Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/6RoewFwT2U0_o-GIPZtiQNTo_E0.roa
File: 6RoewFwT2U0_o-GIPZtiQNTo_E0.roa (raw, json)
Hash identifier: kIQh/jyYFHVo/0reNsJHzrLga15eZcaBEUn70EpU2IU=
Subject key identifier: E9:1A:1E:C0:5C:13:D9:4D:3F:A3:E1:88:3D:9B:62:40:D4:E8:FC:4D
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019EBB0CB249BD1355B480B2F53649C3F9E4
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/6RoewFwT2U0_o-GIPZtiQNTo_E0.roa
Signing time: Fri 12 Jun 2026 08:57:11 +0000
ROA not before: Fri 12 Jun 2026 08:57:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153947
IP address blocks: 158.173.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:0c:b2:49:bd:13:55:b4:80:b2:f5:36:49:c3:f9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jun 12 08:57:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e91a1ec05c13d94d3fa3e1883d9b6240d4e8fc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:60:c8:dd:f5:98:79:07:3a:f8:07:c9:a5:35:
7a:f0:4d:f2:e1:06:a8:48:a1:d1:43:af:f9:8e:81:
19:c1:ed:c8:1f:50:c8:72:3d:c3:d0:26:06:12:7e:
6d:ed:86:fa:d2:ff:59:65:f5:b1:53:fa:28:13:31:
69:d9:2a:68:95:b7:8c:fe:32:f9:b4:a4:9c:d9:00:
a3:2e:72:47:1b:7b:a3:7b:24:ae:52:95:e3:cc:97:
32:ec:12:d5:36:87:e2:ac:f2:03:9a:90:e9:4a:6c:
30:84:c6:86:22:60:3d:55:85:fc:44:09:2b:fa:aa:
d6:56:47:f4:b7:d5:1a:ec:fc:57:ca:f9:82:e9:a1:
3f:74:de:56:ad:21:e2:da:dc:a2:87:4a:97:24:b3:
aa:91:6e:23:44:6f:bc:43:07:f2:7f:9b:6a:76:b0:
1b:1d:8c:e8:de:50:a6:6c:57:a4:b3:b3:07:0c:d4:
8c:5f:72:6d:1e:ee:75:da:4e:97:34:f6:30:5f:48:
23:42:2e:a5:5c:a0:c2:3a:4a:fd:05:55:d4:87:78:
43:a1:ee:cd:4e:92:b9:98:51:15:20:9b:6e:ca:ab:
31:ce:a7:d0:98:d0:fd:09:e8:56:d2:28:54:45:9d:
d5:04:0b:1f:e8:b4:bf:cf:ca:02:8b:05:bd:1b:d4:
05:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1A:1E:C0:5C:13:D9:4D:3F:A3:E1:88:3D:9B:62:40:D4:E8:FC:4D
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/6RoewFwT2U0_o-GIPZtiQNTo_E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.217.0/24
Signature Algorithm: sha256WithRSAEncryption
37:2f:ea:21:c4:e0:f6:58:83:9d:3a:b4:86:5b:6e:43:05:14:
c1:f3:10:26:1b:69:8c:0a:f0:40:49:f8:6a:9a:e3:6c:cf:f9:
ee:76:17:a5:29:05:d2:00:3a:6a:e1:9a:9e:c9:0f:36:3c:ac:
81:67:b9:af:72:b3:5e:69:4a:8f:f5:4b:bb:50:dc:b8:9f:f2:
5f:13:2b:81:2f:f9:91:aa:2a:39:84:1c:c6:82:bd:19:1a:47:
b6:3b:ec:d1:e1:6e:25:e8:5c:fc:db:53:16:88:ba:5e:2a:d2:
32:5d:83:ab:43:83:8b:f6:53:ae:ac:8b:a8:6e:8f:4d:b7:bc:
4e:ab:fe:45:ae:8e:aa:2c:eb:25:12:ba:0b:fa:c0:9f:e4:21:
4c:d1:f8:9b:c0:b6:b8:6c:93:ab:79:72:06:ae:51:bf:6e:74:
97:af:d3:44:d4:2a:2b:d6:3a:22:98:e8:1f:ac:81:75:f0:70:
93:76:a4:95:ed:eb:9e:ea:4e:00:96:af:5a:77:df:18:30:7f:
86:21:05:b8:d7:d3:c1:a4:c8:8e:20:5c:78:18:97:26:34:64:
2c:8b:17:9d:93:26:ba:fa:c4:a5:33:fb:da:df:81:48:78:86:
82:26:61:d2:a8:3e:e0:f2:ca:1c:34:b8:46:08:77:2b:af:cd:
52:ea:0e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:04:40 2026 by rpki-client