Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/c6GILi92RmWHgC81JVzcin9qgpQ.roa
File: c6GILi92RmWHgC81JVzcin9qgpQ.roa (raw, json)
Hash identifier: /jZx+yR2zbucT8wVOYKro8tRY6PFAOqzqpqt7tcefH8=
Subject key identifier: 73:A1:88:2E:2F:76:46:65:87:80:2F:35:25:5C:DC:8A:7F:6A:82:94
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 019E8BBE54E169FCAD8584340FBF300853D9
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/c6GILi92RmWHgC81JVzcin9qgpQ.roa
Signing time: Wed 03 Jun 2026 04:29:27 +0000
ROA not before: Wed 03 Jun 2026 04:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62651
IP address blocks: 195.216.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8b:be:54:e1:69:fc:ad:85:84:34:0f:bf:30:08:53:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Jun 3 04:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73a1882e2f76466587802f35255cdc8a7f6a8294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:78:8c:8e:f8:89:7d:68:16:96:29:48:1b:
b7:93:16:e2:f8:46:7f:9a:23:d3:2f:5e:2e:ec:f5:
e0:c6:be:f0:ac:7a:94:0c:22:10:7e:1e:5f:e9:af:
e5:6e:d7:3f:ab:cf:c4:da:79:1d:4e:56:80:c7:29:
46:41:aa:05:8a:30:b6:8b:c2:f0:2f:78:01:3e:f8:
15:b4:4e:73:91:d6:5c:31:09:d3:06:06:b6:64:8c:
a5:97:db:ef:6b:31:35:0c:b6:b8:cf:0d:93:5e:42:
76:0d:51:ca:5d:95:96:ae:3a:e9:67:97:82:5d:0c:
c1:2c:47:a4:3f:48:ef:86:81:b3:68:86:54:ff:65:
67:b0:2e:08:90:ce:cd:a2:36:34:e9:85:f4:6e:49:
e6:93:5b:35:93:fc:09:34:14:f6:bb:d1:63:3e:c5:
fe:1a:49:12:cb:d9:bb:5d:91:ea:4c:01:b2:8c:35:
80:46:ac:71:ab:1b:05:e1:07:bd:da:8b:77:5c:89:
08:4b:b4:3a:7b:e3:6d:21:58:75:fc:0a:23:c0:f3:
88:5b:77:ca:41:3e:42:d2:86:ad:8b:58:ff:e6:bf:
69:8c:d4:cc:74:00:63:04:55:b4:fc:5d:56:4a:c9:
8e:eb:03:ef:a6:65:a6:97:a0:c0:e7:28:bd:aa:64:
77:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A1:88:2E:2F:76:46:65:87:80:2F:35:25:5C:DC:8A:7F:6A:82:94
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/c6GILi92RmWHgC81JVzcin9qgpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.170.0/24
Signature Algorithm: sha256WithRSAEncryption
75:d2:23:b3:fd:96:0b:4a:2f:f7:da:47:fd:a2:e5:ef:eb:73:
9b:79:fe:66:dd:f0:0a:aa:ca:15:c5:de:3b:04:f3:2a:80:ce:
24:2d:72:76:8e:6f:c4:3d:f2:8c:52:dc:7d:3c:2a:56:db:2a:
9a:f0:8a:f5:72:c3:52:f6:98:33:b5:9d:8e:ab:57:86:11:eb:
15:60:76:8b:7c:8e:8d:61:12:06:3f:2c:91:2f:be:34:bf:65:
89:e1:bc:d4:72:8c:7e:59:1f:78:8d:96:0e:65:ad:4e:10:db:
b4:da:43:2b:c7:78:f1:46:d3:4d:e0:72:34:b7:f3:d9:9b:00:
c6:32:00:f2:ff:e1:dc:c3:2c:90:40:85:e5:ae:ed:83:c1:d8:
06:b0:c2:3a:a4:1e:0d:ec:c2:ba:21:07:81:6f:86:db:19:4f:
3e:e6:83:20:d6:7f:9f:f1:ed:b1:c1:39:68:75:8a:5b:41:9e:
d1:47:ed:d8:ad:86:55:91:4a:67:b5:02:4d:5d:da:17:d5:d0:
41:b0:6c:26:0a:6f:20:27:91:63:d0:fa:21:cc:c9:5a:70:3a:
7b:fa:54:33:ea:b5:35:f0:8c:48:7c:65:b1:50:fb:90:10:d6:
04:b9:cf:c9:0b:0b:02:90:b6:7f:11:c4:2f:6b:3f:4d:c9:4b:
db:aa:92:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:06:12 2026 by rpki-client