1:e7:a3:ba:fd:
cd:b1:98:f3:23:bd:2d:6d:ca:a7:55:ef:1d:b4:7b:8c:ba:4d:
99:ef:8d:b0:7f:87:41:19:14:b7:ed:b6:a7:59:15:6c:63:d4:
0a:a3:e7:7c:6a:ac:6b:fb:a8:68:8f:f5:7b:04:1b:e9:53:b6:
36:87:82:ef:c8:da:c0:e1:a6:46:3b:74:eb:e6:aa:9d:62:77:
26:ed:9d:bb:06:bd:8d:ca:2c:93:89:e6:1a:c5:a1:e9:ea:95:
93:ea:7a:21:e8:77:1a:70:61:62:66:79:48:f4:6e:8d:c4:01:
69:48:6a:86:ec:a5:14:52:a6:ca:f7:84:2f:61:14:40:be:e1:
9e:a4:db:31:33:35:9d:88:0c:b1:a2:c5:92:cc:23:9d:ee:56:
1d:79:cb:b9:08:b5:60:a4:c6:c5:de:eb:b9:ac:72:d0:00:77:
6e:3d:d9:8a:a3:14:35:a3:5e:4e:ed:d7:a8:56:4b:1c:c1:26:
6f:0c:32:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:21 2026 by rpki-client