Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/6zpLPYiDnvGhFeKxLfDJidvEkAc.roa
File: 6zpLPYiDnvGhFeKxLfDJidvEkAc.roa (raw, json)
Hash identifier: qCtMzfQupLxrQtjYxyy1fNgsnWs7f3X2ozg0KaiUVk8=
Subject key identifier: EB:3A:4B:3D:88:83:9E:F1:A1:15:E2:B1:2D:F0:C9:89:DB:C4:90:07
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019C1C89AD30D597DE802E63311776579CC7
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/6zpLPYiDnvGhFeKxLfDJidvEkAc.roa
Signing time: Mon 02 Feb 2026 04:08:30 +0000
ROA not before: Mon 02 Feb 2026 04:08:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142270
IP address blocks: 172.110.210.0/24 maxlen: 24
172.110.211.0/24 maxlen: 24
202.71.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1c:89:ad:30:d5:97:de:80:2e:63:31:17:76:57:9c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Feb 2 04:08:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb3a4b3d88839ef1a115e2b12df0c989dbc49007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:22:cb:f6:eb:ef:e4:3e:70:b2:54:fb:d9:f5:
73:14:7e:0a:df:21:c9:9a:ad:4b:8f:13:bf:0c:72:
28:24:97:f1:94:11:e7:76:1b:10:e2:d0:19:bb:22:
b7:45:22:e8:aa:71:ac:0a:7e:f8:5d:bc:8c:81:a9:
8b:b3:bd:e1:d5:af:63:fb:9e:e9:d0:6a:01:32:82:
ed:34:a9:83:a2:92:9e:71:02:3f:6e:53:43:9c:9b:
af:78:76:7e:df:4d:7d:c5:82:fc:db:a5:6e:e3:00:
d5:ea:db:89:07:49:8a:74:66:45:fb:78:3e:7e:e1:
73:8e:40:c2:8a:71:fa:2d:20:c8:f1:d1:4d:5b:62:
e3:d7:fa:c1:0d:48:6d:4a:3e:7e:9a:cf:18:58:93:
15:a6:a0:65:29:e1:37:53:e4:53:e3:6e:ce:1d:9d:
8d:11:cd:61:61:1e:7c:81:75:73:ae:e5:10:ba:15:
33:2a:b9:f8:ec:5d:a8:03:2d:58:33:38:e1:dc:a0:
da:63:13:7b:f9:15:88:ae:b2:83:23:2a:f0:b8:20:
66:3d:85:08:b7:18:d7:a1:52:42:72:ce:b1:c5:f9:
3e:10:3f:ee:1a:af:c9:74:f7:33:59:80:7b:2d:f6:
9a:95:1d:8e:17:bd:3d:9b:9b:83:21:92:f5:8e:f6:
28:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3A:4B:3D:88:83:9E:F1:A1:15:E2:B1:2D:F0:C9:89:DB:C4:90:07
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/6zpLPYiDnvGhFeKxLfDJidvEkAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.110.210.0/23
202.71.9.0/24
Signature Algorithm: sha256WithRSAEncryption
06:83:35:84:b1:ac:0b:52:6f:02:2e:cb:3b:68:40:24:5a:a0:
41:44:cd:0a:4b:e6:e0:41:84:43:ca:20:90:1e:13:d1:bc:3d:
0e:38:bd:c0:2c:57:9f:cc:ab:41:5e:40:10:39:8f:25:82:f5:
6b:98:d1:64:d7:34:38:eb:8a:8b:12:fd:d0:69:9d:1e:69:82:
48:48:09:51:57:e9:6e:b6:7a:1a:76:3d:c6:ff:23:95:aa:1e:
06:8d:fd:f9:b0:6f:0b:fc:29:5d:13:eb:7b:4c:d5:7a:5e:75:
25:93:04:f8:44:f1:11:45:eb:21:0e:3e:78:23:44:ba:a8:81:
e6:25:41:ca:c5:6c:9e:55:56:c8:a6:fd:9f:29:dc:7f:2e:1f:
1c:1e:14:58:a9:a1:42:f8:be:e4:df:12:c9:ea:51:d9:39:f8:
b7:a2:d6:46:58:69:7e:cf:cf:0c:37:5a:82:ed:b7:2f:5f:7d:
6d:fc:ba:1f:24:61:b3:be:ca:b1:ba:0b:34:b0:d2:c3:78:c0:
9b:bc:85:c6:5f:72:01:90:a9:58:1f:5f:96:52:d2:f6:d2:96:
ef:21:d4:92:4a:4d:a0:f1:04:44:dc:94:65:c2:39:60:cc:f7:
7e:bc:ee:f4:5c:0b:58:b5:f9:fb:61:aa:4d:57:35:df:2b:b8:
23:62:38:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:02:58 2026 by rpki-client