Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/6uVHQt4iyRPEf0022LpeXTN_lBQ.roa
File: 6uVHQt4iyRPEf0022LpeXTN_lBQ.roa (raw, json)
Hash identifier: J8M6QUb7KZisev1RavSoltBlExeJQG1N5s5RLXFQ3LM=
Subject key identifier: EA:E5:47:42:DE:22:C9:13:C4:7F:4D:36:D8:BA:5E:5D:33:7F:94:14
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019C8E6F56AC8862C1C185F0C42A58A71320
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/6uVHQt4iyRPEf0022LpeXTN_lBQ.roa
Signing time: Tue 24 Feb 2026 06:56:27 +0000
ROA not before: Tue 24 Feb 2026 06:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211484
IP address blocks: 178.253.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8e:6f:56:ac:88:62:c1:c1:85:f0:c4:2a:58:a7:13:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 24 06:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eae54742de22c913c47f4d36d8ba5e5d337f9414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:8c:e7:f8:53:a5:97:8e:86:77:ea:24:02:
6f:99:7e:a1:52:62:d1:ed:21:34:ce:1b:50:f5:d1:
66:d6:02:ef:7f:6c:c8:80:b2:33:85:df:30:f7:03:
3e:c9:a3:17:d2:b3:b4:b4:a7:59:ff:7c:ec:c1:e8:
e8:34:fb:75:af:b1:d7:d4:b0:78:e5:7d:00:91:3d:
8d:6a:a2:96:e3:cd:9d:59:6e:44:53:8a:f4:3c:1d:
f5:4a:f7:4f:9d:80:c5:dc:8f:1b:bb:72:90:45:b7:
89:6b:ba:de:e0:8c:b7:8e:40:97:af:a3:64:22:9f:
5b:35:71:42:54:74:a9:50:8a:5f:8e:4b:22:1d:9e:
aa:b7:f7:c2:1a:12:53:ef:52:ae:f5:a0:f1:1f:e5:
d5:7c:20:cd:ae:c9:8a:6e:53:14:9a:19:69:5a:cf:
6e:93:fe:c7:61:46:49:d5:a0:a6:64:17:fc:9d:07:
6d:5c:a2:cb:77:8d:b7:5d:7c:72:f3:33:63:4f:41:
3c:db:1d:33:92:5b:1b:24:dc:99:cc:4a:ca:ab:0b:
b1:d8:f5:28:72:05:02:f7:3b:1f:e2:69:b7:5e:cf:
07:3b:a1:d1:06:26:39:0a:ee:bb:27:20:99:94:d7:
8a:14:a1:bf:95:78:74:72:af:ee:0d:56:ab:ef:49:
06:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E5:47:42:DE:22:C9:13:C4:7F:4D:36:D8:BA:5E:5D:33:7F:94:14
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/6uVHQt4iyRPEf0022LpeXTN_lBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.227.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e3:e9:4c:73:68:4d:21:64:55:10:19:d5:97:dc:60:a1:f3:
87:38:7c:85:15:23:9f:b3:09:44:f6:cd:3f:90:75:e1:ac:81:
7c:6b:3a:00:d7:18:c1:e2:4d:04:d0:cd:2f:e0:d0:b9:b5:e1:
5d:af:2b:ce:d6:c9:fd:ec:ff:d9:89:b0:d2:57:79:46:14:47:
54:01:2d:27:7a:04:cd:21:97:7b:04:9f:05:e9:47:0c:7c:82:
b6:b7:b8:b2:b9:e3:30:7f:66:3f:01:ca:1e:fd:bc:eb:0d:18:
21:e8:e1:36:c4:78:2a:30:3e:56:8a:6e:a0:70:a4:b7:32:73:
75:b2:64:79:e8:d6:9c:b8:ef:1a:f1:01:c9:c9:f3:de:39:69:
cc:ba:3b:20:bc:24:f5:56:23:4e:d2:b1:8a:20:a9:3f:07:bf:
47:dd:be:fe:78:fe:58:ee:8f:85:3c:20:f3:b1:aa:4a:f9:af:
37:68:22:5c:3e:0b:d1:25:a4:98:ec:00:38:32:38:94:81:9f:
21:54:1e:6a:72:50:a4:4a:70:dc:c3:0a:08:ed:30:db:83:5a:
b4:c3:42:ed:f2:af:b6:d5:5f:5e:d8:e8:00:74:35:66:8f:f5:
d0:e4:5f:d5:c5:e1:e0:77:96:0f:a8:6a:c5:ff:d9:a1:2b:7d:
ac:81:14:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:19:16 2026 by rpki-client