Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/6je334E6vS-LEN70q2JQTnLcXnI.roa
File: 6je334E6vS-LEN70q2JQTnLcXnI.roa (raw, json)
Hash identifier: i6EQ3DO1huyRHpd1XLIGPiT060/8wv4RUfUtrI/3N/4=
Subject key identifier: EA:37:B7:DF:81:3A:BD:2F:8B:10:DE:F4:AB:62:50:4E:72:DC:5E:72
Certificate issuer: /CN=1fe02dbee62c98f01f20f4770d16a47f79abe32c
Certificate serial: 019B76EB9A656F296BF5012C05EFCA60DBD7
Authority key identifier: 1F:E0:2D:BE:E6:2C:98:F0:1F:20:F4:77:0D:16:A4:7F:79:AB:E3:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/6je334E6vS-LEN70q2JQTnLcXnI.roa
Signing time: Thu 01 Jan 2026 00:18:30 +0000
ROA not before: Thu 01 Jan 2026 00:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206202
IP address blocks: 2a01:9e00:ac00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:9a:65:6f:29:6b:f5:01:2c:05:ef:ca:60:db:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe02dbee62c98f01f20f4770d16a47f79abe32c
Validity
Not Before: Jan 1 00:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea37b7df813abd2f8b10def4ab62504e72dc5e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:78:ec:c8:98:a4:9f:22:c3:52:68:16:31:
02:88:28:70:66:5d:34:8d:78:51:35:3c:23:40:ca:
a5:13:dc:24:86:7e:db:d9:b8:e9:47:6f:88:57:c0:
6d:d5:ed:b0:c3:82:9a:7f:df:1d:82:91:78:e6:d8:
30:c3:19:13:9c:40:fe:32:3c:9b:bb:fe:2b:e4:78:
df:5b:53:bd:36:6e:08:ed:3f:f2:fe:ff:ed:8a:29:
26:59:66:49:43:c3:27:ef:85:a4:90:77:e3:86:40:
29:c2:78:2a:bd:ed:e3:da:32:09:a7:fe:6a:ed:13:
2d:3c:92:bf:dc:ad:a3:02:a7:83:e1:30:98:32:9c:
48:40:bf:a5:a8:ef:98:07:11:cb:eb:75:ae:86:aa:
82:e8:1b:71:ac:0e:d9:ce:45:e7:d3:12:6a:86:da:
f6:61:23:0d:88:d8:26:47:2e:33:df:57:7c:91:2a:
6a:58:e1:dd:09:ed:2b:46:30:eb:97:a7:27:11:ec:
eb:93:e9:72:cb:16:5e:67:d2:4b:a9:c6:88:07:47:
bb:4b:78:36:46:6e:f2:7f:1b:0d:44:8b:54:fa:f7:
e7:3d:f8:00:6c:d3:ca:ad:56:c2:95:e4:6c:61:af:
7e:fa:b8:fa:ab:be:c1:64:a8:48:f3:25:c6:e7:b3:
46:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:37:B7:DF:81:3A:BD:2F:8B:10:DE:F4:AB:62:50:4E:72:DC:5E:72
X509v3 Authority Key Identifier:
keyid:1F:E0:2D:BE:E6:2C:98:F0:1F:20:F4:77:0D:16:A4:7F:79:AB:E3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/6je334E6vS-LEN70q2JQTnLcXnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:9e00:ac00::/40
Signature Algorithm: sha256WithRSAEncryption
9c:9e:47:d3:a2:7c:3c:52:66:97:4e:79:76:0d:0b:64:c1:5f:
e6:d0:15:53:f8:1d:09:09:ea:2a:9e:e9:b6:92:78:75:1a:5b:
db:b7:8c:41:f8:8b:98:e0:9b:ab:8c:6f:61:fb:51:ed:1a:37:
02:38:ce:fc:22:12:c8:11:da:8b:6f:6c:50:aa:49:1b:7d:bb:
74:65:87:8d:79:8b:87:58:79:3d:f6:5f:87:6d:4b:f3:6e:fd:
e5:27:85:0c:49:f5:0b:61:6b:ae:32:a7:16:a7:66:64:67:a8:
12:06:c2:0e:9a:8e:63:69:c8:71:c9:40:ab:85:f6:fd:58:12:
9e:8f:c3:ca:56:d6:86:a9:45:b0:ec:f8:cf:19:78:af:19:bf:
73:c4:06:e7:60:af:0c:2d:31:7f:7e:02:cc:5b:51:ef:bf:37:
b0:05:b5:73:41:a2:f7:d4:47:4c:f3:01:bc:29:c0:c2:d9:b0:
35:4c:51:bd:21:e2:ee:f8:dc:22:2e:a0:e1:62:e0:4f:bb:d6:
49:50:80:f1:e6:99:f5:b9:27:57:e2:bb:8e:72:17:23:58:3d:
dd:32:1d:63:f1:1f:1a:ac:d7:c0:79:91:d7:d2:0e:6e:33:d6:
5a:1e:4b:12:24:e4:e9:ca:41:5d:e3:7a:07:61:aa:27:65:b1:
31:f9:96:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:14:31 2026 by rpki-client