Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/6mL3LTAHEnWX958mvj_U__80Q9Y.roa
File: 6mL3LTAHEnWX958mvj_U__80Q9Y.roa (raw, json)
Hash identifier: ywx5JPQaT2XjkakDGh0HH3nPH7e5YehxWzpsRhHkQaI=
Subject key identifier: EA:62:F7:2D:30:07:12:75:97:F7:9F:26:BE:3F:D4:FF:FF:34:43:D6
Certificate issuer: /CN=9b19758a087876816dc19361eaf1e9412de73f86
Certificate serial: 01A0A0B2CC9DB01D389DD108277560C00CFC
Authority key identifier: 9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/6mL3LTAHEnWX958mvj_U__80Q9Y.roa
Signing time: Mon 14 Sep 2026 16:14:27 +0000
ROA not before: Mon 14 Sep 2026 16:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211462
IP address blocks: 185.150.17.0/24 maxlen: 24
185.150.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:b2:cc:9d:b0:1d:38:9d:d1:08:27:75:60:c0:0c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b19758a087876816dc19361eaf1e9412de73f86
Validity
Not Before: Sep 14 16:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea62f72d3007127597f79f26be3fd4ffff3443d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:55:95:63:55:f2:bd:4d:1b:95:ca:58:65:
6f:ef:f5:19:73:0b:2c:59:65:2a:66:2d:45:1a:03:
5a:17:dd:65:9d:e4:db:87:b0:aa:9f:25:4d:33:16:
9f:19:e9:17:87:7c:e4:cf:d4:a7:16:5f:10:a1:9e:
db:ec:d3:80:be:f8:b5:7c:40:b0:b2:b9:a1:83:b1:
0d:73:1c:7b:e0:d5:87:c0:1b:99:29:2b:ef:7f:92:
25:9e:ea:1f:2e:23:64:1e:90:e1:98:9b:02:57:b7:
6b:57:33:27:d8:8b:66:26:f4:27:f0:17:c3:4d:63:
e7:e3:1c:d1:1d:02:da:9f:c8:74:04:68:2e:ce:82:
61:10:d0:73:9f:fc:d0:fc:3d:6b:84:e5:3e:e6:a8:
47:fe:01:8b:28:aa:78:56:0e:7c:5c:3c:48:4c:a4:
48:87:27:90:82:62:87:cd:ca:53:a9:b0:f8:a3:d4:
ac:00:f0:5f:e5:61:43:55:02:45:fe:4e:44:3b:56:
51:eb:32:aa:4f:71:d7:4c:4f:41:ca:7f:d6:c6:ed:
6a:74:14:be:34:76:8d:ae:51:16:e6:d0:5a:7a:ce:
46:49:b0:c8:0b:a2:50:83:b1:5a:a5:f6:59:18:de:
48:6b:fd:2f:a0:e1:6e:5b:06:e9:4c:ad:ca:56:89:
61:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:62:F7:2D:30:07:12:75:97:F7:9F:26:BE:3F:D4:FF:FF:34:43:D6
X509v3 Authority Key Identifier:
keyid:9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/6mL3LTAHEnWX958mvj_U__80Q9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.17.0-185.150.18.255
Signature Algorithm: sha256WithRSAEncryption
8a:7e:41:13:ec:66:73:ce:c3:ef:de:90:7c:d1:5e:5e:31:1a:
3a:e2:e2:d9:67:48:e3:07:23:fa:7a:d8:37:86:9e:97:7e:d8:
e2:c8:75:45:ac:c6:6a:7b:94:47:73:20:bc:91:2b:79:53:b8:
a7:c5:5c:58:c3:49:8d:ca:20:5e:a9:3e:64:a6:ba:f0:f4:9c:
da:c2:93:14:47:ab:ce:de:13:10:85:3d:a6:a3:03:08:67:ce:
5f:2b:7b:be:21:49:6d:02:67:b4:f2:81:13:38:e1:75:e2:a8:
ea:ae:da:e1:eb:85:88:d9:e9:0f:91:44:32:ca:10:ee:5d:a8:
fc:fc:09:1b:bf:17:28:81:98:1d:c5:c0:71:ca:4b:b2:85:08:
4e:07:e6:ac:9e:e0:a0:eb:25:2d:52:54:c4:d9:36:f7:d7:4f:
3b:8c:2f:27:c0:59:6f:03:7a:9b:29:85:51:d2:d6:a5:af:5a:
eb:2a:f4:5d:16:f1:7d:a0:aa:b0:1e:d3:c0:e4:80:8e:0b:59:
85:35:a6:4a:d2:f9:8c:d3:16:20:7b:a0:f3:0e:30:50:fc:4b:
16:85:fe:73:22:9a:a3:c3:2b:21:4c:3b:b0:20:f7:59:ce:1d:
ab:a7:24:6d:0a:38:e7:78:87:73:2f:1c:2d:bc:3a:5d:65:22:
71:72:6d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:10:38 2026 by rpki-client