Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/a6ZdqqnUZq7Xf8v413mOD4gnuIc.roa
File: a6ZdqqnUZq7Xf8v413mOD4gnuIc.roa (raw, json)
Hash identifier: /YCERQ9X6MgXLxlcuxTGu+1tVQk1kXYJeSvr9xZddks=
Subject key identifier: 6B:A6:5D:AA:A9:D4:66:AE:D7:7F:CB:F8:D7:79:8E:0F:88:27:B8:87
Certificate issuer: /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Certificate serial: 01A0845FD21115ABD263AA6D01B29DFC015C
Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/a6ZdqqnUZq7Xf8v413mOD4gnuIc.roa
Signing time: Wed 09 Sep 2026 04:14:27 +0000
ROA not before: Wed 09 Sep 2026 04:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218762
IP address blocks: 2a02:ddc3:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:84:5f:d2:11:15:ab:d2:63:aa:6d:01:b2:9d:fc:01:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Validity
Not Before: Sep 9 04:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ba65daaa9d466aed77fcbf8d7798e0f8827b887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8a:5b:5d:60:3a:6e:4e:da:13:d2:de:fa:96:
41:ff:6c:b1:a0:64:a2:87:82:15:85:b0:39:d1:8a:
5f:94:1b:6a:bf:76:86:83:1c:d5:8e:f5:9b:15:9a:
af:bb:38:f1:d7:fb:7d:3a:f6:5c:b9:a3:9d:5c:20:
df:df:ce:d3:bc:b9:92:d3:e2:9b:fa:37:0f:51:dd:
0e:62:b9:17:71:7b:8d:ae:db:3d:1c:6c:91:f7:1e:
99:ab:16:b5:ab:b8:75:6b:ad:3c:ae:d4:4d:dc:96:
0c:ad:7a:f2:43:09:5a:1c:0a:37:e2:f7:f5:5d:b4:
51:df:f2:57:df:af:85:d0:97:92:05:bf:2c:bc:d2:
fc:cc:f9:80:6a:eb:64:a5:a2:c9:ed:e0:bf:2b:2e:
87:0c:46:3c:03:ed:0c:af:cb:2e:02:a9:3a:ce:04:
80:65:b7:83:e5:8b:57:5a:72:c0:40:3e:49:14:44:
64:87:73:34:71:30:39:9c:6c:ad:ca:d8:65:32:d5:
a0:a2:7a:b2:b8:da:a6:2a:e3:11:1f:ed:0a:f9:a7:
fa:39:b0:1d:56:00:d2:37:ea:c6:7e:54:d9:2e:02:
12:d3:6a:6c:02:ab:c6:ad:9d:30:4c:c2:d2:63:b0:
28:55:73:f3:b1:04:07:84:38:ce:09:bf:77:63:08:
14:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A6:5D:AA:A9:D4:66:AE:D7:7F:CB:F8:D7:79:8E:0F:88:27:B8:87
X509v3 Authority Key Identifier:
keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/a6ZdqqnUZq7Xf8v413mOD4gnuIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:ddc3:1::/48
Signature Algorithm: sha256WithRSAEncryption
6d:df:f6:15:c3:c6:80:ea:60:61:48:39:9a:be:04:26:1f:31:
74:0b:f1:d5:ed:3c:94:70:99:fd:53:f6:f7:f7:87:03:e4:7e:
bb:3c:3a:cd:e2:0d:82:96:e3:67:f2:78:1d:da:1b:99:69:56:
07:9a:70:ec:6a:f7:07:d5:cd:8b:b9:3a:8f:c0:82:86:25:89:
56:b2:4e:5a:18:e6:31:7c:0b:c2:b3:7e:10:79:1d:fd:41:f3:
22:da:39:fd:16:f5:5e:17:5d:6e:0f:04:ba:e5:a1:1d:98:ad:
a9:05:8c:fc:34:2d:68:cc:89:f0:fc:9c:7e:bc:da:df:4d:fa:
27:f3:2c:03:dc:da:80:15:1e:b0:18:09:e1:6c:92:ac:66:ab:
cf:71:92:68:3f:ee:14:56:f2:10:f3:f7:d1:7c:8d:de:4e:97:
cf:7b:bc:28:4b:6d:64:db:78:47:90:e8:a4:88:af:b0:44:26:
d4:e2:11:d7:8e:64:38:ac:bb:54:b1:92:8b:30:c9:ca:1a:1a:
8c:b1:98:e4:18:c6:63:ee:4d:77:69:34:d2:6c:59:ee:21:5a:
97:24:1b:56:8b:dd:fd:5a:33:cc:1a:7f:b9:e2:8a:dd:ee:63:
ce:20:ec:93:b5:7a:df:dc:23:f9:f2:f8:46:4e:3c:f4:af:07:
aa:f7:14:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:30:48 2026 by rpki-client