Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/dO6zV5tR1mjYjK3NE1xspA5W7Oc.roa
File: dO6zV5tR1mjYjK3NE1xspA5W7Oc.roa (raw, json)
Hash identifier: PR/d7x3njWIlWQENR2nqDkLzkZSholFpUEUOVU9nk9Q=
Subject key identifier: 74:EE:B3:57:9B:51:D6:68:D8:8C:AD:CD:13:5C:6C:A4:0E:56:EC:E7
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 019C0F1DB51E5114EF450FD175EAB6F8641D
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/dO6zV5tR1mjYjK3NE1xspA5W7Oc.roa
Signing time: Fri 30 Jan 2026 13:35:31 +0000
ROA not before: Fri 30 Jan 2026 13:35:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204936
IP address blocks: 2a06:cac0::/29 maxlen: 48
2a11:9600::/29 maxlen: 48
2a12:ec0::/29 maxlen: 48
2a12:1900::/29 maxlen: 48
2a12:28c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:0f:1d:b5:1e:51:14:ef:45:0f:d1:75:ea:b6:f8:64:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Jan 30 13:35:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74eeb3579b51d668d88cadcd135c6ca40e56ece7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e1:18:42:4a:b5:41:5b:f0:a1:16:38:e6:69:
68:38:ee:75:ab:b7:08:25:68:58:7e:10:80:cb:8c:
ce:ca:52:e2:1b:3c:47:ba:3f:2b:0f:11:56:22:8d:
50:06:1c:d1:29:f3:61:b4:31:bd:d0:25:e6:95:58:
6f:ef:ae:90:ca:a2:8e:11:5f:d9:13:ba:ea:8a:17:
35:32:06:a2:38:06:d3:b1:4a:a0:fd:56:4c:f2:6b:
8e:67:ef:bf:bf:05:13:c5:4b:37:e0:60:45:b7:4d:
05:d3:28:01:72:04:a5:f1:bd:cb:45:c9:e8:3b:fc:
b5:64:da:11:4a:b8:0f:c2:b9:bd:5c:4e:e1:8f:28:
92:6b:dc:50:30:05:8f:d2:87:27:b4:79:d4:5e:9a:
7e:b2:54:04:c2:43:aa:ce:e6:0f:db:7f:1b:c5:5f:
db:a9:c0:ee:1b:0f:d8:58:e5:0e:30:60:8c:c9:d7:
c6:c5:1d:50:da:38:ba:05:84:d6:40:19:47:7a:49:
7a:35:3d:28:ba:b6:12:41:72:0e:fe:3b:27:75:b9:
c1:78:f9:38:ad:f6:bb:40:f1:d2:51:2f:c4:c8:fc:
dc:e9:fb:32:9a:ff:2d:aa:f7:2d:22:f2:10:19:2e:
d0:82:62:b4:4f:7d:fd:63:46:ef:c7:71:ba:46:f4:
a0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EE:B3:57:9B:51:D6:68:D8:8C:AD:CD:13:5C:6C:A4:0E:56:EC:E7
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/dO6zV5tR1mjYjK3NE1xspA5W7Oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:cac0::/29
2a11:9600::/29
2a12:ec0::/29
2a12:1900::/29
2a12:28c0::/29
Signature Algorithm: sha256WithRSAEncryption
84:1b:83:f0:47:83:9c:88:69:25:58:07:1f:3d:ec:6f:fc:c7:
f2:56:8c:ff:d7:77:b3:64:23:6b:c5:f4:6e:d4:8c:6c:97:9b:
2a:ca:27:83:60:a1:55:b1:8b:c8:83:13:8b:64:14:d6:9f:4e:
ff:66:67:31:7d:12:b1:cc:05:39:fd:88:d5:31:ae:2d:51:3e:
60:10:d4:84:84:75:c0:2e:8c:b9:df:3c:b9:d4:9b:b2:7f:48:
50:5a:76:ea:c9:7b:3b:bd:f4:10:6b:a1:3c:74:fd:00:8b:bb:
ba:34:57:56:da:d5:38:69:4e:6e:75:87:68:25:ad:4a:cc:48:
37:ad:eb:7f:6c:2d:07:88:fe:ec:b2:c9:73:7a:52:97:15:48:
f3:73:26:c3:cf:fc:41:3b:49:33:dd:61:8c:8b:b2:2f:e4:16:
4e:3e:74:76:4b:6b:0c:54:df:3f:70:7f:a2:fd:ff:da:e3:24:
33:bf:f9:5a:b8:44:7b:31:4e:ad:e2:07:e0:37:38:47:e0:ad:
0d:ba:d5:98:a5:a2:76:34:b3:c2:57:72:de:5e:9c:93:f9:39:
bb:e9:ad:51:00:61:c2:98:70:ef:16:93:a4:ca:b2:45:8c:90:
0b:f1:20:e9:32:58:f1:99:f2:cb:8d:c7:76:a8:3e:66:10:ec:
27:2d:24:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:09:47 2026 by rpki-client