Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/6mzt5k7ma1OIfxfsqjpi1sLKArk.roa
File: 6mzt5k7ma1OIfxfsqjpi1sLKArk.roa (raw, json)
Hash identifier: j+z9itv5QPm1Cm5ssdHMQN0axYPfGR0shYkhzYtPPJc=
Subject key identifier: EA:6C:ED:E6:4E:E6:6B:53:88:7F:17:EC:AA:3A:62:D6:C2:CA:02:B9
Certificate issuer: /CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Certificate serial: 019B7E3793C1975D541935C6B74D4021EADA
Authority key identifier: 2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/6mzt5k7ma1OIfxfsqjpi1sLKArk.roa
Signing time: Fri 02 Jan 2026 10:18:50 +0000
ROA not before: Fri 02 Jan 2026 10:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57307
IP address blocks: 185.100.148.0/22 maxlen: 24
188.227.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:93:c1:97:5d:54:19:35:c6:b7:4d:40:21:ea:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c94d70cfb7e69019a2e01c87d0a5d545a599b52
Validity
Not Before: Jan 2 10:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea6cede64ee66b53887f17ecaa3a62d6c2ca02b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:27:6b:4d:cb:fe:78:e5:90:29:74:69:ed:
f4:51:21:2b:93:82:9c:bb:67:f5:6c:bf:15:40:b1:
1b:8f:bb:6b:f9:c0:88:8a:63:84:35:4f:06:c3:fe:
32:02:6a:77:d8:d9:2c:36:4e:7e:81:ae:13:3f:f9:
37:99:05:46:9b:28:b8:ef:81:a7:d3:81:e5:ae:b1:
22:68:96:62:f1:06:5b:5c:ca:3a:7e:e9:3d:ea:3e:
1f:9c:34:47:d4:c3:fe:8c:bd:7d:be:09:94:8e:cb:
0f:c7:15:f6:50:b2:b0:4d:04:02:25:88:02:d6:5b:
e3:6e:0b:73:62:c9:5b:af:92:fa:12:3e:4b:1a:03:
9f:63:c2:eb:f7:f4:34:73:d0:fe:a3:a7:8b:ce:c3:
2c:6f:88:ce:3b:b5:e8:bd:b7:57:67:c8:2c:2d:a6:
db:02:a9:dc:27:39:cb:2e:b2:47:f1:f4:2a:da:ba:
4c:a0:f1:cc:71:7e:73:f4:96:e0:ee:bf:6d:99:09:
00:ab:9f:49:f1:c8:68:3c:b4:82:32:ed:2b:e4:8d:
a7:c2:08:61:07:7d:51:20:41:95:42:3d:5e:fa:01:
04:8e:21:62:0f:0f:06:b9:1e:5f:28:0c:1b:a2:26:
a3:cc:24:fd:30:6c:22:85:ee:fe:66:31:91:07:55:
0f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6C:ED:E6:4E:E6:6B:53:88:7F:17:EC:AA:3A:62:D6:C2:CA:02:B9
X509v3 Authority Key Identifier:
keyid:2C:94:D7:0C:FB:7E:69:01:9A:2E:01:C8:7D:0A:5D:54:5A:59:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJTXDPt-aQGaLgHIfQpdVFpZm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/6mzt5k7ma1OIfxfsqjpi1sLKArk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1bda7c-9858-43f5-8659-69fc056b2625/1/LJTXDPt-aQGaLgHIfQpdVFpZm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.148.0/22
188.227.240.0/21
Signature Algorithm: sha256WithRSAEncryption
72:b6:cc:51:52:60:95:0d:e9:30:dc:f4:2d:2a:a8:a7:4a:92:
ab:fe:d5:47:60:d8:45:e5:05:7a:42:6b:d5:f8:ef:d5:1c:04:
02:c1:60:a0:4f:6f:73:fd:ca:07:73:6d:af:5f:63:72:96:95:
2f:cf:77:e4:09:09:26:a6:0d:53:18:2e:80:6e:56:ac:ef:bd:
58:f9:45:08:e7:db:61:66:90:c1:18:1a:76:af:47:a3:b7:a4:
b0:4d:96:cf:c9:05:f5:04:52:2b:2d:83:83:7e:65:d9:8c:0a:
44:a2:81:21:65:c4:07:15:f6:2f:08:a5:e6:95:9c:de:5a:14:
ac:75:e6:6f:11:66:1a:cb:14:c2:e5:5d:15:40:72:f4:0e:90:
74:b2:0a:df:8f:bd:38:d2:11:03:c9:18:3b:7e:89:7e:c0:bf:
fb:79:64:ea:23:88:ee:66:b1:28:56:04:b2:4a:2b:b0:86:06:
32:4f:36:e0:be:e4:ea:d1:ee:f3:c9:0a:95:a8:fd:a2:ce:5d:
94:f7:b6:b3:3d:f3:72:e2:92:57:54:f6:1a:c1:77:ca:96:77:
c7:ec:32:ec:6b:2e:22:66:a4:a2:83:21:07:3c:93:02:6a:0e:
38:8d:4a:84:ac:54:75:f1:5d:15:5e:3b:47:70:c9:be:0d:e3:
e9:b3:a8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:44:41 2026 by rpki-client