Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/6Slb6ctAjkaetdPp9fu-qsq12hU.roa
File: 6Slb6ctAjkaetdPp9fu-qsq12hU.roa (raw, json)
Hash identifier: nI/JTPazexs9LlS7qZJ1qYqSPfTJGwhci4GC3G7Xc0Y=
Subject key identifier: E9:29:5B:E9:CB:40:8E:46:9E:B5:D3:E9:F5:FB:BE:AA:CA:B5:DA:15
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 01A0C091AC8129971E65EC57BE75924935B7
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/6Slb6ctAjkaetdPp9fu-qsq12hU.roa
Signing time: Sun 20 Sep 2026 20:46:07 +0000
ROA not before: Sun 20 Sep 2026 20:46:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215666
IP address blocks: 2a14:6782:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:91:ac:81:29:97:1e:65:ec:57:be:75:92:49:35:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Sep 20 20:46:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9295be9cb408e469eb5d3e9f5fbbeaacab5da15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:64:ef:28:35:13:63:dd:da:07:bd:61:78:7b:
ea:1e:eb:f1:21:5b:90:5f:3a:c5:78:5e:df:cd:90:
48:45:33:03:9f:11:e6:2a:c5:6c:cb:27:c4:17:25:
29:4c:6d:2e:ef:75:7e:c9:62:38:39:ae:f2:34:f8:
11:3c:b5:ae:b0:b9:68:db:6b:23:5d:0a:af:45:24:
e8:8e:99:73:f8:7f:bb:9d:60:1b:d0:bb:23:ab:79:
29:a9:18:1a:d3:3c:90:70:b2:d9:9b:53:21:85:c3:
eb:13:8e:0a:f8:02:c1:b1:a9:f4:bd:2e:af:ea:1a:
dd:24:4f:63:75:de:7d:92:40:f2:fe:92:e6:83:9f:
d3:59:7d:98:f5:ea:d1:79:30:10:b9:21:08:02:78:
5f:61:97:7b:0b:96:46:46:79:71:a2:11:1e:0a:6c:
42:e1:18:b7:09:72:33:d5:24:69:1a:7b:38:cc:f5:
9d:04:bf:c9:43:79:e7:23:30:97:74:86:4a:82:1c:
0c:1f:14:a3:00:87:16:8b:6a:67:c5:ed:44:23:af:
84:61:80:c3:09:dc:8a:89:93:5a:c8:90:cd:7d:0a:
f1:40:a2:59:36:b0:9e:18:69:fb:fd:d5:ab:87:33:
fe:2d:d8:5c:b5:1e:ad:7f:1a:6d:6d:53:0f:08:d4:
dd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:29:5B:E9:CB:40:8E:46:9E:B5:D3:E9:F5:FB:BE:AA:CA:B5:DA:15
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/6Slb6ctAjkaetdPp9fu-qsq12hU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6782:7::/48
Signature Algorithm: sha256WithRSAEncryption
14:06:1c:b8:a5:fb:de:fe:fb:fd:95:60:09:08:a0:ac:83:cd:
17:58:d8:a2:5e:61:5d:67:0b:cd:ed:83:72:c5:92:ce:e6:ce:
8f:45:41:d7:a4:45:4d:90:6c:7f:eb:55:5b:09:87:ee:8c:fe:
9e:d5:a2:9b:0c:da:d1:d1:9b:9f:2b:69:d7:bb:dd:1f:e5:97:
ee:8e:bf:82:18:f3:f1:d4:32:81:5a:82:5e:f3:eb:fe:ec:7f:
44:0b:e4:67:61:7f:77:9f:ef:84:20:37:56:70:9c:7f:c8:cb:
cf:59:72:2b:ea:04:87:50:9d:e8:85:e1:d0:5d:f2:80:c9:bc:
38:96:4a:06:8d:f0:d7:75:ea:7d:6d:6b:77:a3:82:77:9b:95:
08:82:0d:e2:4f:a4:15:b6:72:09:de:e6:eb:d1:8b:ac:d9:14:
6a:47:b5:3c:0f:28:92:bd:0c:0d:e1:44:ac:65:f7:a0:a3:a8:
a8:82:50:06:32:0f:af:c5:d9:de:f8:b0:49:13:ed:3f:d2:f3:
5e:5a:cb:57:17:12:06:d5:61:26:57:4a:bf:9d:95:5e:eb:6c:
d7:92:10:af:f5:45:60:58:4c:11:e8:e7:0b:3b:ce:19:d2:f8:
5e:09:b2:02:01:e9:f7:a7:57:f2:62:cd:a1:e0:fe:b3:45:e2:
0b:28:52:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:13:55 2026 by rpki-client