Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/6y5j61yQs9ML87yoag96S0_BhkE.roa
File: 6y5j61yQs9ML87yoag96S0_BhkE.roa (raw, json)
Hash identifier: YB0eU7XTjea05VRo6u6VvG8EuWCcMo4Xwog45PL4Uec=
Subject key identifier: EB:2E:63:EB:5C:90:B3:D3:0B:F3:BC:A8:6A:0F:7A:4B:4F:C1:86:41
Certificate issuer: /CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
Certificate serial: 019B7D5AB87393BFEC18BA0DFD9AA9C164AC
Authority key identifier: 9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/6y5j61yQs9ML87yoag96S0_BhkE.roa
Signing time: Fri 02 Jan 2026 06:17:35 +0000
ROA not before: Fri 02 Jan 2026 06:17:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205014
IP address blocks: 91.206.55.0/24 maxlen: 24
91.240.242.0/24 maxlen: 24
193.105.93.0/24 maxlen: 24
195.43.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5a:b8:73:93:bf:ec:18:ba:0d:fd:9a:a9:c1:64:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
Validity
Not Before: Jan 2 06:17:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb2e63eb5c90b3d30bf3bca86a0f7a4b4fc18641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:89:6d:74:75:a9:54:72:c4:47:ab:dd:dc:f0:
76:08:61:5c:cd:b8:f2:d0:50:2b:32:45:36:5c:c6:
c2:e0:aa:fe:54:fc:39:a5:15:3b:fe:20:df:cf:d3:
52:cb:4c:fa:89:71:e1:71:23:a8:95:44:c9:48:c9:
a7:22:f4:cb:fb:e3:a4:a9:dd:c3:8a:bf:c4:9e:b4:
81:6c:59:b1:55:d6:fd:ab:6d:af:ce:8f:7a:bf:2f:
e7:a5:b9:2e:2c:4c:8b:68:c7:95:8d:3e:79:5e:a1:
65:44:c2:af:f8:96:26:fe:cc:d9:cc:01:b5:0f:54:
f5:81:c4:a8:30:9a:11:e1:d9:1c:b0:32:e6:5c:4f:
b8:d9:52:c1:a7:3e:e8:a9:bd:13:bd:58:63:40:16:
ef:92:f5:c5:0a:49:40:a9:fa:72:8c:bc:8a:c4:16:
db:29:62:0a:82:cc:bd:83:26:9b:af:5b:c7:08:3c:
dc:25:19:49:7a:ad:f9:87:69:c7:46:4e:e0:2b:2d:
07:e1:75:00:f4:dc:8f:23:c4:69:2b:8f:b5:34:db:
25:d0:0a:b9:13:21:2f:17:bf:bb:a4:47:e2:e7:f7:
70:66:da:e8:b3:53:50:a7:0e:32:b8:02:f2:28:6f:
43:91:7a:d1:64:f0:ed:2e:c3:72:e4:e3:9b:70:07:
68:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2E:63:EB:5C:90:B3:D3:0B:F3:BC:A8:6A:0F:7A:4B:4F:C1:86:41
X509v3 Authority Key Identifier:
keyid:9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/6y5j61yQs9ML87yoag96S0_BhkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.55.0/24
91.240.242.0/24
193.105.93.0/24
195.43.77.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:b7:e8:bc:a7:27:d1:83:1f:54:cf:ae:b3:37:78:7b:c1:40:
13:f9:b4:46:98:c3:18:a9:40:4b:24:12:05:00:2e:72:cc:31:
c7:35:86:17:01:8b:1a:36:9c:b6:dc:ec:ea:6b:a4:f0:29:a4:
53:99:6e:c5:bd:04:71:7b:be:92:9c:19:fa:5a:ca:bd:79:d0:
fa:e7:4e:c0:94:a8:d8:4c:df:ea:ca:2d:18:e5:91:18:9f:6d:
f8:29:c2:11:1d:e6:bc:53:ae:c2:0b:b9:99:c3:55:c7:7d:be:
91:59:5b:60:92:65:23:7b:3b:b2:24:e3:79:0c:e4:ec:44:47:
c1:9f:ec:09:1a:ed:1e:ee:e7:ca:3e:dc:28:89:9d:30:50:1d:
06:0c:21:c9:09:9e:6c:2c:0f:58:5a:d3:f3:b5:4a:97:ae:a1:
a8:bd:c8:4f:f1:04:39:ed:c7:90:9f:1f:73:1f:ea:3a:4c:b1:
ba:43:71:70:72:7c:a6:5e:19:0f:16:8c:a5:7e:38:26:01:75:
ae:18:05:06:88:bc:f4:d1:a7:86:40:3d:3a:ef:4d:5c:dc:df:
58:f8:bd:a4:ae:b5:62:11:91:7d:c3:15:60:ba:55:c7:e8:11:
bd:0a:b8:8d:df:9c:09:7f:cf:06:a9:22:e7:85:f5:e3:9e:20:
0c:d8:3c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:44 2026 by rpki-client