Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/6TspkPEtNeMIOxgYCbpvq18PMC0.roa
File: 6TspkPEtNeMIOxgYCbpvq18PMC0.roa (raw, json)
Hash identifier: 8bo4csWweD7RMiWr3h9S7/8r7y82pLqLqFjVLFXUIaQ=
Subject key identifier: E9:3B:29:90:F1:2D:35:E3:08:3B:18:18:09:BA:6F:AB:5F:0F:30:2D
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019D9530DAF46FCEFCD6BFE5C9CC0F03AFE5
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/6TspkPEtNeMIOxgYCbpvq18PMC0.roa
Signing time: Thu 16 Apr 2026 07:28:20 +0000
ROA not before: Thu 16 Apr 2026 07:28:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 77.246.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:95:30:da:f4:6f:ce:fc:d6:bf:e5:c9:cc:0f:03:af:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Apr 16 07:28:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e93b2990f12d35e3083b181809ba6fab5f0f302d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:a6:38:06:cf:90:97:14:1f:96:9d:53:f9:
e1:d0:10:05:ff:b8:64:75:57:31:98:7a:7f:8d:46:
2f:2b:f5:f9:52:c7:1e:4c:21:52:f7:43:72:2a:40:
36:35:61:0d:ac:8f:78:2d:53:23:f7:7d:e9:49:e7:
6b:5d:41:82:21:85:d1:77:a5:c7:a3:ef:8d:7e:35:
85:a9:75:86:02:fd:64:b1:d8:03:0f:7b:5d:5d:9d:
46:d2:2c:51:17:69:a1:c3:a4:2d:ce:00:6e:89:95:
4d:95:d5:dc:4b:49:f9:aa:1c:df:99:c8:ab:b8:d6:
c7:3b:ed:a1:dd:c6:2c:5a:ec:4c:30:ac:fb:14:a9:
26:26:f2:bc:13:32:4d:17:a5:58:6d:cb:b2:23:97:
50:8a:b9:63:f8:fa:57:31:0c:2b:b3:ab:70:ed:d5:
c5:ff:ae:24:32:8c:8a:75:c9:c6:a1:da:37:14:fa:
29:7b:c8:fd:75:ed:fa:97:f5:1e:7e:2c:58:61:d9:
4a:ca:49:19:24:c3:cf:46:c0:90:79:bc:65:1e:5c:
ba:19:98:93:77:1d:c1:fb:fb:9d:09:81:2e:e1:30:
62:a9:d0:38:98:ec:d0:02:c3:20:6e:e4:43:79:20:
f9:5d:44:d4:70:ce:ec:0b:05:91:e9:c4:31:2a:78:
df:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3B:29:90:F1:2D:35:E3:08:3B:18:18:09:BA:6F:AB:5F:0F:30:2D
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/6TspkPEtNeMIOxgYCbpvq18PMC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.221.0/24
Signature Algorithm: sha256WithRSAEncryption
99:f9:f6:18:fe:ac:49:e8:cc:df:47:c9:1e:88:ba:51:b5:8e:
11:93:e4:72:1d:1a:de:8a:e6:d1:e6:84:20:58:22:3a:69:a8:
fb:94:1f:7c:19:94:98:a1:68:fa:ea:73:ef:fe:7e:8a:6c:73:
d2:d7:41:c1:0d:e7:19:32:c8:0b:32:0f:3f:e6:2d:1c:ce:0f:
ec:d5:35:60:11:6b:51:b5:75:ef:c1:22:7b:a1:1f:0c:de:ab:
cd:03:50:a0:a9:5c:c1:21:b0:c8:7b:5a:d5:16:54:9f:1a:84:
18:81:91:f0:3b:d1:99:8b:7e:8c:cc:e9:33:40:84:2d:8e:0a:
9d:91:9f:70:33:d1:ae:2b:69:47:e9:b1:7d:4c:7c:24:2e:51:
bf:be:d6:84:66:5d:a2:ce:eb:50:dc:20:f4:5a:c6:79:13:ba:
3a:b3:a6:c0:17:7f:3a:ad:02:95:bf:cf:2f:d2:cb:1c:30:13:
50:c6:06:4b:e9:13:d1:ac:00:a1:56:2d:28:f6:be:ca:99:56:
b8:d1:85:90:a9:19:10:e5:15:a8:db:9e:29:79:36:87:a9:1c:
d0:ad:7f:5c:b9:bc:56:f8:74:ad:62:3c:84:39:5e:33:37:5d:
6c:6d:78:fe:1b:5d:ed:d8:71:72:3e:22:b5:1f:76:43:10:e3:
d7:73:f5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:12 2026 by rpki-client