Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/6cDl6G-2cE9xO0VVQY4j_UdK5Hs.roa
File: 6cDl6G-2cE9xO0VVQY4j_UdK5Hs.roa (raw, json)
Hash identifier: v/cF4y6Usm7tz2NPb+gkXx6NW9Dj7mCd6tiLKAPO4Ro=
Subject key identifier: E9:C0:E5:E8:6F:B6:70:4F:71:3B:45:55:41:8E:23:FD:47:4A:E4:7B
Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial: 019EB4A32617BBF416EAC1C1C637D0E76818
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/6cDl6G-2cE9xO0VVQY4j_UdK5Hs.roa
Signing time: Thu 11 Jun 2026 03:04:11 +0000
ROA not before: Thu 11 Jun 2026 03:04:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203950
IP address blocks: 189.13.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b4:a3:26:17:bb:f4:16:ea:c1:c1:c6:37:d0:e7:68:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
Validity
Not Before: Jun 11 03:04:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9c0e5e86fb6704f713b4555418e23fd474ae47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:12:f1:f0:db:d3:c3:64:91:5d:be:e6:9d:73:
f2:15:13:c6:97:be:d1:f8:97:46:0a:86:ba:b2:92:
99:df:a9:f0:d8:fe:8c:1f:d6:03:47:65:01:7b:8a:
10:43:45:94:3e:e3:72:8e:d6:c6:63:be:4b:45:2f:
e2:3f:23:37:c2:a0:31:33:8a:b8:4e:1f:bd:67:77:
c3:ce:06:ea:3b:c9:9a:a1:f3:b9:99:11:46:b9:02:
11:44:13:6e:76:f1:5d:bd:72:9c:d6:1f:0f:1b:4f:
c3:3c:9a:0d:89:b5:16:1f:c4:99:97:f6:6e:e3:0f:
3e:90:b6:a7:24:ac:87:99:d8:e9:13:63:79:16:df:
27:dd:bd:29:90:69:28:03:76:b2:b2:d2:e6:5f:ea:
0c:d6:35:14:92:56:8e:86:17:7a:a1:36:7c:c7:71:
af:33:75:4c:1d:c5:0a:52:40:0e:29:4e:52:4e:71:
47:69:20:cf:40:66:8b:90:db:b0:47:97:b8:54:a4:
9c:09:f8:f1:3a:4c:7b:7e:ed:07:99:19:f4:c9:a0:
6d:e6:26:3a:1c:94:71:9b:1e:95:d1:64:69:cb:63:
f8:9e:a8:a1:83:9b:0e:5e:3e:e0:e9:ae:dd:57:8d:
2b:47:4b:d2:f7:e1:5f:5a:28:42:c2:3c:dc:08:03:
3d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C0:E5:E8:6F:B6:70:4F:71:3B:45:55:41:8E:23:FD:47:4A:E4:7B
X509v3 Authority Key Identifier:
keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/6cDl6G-2cE9xO0VVQY4j_UdK5Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.13.118.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:ba:b1:84:ad:cf:00:9f:51:df:3a:df:c1:48:ea:cf:11:00:
29:b0:2d:22:4e:cc:6b:96:99:6e:4b:77:6b:85:63:bd:b1:57:
a0:d4:df:77:9d:53:af:f2:4a:c8:08:d6:c9:35:b5:f7:5e:8c:
99:30:f9:c4:c1:bb:b2:eb:2a:86:31:79:2e:de:c8:97:68:f5:
3c:6f:68:72:e8:1b:9b:0a:9b:93:98:15:19:3a:c3:89:7b:97:
9e:10:4c:3c:16:1d:f6:8d:89:65:9a:de:04:03:79:56:c9:28:
6f:33:46:f0:c1:6e:3d:32:21:30:2f:90:3c:b7:51:49:22:b9:
27:49:f1:ce:fe:cd:70:74:d1:e9:26:bf:52:26:eb:b6:55:3c:
26:73:22:33:bd:5d:d3:76:4f:54:a2:98:08:dc:3c:3c:d5:e3:
de:11:64:ec:7d:47:c6:a1:3d:05:45:6f:08:5d:01:f3:64:e1:
31:09:48:47:80:2f:7c:62:d1:1a:d7:89:86:b2:b4:4f:60:8f:
c0:2f:d6:39:e3:c8:a1:30:41:e8:c5:b0:0e:67:a3:1e:bd:f5:
d3:a5:44:68:63:79:22:4d:d0:12:1b:dc:fa:d4:da:db:8c:b9:
64:00:81:ce:12:23:51:3d:60:8e:2d:fa:79:d4:2c:44:2e:2d:
21:e5:76:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:09:12 2026 by rpki-client