Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/6yyB24me4Mn3puiEBQ4zRTAPk-E.roa
File: 6yyB24me4Mn3puiEBQ4zRTAPk-E.roa (raw, json)
Hash identifier: YO5t1MuMlwUTQbqSGR4RC9grjswW/0er9HP9kdISB5A=
Subject key identifier: EB:2C:81:DB:89:9E:E0:C9:F7:A6:E8:84:05:0E:33:45:30:0F:93:E1
Certificate issuer: /CN=c79d13664a379d8b5dadf763dd04f5115e023184
Certificate serial: 01A0F8FA2B71F41A9D7A86CA433F592938F7
Authority key identifier: C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/6yyB24me4Mn3puiEBQ4zRTAPk-E.roa
Signing time: Thu 01 Oct 2026 19:38:59 +0000
ROA not before: Thu 01 Oct 2026 19:38:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210993
IP address blocks: 2a13:7dc7:fffe::/48 maxlen: 48
2a13:7dc7:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:fa:2b:71:f4:1a:9d:7a:86:ca:43:3f:59:29:38:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d13664a379d8b5dadf763dd04f5115e023184
Validity
Not Before: Oct 1 19:38:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb2c81db899ee0c9f7a6e884050e3345300f93e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9e:4e:4a:d7:84:08:46:fc:9f:41:23:7a:d1:
d0:d1:13:de:ee:51:4b:32:de:f3:69:49:94:70:a7:
0f:7b:c1:53:91:01:08:0e:27:87:23:6e:b6:c8:4c:
52:35:fc:7b:e1:01:8b:ea:f5:ce:d5:b0:f3:0f:fe:
1b:08:c9:37:b8:9e:65:bb:5c:95:64:de:56:24:88:
cd:f9:06:e9:c5:fd:c1:70:ef:da:f3:69:fb:c1:6b:
7f:d1:09:63:ad:88:20:5d:61:5d:f2:02:f5:84:0b:
25:87:6e:ea:6b:2f:4f:81:fa:61:a1:fc:f5:fb:37:
90:1e:9b:e2:7d:d6:92:04:6e:a4:33:54:e8:46:58:
18:e3:00:84:8c:1c:c2:d6:0d:db:4c:ac:ae:8e:c4:
19:14:8b:ad:aa:0b:7e:58:9b:d8:24:6a:bf:4d:96:
e6:8c:20:76:bd:34:ad:f7:4a:85:99:d9:28:ee:cb:
a2:06:6e:54:6a:9f:cd:e7:51:e6:be:f1:f7:41:ff:
9f:fa:ac:a1:3a:fa:23:22:0d:cf:cf:16:39:1b:3e:
fc:54:4e:96:40:56:98:56:09:b5:d6:e8:05:72:4b:
71:3e:32:e3:ed:dc:59:47:df:16:d1:ea:82:1d:1f:
72:b0:02:af:75:8f:ba:7f:87:b1:b9:88:b5:43:7a:
f9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2C:81:DB:89:9E:E0:C9:F7:A6:E8:84:05:0E:33:45:30:0F:93:E1
X509v3 Authority Key Identifier:
keyid:C7:9D:13:66:4A:37:9D:8B:5D:AD:F7:63:DD:04:F5:11:5E:02:31:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50TZko3nYtdrfdj3QT1EV4CMYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/6yyB24me4Mn3puiEBQ4zRTAPk-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ec6b29-3621-4024-8628-28842529c7a1/1/x50TZko3nYtdrfdj3QT1EV4CMYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7dc7:fffe::/47
Signature Algorithm: sha256WithRSAEncryption
97:44:72:a7:8f:0b:88:98:4f:00:6e:9e:c5:6a:d8:dc:79:dc:
eb:70:b3:fb:d9:e2:a8:83:42:79:e4:1d:3f:7a:4d:07:6f:17:
4c:07:44:04:9a:46:64:ab:74:0e:e3:94:91:96:06:fc:7e:fd:
82:84:48:b5:f5:79:32:ae:15:bd:e2:24:07:a5:56:21:26:d7:
29:93:4e:ae:2e:d4:50:e9:22:1a:16:4f:33:6e:6d:11:b3:06:
1f:0c:6d:30:f7:18:8f:2a:3f:8c:4b:79:4a:0c:fe:fc:fa:88:
df:ea:1f:8b:3e:a0:43:0d:9c:68:5c:43:14:b9:c4:d0:ba:e6:
f2:b2:e3:79:3d:0a:b1:1d:60:cd:6c:fc:75:44:88:ff:0a:07:
06:c1:1d:08:57:5f:2f:2b:59:e1:f4:2d:da:a2:d5:5a:81:9a:
9c:81:e9:72:60:61:92:f5:9f:d4:42:2f:83:b7:53:f5:60:be:
45:f7:ff:a3:f0:57:1a:26:e0:a6:8f:56:35:e2:ae:5b:36:88:
13:ec:02:2a:78:24:89:b2:10:6a:7f:eb:0c:4c:23:ef:67:dd:
03:95:0f:be:ea:09:75:ff:8a:cd:f5:f8:1b:58:75:70:af:cf:
e9:f8:c8:88:89:6c:db:16:13:67:b5:a2:ce:54:29:78:dd:92:
66:09:41:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 01:09:20 2026 by rpki-client