Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/BK6-e22aeBl-rttEE9bS-CYq7co.roa
File: BK6-e22aeBl-rttEE9bS-CYq7co.roa (raw, json)
Hash identifier: /KgF9iuTQcgdt8kv3Z4cLI5OPf3OlXfC9VlBvnj0/Oo=
Subject key identifier: 04:AE:BE:7B:6D:9A:78:19:7E:AE:DB:44:13:D6:D2:F8:26:2A:ED:CA
Certificate issuer: /CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
Certificate serial: 01A15D9ABA4731658A28C3644091EDF5FDC0
Authority key identifier: D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/BK6-e22aeBl-rttEE9bS-CYq7co.roa
Signing time: Wed 21 Oct 2026 08:36:23 +0000
ROA not before: Wed 21 Oct 2026 08:36:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28751
IP address blocks: 176.73.0.0/17 maxlen: 17
176.73.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:9a:ba:47:31:65:8a:28:c3:64:40:91:ed:f5:fd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
Validity
Not Before: Oct 21 08:36:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04aebe7b6d9a78197eaedb4413d6d2f8262aedca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:73:fe:aa:d8:ba:5f:be:bd:19:c1:57:4d:73:
f5:e5:00:92:b2:0a:72:17:fb:89:eb:5d:73:e7:61:
23:12:36:63:56:cb:79:b7:96:6b:b3:7c:a8:94:14:
26:59:76:69:90:77:9d:f3:57:b4:f1:17:a1:bd:67:
42:a9:bb:20:43:40:b0:15:bb:72:dc:ed:33:5d:74:
51:67:58:1a:35:15:af:44:c0:c0:4c:72:65:e3:08:
74:4c:2c:96:84:52:74:59:30:b3:7b:5e:3b:bb:96:
8c:03:a5:24:39:ca:7f:f3:a0:22:13:d8:71:92:71:
b4:84:0b:6d:f0:fd:e0:9b:3a:8b:4e:a6:3a:93:84:
17:9b:48:b9:8b:b7:f3:a0:a4:b3:4a:8c:04:d3:75:
a4:42:91:b8:33:32:c1:49:b5:a8:bd:08:7a:01:d4:
1a:c6:00:e9:d8:1d:a6:19:a0:c9:38:b7:de:f6:04:
7e:51:06:8b:92:0b:0a:0c:2a:bc:20:08:f5:8b:7f:
ee:70:88:13:58:ee:ae:f3:6f:7c:c1:a6:31:f6:23:
fb:fd:63:af:b8:19:b8:0e:d4:89:18:5e:08:37:ec:
4a:dd:9f:42:10:74:27:4b:51:b7:7c:89:21:61:a4:
d5:c4:a6:d9:e5:fd:1d:eb:b8:18:06:38:6d:22:d8:
f6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AE:BE:7B:6D:9A:78:19:7E:AE:DB:44:13:D6:D2:F8:26:2A:ED:CA
X509v3 Authority Key Identifier:
keyid:D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/BK6-e22aeBl-rttEE9bS-CYq7co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.73.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:0f:2b:ce:4c:36:7c:fb:05:9c:b5:0c:06:f2:a8:14:74:a8:
19:87:f8:9d:54:24:e6:db:c0:22:6b:65:4d:f1:7e:86:76:e1:
58:9a:3d:29:c6:a4:02:13:cb:55:43:6f:81:56:24:7c:e0:61:
93:a9:aa:e6:17:81:ce:b5:6d:17:ef:71:26:49:4c:9e:9d:f1:
fc:86:af:5e:61:93:b2:d0:5f:af:11:a9:ed:e4:e6:4d:45:aa:
fd:f5:88:84:a4:a5:55:52:0a:e4:5f:ff:82:31:a0:fd:46:de:
d4:d2:5f:13:c4:ef:b8:65:97:ba:f4:03:9a:d1:cd:00:3b:f7:
7e:a6:d3:8e:55:4a:f6:2b:7d:de:a6:1b:a6:0e:76:4f:c8:b8:
1c:e0:96:70:41:07:26:19:c5:e0:cd:0a:5c:4a:e4:d3:63:3a:
81:bb:bd:6c:35:84:ec:36:2d:1c:8e:d1:16:c7:83:07:3f:c8:
84:61:14:0b:2e:92:f8:09:5c:0d:35:8c:ea:77:15:ab:d8:85:
5a:f1:f0:12:04:99:d0:6b:46:b9:ea:f4:1a:ff:1c:99:d0:a0:
8e:70:70:94:b2:92:8a:c9:6d:d6:fe:4f:8e:8e:ba:d6:98:d1:
14:80:62:37:11:ee:60:1f:90:02:a2:1f:36:aa:80:b1:01:57:
b4:5a:28:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:44:12 2026 by rpki-client