Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/plAMGVXNXWtFejbG7iio91PMiaw.roa
File: plAMGVXNXWtFejbG7iio91PMiaw.roa (raw, json)
Hash identifier: 58FHfUkq55AqJ4HX7rCOQcZBxJ2v0NdBhojmOIwPxJs=
Subject key identifier: A6:50:0C:19:55:CD:5D:6B:45:7A:36:C6:EE:28:A8:F7:53:CC:89:AC
Certificate issuer: /CN=6d003c2fe657ec4e543804430c4b8ad0c2f058fa
Certificate serial: 019F23683F6E8EB4AD623E5805FD8512822E
Authority key identifier: 6D:00:3C:2F:E6:57:EC:4E:54:38:04:43:0C:4B:8A:D0:C2:F0:58:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQA8L-ZX7E5UOARDDEuK0MLwWPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/plAMGVXNXWtFejbG7iio91PMiaw.roa
Signing time: Thu 02 Jul 2026 15:17:42 +0000
ROA not before: Thu 02 Jul 2026 15:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50273
IP address blocks: 2001:67c:dc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/bQA8L-ZX7E5UOARDDEuK0MLwWPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/bQA8L-ZX7E5UOARDDEuK0MLwWPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQA8L-ZX7E5UOARDDEuK0MLwWPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3f:6e:8e:b4:ad:62:3e:58:05:fd:85:12:82:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d003c2fe657ec4e543804430c4b8ad0c2f058fa
Validity
Not Before: Jul 2 15:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6500c1955cd5d6b457a36c6ee28a8f753cc89ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:e3:72:c8:79:34:d7:af:7f:0d:0e:86:28:
4c:ce:d1:89:9e:ba:c9:9d:7a:93:fc:57:28:94:0c:
82:50:c6:d4:68:3a:8b:67:9b:2f:d4:42:89:54:11:
e2:61:6c:a3:19:f4:95:74:5f:1a:bb:02:1a:5e:66:
e7:ce:84:29:04:d0:aa:c0:9f:09:6a:6b:5d:4b:45:
4a:ab:53:45:fe:02:a1:94:1f:d5:59:4f:e2:15:43:
e3:bb:91:46:50:f9:51:f8:2b:16:09:37:1d:02:fe:
7f:2c:ff:0f:39:c7:0f:c1:b5:70:9e:17:06:91:6e:
6b:b5:db:15:75:0d:05:66:f5:08:31:7e:81:63:24:
c7:67:e8:15:42:df:5a:9e:52:53:88:13:7b:8a:ea:
5c:ce:d6:e6:65:9f:1b:e5:56:5f:8b:bd:c4:50:fa:
c6:71:55:69:b4:25:a8:f8:21:b7:1c:d9:ae:82:4a:
ca:7c:22:93:d4:6f:e5:bc:ff:3b:97:f7:a1:76:4c:
28:56:45:70:cb:64:2f:6a:c4:f2:62:44:df:13:b4:
11:29:2b:ba:93:48:e4:6f:4b:d8:78:54:2d:7f:8f:
ee:a5:a4:d6:fb:9c:55:69:74:89:15:18:c7:3e:e5:
3a:3f:94:92:80:bb:b0:14:3d:95:2c:a6:4e:53:69:
dd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:50:0C:19:55:CD:5D:6B:45:7A:36:C6:EE:28:A8:F7:53:CC:89:AC
X509v3 Authority Key Identifier:
keyid:6D:00:3C:2F:E6:57:EC:4E:54:38:04:43:0C:4B:8A:D0:C2:F0:58:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQA8L-ZX7E5UOARDDEuK0MLwWPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/plAMGVXNXWtFejbG7iio91PMiaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/bQA8L-ZX7E5UOARDDEuK0MLwWPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:dc::/48
Signature Algorithm: sha256WithRSAEncryption
54:c9:c6:bc:78:21:f8:bc:6d:55:0c:4e:99:72:2f:78:31:00:
c9:e5:3d:54:eb:b6:e9:11:7d:a5:3a:2b:13:3e:77:9b:98:3e:
85:6d:03:a0:49:22:dd:a7:1b:d6:24:4f:12:e8:09:ee:89:2d:
e5:5a:1f:20:a9:cb:7b:f3:2e:67:6a:e0:6d:b3:ee:d1:52:7d:
dd:f0:43:4d:9e:08:c0:67:e8:12:82:a4:c4:ea:3f:cc:04:65:
0e:58:2e:27:12:74:1f:12:1f:70:25:66:63:b7:c3:16:06:5e:
43:29:c6:55:71:a9:30:f4:af:93:fb:79:22:b9:09:9a:35:41:
64:d6:b2:9e:05:90:b3:ea:fe:87:6b:c2:e2:63:4e:5f:26:8e:
c8:be:46:3b:e0:f4:3c:e0:a9:2b:b6:d1:a6:bb:8e:9f:ee:c9:
fd:4b:5d:a6:bc:b8:13:21:65:f1:21:78:e0:0d:ee:71:e7:2f:
91:69:8d:2f:7e:ec:9e:f5:8b:fe:91:fb:2a:f5:84:54:71:be:
c4:41:24:bd:64:de:9a:0a:11:48:a6:43:de:d3:8a:5c:15:d8:
7e:ff:a3:b8:01:b1:be:1c:8c:38:39:32:bd:bc:16:00:64:d1:
5a:7c:20:db:63:c8:32:73:07:b0:f3:d8:5e:20:5c:43:80:53:
b9:89:80:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:38 2026 by rpki-client