Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/p6WJDUmkrZTi2ydBqJW-U5fF3Ms.roa
File: p6WJDUmkrZTi2ydBqJW-U5fF3Ms.roa (raw, json)
Hash identifier: tChmnA2OZ6ar9x3H+45dejO4Gb9P462WbOfjtPU/W8w=
Subject key identifier: A7:A5:89:0D:49:A4:AD:94:E2:DB:27:41:A8:95:BE:53:97:C5:DC:CB
Certificate issuer: /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial: 019E900C5DEAEB592658D923D81F577A6F73
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/p6WJDUmkrZTi2ydBqJW-U5fF3Ms.roa
Signing time: Thu 04 Jun 2026 00:33:09 +0000
ROA not before: Thu 04 Jun 2026 00:33:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48300
IP address blocks: 46.29.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:0c:5d:ea:eb:59:26:58:d9:23:d8:1f:57:7a:6f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Validity
Not Before: Jun 4 00:33:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7a5890d49a4ad94e2db2741a895be5397c5dccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e0:2e:9f:14:f9:03:d1:a0:85:1b:2d:4e:53:
82:40:a5:84:44:a0:71:c6:cf:9d:ff:96:3b:ff:8d:
5d:00:79:cc:de:46:66:5e:78:34:2c:f1:a2:89:8a:
7f:1b:92:60:83:7a:25:38:03:9a:32:da:43:82:22:
18:12:18:02:30:0a:51:98:a4:40:5e:42:90:b5:05:
b8:ca:88:10:c5:98:00:5c:1e:7d:51:9c:e2:26:2e:
e4:65:39:77:5d:0f:c1:c5:b6:65:48:37:9e:fb:bb:
d0:2e:5a:cd:8d:d7:0c:45:b4:ae:ce:16:33:07:d9:
90:fc:5e:c8:06:83:c3:1d:50:bd:d6:74:31:7b:f5:
24:b7:53:9a:0d:96:15:73:10:44:ee:dd:4f:b6:f9:
c9:e9:9a:be:85:51:20:de:c7:24:61:1f:84:f0:35:
5c:23:29:65:a1:b7:a9:84:82:1c:12:dc:96:28:2a:
4b:b3:9d:63:f9:0c:d5:59:d0:3a:37:69:de:75:38:
64:64:71:ae:86:2c:ff:e9:8b:dd:55:b3:7f:c0:22:
f6:ca:45:2d:28:eb:40:35:15:26:26:77:8a:2a:24:
e5:c6:73:26:13:c8:f6:4e:ed:df:b8:21:50:f3:d9:
dd:9c:dc:e5:21:68:0c:b8:32:b9:73:46:36:19:a5:
f8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A5:89:0D:49:A4:AD:94:E2:DB:27:41:A8:95:BE:53:97:C5:DC:CB
X509v3 Authority Key Identifier:
keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/p6WJDUmkrZTi2ydBqJW-U5fF3Ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.36.0/24
Signature Algorithm: sha256WithRSAEncryption
33:07:7f:d6:e3:08:4b:65:95:af:3c:ab:63:ad:71:42:09:ef:
05:6a:bd:b4:e1:ce:5f:27:b4:14:63:a6:ac:f1:f5:75:6d:b2:
07:c8:46:32:c5:25:f7:cb:30:10:19:ff:9e:b2:26:92:63:c9:
6f:d5:4a:7f:e6:3c:ed:c4:cf:a7:ba:1a:74:28:10:11:5c:75:
b3:4d:f9:d8:c5:60:68:e9:25:19:eb:fa:90:f7:81:47:c5:84:
1e:ba:37:0a:05:40:56:ef:ab:c1:41:3d:11:a8:59:20:bb:79:
f6:7c:85:47:20:5c:ce:61:6c:c5:a6:40:c6:bb:19:2f:e2:ad:
72:37:8a:de:d8:64:3b:03:f7:b2:4c:7b:9e:52:74:4e:76:cc:
ec:5b:d9:5e:7b:c0:4e:56:06:db:3f:4a:aa:de:61:20:de:4e:
18:6e:48:24:c3:a1:50:1b:0f:ba:6e:12:4b:96:f8:fc:da:ce:
b9:51:b6:84:09:96:92:6d:db:1c:28:0c:5a:02:e0:45:6d:58:
5a:86:d0:03:52:ea:65:44:82:54:28:7f:cf:71:b6:7e:9d:b4:
23:bb:f7:cd:3f:83:87:46:ac:ee:27:ca:94:f3:26:70:0f:e3:
f4:7c:d9:d9:10:0e:cf:fc:e9:ad:e8:0b:18:2a:2e:e7:87:45:
e0:78:bf:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:49:09 2026 by rpki-client