Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/6qDW6_OYHkue6ocM9JiQxw7eaDA.roa
File: 6qDW6_OYHkue6ocM9JiQxw7eaDA.roa (raw, json)
Hash identifier: DI4vkJ8mXMU1gsjZNOcgIX1g1JQ6NES2SMI/VfbnZRM=
Subject key identifier: EA:A0:D6:EB:F3:98:1E:4B:9E:EA:87:0C:F4:98:90:C7:0E:DE:68:30
Certificate issuer: /CN=003ffedbcf7f9c710ef58baffeecee0377f19bd3
Certificate serial: 019F2368CEACC62E88FE8F0C714E9420C11F
Authority key identifier: 00:3F:FE:DB:CF:7F:9C:71:0E:F5:8B:AF:FE:EC:EE:03:77:F1:9B:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AD_-289_nHEO9Yuv_uzuA3fxm9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/6qDW6_OYHkue6ocM9JiQxw7eaDA.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39238
IP address blocks: 2a05:1640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AD_-289_nHEO9Yuv_uzuA3fxm9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ce:ac:c6:2e:88:fe:8f:0c:71:4e:94:20:c1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=003ffedbcf7f9c710ef58baffeecee0377f19bd3
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eaa0d6ebf3981e4b9eea870cf49890c70ede6830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e1:bb:78:22:09:cd:f8:cd:a3:4d:12:d4:3c:
ea:d5:ae:ac:82:14:d3:ca:8d:3c:e7:13:3e:46:35:
fd:e4:4c:f6:5c:12:70:d4:4d:f0:ac:76:6b:dc:fe:
f4:b0:14:84:f9:45:dd:85:a5:e2:9a:36:e0:58:c2:
ac:19:59:d4:b1:2a:4d:79:d3:81:9d:ef:ce:04:90:
d2:01:cd:35:16:ef:e9:26:fd:2e:56:62:6c:01:d6:
be:b4:26:70:af:ef:e1:66:39:a6:f0:06:e2:8a:e8:
a9:b7:4e:ac:fb:1b:be:04:85:a7:48:7b:59:f3:d6:
35:8d:3b:14:d0:6d:cc:d3:37:b8:c6:41:50:95:b0:
fe:6d:0f:ce:eb:dd:76:74:ac:c7:27:8d:c5:3c:cc:
d6:30:5e:9d:d1:ce:5f:89:f5:24:53:d0:92:5c:3a:
0a:4d:60:59:63:51:ae:9a:af:e7:d2:04:90:69:46:
62:c5:9d:c9:84:70:59:6b:88:e1:99:cd:45:df:dc:
d2:c2:32:cf:55:5b:6c:ff:a2:fd:1b:33:2b:86:33:
c5:a6:3d:88:d5:a8:fa:b3:8b:66:9d:f8:e8:4b:3f:
78:54:d2:8e:a4:83:3e:1e:11:c7:f1:db:11:07:54:
fc:9e:a7:d3:bb:29:4b:55:6b:10:6b:dc:72:33:c3:
ba:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A0:D6:EB:F3:98:1E:4B:9E:EA:87:0C:F4:98:90:C7:0E:DE:68:30
X509v3 Authority Key Identifier:
keyid:00:3F:FE:DB:CF:7F:9C:71:0E:F5:8B:AF:FE:EC:EE:03:77:F1:9B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AD_-289_nHEO9Yuv_uzuA3fxm9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/6qDW6_OYHkue6ocM9JiQxw7eaDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1640::/29
Signature Algorithm: sha256WithRSAEncryption
16:dd:83:4f:fe:22:ee:95:ea:2c:c3:88:42:7d:78:c7:5b:6e:
95:b3:53:ab:40:ba:9c:03:de:40:d1:ac:d4:cf:14:e6:bc:0a:
bb:78:04:9d:eb:ce:fc:cd:92:37:b1:51:44:01:cb:3b:fc:b2:
13:86:e1:65:df:08:e5:99:f1:ef:fa:33:e8:fe:ef:aa:bb:3a:
74:89:e7:e1:b1:54:de:85:ba:fe:d8:cc:b1:8d:e4:96:ea:3e:
85:68:22:24:67:10:9a:e3:86:c2:80:15:b9:c4:52:65:5e:5d:
29:3e:7f:63:b0:e0:08:29:b8:58:24:33:38:eb:7f:2e:3e:3e:
e7:f1:1f:2e:f3:f3:d7:ab:51:4b:c7:cf:0c:0b:8f:24:32:95:
75:fa:5b:fe:5c:0b:9b:b1:43:2e:25:71:8d:6b:09:4a:74:48:
32:18:4e:21:d8:04:3e:4a:0c:28:82:cc:29:1f:5b:84:1a:cd:
f2:9f:a6:8b:86:19:d2:02:bb:70:27:68:0c:43:66:2a:bc:e3:
7a:ba:58:77:9e:51:e7:69:8a:6b:d8:04:b1:bd:26:95:c2:ce:
eb:4c:eb:69:ce:9d:f6:69:a3:cc:a6:4f:95:3e:3e:77:fe:c8:
3d:18:13:00:dc:06:61:42:44:11:8b:dc:e6:ea:59:6c:a4:df:
0c:f7:22:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:00:09 2026 by rpki-client