Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/6dkup_QLaikEJ7jxf7-Ni8ixfqA.roa
File: 6dkup_QLaikEJ7jxf7-Ni8ixfqA.roa (raw, json)
Hash identifier: fy9lum97VV7QxmGD9csp+OguuiglHoR0KmYxJVKPYuc=
Subject key identifier: E9:D9:2E:A7:F4:0B:6A:29:04:27:B8:F1:7F:BF:8D:8B:C8:B1:7E:A0
Certificate issuer: /CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Certificate serial: 019D3E850419D99C3AC53B1DBDB9959D4D13
Authority key identifier: A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/6dkup_QLaikEJ7jxf7-Ni8ixfqA.roa
Signing time: Mon 30 Mar 2026 11:33:17 +0000
ROA not before: Mon 30 Mar 2026 11:33:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15751
IP address blocks: 109.125.0.0/18 maxlen: 18
185.51.72.0/23 maxlen: 23
212.129.64.0/24 maxlen: 24
212.129.66.0/23 maxlen: 23
212.129.68.0/22 maxlen: 22
212.129.72.0/21 maxlen: 21
212.129.80.0/20 maxlen: 20
2a01:b340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3e:85:04:19:d9:9c:3a:c5:3b:1d:bd:b9:95:9d:4d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Validity
Not Before: Mar 30 11:33:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9d92ea7f40b6a290427b8f17fbf8d8bc8b17ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f5:9b:92:27:4e:d8:a8:1d:f7:ad:a6:99:5b:
f7:fe:e3:50:93:3c:d0:b7:5c:d5:0c:3b:7e:f8:c1:
be:d8:0e:ad:50:50:54:f1:b1:dd:fa:07:e6:d3:24:
27:14:d4:51:13:35:54:cf:11:b6:5a:65:04:15:e0:
ef:dc:c1:9d:1b:d0:73:e2:53:1a:65:64:5a:09:f7:
8f:2f:53:f5:86:62:37:00:88:00:cf:bc:01:07:c6:
da:2b:7c:fd:98:af:23:7f:52:e0:b6:15:20:1a:10:
b0:ed:5b:5e:57:4c:81:a6:5d:78:47:a0:a4:32:71:
89:c7:ad:2a:46:58:09:47:a0:26:07:df:ba:09:eb:
64:6b:f8:31:df:0d:13:c4:d4:13:df:49:44:69:45:
8b:04:ae:c5:56:5b:3b:15:70:c0:1f:a0:73:b8:76:
69:27:51:d9:16:ba:2e:00:dc:29:01:47:d5:d3:5a:
22:61:7b:f8:6e:9a:70:2e:ee:df:8d:bd:05:b7:f8:
00:b5:43:90:2c:dc:98:ad:2f:d2:96:82:54:87:6a:
a4:31:25:b4:fe:7a:90:02:5c:33:a8:8c:c6:d3:d8:
a2:bc:46:92:ba:92:ae:42:ff:f4:4b:37:2b:1e:81:
57:13:ed:e2:c5:e2:fb:04:15:42:ff:45:cc:df:2f:
9d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D9:2E:A7:F4:0B:6A:29:04:27:B8:F1:7F:BF:8D:8B:C8:B1:7E:A0
X509v3 Authority Key Identifier:
keyid:A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/6dkup_QLaikEJ7jxf7-Ni8ixfqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.125.0.0/18
185.51.72.0/23
212.129.64.0/24
212.129.66.0-212.129.95.255
IPv6:
2a01:b340::/29
Signature Algorithm: sha256WithRSAEncryption
63:1e:e4:c8:0c:61:90:03:f0:d8:1d:0d:75:41:b8:f3:90:1f:
39:6c:9a:d1:3f:e9:fd:2f:b5:e9:2a:09:2d:22:9f:79:81:9e:
41:a8:27:6a:70:19:39:45:23:19:e3:19:d3:76:b9:6d:b2:19:
ae:b2:3e:bd:05:d7:b1:fd:6a:2c:0d:73:50:58:c8:de:14:9c:
56:84:1d:76:a0:3c:65:21:16:df:ef:cc:79:b2:ba:1a:cf:15:
6f:42:2a:f5:e2:e6:4a:40:0c:db:80:9d:81:5a:2b:cb:32:19:
cb:f5:78:01:83:26:c6:47:f8:13:92:5d:07:89:0a:f4:8c:24:
7e:7b:8c:16:32:98:bd:4b:85:80:52:a3:40:7a:6c:19:f4:fe:
27:b8:a4:3a:62:b8:7a:2e:e1:5c:01:85:ba:16:a4:10:fa:4b:
03:db:4a:ee:b8:2e:ba:24:7d:be:aa:91:1e:fa:bd:4b:ba:40:
c9:0c:ba:f4:ad:ac:e6:4e:f6:ed:da:d7:72:37:e5:e2:06:fb:
80:57:0d:7f:28:45:67:cb:3a:d9:c9:ce:53:2f:c5:2a:14:74:
76:e8:59:62:60:c5:24:e4:45:c6:6f:f6:f7:92:92:93:83:30:
4d:11:c6:07:4a:2c:48:9e:27:31:da:20:df:a9:cc:b9:f0:9e:
98:d8:13:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:50 2026 by rpki-client