Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/6-6wyQC7ferEMIyoaJ47g4Fhlso.roa
File: 6-6wyQC7ferEMIyoaJ47g4Fhlso.roa (raw, json)
Hash identifier: +MPKVdWeU3W+9PHhsXXFL16OMAe+92XoPx8UaGTHB/4=
Subject key identifier: EB:EE:B0:C9:00:BB:7D:EA:C4:30:8C:A8:68:9E:3B:83:81:61:96:CA
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019A35886808C4245DA9F453C7554228869A
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/6-6wyQC7ferEMIyoaJ47g4Fhlso.roa
Signing time: Thu 30 Oct 2025 14:32:03 +0000
ROA not before: Thu 30 Oct 2025 14:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207695
IP address blocks: 45.141.116.0/24 maxlen: 24
45.142.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:09:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:88:68:08:c4:24:5d:a9:f4:53:c7:55:42:28:86:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Oct 30 14:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebeeb0c900bb7deac4308ca8689e3b83816196ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f3:c4:af:28:de:87:d1:85:2c:4b:62:ba:8f:
80:ba:24:4d:05:06:ce:87:61:03:77:f1:c5:ba:12:
98:f0:22:0e:7e:f5:a4:b3:8c:98:cb:29:c1:82:64:
5f:c1:2d:7c:af:1e:8a:8c:ef:f2:00:76:b4:67:69:
34:4d:82:ca:a8:d1:ab:c8:5f:ee:16:38:3a:5a:99:
5c:20:c2:85:68:ee:3d:51:50:51:03:c8:e4:b6:ae:
f5:ec:7b:f9:b9:f3:9d:0d:a7:72:0e:f7:d7:30:ec:
3a:0b:ad:72:32:55:57:dd:ca:32:d4:d5:69:c4:e3:
71:3d:0c:29:02:fe:60:9d:cb:a4:0f:4f:60:db:fb:
3c:4b:cb:f2:dd:a7:5a:12:c3:83:43:b4:a9:87:df:
4a:03:65:49:8d:1a:15:f0:ff:de:42:0b:4e:c3:ff:
9d:1a:3d:ce:ef:c0:02:68:74:e7:e5:97:f9:a3:ce:
81:ab:d3:82:0d:37:8e:d9:1d:3e:23:19:c9:6e:94:
da:20:53:00:27:ce:5d:4a:f9:19:5e:d2:93:e9:d4:
9e:40:e1:8e:a6:9d:9a:83:7b:40:92:23:bc:a7:81:
ae:96:a4:07:29:4e:f9:60:63:d6:6a:d4:99:2e:70:
4e:7c:87:c4:a3:37:d9:17:08:3d:f4:82:78:12:e4:
27:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EE:B0:C9:00:BB:7D:EA:C4:30:8C:A8:68:9E:3B:83:81:61:96:CA
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/6-6wyQC7ferEMIyoaJ47g4Fhlso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.116.0/24
45.142.106.0/24
Signature Algorithm: sha256WithRSAEncryption
94:5e:35:52:88:83:d8:f9:21:7c:14:d7:b5:c2:e3:d9:79:f2:
0a:b9:1a:fa:29:61:ef:b0:82:7a:58:fd:1a:1a:e7:c8:e8:c9:
f8:1c:2d:3a:3a:26:22:b0:23:90:90:44:34:e7:8a:95:b1:8a:
e4:d9:37:6f:9b:9b:af:36:8e:21:cc:86:3d:98:6a:29:22:4b:
6a:f9:c7:9d:7a:4c:a3:fa:0e:43:00:60:54:2c:95:54:88:18:
d1:ec:27:4a:12:28:df:05:9c:5a:b3:85:55:5a:e3:71:95:77:
c5:7a:c0:6e:80:aa:71:8a:be:ea:27:bd:46:23:2c:0d:e3:18:
fe:d5:0b:bc:4e:35:1f:77:20:d8:5d:f5:d4:98:74:a4:69:d9:
50:bf:ee:a5:ca:b2:3e:10:45:a5:4f:a6:75:f0:eb:80:74:d8:
38:9e:81:75:4a:9c:82:d3:72:c8:36:28:72:4f:7f:b4:b4:48:
8a:31:14:03:a4:29:36:13:00:75:45:46:5f:95:ba:d7:f5:7e:
05:09:95:07:6f:5b:2c:5e:e1:37:ad:69:b5:31:5a:98:ba:e9:
ef:62:20:1d:55:15:a4:a2:8c:5f:d6:a2:68:d4:58:3d:10:18:
05:bb:fb:37:b6:98:47:53:bc:a2:c0:2a:c5:08:0c:cb:b6:cc:
62:e2:8b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:07:45 2025 by rpki-client