Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/6VthJlw0xnQQMTy_xu3JygnQP1Y.roa
File: 6VthJlw0xnQQMTy_xu3JygnQP1Y.roa (raw, json)
Hash identifier: TQrDJnv72BXT98gXwfgkF5/3nHNltgfLd6pykROa+FU=
Subject key identifier: E9:5B:61:26:5C:34:C6:74:10:31:3C:BF:C6:ED:C9:CA:09:D0:3F:56
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019E9E715F59D3376C6BFDFED890FCEB1A3D
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/6VthJlw0xnQQMTy_xu3JygnQP1Y.roa
Signing time: Sat 06 Jun 2026 19:38:10 +0000
ROA not before: Sat 06 Jun 2026 19:38:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215206
IP address blocks: 193.233.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9e:71:5f:59:d3:37:6c:6b:fd:fe:d8:90:fc:eb:1a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jun 6 19:38:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e95b61265c34c67410313cbfc6edc9ca09d03f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:58:90:94:b5:d3:9a:3b:42:68:76:62:2c:cd:
fa:5f:1a:78:7d:5c:0f:2a:f8:4a:08:70:be:5f:03:
5c:9c:0b:f6:fb:5e:51:00:8d:1f:e3:d7:82:5e:f5:
7e:6a:b8:9f:f3:92:f6:07:05:7c:01:60:5c:24:50:
cb:6d:dc:54:3d:33:e8:df:ac:8f:62:be:61:8b:99:
99:e2:c3:8c:95:14:21:af:db:3f:0e:5f:c1:b5:e3:
a6:9c:c1:b0:88:1e:87:5a:ff:d7:0d:33:a0:74:55:
a5:b6:97:4b:c9:eb:40:3c:41:1f:fc:b1:ef:b5:a5:
be:78:8e:b4:43:90:2e:52:99:01:9b:91:87:67:71:
a3:16:2e:7a:c5:c2:1f:96:53:bf:09:af:9d:6d:55:
75:53:91:bd:7d:e5:16:26:f9:4d:f4:ee:20:45:78:
ac:09:9f:93:69:5d:33:ea:88:d4:6b:d2:35:6a:25:
e6:55:1c:26:f3:39:c4:1c:26:70:46:92:d6:8f:1b:
11:83:40:24:e5:b2:8f:8d:dd:02:90:92:6c:25:83:
8a:b3:64:0c:94:12:d2:59:ab:07:1d:e3:3f:18:47:
a9:6d:66:0d:9b:17:9d:24:1f:b6:97:e9:23:56:9d:
2a:b1:90:7c:c7:06:4b:5a:bc:dc:83:c9:6e:98:27:
27:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5B:61:26:5C:34:C6:74:10:31:3C:BF:C6:ED:C9:CA:09:D0:3F:56
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/6VthJlw0xnQQMTy_xu3JygnQP1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.135.0/24
Signature Algorithm: sha256WithRSAEncryption
37:f2:9b:40:9c:fc:4f:0a:c5:5f:c0:d6:5a:01:70:9b:87:cf:
a7:fd:81:e3:d6:a1:80:60:c3:14:5d:31:8e:76:1d:8d:a2:b5:
06:dd:b9:32:39:5a:ef:b1:08:b3:51:ac:03:cb:ea:d5:4a:de:
e6:d0:ac:17:b7:f2:f5:a9:9e:59:d3:4e:2c:e2:34:e6:20:4f:
d2:64:0d:2e:a8:14:ab:50:04:03:6e:59:b2:64:20:d8:2a:e3:
1b:11:fa:f5:23:13:d3:1a:d8:26:53:fe:4f:89:3b:ab:28:d1:
cc:f3:9a:fa:b9:48:b5:2c:74:30:35:11:a4:7a:2e:5e:7a:c3:
ac:a7:82:8a:c3:28:a1:32:19:64:3e:9e:1a:23:f2:58:ae:e0:
de:be:81:d2:f3:34:15:ac:7c:74:88:e5:aa:d6:95:6d:a6:94:
d8:de:76:9d:43:eb:b0:81:89:b6:62:c2:db:e3:de:53:d7:3f:
50:5a:9c:15:e3:a4:2c:e4:1f:25:2e:12:49:31:de:a2:33:74:
45:fc:94:be:e9:fc:8f:5d:17:0f:3a:d1:4b:a5:0c:a0:fb:15:
6a:16:a6:53:2a:b9:f0:00:4e:31:df:29:78:8c:d7:15:bf:b3:
5b:b9:72:1a:2b:e2:11:33:c0:da:19:8b:83:56:db:af:23:2f:
c7:6b:6a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:34:55 2026 by rpki-client