Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/ap4mFp5Ya-kxrNe_lxyXrrfAkKo.roa
File: ap4mFp5Ya-kxrNe_lxyXrrfAkKo.roa (raw, json)
Hash identifier: 9On1ASESGdKkJZcGpCsLA2Kb7s/ei4zrGMGE+Hcy6Qg=
Subject key identifier: 6A:9E:26:16:9E:58:6B:E9:31:AC:D7:BF:97:1C:97:AE:B7:C0:90:AA
Certificate issuer: /CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Certificate serial: 019B7DCA7B6F8407C7B1976045EDD8193F03
Authority key identifier: FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/ap4mFp5Ya-kxrNe_lxyXrrfAkKo.roa
Signing time: Fri 02 Jan 2026 08:19:40 +0000
ROA not before: Fri 02 Jan 2026 08:19:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205116
IP address blocks: 212.6.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:7b:6f:84:07:c7:b1:97:60:45:ed:d8:19:3f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Validity
Not Before: Jan 2 08:19:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a9e26169e586be931acd7bf971c97aeb7c090aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:09:36:1d:26:7c:26:f2:3d:e9:f6:6e:1f:1d:
53:0a:53:4a:bd:fa:b4:11:df:d9:8d:45:3e:1f:59:
a9:cd:5e:9a:c0:ed:8b:37:89:08:c6:f0:f5:94:29:
54:7b:19:e9:95:87:f5:cd:05:f7:e4:00:15:7a:0f:
e9:08:0d:69:47:da:4a:3b:64:cc:0c:9a:00:ee:cb:
66:2a:ea:61:3d:3e:dd:b2:e3:ac:8b:13:02:98:9d:
80:c9:da:d8:53:89:d2:7b:4c:0a:b4:18:7a:f6:68:
5b:00:99:67:2c:1a:ac:2b:0c:9e:2d:aa:b5:26:36:
0b:18:4b:d7:e0:ce:19:0a:f4:84:03:e7:1f:32:ba:
62:78:35:17:48:d5:dc:16:ae:82:24:cb:de:15:bb:
c6:06:53:0f:25:30:d5:52:2a:99:ad:b4:8e:a1:d9:
55:60:cf:b3:6a:02:ce:3a:b9:e8:f2:fa:4e:4d:64:
27:f5:e0:55:51:d7:1d:97:bc:dd:f1:2f:d4:a6:1f:
d7:4c:6b:5b:4b:eb:48:16:84:45:8a:0d:bd:ad:12:
c6:ab:98:cc:bf:13:49:43:7a:82:62:3f:3a:e0:2d:
19:b9:4b:b1:8f:09:5f:e3:1d:fa:36:69:55:3e:a0:
d1:f7:c1:b8:12:a3:29:6e:86:be:5d:8b:0b:76:9d:
e1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9E:26:16:9E:58:6B:E9:31:AC:D7:BF:97:1C:97:AE:B7:C0:90:AA
X509v3 Authority Key Identifier:
keyid:FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/ap4mFp5Ya-kxrNe_lxyXrrfAkKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.35.0/24
Signature Algorithm: sha256WithRSAEncryption
73:42:44:63:da:d9:94:61:b4:33:dc:02:f5:e1:d3:86:8f:43:
25:70:e0:fe:91:8b:9c:bc:39:19:70:78:53:1b:68:7b:7b:86:
bf:9e:ad:d9:09:3d:70:97:e3:a4:26:4c:0c:9d:b2:78:6d:92:
98:c1:95:f5:f4:be:e1:88:4e:4c:96:0d:82:13:8d:da:3d:f1:
94:c1:4f:f6:9c:6b:d4:e1:7c:21:6b:56:9f:05:af:62:e8:78:
b7:18:62:1a:27:0c:63:f1:90:54:1a:c8:45:d5:e9:fd:48:43:
1d:28:98:14:1f:68:d5:91:7c:2d:1f:3a:f9:e0:42:ba:b0:ad:
f6:23:af:83:d5:05:d2:11:79:b0:9e:96:48:1e:bf:53:17:29:
ee:01:26:a8:aa:32:12:e4:cc:52:13:90:42:12:c8:a6:50:94:
b5:93:d6:9b:c6:1e:2e:ef:9e:ab:24:b1:d6:40:96:8d:35:58:
d0:d6:10:e5:c5:50:cd:9e:08:33:98:92:93:50:74:76:c6:ca:
1d:c1:a5:07:18:54:32:bd:bf:25:a6:39:aa:de:52:63:30:63:
9d:fa:ee:8f:7d:5c:07:c8:36:a7:9b:78:5b:1e:fd:99:c0:6f:
3f:f5:28:5b:5d:9c:38:e7:3d:0b:22:55:48:22:87:3a:7e:c7:
24:79:68:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:36:26 2026 by rpki-client