Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/kXUNqa6NU2CIrEc-7iSS_F04l8w.roa
File: kXUNqa6NU2CIrEc-7iSS_F04l8w.roa (raw, json)
Hash identifier: dMuT5b6Qv7WJg47jG6wYoMPrghKZhlkojTQssXVjOAQ=
Subject key identifier: 91:75:0D:A9:AE:8D:53:60:88:AC:47:3E:EE:24:92:FC:5D:38:97:CC
Certificate issuer: /CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Certificate serial: 019B7DCA7AD26A598A41FDC843ACD9FA0E33
Authority key identifier: FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/kXUNqa6NU2CIrEc-7iSS_F04l8w.roa
Signing time: Fri 02 Jan 2026 08:19:40 +0000
ROA not before: Fri 02 Jan 2026 08:19:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9158
IP address blocks: 212.6.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:7a:d2:6a:59:8a:41:fd:c8:43:ac:d9:fa:0e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Validity
Not Before: Jan 2 08:19:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91750da9ae8d536088ac473eee2492fc5d3897cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7f:3f:3e:25:42:5e:15:cc:65:e7:74:13:02:
eb:4a:e4:1c:78:4c:53:62:4d:ef:03:72:26:0d:67:
96:67:b9:3c:cf:bb:a3:e1:3f:2a:45:34:50:77:a4:
37:cc:c0:4f:f8:d0:0d:93:1e:b7:2b:69:ba:6a:11:
9c:02:ed:2d:b4:11:3b:d2:a6:8f:e0:18:b6:c6:2f:
d5:ef:22:44:ab:a3:86:3f:87:b9:eb:37:c2:a9:b5:
7c:13:bf:d6:27:13:02:84:0e:13:28:70:e7:1c:36:
83:b6:12:84:a0:83:bc:72:b4:71:16:b9:d4:e2:46:
4d:c3:48:d4:fe:9e:1d:c6:b1:4a:7d:41:da:e5:8f:
5e:b8:5b:2b:9d:f6:8d:07:95:f9:68:40:7d:82:83:
76:ef:dc:c4:23:4e:27:35:ce:70:b0:89:15:62:d8:
02:cd:7d:7d:48:cd:98:e5:7f:bc:e2:ba:a8:d8:e2:
c4:31:6a:16:07:7a:89:22:5c:35:14:04:9a:83:c0:
aa:3b:79:45:ab:9f:1e:39:26:bb:5d:8a:28:2f:2c:
20:3f:b7:70:f3:cc:65:cc:fe:30:b6:a7:19:11:09:
93:53:f5:bf:9c:87:d4:cb:a6:92:aa:a4:34:04:91:
cb:e4:05:68:bc:3e:c4:9b:d2:22:32:a2:29:57:d9:
9f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:75:0D:A9:AE:8D:53:60:88:AC:47:3E:EE:24:92:FC:5D:38:97:CC
X509v3 Authority Key Identifier:
keyid:FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/kXUNqa6NU2CIrEc-7iSS_F04l8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.35.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:e7:66:b0:47:68:37:db:c3:7e:2a:54:0f:2b:1b:01:50:bb:
3a:02:65:b2:19:7d:3f:db:69:12:33:3f:43:06:03:66:c3:3c:
5a:ee:7a:0b:34:4a:33:1f:b5:d6:94:57:c8:85:fb:68:fb:ec:
2f:72:30:d0:4c:4b:95:37:0e:81:0e:d9:69:63:e9:6d:a5:af:
da:5d:5b:14:8a:18:e1:fa:9b:b6:44:c4:4d:dc:75:49:24:12:
7c:10:83:58:fe:ad:1e:c9:bf:e3:4d:85:6e:39:2c:58:f8:94:
d6:32:84:b7:57:2a:b7:64:65:e3:2e:5a:dd:92:af:91:a1:30:
cf:20:a6:fd:72:e1:eb:f5:9f:20:1b:dd:3d:85:07:7e:83:20:
c2:8f:1e:51:ea:bb:f8:65:47:2b:06:35:02:c7:a0:74:e3:86:
3b:d7:e2:7b:53:0b:53:16:90:eb:52:74:76:e0:8c:5a:a4:ec:
64:32:33:04:40:f7:53:b6:e2:83:68:94:ff:0c:81:3e:63:7a:
14:97:45:48:8f:13:a5:df:4e:4d:7c:9d:71:db:46:10:27:3b:
75:30:bb:da:96:f7:db:38:d5:2e:1e:02:35:3a:5a:50:f3:2f:
de:aa:0e:1e:6a:98:d4:db:91:48:af:56:2f:c8:97:e7:d5:3c:
d3:32:8d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:34 2026 by rpki-client