Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/dO6zq4mmDPmBhklgeAWbYzuw7zU.roa
File: dO6zq4mmDPmBhklgeAWbYzuw7zU.roa (raw, json)
Hash identifier: 8vn7qHuvz3bv0ogVMjPFxFjhxK9cBzVdZyb1bNw0jOE=
Subject key identifier: 74:EE:B3:AB:89:A6:0C:F9:81:86:49:60:78:05:9B:63:3B:B0:EF:35
Certificate issuer: /CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Certificate serial: 019B7C12C9943F956A9F5850A5DE6AC17101
Authority key identifier: 64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/dO6zq4mmDPmBhklgeAWbYzuw7zU.roa
Signing time: Fri 02 Jan 2026 00:19:24 +0000
ROA not before: Fri 02 Jan 2026 00:19:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57570
IP address blocks: 91.232.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:c9:94:3f:95:6a:9f:58:50:a5:de:6a:c1:71:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Validity
Not Before: Jan 2 00:19:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74eeb3ab89a60cf98186496078059b633bb0ef35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:44:43:3a:6e:c3:df:53:a4:32:c9:2b:f7:2f:
50:9c:5a:54:e3:56:45:5a:7c:91:1e:af:78:d5:66:
06:40:01:d1:a3:0c:9d:b4:ba:05:1d:32:07:c2:c7:
87:d7:f9:71:74:15:15:ca:7e:86:96:d9:a4:b3:08:
07:d5:ff:db:e8:fb:c9:d7:c8:1b:0d:f4:07:09:7d:
08:91:9a:95:ac:9c:d8:f6:71:c9:e6:2c:b8:29:ae:
92:c1:60:6f:9e:a8:73:f4:54:24:ac:b6:b7:5d:d9:
78:6b:04:f4:d8:f3:0c:5f:f2:83:61:e1:6c:6e:e8:
38:36:96:5c:e1:7d:ad:09:15:2c:c1:ca:18:c6:04:
07:ed:7b:0f:e4:82:c2:78:d1:d4:6f:bb:71:8e:7f:
c6:b2:5b:ba:f8:19:cd:8b:e9:60:06:a1:6d:6c:9e:
6a:b3:9c:75:e8:30:51:06:b0:c2:d4:ab:ee:28:42:
95:e2:ff:59:7e:19:f2:fc:04:b7:d3:e2:44:30:6d:
8c:cd:10:c7:92:b9:04:0a:25:b9:0c:d5:9d:01:e8:
c3:49:48:3c:88:9d:67:6d:6e:fd:f1:71:be:b7:76:
ac:d0:0c:02:07:4b:1e:db:d5:75:f1:76:eb:c2:7e:
16:32:a3:4d:fc:12:9b:e3:b0:3e:0f:ca:f8:0a:58:
6d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EE:B3:AB:89:A6:0C:F9:81:86:49:60:78:05:9B:63:3B:B0:EF:35
X509v3 Authority Key Identifier:
keyid:64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/dO6zq4mmDPmBhklgeAWbYzuw7zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.230.0/23
Signature Algorithm: sha256WithRSAEncryption
03:f4:dc:f9:36:d1:8e:3c:ce:0b:c4:84:9f:e8:d7:1e:5d:b3:
85:d0:fc:57:bb:3f:a6:3a:53:09:2f:b9:92:ca:62:d4:4e:20:
4b:c6:96:2b:db:38:98:e9:7f:15:80:4d:f8:49:9f:5a:46:58:
62:d0:c9:aa:49:d0:38:0c:0f:53:2e:2f:78:4b:33:10:d0:07:
62:84:80:80:83:98:1b:7b:d8:47:cc:ba:da:c6:1a:e5:e2:4a:
d8:56:3a:7c:9b:33:99:6a:c2:a2:b0:88:69:d6:c6:e9:7a:e6:
85:1c:14:f8:c3:37:8d:7a:45:09:45:ea:bf:91:bf:b8:41:aa:
4b:7c:49:ba:23:72:ba:65:f9:53:2b:59:b6:aa:1c:75:36:fd:
eb:fd:a2:2e:90:90:e4:7d:bb:bb:a6:41:c1:8b:c0:ff:c7:70:
ff:1c:50:98:e9:61:e1:39:d7:c4:1a:b3:32:3d:95:64:af:3a:
87:48:65:44:df:ad:e7:29:3d:34:1f:be:52:94:2f:61:75:ee:
43:d8:70:b0:f4:7f:52:64:ae:21:b1:ea:cb:da:86:0b:2f:f5:
27:7a:42:a0:ba:99:0f:93:7b:49:a6:1b:ab:e8:12:1b:fa:aa:
9e:e5:5e:74:f6:c5:37:bc:e2:73:61:94:a4:9e:cf:1e:cb:29:
ab:76:6e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:36:50 2026 by rpki-client