Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/s6-TiC2j7Ecuhv-qeQB3bnHtNz4.roa
File: s6-TiC2j7Ecuhv-qeQB3bnHtNz4.roa (raw, json)
Hash identifier: 9N+X2B0X/bMumZQ9VQKQ2LEJ87GkVTxZeac/M5p+KhU=
Subject key identifier: B3:AF:93:88:2D:A3:EC:47:2E:86:FF:AA:79:00:77:6E:71:ED:37:3E
Certificate issuer: /CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Certificate serial: 019B7BA334C4AA3408793472D63811374B09
Authority key identifier: 6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/s6-TiC2j7Ecuhv-qeQB3bnHtNz4.roa
Signing time: Thu 01 Jan 2026 22:17:32 +0000
ROA not before: Thu 01 Jan 2026 22:17:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200924
IP address blocks: 91.198.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:34:c4:aa:34:08:79:34:72:d6:38:11:37:4b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Validity
Not Before: Jan 1 22:17:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3af93882da3ec472e86ffaa7900776e71ed373e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:a9:4c:de:db:9f:8a:e9:33:59:b1:0c:cf:
c9:56:e9:c2:61:ea:e5:fd:1e:5d:c0:3f:94:45:a9:
65:f0:62:9e:e6:50:9b:ef:ee:56:75:6f:98:77:72:
6f:16:4c:a3:97:d2:e5:d0:20:52:e1:4e:e2:db:fc:
31:d0:50:37:00:09:11:32:8c:94:2b:e8:3a:80:c5:
31:cc:12:80:1e:da:fd:04:c5:dc:df:85:9d:3b:61:
ca:c0:5e:b5:09:b4:c3:fa:29:1d:df:57:e9:f9:be:
b2:8f:9d:57:d8:82:29:06:4b:97:92:7e:c2:d9:db:
df:14:d6:53:15:54:89:5f:70:f1:80:4a:6c:56:52:
4b:33:aa:7a:c0:e9:01:88:d2:3c:d5:6a:c7:f8:24:
e2:c2:83:47:c2:da:63:c2:50:ff:72:e0:f3:bb:a9:
45:56:ed:81:24:9d:cb:0c:cb:b7:e4:03:e2:6e:e2:
7f:dd:d0:7f:d6:54:a8:f5:d6:96:d6:df:73:88:a5:
0f:42:15:b6:b4:1f:02:94:25:bf:68:d2:6f:02:10:
9d:24:11:67:20:2f:19:94:53:d3:47:dc:ad:dd:86:
d6:21:94:03:09:e3:52:25:09:a4:ec:24:04:ea:e3:
ef:dc:4f:0b:fb:c6:c4:bc:1e:72:d1:78:a7:83:09:
d2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AF:93:88:2D:A3:EC:47:2E:86:FF:AA:79:00:77:6E:71:ED:37:3E
X509v3 Authority Key Identifier:
keyid:6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/s6-TiC2j7Ecuhv-qeQB3bnHtNz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.238.0/24
Signature Algorithm: sha256WithRSAEncryption
22:68:4c:8c:08:39:c5:87:9f:a1:ac:76:c7:6e:cb:82:80:35:
f3:70:84:6f:ed:d7:15:4d:7c:ca:d1:5f:70:dc:21:bc:b6:38:
82:54:68:f8:f3:47:2e:95:d6:78:c3:da:bc:7a:8b:a7:96:73:
8a:c7:0c:4d:21:90:5c:03:81:a9:05:34:cd:b9:f8:97:8f:d4:
be:3d:30:47:ac:94:ae:40:ce:75:e0:99:54:92:47:a5:30:e7:
4a:bc:d5:5d:62:0c:98:b0:fd:d6:3d:a2:73:c7:5e:3b:33:79:
14:fb:e7:21:42:68:aa:8a:49:ca:01:8c:e3:e8:fb:5c:e7:86:
1b:d0:1e:9a:5e:91:0b:08:97:91:41:c2:29:d2:1c:21:ac:65:
5e:e3:43:6d:b3:f3:a3:01:a4:1c:86:d6:51:df:5d:6e:92:5c:
20:22:63:b0:20:8f:49:a5:0e:ec:88:9b:c1:e1:66:91:a2:1a:
d6:74:8d:68:f9:46:1f:55:83:01:91:2c:18:d2:e8:84:46:12:
3a:2e:4f:a6:66:e6:e7:e0:39:60:17:24:84:0a:fe:ba:94:f4:
c1:bf:26:f9:82:58:a8:4f:14:c9:71:cd:e8:fd:10:97:bc:e5:
90:2f:63:31:a9:ab:62:1b:1c:df:d8:e5:10:60:53:16:b9:7a:
8e:0b:87:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:03:19 2026 by rpki-client