Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/6RRNO5fJReaeuf0LL9SlkGC3Ero.roa
File: 6RRNO5fJReaeuf0LL9SlkGC3Ero.roa (raw, json)
Hash identifier: x6EgBAFulcoPg1I9+D9IW9RsxfSJVK9HiukC4F92TKg=
Subject key identifier: E9:14:4D:3B:97:C9:45:E6:9E:B9:FD:0B:2F:D4:A5:90:60:B7:12:BA
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A0C989D18FD6839C944F8EADA703749BD9
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/6RRNO5fJReaeuf0LL9SlkGC3Ero.roa
Signing time: Tue 22 Sep 2026 14:34:07 +0000
ROA not before: Tue 22 Sep 2026 14:34:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210819
IP address blocks: 2a0e:4006::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:89:d1:8f:d6:83:9c:94:4f:8e:ad:a7:03:74:9b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Sep 22 14:34:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9144d3b97c945e69eb9fd0b2fd4a59060b712ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e5:ac:d6:87:64:09:25:b2:9e:5a:ef:51:12:
54:a4:26:07:38:97:c3:1a:0a:40:45:84:84:82:79:
71:04:e5:fb:9e:e2:1a:0c:d0:23:4d:97:e9:00:b1:
f4:98:02:36:79:96:63:a0:5a:36:cc:ad:38:44:ed:
92:28:77:88:c4:14:ec:82:54:d7:2c:ca:9e:7a:5e:
77:72:0d:d5:9d:df:b6:61:dd:03:b4:94:45:60:e7:
49:c0:77:98:d7:41:62:c8:cd:73:eb:23:94:0e:ab:
33:00:71:33:a6:3f:4b:ee:88:8a:63:19:b8:7b:b4:
97:92:94:ab:b7:5d:66:e9:fc:32:05:10:81:df:bd:
73:49:21:87:b7:d8:9e:95:b2:3b:1f:20:aa:8e:8c:
d5:e6:4d:7c:c3:fe:c6:75:29:14:73:09:e3:af:8b:
9b:89:10:b3:d5:24:ee:c7:5b:90:de:6a:dd:e6:27:
ad:da:2c:e4:b3:e2:6b:c4:e4:b4:fa:41:34:d7:5e:
e7:0d:87:81:22:9b:ea:59:6e:b2:ef:e1:e1:21:a8:
49:90:c5:26:01:69:06:f9:0f:de:8c:0c:b1:74:90:
53:81:5e:45:48:50:8a:fd:60:e1:08:e5:42:f8:5e:
ac:51:4a:91:32:61:7c:46:11:82:c5:21:14:31:25:
90:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:14:4D:3B:97:C9:45:E6:9E:B9:FD:0B:2F:D4:A5:90:60:B7:12:BA
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/6RRNO5fJReaeuf0LL9SlkGC3Ero.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4006::/32
Signature Algorithm: sha256WithRSAEncryption
e4:3e:de:e3:7f:53:28:2d:6f:23:66:6c:37:6a:73:28:0e:b7:
c8:7f:7b:53:5b:59:17:50:7f:3c:aa:32:ef:27:ff:53:4d:da:
23:82:85:a3:2b:d8:f7:9d:67:c5:e4:70:3a:84:d1:9f:5f:1e:
62:47:93:ee:41:fa:3d:a4:98:8e:04:08:67:09:b0:54:07:03:
be:50:5b:d1:f4:f2:ab:3f:ee:f7:84:dc:44:af:62:33:4e:e4:
13:1e:39:b6:6b:12:88:dd:96:a1:81:b6:e8:a2:9a:27:4d:65:
fa:5a:60:ab:4e:ab:a0:03:cd:e9:22:1c:86:ba:8d:97:a2:b2:
e1:57:5d:93:a0:f3:20:b0:f2:c9:40:52:82:19:be:46:72:7a:
2e:07:79:ec:7b:df:9a:ff:e1:6c:55:04:a7:5a:c7:96:f3:bf:
97:c5:c6:10:0f:9e:aa:22:2c:b6:1f:8e:c8:85:b6:ab:6a:e3:
b0:fe:b3:6c:8c:a8:cf:58:00:06:2c:b7:a4:5a:83:61:32:77:
d7:3b:88:5d:f5:b0:89:10:ec:cf:fd:96:da:10:54:81:91:79:
3b:d4:19:8e:75:02:10:e2:df:3e:7e:ef:84:43:ed:01:2b:ff:
f2:4e:b8:40:6e:42:39:bf:c3:c0:27:27:7a:16:9c:91:d1:42:
5e:78:ac:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:32:53 2026 by rpki-client