Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/6rUWxtK9hflh7SiPi0L1itfKjH0.roa
File: 6rUWxtK9hflh7SiPi0L1itfKjH0.roa (raw, json)
Hash identifier: DcndbDem6DcVRyOX/MWxW3qzvVsFc82BfTKKDpuSwns=
Subject key identifier: EA:B5:16:C6:D2:BD:85:F9:61:ED:28:8F:8B:42:F5:8A:D7:CA:8C:7D
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019D4373871C7EEBCB9834B10D0A809FA5C0
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/6rUWxtK9hflh7SiPi0L1itfKjH0.roa
Signing time: Tue 31 Mar 2026 10:32:17 +0000
ROA not before: Tue 31 Mar 2026 10:32:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30937
IP address blocks: 45.140.10.0/23 maxlen: 24
45.141.124.0/22 maxlen: 23
45.157.200.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:43:73:87:1c:7e:eb:cb:98:34:b1:0d:0a:80:9f:a5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Mar 31 10:32:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eab516c6d2bd85f961ed288f8b42f58ad7ca8c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cd:be:88:5b:d5:08:e9:b0:d2:99:bf:72:38:
9c:3a:97:d1:bf:b1:04:46:d9:7d:3f:29:73:4a:ce:
82:a8:54:db:be:ac:86:a1:de:b7:c2:04:3c:1d:d3:
da:2d:3e:05:f3:dc:ac:87:c9:64:93:06:87:d1:c7:
9c:9a:29:c7:36:ab:6a:65:22:a2:50:00:24:0c:ab:
1a:06:75:63:5e:34:d0:f7:02:dd:ef:1a:9b:c1:7a:
b1:6c:e9:29:86:2c:e3:fa:52:ec:ff:ca:d5:11:1a:
11:56:60:87:7f:12:92:90:8f:a9:7a:b6:ce:7a:cf:
40:f3:af:7b:ce:ad:c7:de:87:75:61:a2:ca:5e:dc:
e2:44:3b:c3:ff:ad:32:9d:be:dd:3d:bf:79:50:77:
42:32:bb:e4:49:3b:97:72:fe:5d:0a:99:89:ae:4a:
6e:70:2c:4d:2c:5c:c6:2b:98:25:14:3d:54:1f:72:
f6:35:d1:1b:e8:80:65:5b:c4:06:77:05:78:6b:f3:
0d:ee:82:93:23:20:66:42:7c:7e:ec:b8:fb:c9:ea:
c2:44:a4:92:33:7f:ed:a1:ba:09:35:d6:1c:df:bf:
c8:21:19:69:7d:f1:d5:35:04:e2:ec:d3:69:36:c6:
be:12:fc:80:5d:6e:b6:e7:2d:92:e6:d9:98:7a:3b:
ea:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B5:16:C6:D2:BD:85:F9:61:ED:28:8F:8B:42:F5:8A:D7:CA:8C:7D
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/6rUWxtK9hflh7SiPi0L1itfKjH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.10.0/23
45.141.124.0/22
45.157.200.0/23
Signature Algorithm: sha256WithRSAEncryption
93:bc:09:5a:19:0c:21:66:11:80:b3:76:20:53:9a:35:55:e5:
09:73:3b:4d:44:c1:67:d5:6c:03:ec:77:97:b7:06:f8:90:f4:
d1:1c:c5:5d:ac:73:1c:b7:c3:e7:aa:45:4e:1f:79:45:82:15:
70:cc:be:56:3e:46:d4:ca:6e:59:7f:c6:7c:48:a8:79:0b:61:
90:be:bf:59:94:5d:4d:00:0d:92:e2:61:05:71:d3:b8:15:54:
e4:51:8d:f8:6c:d2:97:17:3b:cc:7d:2a:03:ff:8b:d5:09:dc:
75:0d:3f:7a:5b:9a:85:a8:83:ec:1d:e9:8b:9f:50:e2:b6:3f:
5b:a1:f5:6b:a8:00:b4:82:b3:2f:8b:70:71:55:b4:8f:da:9b:
df:e2:a1:b8:9b:ad:b3:c2:db:9f:c3:e0:40:8f:b2:79:54:38:
43:a5:97:e4:95:58:c5:b6:9b:f7:a4:99:23:6a:36:ee:1d:5b:
3a:df:68:84:24:4c:1e:07:e2:78:04:6a:b0:33:b2:92:c7:15:
d1:a4:6b:66:cb:e3:90:57:a4:55:4b:7b:27:ab:0d:d1:cd:9e:
5f:a2:03:9c:83:f5:ed:d5:6e:38:fe:af:b0:a8:0e:60:1b:f2:
50:0e:64:ed:bc:23:c7:9d:31:32:f0:d4:df:58:1b:dd:85:97:
69:cb:57:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:12 2026 by rpki-client