Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/6iVPk_BcICbyzj54CRMtezEEcmI.roa
File: 6iVPk_BcICbyzj54CRMtezEEcmI.roa (raw, json)
Hash identifier: l14WCrIxDe7fA10u7aluPWWXLS00xAFDNzJ5Dmo56XA=
Subject key identifier: EA:25:4F:93:F0:5C:20:26:F2:CE:3E:78:09:13:2D:7B:31:04:72:62
Certificate issuer: /CN=defc3feba729b8ad0b9793adb26a4fa328386e36
Certificate serial: 019F23682E8E0BA8088E8D2EE075AE26C601
Authority key identifier: DE:FC:3F:EB:A7:29:B8:AD:0B:97:93:AD:B2:6A:4F:A3:28:38:6E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vw_66cpuK0Ll5OtsmpPoyg4bjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/6iVPk_BcICbyzj54CRMtezEEcmI.roa
Signing time: Thu 02 Jul 2026 15:17:37 +0000
ROA not before: Thu 02 Jul 2026 15:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204091
IP address blocks: 2a13:3700::/44 maxlen: 44
2a13:3700:10::/44 maxlen: 44
2a13:3700:20::/44 maxlen: 44
2a13:3700:30::/44 maxlen: 44
2a13:3700:40::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/3vw_66cpuK0Ll5OtsmpPoyg4bjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/3vw_66cpuK0Ll5OtsmpPoyg4bjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vw_66cpuK0Ll5OtsmpPoyg4bjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2e:8e:0b:a8:08:8e:8d:2e:e0:75:ae:26:c6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=defc3feba729b8ad0b9793adb26a4fa328386e36
Validity
Not Before: Jul 2 15:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea254f93f05c2026f2ce3e7809132d7b31047262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dd:01:7f:6a:b7:1c:d7:c3:f0:04:25:9d:f4:
ba:fe:b1:ba:77:0e:d8:44:be:70:29:4d:30:26:a1:
a8:77:39:65:59:d5:d8:76:ee:20:f6:6f:53:5b:6e:
87:1b:86:d4:dc:16:cc:83:5b:a1:73:00:b9:58:d4:
77:6e:0d:71:66:56:f8:06:8e:af:a3:06:a9:00:4b:
26:c5:de:ae:79:c5:69:1e:c7:f8:02:e4:3f:70:7e:
51:44:46:5d:c0:00:3b:e6:c3:2b:cf:57:39:b1:8f:
88:cd:81:9e:80:4d:6f:d9:13:e1:c1:5a:53:5b:42:
66:b7:be:b3:e4:52:d1:ff:54:c0:f8:84:79:fd:87:
f0:e3:91:5f:0d:3b:40:5c:4b:82:81:c1:27:d9:da:
83:f3:ea:5e:da:c4:de:13:7b:6c:02:a7:c5:80:21:
52:5a:2f:49:6e:42:13:f9:90:91:f4:6d:d0:67:7f:
24:35:91:1e:53:65:40:11:2f:dd:f6:58:9e:13:48:
a8:6f:9c:c3:55:be:da:2a:33:11:9f:81:47:8a:3b:
93:7e:5b:4d:22:2a:cc:39:d0:85:0a:52:fa:d9:96:
79:0b:9d:81:c6:4a:e2:e7:ef:23:49:41:bd:b2:da:
df:2f:8e:4d:a1:2d:4a:84:24:53:82:39:38:43:2e:
68:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:25:4F:93:F0:5C:20:26:F2:CE:3E:78:09:13:2D:7B:31:04:72:62
X509v3 Authority Key Identifier:
keyid:DE:FC:3F:EB:A7:29:B8:AD:0B:97:93:AD:B2:6A:4F:A3:28:38:6E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vw_66cpuK0Ll5OtsmpPoyg4bjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/6iVPk_BcICbyzj54CRMtezEEcmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/3vw_66cpuK0Ll5OtsmpPoyg4bjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3700::-2a13:3700:4f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
99:5e:44:b4:b5:50:c1:50:88:81:20:a4:64:c3:50:88:bb:87:
e0:26:46:f1:19:96:dc:76:88:7d:c2:97:60:aa:bc:e8:58:79:
de:7c:5b:79:37:db:64:82:d0:1e:c5:cb:c0:eb:5a:63:63:72:
ba:76:c9:cc:c4:db:5b:f2:e8:09:38:c7:22:5c:a2:48:b6:e8:
cd:51:70:e8:a7:ea:2b:06:d5:a5:47:52:96:8a:dd:a7:77:ca:
74:e3:bf:22:2b:5d:7e:89:60:58:5e:18:89:cd:c0:2e:e7:49:
68:93:27:d1:c3:d1:e5:78:9c:0b:9a:00:66:1d:1b:b7:53:5c:
e7:b7:61:a6:fb:bc:80:4f:b5:cf:71:b3:28:08:d0:74:42:ea:
24:9a:0b:ff:84:db:40:18:74:74:4b:82:9e:0c:9e:b6:e3:16:
1d:24:35:0f:37:44:66:44:5c:1c:94:19:b3:e4:7f:68:18:94:
cf:0f:dd:ef:ce:7a:a9:a8:93:b8:80:19:18:0b:02:ae:ea:67:
c3:ec:fc:c1:89:44:d3:37:1d:c2:5f:fc:9f:04:83:6f:71:c3:
c9:7b:c6:35:05:9b:c7:78:f8:ef:94:69:de:4e:90:c9:93:cc:
64:7a:15:6a:0e:76:fd:c9:1c:f2:c7:a2:c1:4e:2e:10:f1:3a:
50:bd:1f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:43 2026 by rpki-client