Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/6OjM-NFIW04K7l_eQoGJACK0VDI.roa
File: 6OjM-NFIW04K7l_eQoGJACK0VDI.roa (raw, json)
Hash identifier: TkZ3uhaW+2MZizAuYJdx0Vwq0vHR9nefDhvzxZzuG3I=
Subject key identifier: E8:E8:CC:F8:D1:48:5B:4E:0A:EE:5F:DE:42:81:89:00:22:B4:54:32
Certificate issuer: /CN=0ee592621d18309312c014c1122d94a4211fa82b
Certificate serial: 019DD9A9FC319BC2FD8068E337DA51775DA4
Authority key identifier: 0E:E5:92:62:1D:18:30:93:12:C0:14:C1:12:2D:94:A4:21:1F:A8:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuWSYh0YMJMSwBTBEi2UpCEfqCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/6OjM-NFIW04K7l_eQoGJACK0VDI.roa
Signing time: Wed 29 Apr 2026 14:34:49 +0000
ROA not before: Wed 29 Apr 2026 14:34:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 185.113.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuWSYh0YMJMSwBTBEi2UpCEfqCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:a9:fc:31:9b:c2:fd:80:68:e3:37:da:51:77:5d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee592621d18309312c014c1122d94a4211fa82b
Validity
Not Before: Apr 29 14:34:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8e8ccf8d1485b4e0aee5fde4281890022b45432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0f:20:77:0a:3d:f3:5b:20:7a:26:e0:62:46:
cc:84:c3:df:62:11:20:6c:d3:2b:44:74:88:45:92:
10:98:a9:ef:56:10:b9:4c:76:80:c5:5c:d3:72:46:
26:f7:00:b0:62:b6:47:48:7d:f0:e1:81:fc:06:87:
3a:b7:74:75:79:01:d2:f5:0a:b8:2c:53:87:b3:ae:
ed:9b:6f:9b:ff:3a:c5:76:39:95:ad:1b:7f:a7:a8:
f8:64:a8:5b:35:2f:3e:ac:00:66:e9:3b:d4:3b:93:
fe:6a:37:b9:5d:cf:3b:88:02:f7:da:27:16:03:29:
ba:f7:b7:b4:74:19:fe:97:eb:f9:65:86:dd:ca:5b:
a8:1a:54:53:aa:9b:b0:6c:a3:da:0e:44:37:9d:85:
46:31:96:f8:1c:0f:95:14:30:7e:bd:a6:5e:0d:34:
0f:31:de:0c:49:be:c2:26:d0:86:ee:3d:13:3d:9c:
33:ae:2e:6c:2b:3d:1b:13:8d:da:5e:e4:37:11:43:
7e:61:03:06:f4:10:a0:c7:e5:58:6b:9a:95:b6:3c:
f4:1f:13:f6:1a:17:a1:e5:5d:81:5e:84:e0:f4:59:
77:7e:cd:2e:d4:88:b7:1b:69:d2:74:ee:40:20:6b:
d4:35:f6:c1:26:ed:26:d6:a8:6b:5e:07:d1:a3:09:
0f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E8:CC:F8:D1:48:5B:4E:0A:EE:5F:DE:42:81:89:00:22:B4:54:32
X509v3 Authority Key Identifier:
keyid:0E:E5:92:62:1D:18:30:93:12:C0:14:C1:12:2D:94:A4:21:1F:A8:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuWSYh0YMJMSwBTBEi2UpCEfqCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/6OjM-NFIW04K7l_eQoGJACK0VDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f942a1-c004-4484-bc1d-6b858209b5ee/1/DuWSYh0YMJMSwBTBEi2UpCEfqCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.8.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:7f:18:90:57:86:7d:4f:bc:cd:47:74:45:6b:5b:bc:5f:2a:
3d:c2:f7:96:ae:6c:c2:bd:8a:67:a8:d3:0a:a9:a7:d6:67:4c:
86:ef:b4:e7:f5:35:7a:5b:2a:b1:fe:0c:04:f2:62:95:81:f3:
fd:c3:c0:01:f4:8e:21:1c:92:99:ab:c6:26:6b:c4:f8:7b:46:
9a:73:59:95:da:cb:e6:d1:f0:2e:6f:62:8a:9f:99:90:06:7e:
e7:06:bc:dd:40:82:7a:eb:d6:53:c2:b1:e6:be:be:4c:b9:ef:
35:44:71:98:1a:43:c6:e3:d6:81:6c:65:7c:ac:c5:2d:62:0f:
ac:f9:4f:6f:0d:50:60:29:0d:f7:9b:45:e6:b4:12:86:84:a1:
7c:13:8e:cf:f4:4c:db:d0:8f:48:c5:0c:14:91:d7:dd:42:3d:
3d:c4:55:9f:d9:4d:3a:03:dd:c8:38:8a:33:52:ea:4c:1a:69:
7a:50:69:49:0b:d0:49:b2:8b:a1:53:2a:dc:e2:62:ad:49:eb:
5a:e7:91:14:18:47:82:f0:0d:a5:7a:eb:48:a1:52:50:a5:8c:
7e:34:b6:72:76:8a:c4:71:a5:7d:39:80:c4:ab:2a:32:07:3f:
60:dc:84:f8:eb:5d:3b:fe:39:af:06:d1:78:65:c7:78:4c:2b:
4c:d4:4f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:23 2026 by rpki-client