Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/6Lv9xgBswnbY_FNskzfEcq59C1A.roa
File: 6Lv9xgBswnbY_FNskzfEcq59C1A.roa (raw, json)
Hash identifier: CzGHB25B2Y3HWvTLL1QHf1CCzXJg+G/vhxr8ewgTUwI=
Subject key identifier: E8:BB:FD:C6:00:6C:C2:76:D8:FC:53:6C:93:37:C4:72:AE:7D:0B:50
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 01A0C38B6380F75A13B0D38C85A61022898E
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/6Lv9xgBswnbY_FNskzfEcq59C1A.roa
Signing time: Mon 21 Sep 2026 10:38:07 +0000
ROA not before: Mon 21 Sep 2026 10:38:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201790
IP address blocks: 2a09:3f00:3b00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:8b:63:80:f7:5a:13:b0:d3:8c:85:a6:10:22:89:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Sep 21 10:38:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8bbfdc6006cc276d8fc536c9337c472ae7d0b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:56:5c:04:3c:24:77:55:a2:6b:62:7b:4b:90:
cc:f4:e3:f7:69:4d:3b:ae:da:ec:22:92:2b:50:3d:
4f:1a:37:9e:91:c4:ab:3a:d8:46:f9:7b:e2:63:d7:
00:aa:04:b3:f0:e4:78:87:51:1d:f2:ae:45:16:72:
2f:1e:ab:5d:00:fb:48:c7:5c:ce:c4:81:74:81:b0:
30:a0:85:40:47:8b:84:fb:11:d1:f5:8a:92:28:81:
5d:a6:7f:6e:52:e3:2c:37:45:bf:d7:73:b9:a3:26:
aa:0b:8b:9a:df:87:e7:01:b0:63:ea:c9:94:f6:bb:
1d:cb:07:2b:d9:b7:6c:07:b7:e2:6d:a3:92:d0:cb:
23:dd:e2:ea:70:0b:4e:17:ee:3c:27:fe:46:46:63:
05:40:bf:2e:74:ab:02:99:e6:d8:52:0d:67:99:0c:
2a:59:c5:55:3d:90:7d:49:5a:c4:e0:57:cd:d6:50:
53:48:4e:4f:59:a7:15:b7:da:73:59:dc:4d:42:86:
17:ec:2e:7e:a3:e6:24:ff:ac:00:72:c0:60:b9:01:
71:39:b7:d8:81:7b:f8:ed:47:ac:22:14:be:02:2b:
e0:11:06:27:bb:2e:03:55:a0:8b:6b:81:7d:b5:5f:
80:3e:4b:1e:56:dc:a4:02:c5:91:6c:45:fb:dc:e3:
66:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BB:FD:C6:00:6C:C2:76:D8:FC:53:6C:93:37:C4:72:AE:7D:0B:50
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/6Lv9xgBswnbY_FNskzfEcq59C1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:3b00::/40
Signature Algorithm: sha256WithRSAEncryption
51:30:33:55:47:c1:bf:be:5e:e6:67:8e:ac:72:61:9b:60:23:
61:8d:7b:11:dc:81:83:36:a8:2a:90:5c:4a:6f:18:83:ad:2b:
77:56:38:50:f0:5e:80:6a:0e:c0:67:c3:04:ca:d5:b9:0b:ca:
ed:23:94:b0:3e:1f:cb:77:7b:4b:e3:09:b9:bf:c6:ac:8e:9e:
3c:74:56:d8:0b:20:b9:2a:a9:aa:e3:74:7a:9b:e1:34:00:59:
5c:db:f8:ae:c5:0f:b1:fc:35:c1:fc:85:86:3f:c8:5d:be:4c:
ea:78:f5:9f:10:50:fd:93:ce:31:03:13:2f:e9:33:ea:c1:c8:
a3:c6:6e:92:e4:5e:ce:a6:e9:06:96:ad:6e:c1:bf:3d:f9:9b:
02:f0:59:b0:23:da:ff:fc:e7:76:56:97:67:e3:8d:99:ee:4b:
35:93:27:d8:07:00:94:ba:9c:05:95:01:24:ad:cf:8b:9d:d7:
61:88:f9:f2:e1:2a:64:bc:fa:69:4a:c2:aa:6d:33:c1:24:46:
e1:89:32:d2:b2:76:60:d7:8a:2d:7e:df:21:eb:07:22:22:5e:
25:a5:66:9e:59:5d:25:02:91:68:9a:34:88:79:81:e7:9c:b4:
fa:b2:ce:7a:e6:76:be:1f:dd:e8:2d:d9:6f:65:4b:92:11:46:
70:e6:68:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:49:50 2026 by rpki-client