Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6RPPbq6uj-v_CCF1tYH2gLG1l08.roa
File: 6RPPbq6uj-v_CCF1tYH2gLG1l08.roa (raw, json)
Hash identifier: 1uW0bIuHk2xHLWtTzqDqHika28qCI/RmlmOgFS4TaY8=
Subject key identifier: E9:13:CF:6E:AE:AE:8F:EB:FF:08:21:75:B5:81:F6:80:B1:B5:97:4F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EBFD42C6DB1A6A8125E1E85D185CD2B50
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6RPPbq6uj-v_CCF1tYH2gLG1l08.roa
Signing time: Sat 13 Jun 2026 07:13:33 +0000
ROA not before: Sat 13 Jun 2026 07:13:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141383
IP address blocks: 151.242.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:d4:2c:6d:b1:a6:a8:12:5e:1e:85:d1:85:cd:2b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 13 07:13:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e913cf6eaeae8febff082175b581f680b1b5974f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:e3:ad:7c:be:9d:ba:ba:a5:95:a2:e8:fa:
17:34:65:06:ff:88:3a:c0:44:58:3a:cf:91:09:b1:
28:ed:a6:c0:0f:c2:af:61:3d:9d:d3:ed:97:2e:b6:
45:02:91:c3:95:aa:0c:76:4e:c1:d4:f8:1f:0d:4e:
9d:17:47:ac:0e:85:0d:df:75:74:21:6d:df:f4:39:
d6:c1:b3:26:e0:ee:73:1b:54:0b:fa:f3:55:8f:88:
9e:6e:c0:8b:da:33:3a:f4:93:07:85:97:9f:6e:92:
c4:3a:e0:85:9d:88:ef:ee:70:5c:ab:4b:6f:da:a4:
09:da:51:23:25:cc:84:01:f6:fe:26:db:77:ee:aa:
92:df:b6:d5:43:dd:55:a4:23:83:cb:bf:a3:ce:29:
85:14:ac:ee:d6:f3:7e:0b:8a:ef:8c:03:e0:f3:34:
ca:f2:ee:bc:da:ab:76:b5:2e:6b:c3:01:5d:18:96:
03:eb:11:df:da:e3:6e:91:03:c5:47:e8:8a:0a:d6:
6c:9b:01:73:a2:ba:35:94:d5:e2:32:75:b1:87:8a:
95:f0:7e:0b:5e:9e:86:7e:f5:7d:62:0f:12:c3:31:
ca:7c:c6:2e:6f:13:f1:f9:3d:51:6e:d4:36:35:87:
e1:0c:4b:0e:dd:1d:6a:87:98:4f:6b:db:18:67:c7:
ab:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:13:CF:6E:AE:AE:8F:EB:FF:08:21:75:B5:81:F6:80:B1:B5:97:4F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6RPPbq6uj-v_CCF1tYH2gLG1l08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.150.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:99:e6:06:36:c1:57:2e:80:1a:2f:00:d8:4c:6f:cc:81:10:
01:97:61:bc:db:d2:bc:19:e4:4c:42:7c:4f:99:d8:b5:0d:e5:
05:8b:a5:f1:5a:31:9a:d2:1f:67:86:19:e3:1c:a0:39:54:41:
6e:1d:41:8c:f6:39:88:f2:47:cb:f8:c3:36:26:8b:8f:42:b1:
56:71:13:bc:24:18:a2:c8:0b:dd:62:7c:1b:ae:7c:1f:f2:97:
2e:d4:6a:a0:54:22:d0:e7:3f:01:fb:b1:27:f1:77:29:40:66:
87:b9:fb:e6:57:de:07:51:7a:d6:0c:8c:55:e7:d6:51:18:c2:
fe:0d:89:45:94:cc:1d:d5:89:6a:a8:e4:3a:72:7c:b0:9f:3d:
cc:3c:42:bd:7d:c4:5e:a9:d7:f9:18:4b:60:a4:87:a9:0a:a9:
e7:c1:3b:c5:da:12:a2:be:c0:ca:c7:a4:04:fb:e7:57:56:c1:
09:b0:b5:21:a5:3c:12:09:22:85:24:ad:a8:b0:f4:d3:6e:c0:
27:4e:77:2b:46:a7:a8:f3:b3:61:d1:0b:6f:0e:a8:3a:90:d3:
96:41:e3:34:d0:6d:2f:e6:d2:cb:25:ad:d7:e1:41:79:7a:de:
34:19:86:36:c1:98:2d:82:41:2c:dc:34:2c:15:64:1b:d4:fc:
f5:c5:a9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:29:16 2026 by rpki-client