Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/K6c6lBoQm3bNCA90F0BDkVeroiI.roa
File: K6c6lBoQm3bNCA90F0BDkVeroiI.roa (raw, json)
Hash identifier: 2oUgpW0SOQNJGHfYSJ97uT+4eYCHENaaQbs16OY6V9Q=
Subject key identifier: 2B:A7:3A:94:1A:10:9B:76:CD:08:0F:74:17:40:43:91:57:AB:A2:22
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019D26D7A0E509097FE21647FD14DA928727
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/K6c6lBoQm3bNCA90F0BDkVeroiI.roa
Signing time: Wed 25 Mar 2026 21:12:38 +0000
ROA not before: Wed 25 Mar 2026 21:12:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59642
IP address blocks: 150.251.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:d7:a0:e5:09:09:7f:e2:16:47:fd:14:da:92:87:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Mar 25 21:12:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ba73a941a109b76cd080f741740439157aba222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:19:fa:ea:de:59:97:79:44:d5:6b:d4:5e:59:
8e:9c:b4:ff:ca:ff:48:78:92:45:e6:4c:79:ea:31:
e1:df:4d:e1:42:c6:b4:e0:eb:bc:d2:d8:f3:02:21:
f8:5d:40:19:1e:78:14:81:46:bb:1a:16:63:6d:c2:
7b:65:75:0d:d4:01:ab:86:9e:71:45:59:3d:92:77:
b6:87:86:f0:10:f7:07:1b:b2:d5:3c:1a:f3:9c:b0:
f8:e4:aa:f8:e8:49:8f:36:13:ce:c4:ea:e8:33:e0:
28:5e:e0:4c:38:f9:63:c7:b8:14:41:85:e4:a0:b5:
2c:8d:7c:82:15:05:80:bf:46:7f:a2:5b:7d:1d:16:
9a:21:af:5d:24:5d:d8:59:ec:a2:26:ca:5b:67:22:
8e:c9:10:cf:84:26:25:f9:d2:dc:46:22:27:22:62:
ac:e6:54:d3:bd:56:f8:70:f8:f2:01:b6:c8:71:5e:
e5:58:9c:af:5b:1e:9e:bf:b7:07:05:fd:3d:db:3d:
d3:c4:03:c7:c9:a2:f1:4f:40:e7:b4:d8:45:f2:84:
c2:83:b5:7b:a0:ae:a2:65:c4:64:d4:5f:01:df:47:
39:29:9b:29:65:1c:79:2c:59:0e:3b:3a:93:21:33:
05:8f:35:9b:6f:a4:aa:6b:81:51:43:9e:3e:1e:ec:
96:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A7:3A:94:1A:10:9B:76:CD:08:0F:74:17:40:43:91:57:AB:A2:22
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/K6c6lBoQm3bNCA90F0BDkVeroiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.140.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:67:11:7a:77:ac:cc:1b:a6:ac:97:9c:b0:74:ff:4c:52:03:
9b:0e:d6:51:d5:28:8d:46:b8:67:e9:19:7a:df:a3:f6:b0:77:
76:d6:b8:84:86:ec:c8:61:5e:ac:5d:f1:e5:f5:a7:42:8f:b3:
6c:91:40:64:3f:0a:dd:12:f8:9d:69:66:7f:66:f5:2f:1c:cf:
72:27:31:28:b6:ca:2a:3d:14:14:17:2f:15:70:d7:cc:d3:de:
42:02:14:da:67:be:e2:35:fc:46:75:88:dc:52:50:47:07:46:
d9:39:ac:82:36:c5:28:a8:fc:ab:15:6f:9b:c4:d1:9a:eb:30:
4d:07:9d:90:52:d5:2e:22:db:c9:5b:f4:c6:e3:e6:b5:20:b6:
da:1b:b9:de:4f:b6:30:50:d8:00:e4:f6:09:69:36:d0:5c:95:
42:22:0d:e3:15:db:d3:d0:da:a8:1d:0d:3e:87:c1:a3:7c:93:
15:bd:38:81:55:9a:e5:4e:e5:b2:a8:25:ee:08:d4:2c:00:df:
ba:cd:8a:4f:8a:22:69:b5:8e:b8:19:28:f5:e7:d6:d7:d9:1d:
a5:ea:33:3f:39:89:55:2b:0f:3b:86:89:7f:48:96:94:dc:0a:
6e:68:35:1a:37:61:bf:ba:b6:4f:f5:d7:0a:4a:3e:fe:e6:32:
db:42:4b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:08:32 2026 by rpki-client