Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6FiyYhxKXJrbZn_vayk0bJGBG7s.roa
File: 6FiyYhxKXJrbZn_vayk0bJGBG7s.roa (raw, json)
Hash identifier: igdCUhr81DB6bLoZptDkybsvAcY0pUZDf4QJLytK5OE=
Subject key identifier: E8:58:B2:62:1C:4A:5C:9A:DB:66:7F:EF:6B:29:34:6C:91:81:1B:BB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019CD2B65820EB8CFA82E9BFBD5DA24CFB11
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6FiyYhxKXJrbZn_vayk0bJGBG7s.roa
Signing time: Mon 09 Mar 2026 13:08:11 +0000
ROA not before: Mon 09 Mar 2026 13:08:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201002
IP address blocks: 2a0e:15c4::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d2:b6:58:20:eb:8c:fa:82:e9:bf:bd:5d:a2:4c:fb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 9 13:08:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e858b2621c4a5c9adb667fef6b29346c91811bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1e:a4:73:f9:b7:08:d5:8c:4f:29:af:93:76:
fb:f2:f6:a9:0a:63:d2:a4:f0:14:59:18:92:23:75:
3e:82:2b:97:a7:83:31:05:e3:8b:18:6c:ec:ad:a8:
8a:55:cb:da:a8:d1:84:fd:9d:c7:94:af:30:35:52:
57:10:f5:71:0c:58:32:b5:7c:20:88:d7:89:f4:de:
ba:86:90:e0:d3:c7:2a:d1:2b:db:06:92:26:be:49:
5a:31:db:20:fd:72:5f:ac:95:9a:f9:d4:30:2d:f6:
68:3c:17:b4:dd:4a:ec:17:29:df:00:3d:8e:43:6f:
72:8a:57:a1:51:10:8c:a8:93:0f:d7:41:33:5c:88:
53:0e:0f:65:32:b7:77:05:9b:27:70:45:4a:61:6c:
d0:ed:26:3f:c3:da:f8:7c:c5:41:75:52:2a:b3:bb:
7c:2d:96:d0:0e:5a:bf:8b:eb:3b:41:f5:b4:86:73:
c1:8b:3a:cb:e4:9d:0c:0e:bf:76:31:75:23:e4:2b:
c1:da:72:d8:86:8c:43:27:9c:86:e1:6c:85:3c:51:
70:66:2c:c2:ae:39:bd:e4:37:ea:1d:58:d1:50:23:
4b:96:a5:41:da:1a:ac:52:0a:6b:5c:f2:d9:d5:30:
4a:b9:a6:17:a7:c0:33:7f:1b:2c:12:90:5f:5e:ef:
74:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:58:B2:62:1C:4A:5C:9A:DB:66:7F:EF:6B:29:34:6C:91:81:1B:BB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6FiyYhxKXJrbZn_vayk0bJGBG7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:15c4::/32
Signature Algorithm: sha256WithRSAEncryption
c3:9d:bf:48:40:fd:b9:c8:ba:c3:ed:86:34:31:97:95:b5:33:
70:34:db:81:eb:c7:f0:b3:08:ec:fb:75:b1:a6:2b:0c:3b:e2:
62:6d:81:93:79:d5:17:f7:27:63:a9:9f:21:73:30:2c:1f:ec:
b0:08:00:9b:e7:b0:6c:c9:cf:d6:92:98:cd:84:72:e6:94:e8:
53:00:82:9d:6e:0c:1c:e3:82:9d:bc:0e:c0:8b:1a:1a:b4:4f:
9e:24:11:d8:75:7f:22:dc:79:90:0c:90:cb:f1:95:90:6f:8b:
c7:87:dc:2a:10:26:e2:fd:9e:8e:f0:74:1e:d0:e8:f0:68:bb:
a4:41:23:05:88:60:76:67:82:b3:c7:b1:12:6a:79:3c:60:96:
2b:da:0e:6a:ad:ad:e8:47:bd:98:46:7d:df:73:42:41:ce:90:
6c:6a:9b:f1:e1:a8:36:13:68:b5:24:9b:0e:c7:49:e1:e7:d2:
a0:c2:c7:70:9b:2a:00:23:c5:ab:72:74:df:4e:19:0b:87:6c:
03:47:1a:8a:0c:16:7f:8f:b6:b0:10:ed:46:a5:f1:2d:ef:39:
3c:87:73:ad:e5:83:f0:d1:72:98:02:03:71:48:da:ce:83:ac:
79:95:48:63:73:a0:42:a4:d2:34:2b:65:fc:c1:55:f7:90:18:
4d:dc:95:62
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZzStlgg64z6gum/vV2iTPsRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwMzA5MTMwODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODU4YjI2MjFjNGE1YzlhZGI2NjdmZWY2YjI5MzQ2YzkxODExYmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR6kc/m3CNWMTymvk3b78vapCmPS
pPAUWRiSI3U+giuXp4MxBeOLGGzsraiKVcvaqNGE/Z3HlK8wNVJXEPVxDFgytXwg
iNeJ9N66hpDg08cq0SvbBpImvklaMdsg/XJfrJWa+dQwLfZoPBe03UrsFynfAD2O
Q29yilehURCMqJMP10EzXIhTDg9lMrd3BZsncEVKYWzQ7SY/w9r4fMVBdVIqs7t8
LZbQDlq/i+s7QfW0hnPBizrL5J0MDr92MXUj5CvB2nLYhoxDJ5yG4WyFPFFwZizC
rjm95DfqHVjRUCNLlqVB2hqsUgprXPLZ1TBKuaYXp8AzfxssEpBfXu90nwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFOhYsmIcSlya22Z/72spNGyRgRu7MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvNkZpeVloeEtYSnJiWm5fdmF5azBiSkdCRzdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg4VxDAN
BgkqhkiG9w0BAQsFAAOCAQEAw52/SED9uci6w+2GNDGXlbUzcDTbgevH8LMI7Pt1
saYrDDviYm2Bk3nVF/cnY6mfIXMwLB/ssAgAm+ewbMnP1pKYzYRy5pToUwCCnW4M
HOOCnbwOwIsaGrRPniQR2HV/Itx5kAyQy/GVkG+Lx4fcKhAm4v2ejvB0HtDo8Gi7
pEEjBYhgdmeCs8exEmp5PGCWK9oOaq2t6Ee9mEZ933NCQc6QbGqb8eGoNhNotSSb
DsdJ4efSoMLHcJsqACPFq3J0304ZC4dsA0caigwWf4+2sBDtRqXxLe85PIdzreWD
8NFymAIDcUjazoOseZVIY3OgQqTSNCtl/MFV95AYTdyVYg==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:55:11 2026 by rpki-client