Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/6lOwRaS0jN4zE9_KZa0CdvRSz4o.roa
File: 6lOwRaS0jN4zE9_KZa0CdvRSz4o.roa (raw, json)
Hash identifier: uLU3acN0iYUF5dRWhtfEa0vcmmnr9MryuMMnpNiMQss=
Subject key identifier: EA:53:B0:45:A4:B4:8C:DE:33:13:DF:CA:65:AD:02:76:F4:52:CF:8A
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 01A068AB6DE9B16A9709E7AE862D9588C9F5
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/6lOwRaS0jN4zE9_KZa0CdvRSz4o.roa
Signing time: Thu 03 Sep 2026 19:07:40 +0000
ROA not before: Thu 03 Sep 2026 19:07:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218955
IP address blocks: 94.231.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:ab:6d:e9:b1:6a:97:09:e7:ae:86:2d:95:88:c9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Sep 3 19:07:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea53b045a4b48cde3313dfca65ad0276f452cf8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e4:39:77:b7:a1:17:4b:86:d6:25:97:5d:46:
bf:e0:4e:5d:db:b9:88:15:20:c2:e4:5d:82:82:bf:
69:8c:82:2b:5f:c8:fe:a8:a0:a7:51:a9:f1:5a:7c:
d3:93:7d:61:23:1c:a5:d8:26:f6:b8:5d:9e:77:b0:
21:d8:56:7a:f0:f6:81:30:7b:bc:f3:38:5f:11:63:
0a:a3:8b:b7:4c:95:47:18:4e:51:76:90:83:57:05:
eb:3e:67:a7:5d:88:bc:93:fd:38:92:a7:6c:d8:d9:
37:02:f9:39:c4:fb:8b:97:f7:34:29:73:ed:c9:27:
c4:20:35:5a:9f:5d:dd:f0:c6:3c:dc:97:4f:18:28:
3b:5b:70:fe:60:41:90:dc:0d:51:5a:4d:d3:50:dd:
66:38:bc:1e:f6:49:27:66:f4:6f:b0:5a:ed:fd:c4:
6b:0f:d4:e8:dd:85:84:37:d6:a1:54:4b:09:61:01:
26:1e:aa:e0:0b:8d:6b:aa:a7:5f:66:90:41:9d:fc:
e6:c6:22:30:d9:c8:bb:9e:b2:ac:1c:73:6d:3d:92:
bf:41:f8:d7:1b:9b:6f:91:ed:be:31:c2:79:46:ed:
c0:bb:b1:fc:68:4c:1e:6c:e8:fe:9f:58:8f:28:2a:
52:9d:89:82:3f:5f:a1:df:b2:11:f4:a5:e8:b3:a0:
8f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:53:B0:45:A4:B4:8C:DE:33:13:DF:CA:65:AD:02:76:F4:52:CF:8A
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/6lOwRaS0jN4zE9_KZa0CdvRSz4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.229.0/24
Signature Algorithm: sha256WithRSAEncryption
08:bd:87:a9:93:a3:c1:1c:90:94:09:0b:1a:fe:3b:49:ba:5f:
13:b2:3e:ff:bc:50:2a:b6:fe:cb:d6:1d:08:5b:61:3e:e9:ac:
32:fd:2d:ab:c3:6a:1f:cd:03:8d:f1:20:1e:0f:98:0d:94:ec:
b2:89:69:39:e6:2e:6a:b0:36:dc:bc:82:f2:a2:3e:d9:a5:81:
89:4e:18:ae:4e:10:fc:57:65:e2:91:c5:73:8c:ae:96:61:47:
ee:b8:aa:5c:fa:7d:18:0f:4f:a3:24:6b:5b:cf:90:2b:7f:fa:
0b:a3:21:77:9d:e4:bc:ad:8c:d7:7e:d5:3f:0c:75:fb:59:3e:
6b:34:9f:d2:34:b6:a9:b6:5a:b9:c9:33:20:77:a8:33:a8:93:
4d:1d:2e:fa:40:dd:80:44:2f:ce:58:a8:c0:82:91:15:37:1e:
3f:93:4d:79:8f:5c:e9:73:4c:5e:85:41:9f:24:53:04:32:4a:
7a:fe:5a:0b:07:99:82:72:13:3e:bf:67:ae:8f:20:23:14:d3:
1d:7f:bb:0b:33:3c:c8:39:28:05:8c:d2:f7:1f:18:cc:40:f4:
2a:c2:04:62:9b:13:e0:86:55:ff:fb:74:24:8f:77:ea:0c:d4:
35:b8:f8:06:37:77:4f:8c:6e:42:04:12:42:3d:4e:2a:cb:a3:
b4:f0:9a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:22:14 2026 by rpki-client