Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/6AR-HkKOqZwqgOAST4upYsm9Mio.roa
File: 6AR-HkKOqZwqgOAST4upYsm9Mio.roa (raw, json)
Hash identifier: D5qpNWE4RgdqFwAqjDpV16uE1OSs9g+xY1CIM6Hnch8=
Subject key identifier: E8:04:7E:1E:42:8E:A9:9C:2A:80:E0:12:4F:8B:A9:62:C9:BD:32:2A
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019D19D96266867A81B8B58290037D311335
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/6AR-HkKOqZwqgOAST4upYsm9Mio.roa
Signing time: Mon 23 Mar 2026 08:39:30 +0000
ROA not before: Mon 23 Mar 2026 08:39:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26383
IP address blocks: 150.251.146.0/23 maxlen: 24
150.251.153.0/24 maxlen: 24
150.251.154.0/24 maxlen: 24
150.251.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:12:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:19:d9:62:66:86:7a:81:b8:b5:82:90:03:7d:31:13:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Mar 23 08:39:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8047e1e428ea99c2a80e0124f8ba962c9bd322a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:77:d9:fd:2e:c5:78:64:ef:85:9d:68:24:dd:
67:81:83:bf:04:8e:b6:68:06:07:9d:84:1c:51:8d:
12:e4:9a:77:e2:e9:07:21:e5:0a:33:54:ce:55:60:
74:40:00:c6:3d:e9:b5:68:89:ba:95:56:4d:93:84:
d5:f6:5a:03:cb:de:b5:2d:1c:d8:7b:d4:bb:29:cb:
b3:b6:b7:dc:a0:94:82:d9:41:97:b6:86:0f:c4:40:
a2:62:e9:6d:2b:05:17:fc:5d:0e:46:cf:c7:73:71:
33:ef:8a:6f:21:dd:06:2e:7a:17:46:88:4d:a5:84:
f0:1f:16:59:51:76:62:e1:46:05:34:e3:2d:1f:88:
3e:7e:6e:b5:4c:c6:d8:01:d0:6e:1d:50:89:27:f0:
6b:3e:46:65:b4:e3:aa:49:1e:2b:55:52:0d:0b:98:
94:47:d3:af:0a:50:e1:ff:49:f7:ba:b2:64:f5:a2:
67:59:6c:c7:bd:38:35:b5:a5:b7:f3:b2:1c:1e:5b:
6f:2d:6d:44:59:54:87:8b:e3:19:21:62:27:29:93:
d8:ee:4e:11:03:08:2d:9f:d6:c4:90:13:ab:90:dd:
08:9d:e1:6e:8f:94:fb:c1:bf:be:d4:82:24:0b:cc:
34:b5:51:b3:42:c6:05:1d:1a:56:ca:8d:44:38:d7:
04:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:04:7E:1E:42:8E:A9:9C:2A:80:E0:12:4F:8B:A9:62:C9:BD:32:2A
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/6AR-HkKOqZwqgOAST4upYsm9Mio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.146.0/23
150.251.153.0-150.251.154.255
150.251.158.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:00:ac:69:14:b9:60:52:58:2c:cb:b4:ca:7c:50:90:33:e7:
3a:ce:c7:b0:3a:8e:34:51:a2:47:6c:79:70:1d:0f:c1:68:e6:
b5:6c:1e:ae:92:dd:89:78:ea:1d:9f:62:9a:e1:61:0f:12:51:
ad:a0:27:8e:b0:8c:d7:a7:aa:b1:e0:fa:f0:3a:9b:05:a0:a1:
44:0a:6d:54:ec:a0:d7:b9:08:da:74:0f:08:b3:ad:85:2b:0c:
df:c7:78:f7:5c:5e:07:75:f0:ba:54:32:2b:6e:b6:70:69:98:
24:1a:30:1b:2a:1d:14:84:1e:22:a4:95:6e:3a:2f:9d:6a:92:
1c:26:f2:0f:b7:5a:3b:c5:84:a9:0b:e4:6a:c2:cb:c3:cb:d3:
fe:bd:c7:61:5d:09:71:2f:a9:e0:0b:d7:5e:b3:f5:d0:ad:1a:
08:ba:70:21:a4:e4:ed:56:04:20:b5:26:15:89:6a:16:e3:46:
2e:ae:e6:84:d2:e9:96:5e:f1:b7:ef:49:8a:53:9d:b3:8a:01:
8d:25:0e:8b:0a:35:1a:de:d8:b9:a0:23:e5:de:c6:e8:92:93:
62:30:6a:ef:a4:6f:3f:ac:ee:87:08:e0:bf:48:1a:19:69:75:
a6:91:d4:a6:54:ad:4d:f1:4e:9b:c4:4d:b3:bd:b1:4b:26:b7:
d8:ce:09:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:36:26 2026 by rpki-client