Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/0bc7bb-057e-453c-9ca4-ee9d20488a30/1/6oqei-Ss_H2iu9as19X-dfOGQZ4.roa
File: 6oqei-Ss_H2iu9as19X-dfOGQZ4.roa (raw, json)
Hash identifier: 5p4vOBwzDbORTvt5MB+QK2lhMa3VK8K8tN2k91VG4bU=
Subject key identifier: EA:8A:9E:8B:E4:AC:FC:7D:A2:BB:D6:AC:D7:D5:FE:75:F3:86:41:9E
Certificate issuer: /CN=8c6a7264830c70267a28545609dcca306ca9d874
Certificate serial: 01A1310D518949C58BF4056B97CD218D4BFD
Authority key identifier: 8C:6A:72:64:83:0C:70:26:7A:28:54:56:09:DC:CA:30:6C:A9:D8:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jGpyZIMMcCZ6KFRWCdzKMGyp2HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0bc7bb-057e-453c-9ca4-ee9d20488a30/1/6oqei-Ss_H2iu9as19X-dfOGQZ4.roa
Signing time: Mon 12 Oct 2026 16:58:38 +0000
ROA not before: Mon 12 Oct 2026 16:58:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218634
IP address blocks: 149.245.252.0/24 maxlen: 24
2001:678:132c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0bc7bb-057e-453c-9ca4-ee9d20488a30/1/jGpyZIMMcCZ6KFRWCdzKMGyp2HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0bc7bb-057e-453c-9ca4-ee9d20488a30/1/jGpyZIMMcCZ6KFRWCdzKMGyp2HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jGpyZIMMcCZ6KFRWCdzKMGyp2HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:0d:51:89:49:c5:8b:f4:05:6b:97:cd:21:8d:4b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6a7264830c70267a28545609dcca306ca9d874
Validity
Not Before: Oct 12 16:58:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea8a9e8be4acfc7da2bbd6acd7d5fe75f386419e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6e:c1:49:8e:8e:3f:aa:d9:54:54:a7:50:92:
35:51:bf:65:17:2f:bb:2b:ec:ee:a1:23:48:5e:2e:
7e:9b:cb:19:87:8f:73:b9:19:0b:fd:d4:1f:97:0d:
c0:bb:03:34:69:62:c5:b1:96:e1:fb:2d:7d:55:38:
a0:9d:ef:d2:1a:b0:bd:6d:84:19:8e:db:73:52:5f:
19:43:c2:63:13:ff:95:7d:c4:c2:ce:21:81:c3:ea:
8e:52:02:40:03:dc:71:3a:0a:ab:8e:19:8f:1b:26:
17:ea:4d:8e:e9:00:66:bc:40:4a:2a:8e:6f:90:5b:
47:31:02:52:de:da:aa:91:89:37:7d:9f:06:6d:92:
58:72:9c:76:16:20:b1:39:8b:d5:a0:29:bb:4e:1f:
17:fd:14:c2:bf:a4:e1:96:88:6c:1a:4b:1a:93:ab:
b5:62:65:7f:17:1f:8e:8b:01:b6:4b:b1:9f:8e:78:
8e:bd:30:00:eb:8c:86:0b:db:78:e6:bb:1c:1b:0c:
60:a5:a8:7f:81:8c:39:30:81:60:05:27:c8:05:71:
1f:94:21:eb:5e:6e:08:2b:d1:e0:09:92:47:09:87:
00:c2:5b:28:d9:20:1d:ab:2b:59:4b:78:21:7f:e8:
75:71:43:8e:b7:1a:ea:e5:7a:6a:02:12:28:33:d1:
16:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8A:9E:8B:E4:AC:FC:7D:A2:BB:D6:AC:D7:D5:FE:75:F3:86:41:9E
X509v3 Authority Key Identifier:
keyid:8C:6A:72:64:83:0C:70:26:7A:28:54:56:09:DC:CA:30:6C:A9:D8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jGpyZIMMcCZ6KFRWCdzKMGyp2HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0bc7bb-057e-453c-9ca4-ee9d20488a30/1/6oqei-Ss_H2iu9as19X-dfOGQZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0bc7bb-057e-453c-9ca4-ee9d20488a30/1/jGpyZIMMcCZ6KFRWCdzKMGyp2HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.245.252.0/24
IPv6:
2001:678:132c::/48
Signature Algorithm: sha256WithRSAEncryption
30:e6:aa:16:e7:d3:ac:eb:de:33:a6:87:9b:69:ba:a1:e2:d6:
9f:5b:a8:ab:5e:f4:e7:96:0f:fc:3c:dc:5a:af:cf:32:f5:55:
13:92:f9:74:fb:98:60:7b:33:16:d5:21:92:ba:ac:28:b6:bb:
29:bf:b9:90:4f:89:76:e5:51:29:28:62:20:26:5f:d9:5d:d2:
df:a7:b0:88:d7:d6:64:27:30:ea:4b:57:0d:2f:87:84:cf:b8:
e3:77:1f:0f:64:3e:5f:7d:e3:fc:86:d3:95:66:ff:72:fd:b1:
cf:f9:f3:6f:e3:d8:ae:c4:5e:c7:20:89:a0:a6:75:b3:51:62:
b0:20:13:54:51:45:8d:ff:4e:7d:63:58:12:b7:ff:7d:9b:20:
d0:95:4a:4f:9d:68:e4:0b:97:6b:fe:c2:81:9a:69:ef:3e:7a:
a7:7c:83:34:07:ff:3b:fb:cc:d4:95:02:a4:dc:c4:54:97:5d:
d4:cd:be:ca:96:6c:8e:9f:d0:1d:2b:12:36:ff:a4:7c:5a:3b:
53:bc:61:36:36:c0:8b:c6:d1:5c:ae:77:8a:aa:51:69:12:da:
ca:93:5b:9e:2a:96:bb:ad:d4:ac:f3:b3:3b:b6:7b:5b:46:f0:
d0:c3:33:b8:2e:6d:f5:20:01:a2:f7:7b:fb:48:9a:59:7a:9f:
91:0b:4b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:53:35 2026 by rpki-client