Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/6VMAkTg85zv_RNH9ZiPNPZuWCW8.roa
File: 6VMAkTg85zv_RNH9ZiPNPZuWCW8.roa (raw, json)
Hash identifier: Lpm2qdKvSHv1n64+iddb1tvoxMF6Y4LQAfrzqafISLM=
Subject key identifier: E9:53:00:91:38:3C:E7:3B:FF:44:D1:FD:66:23:CD:3D:9B:96:09:6F
Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial: 019D665A4759DA3AE0AED9D8258071859746
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/6VMAkTg85zv_RNH9ZiPNPZuWCW8.roa
Signing time: Tue 07 Apr 2026 05:11:25 +0000
ROA not before: Tue 07 Apr 2026 05:11:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2586
IP address blocks: 109.163.248.0/21 maxlen: 21
178.251.56.0/21 maxlen: 21
192.175.45.0/24 maxlen: 24
2001:671::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:5a:47:59:da:3a:e0:ae:d9:d8:25:80:71:85:97:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Validity
Not Before: Apr 7 05:11:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9530091383ce73bff44d1fd6623cd3d9b96096f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:86:23:b1:dd:78:3d:eb:31:b4:4a:c9:d0:63:
a5:fc:c5:b9:19:3f:93:ed:50:b5:e3:ca:d8:48:00:
f6:dd:9c:2f:b4:85:4f:98:f5:ef:b7:ec:10:1f:e5:
26:64:f7:9f:47:6b:40:4e:7b:46:5b:2d:1e:60:09:
44:18:ad:b4:36:1e:b7:6c:cc:cf:b9:54:66:fb:3b:
e3:6c:07:13:0b:9b:78:63:52:6d:a6:b3:73:41:6f:
d2:3e:7e:8e:13:05:ef:44:7e:f8:13:bc:52:09:aa:
ae:be:c6:da:9a:2d:f1:2e:07:7a:08:97:9d:06:65:
c2:76:ac:08:e4:a6:65:e0:93:4e:a2:b1:1c:c2:36:
0b:99:3c:9b:cf:55:24:4e:6d:38:56:2e:16:33:2a:
7c:9c:9b:2b:60:39:28:bf:c8:4e:f9:4b:88:38:37:
4b:e1:ba:25:78:2c:0f:5d:30:a6:60:de:fb:76:26:
83:af:d6:45:38:b9:1e:3b:a6:bc:ba:d4:cc:2b:32:
61:df:5c:5b:a0:cf:6a:c7:4a:85:17:a8:1e:79:16:
ff:23:93:67:48:66:84:9b:48:45:3b:b5:31:0b:aa:
0f:3b:82:77:29:83:a0:50:db:53:d2:7f:12:6b:6b:
f5:78:d3:cc:d1:ce:ea:45:c4:0f:0d:9f:b1:dd:09:
61:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:53:00:91:38:3C:E7:3B:FF:44:D1:FD:66:23:CD:3D:9B:96:09:6F
X509v3 Authority Key Identifier:
keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/6VMAkTg85zv_RNH9ZiPNPZuWCW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.163.248.0/21
178.251.56.0/21
192.175.45.0/24
IPv6:
2001:671::/48
Signature Algorithm: sha256WithRSAEncryption
26:78:d0:b0:60:2e:23:b5:7c:8a:ce:5c:57:04:95:c9:3e:a6:
e7:72:b1:28:a0:f4:02:df:f2:e8:00:58:ba:dd:cd:e6:94:ca:
45:aa:4d:62:63:3c:5d:1a:cb:3f:ff:80:da:74:b3:2e:a3:c8:
95:e5:a6:a3:72:2d:b4:79:f0:3e:b0:b5:50:45:47:a8:f5:20:
50:d6:13:50:fb:3f:6d:d1:b3:e4:79:81:fa:b7:7e:30:e7:28:
b9:5b:b6:bb:a7:d4:bd:f6:d3:d7:c4:55:ab:82:8d:b3:79:01:
c8:70:3a:88:08:fd:61:f9:a6:17:34:8d:73:7f:a0:70:9e:dc:
6a:c5:91:73:c3:6e:ca:2a:75:3e:62:97:4e:4d:10:fc:1f:c3:
1f:e7:1c:5e:1d:17:b3:26:b3:72:bd:e1:8a:28:af:10:8f:5c:
5d:68:f9:65:bd:d5:d9:24:43:a5:69:0e:58:c8:50:5d:12:78:
25:a4:92:95:41:2a:e4:c2:11:d1:f5:c6:11:e1:25:bc:fc:c9:
b3:d4:0a:61:5a:49:f5:30:59:60:95:fe:48:2d:f9:12:56:1d:
6f:e2:4b:ee:e7:df:2d:53:55:1e:93:90:9c:37:c1:b1:d9:18:
18:91:1b:f4:da:11:fc:e5:18:95:71:4f:f4:df:74:3d:40:6f:
d4:45:17:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:45 2026 by rpki-client