Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_6QX-rXoAeS0DoUSnECYeMg-ApY.roa
File: _6QX-rXoAeS0DoUSnECYeMg-ApY.roa (raw, json)
Hash identifier: IT5QnyU0LfNx14b2HPkSbxXbP4Wt3Ts27F8sPdB4Wx0=
Subject key identifier: FF:A4:17:FA:B5:E8:01:E4:B4:0E:85:12:9C:40:98:78:C8:3E:02:96
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019A4207425FAAFA83D7F8BA8757E3A6C6C3
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_6QX-rXoAeS0DoUSnECYeMg-ApY.roa
Signing time: Sun 02 Nov 2025 00:46:03 +0000
ROA not before: Sun 02 Nov 2025 00:46:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401896
IP address blocks: 89.106.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:42:07:42:5f:aa:fa:83:d7:f8:ba:87:57:e3:a6:c6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 2 00:46:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffa417fab5e801e4b40e85129c409878c83e0296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7a:14:d8:96:3a:c7:84:24:f7:62:42:62:a6:
44:8e:d4:11:7f:2f:69:f2:80:ea:7a:7e:d9:ca:ed:
a5:41:1d:3c:2a:b4:d8:9a:38:f3:73:d3:77:ab:b5:
77:ab:4c:65:39:38:1b:50:19:6a:72:8b:d9:95:69:
12:dd:a1:e2:d5:4d:fc:07:02:99:17:e8:66:67:b5:
65:fb:64:c8:fd:ea:94:72:5e:40:8f:71:12:d9:76:
b0:82:46:fd:27:41:84:ed:da:46:40:99:85:b0:ab:
7a:67:1e:7b:6d:8f:78:e6:39:bf:51:02:c6:99:ec:
df:a9:1a:e9:18:3a:f5:9b:f8:d7:71:28:1d:b6:39:
bb:b6:19:62:21:ad:ab:5e:f6:36:83:7a:68:21:5e:
d0:2b:f2:cd:a9:b8:d6:af:60:2c:57:9b:85:f7:59:
e5:49:b3:a0:b0:0b:0a:b9:7a:e5:4d:6a:4d:5f:5f:
bc:55:76:f3:c4:56:5b:ff:cd:df:7d:17:6d:8b:a4:
88:8e:d3:d0:58:90:ed:40:28:3d:02:9f:c6:d3:09:
83:b3:66:61:9e:73:00:12:6e:ca:31:7b:a2:cb:71:
35:b8:1a:cb:ff:5f:23:86:6d:e4:ed:8a:3f:b8:06:
69:0c:cb:9a:38:32:1c:95:a6:c9:94:d2:bc:2e:9e:
c3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A4:17:FA:B5:E8:01:E4:B4:0E:85:12:9C:40:98:78:C8:3E:02:96
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_6QX-rXoAeS0DoUSnECYeMg-ApY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.90.0/24
Signature Algorithm: sha256WithRSAEncryption
76:5e:10:5c:02:c9:c3:0e:11:72:20:94:95:b4:c2:e8:1f:63:
ae:e9:8c:f4:86:55:8d:0b:0b:d6:d2:85:44:e0:99:93:b6:a1:
3e:59:ab:89:47:19:15:e9:d7:91:d3:75:ef:8b:2d:bc:06:5d:
33:48:45:9f:3b:c1:de:f9:b5:37:99:62:c8:58:b3:c7:8d:c9:
88:07:7d:e4:da:68:e6:6c:4f:90:bc:63:f7:85:03:e6:eb:7a:
a4:c3:a3:b4:c4:e1:25:79:88:95:1c:24:70:b3:1c:b6:55:2e:
12:c3:a0:0d:28:fa:ec:75:4f:ad:63:6f:1a:98:9d:ae:1f:76:
9a:5f:16:74:f7:de:27:cf:62:ba:2a:9e:1b:b0:5c:4d:d7:dd:
1e:32:79:d0:22:aa:d5:e6:e4:01:f5:74:ea:5d:49:37:f0:cd:
19:34:ec:a6:5c:4c:06:8c:55:27:19:4c:42:d0:17:5f:4a:db:
58:e0:5e:2a:f6:0e:f6:5e:a9:c8:c5:a2:c8:12:6b:17:07:03:
f5:08:38:00:0b:23:ba:3c:e4:41:d3:d9:f0:3e:91:93:c5:b3:
6e:3a:33:27:9b:54:50:50:3c:18:6f:a8:6f:4b:0f:27:c8:8d:
4f:39:38:e8:3c:bb:a6:83:52:e0:9d:b8:be:90:4b:a9:39:78:
17:1a:06:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:33 2025 by rpki-client