Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6tKTOwz6wOfNo44esngjVGv4h8Q.roa
File: 6tKTOwz6wOfNo44esngjVGv4h8Q.roa (raw, json)
Hash identifier: 6R9L57DMFDFdEBTG8oBRFl+mbtrnZpEg9zSR3FUppio=
Subject key identifier: EA:D2:93:3B:0C:FA:C0:E7:CD:A3:8E:1E:B2:78:23:54:6B:F8:87:C4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C727F06FDB4D55B9B1969FC48C911E739
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6tKTOwz6wOfNo44esngjVGv4h8Q.roa
Signing time: Wed 18 Feb 2026 20:44:13 +0000
ROA not before: Wed 18 Feb 2026 20:44:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200913
IP address blocks: 5.175.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:72:7f:06:fd:b4:d5:5b:9b:19:69:fc:48:c9:11:e7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 18 20:44:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ead2933b0cfac0e7cda38e1eb27823546bf887c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:92:40:48:99:36:b7:9c:4f:1a:3b:00:75:70:
fe:13:d3:9a:81:1f:e6:d5:6a:c1:b3:90:08:05:fa:
06:42:62:e3:4f:ca:70:4b:b1:f5:97:3a:2c:01:86:
b7:5f:cd:3b:7b:98:5f:e2:9a:04:89:50:f5:c8:55:
52:0a:28:90:49:95:c3:c8:f1:5a:62:ff:bb:12:93:
d8:27:cf:74:cc:ae:d0:97:ad:37:ea:e3:52:46:30:
0c:4d:46:b0:7d:e5:d1:0e:ac:53:d5:c8:b2:7c:0c:
db:5a:e4:21:7f:5c:53:ea:fa:c8:aa:fd:3d:da:b0:
f1:dc:cd:de:7e:7d:c9:00:28:11:5c:12:88:54:35:
64:73:95:ab:85:53:9d:4a:52:86:53:a7:4d:95:ff:
ce:39:58:39:3e:cd:fb:c3:84:d6:3d:b4:88:68:16:
5a:45:fc:51:92:37:1c:87:b4:a3:c7:00:1c:f1:53:
98:ae:f6:c0:90:0a:05:bf:7b:f9:f1:ea:aa:86:58:
e0:f2:35:aa:92:e3:20:a6:9e:af:a9:10:30:dd:07:
a6:38:25:4f:f8:5d:18:bc:76:4e:b3:56:6a:75:ba:
f3:0f:b9:05:c8:5d:aa:ca:38:95:e2:f3:15:7f:b0:
fc:9c:55:a8:8a:3a:81:ec:e9:88:03:70:cd:9f:4b:
1d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D2:93:3B:0C:FA:C0:E7:CD:A3:8E:1E:B2:78:23:54:6B:F8:87:C4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6tKTOwz6wOfNo44esngjVGv4h8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.186.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:a5:0b:2e:65:36:dc:cb:b6:61:f4:4b:6f:56:ea:f0:fc:ba:
01:ac:67:03:0c:1a:27:6c:cd:85:eb:d9:55:8e:4f:e0:73:20:
89:1a:fc:98:ec:bf:de:46:bd:d4:e3:b7:88:1a:3e:c2:71:b9:
8a:9c:ed:d0:f0:6b:9e:bb:10:58:f9:aa:5d:e6:73:e5:e2:5b:
78:c6:4c:5f:95:bc:d1:de:fc:33:59:d3:1f:87:5a:96:07:cf:
85:86:ee:8b:d2:a0:a1:7e:5a:6d:e4:39:68:07:1a:e2:51:cc:
f5:61:56:87:3f:7e:d0:1f:68:21:78:83:3b:80:89:d3:55:5f:
bf:c4:3a:71:65:01:25:37:db:8d:3a:7d:3f:fe:82:58:1c:56:
8d:7d:d1:3a:18:93:f3:69:eb:05:fd:e7:7e:bb:81:d6:8d:e0:
cd:ab:03:0f:de:71:8f:84:c9:5a:d7:a8:c4:0a:c2:11:60:97:
93:37:ef:89:a5:ed:ef:da:f6:56:d1:fe:39:a8:1d:df:87:f2:
56:68:fc:af:98:b7:fe:aa:fa:fc:da:3e:a5:04:84:80:00:ad:
49:49:80:0c:1e:f1:60:91:e8:b9:c4:f0:27:86:fe:44:0d:f0:
73:dc:db:ee:70:26:1f:0d:21:59:e0:5a:73:1a:9d:de:43:11:
a8:95:e8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:36 2026 by rpki-client