Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6WDSbaI8ziWaJyLX9PLSGr2bUAE.roa
File: 6WDSbaI8ziWaJyLX9PLSGr2bUAE.roa (raw, json)
Hash identifier: iZZL2/Oy5NXBjhEGU/EZNmkyFcZDNEByHA+QskIomJg=
Subject key identifier: E9:60:D2:6D:A2:3C:CE:25:9A:27:22:D7:F4:F2:D2:1A:BD:9B:50:01
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019D6C639C6B0ED14E4F20CC5A75639DBEC8
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6WDSbaI8ziWaJyLX9PLSGr2bUAE.roa
Signing time: Wed 08 Apr 2026 09:19:20 +0000
ROA not before: Wed 08 Apr 2026 09:19:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214143
IP address blocks: 185.193.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6c:63:9c:6b:0e:d1:4e:4f:20:cc:5a:75:63:9d:be:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 8 09:19:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e960d26da23cce259a2722d7f4f2d21abd9b5001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:93:f5:ea:9e:84:85:c5:eb:91:93:4b:f7:
6b:ac:08:f7:86:a2:24:94:e7:c7:63:aa:38:7f:65:
27:96:90:fc:87:3e:f3:ea:a1:21:7a:7b:f4:25:44:
59:79:a5:37:de:50:7f:59:ad:c5:d8:b2:35:cf:1c:
33:f2:4f:d4:f9:2d:70:b5:8f:0b:49:6c:28:30:88:
2e:55:a7:74:1f:50:3c:22:33:84:98:95:12:e1:70:
33:1d:0f:05:61:ea:f7:7a:fd:a9:25:6e:f3:aa:8c:
4b:83:cb:2a:8b:9a:ae:dd:e0:66:31:58:2e:67:3b:
ed:b7:f1:08:3f:68:c3:61:19:0e:0b:55:77:fa:b3:
52:f1:24:5e:74:e6:a6:08:d0:e8:a0:96:e7:f0:94:
d8:1f:ec:7d:27:e8:70:f4:12:2b:3a:c2:5b:89:71:
14:3b:88:fe:fe:a0:2b:7f:56:10:62:9a:fa:63:43:
c1:b8:fd:5b:ff:3b:a2:9c:ad:dd:b1:c4:c2:11:38:
17:3e:6f:0c:3d:1a:d7:14:4d:55:cd:2e:44:41:19:
b6:5d:6d:92:1a:eb:64:68:1e:bc:74:27:4e:f6:da:
e9:19:b2:9c:70:fb:23:db:08:52:a3:57:a9:fc:f5:
ab:05:9e:9f:7d:7f:b4:be:bf:90:6f:c2:75:03:cc:
62:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:60:D2:6D:A2:3C:CE:25:9A:27:22:D7:F4:F2:D2:1A:BD:9B:50:01
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6WDSbaI8ziWaJyLX9PLSGr2bUAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.103.0/24
Signature Algorithm: sha256WithRSAEncryption
86:32:bb:d2:c1:bc:df:f7:58:eb:97:66:c2:2b:3e:81:07:d2:
89:0a:2e:72:03:fd:26:d5:77:3d:e9:a0:b7:2b:cf:e7:05:bf:
fb:64:11:ad:16:c3:8a:1e:3b:e8:a1:8f:42:87:4c:a6:1a:f6:
1e:d2:f3:6d:e4:a7:50:30:02:0e:0c:26:d8:bd:f2:7c:5a:f2:
81:33:78:ce:c7:31:76:93:22:e8:ee:bc:87:74:e4:63:2a:7e:
43:11:18:58:22:f0:76:8d:53:3b:c3:b3:92:a6:e9:52:5f:18:
ae:dc:90:0d:1c:1c:fe:dd:2b:1c:51:65:1f:e4:0f:b3:8a:01:
0c:fc:dd:51:b5:6b:d3:94:9e:ec:ec:8a:d1:6e:8c:36:51:7a:
46:7d:8d:f3:80:d7:04:88:d8:9e:c5:5e:33:b8:6b:2d:e6:e9:
eb:5d:27:d1:31:52:3c:f4:95:d8:6e:35:12:37:3e:fb:7d:60:
11:f6:ba:c2:00:c1:4a:4c:32:f2:11:6f:b5:2a:2b:26:25:89:
d6:44:27:a0:69:24:6f:87:3f:d5:57:ea:51:e2:12:db:9e:82:
41:03:0a:77:4e:1a:fe:f6:60:1e:a0:ca:6f:b8:38:1a:32:d0:
a5:05:34:35:ec:db:a5:b9:0d:fb:f7:f6:e0:a3:85:01:3d:e6:
b6:84:86:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:19:28 2026 by rpki-client