Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/6X3gL5kp6R0KHSr8mAwt_w4RrBk.roa
File: 6X3gL5kp6R0KHSr8mAwt_w4RrBk.roa (raw, json)
Hash identifier: 2S27aehbfJcrJNKLthId4Hl3jXo5Nbp62N40ke4PF/Q=
Subject key identifier: E9:7D:E0:2F:99:29:E9:1D:0A:1D:2A:FC:98:0C:2D:FF:0E:11:AC:19
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 01A0B1B1FD706130CE839465401B95E0FB37
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/6X3gL5kp6R0KHSr8mAwt_w4RrBk.roa
Signing time: Thu 17 Sep 2026 23:27:07 +0000
ROA not before: Thu 17 Sep 2026 23:27:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210483
IP address blocks: 109.107.130.0/24 maxlen: 24
2a11:cd40::/48 maxlen: 48
2a11:cd40:1000::/48 maxlen: 48
2a11:cd40:2000::/48 maxlen: 48
2a11:cd40:3000::/48 maxlen: 48
2a11:cd40:f00d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b1:b1:fd:70:61:30:ce:83:94:65:40:1b:95:e0:fb:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: Sep 17 23:27:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e97de02f9929e91d0a1d2afc980c2dff0e11ac19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c5:6c:0d:0e:d8:c8:d0:e7:d4:6d:2f:5a:2a:
c3:44:67:23:ad:6c:90:ab:db:35:58:5c:3e:54:17:
1e:09:f1:b4:12:1d:0f:5f:58:34:69:81:a2:7b:65:
87:56:8b:6d:b7:c1:c6:a7:22:6d:38:02:88:36:dc:
55:f6:6b:47:bb:7a:fb:14:27:91:e1:8d:1f:75:37:
ce:cc:7e:e3:b7:a7:da:6a:70:b3:80:27:0c:cc:52:
43:19:17:ee:49:e1:25:d7:62:c0:e5:2c:4d:a6:af:
28:02:e2:04:bf:4b:0c:2b:5d:a9:51:f8:a2:60:1f:
f7:a9:6c:ef:eb:be:00:f2:32:57:90:8c:24:a0:93:
53:a7:85:54:50:14:63:5a:c8:8a:68:ce:da:ca:46:
27:aa:61:aa:b0:cb:4c:2b:cc:4a:8a:0b:cb:85:6f:
49:3c:97:dd:49:05:75:80:1d:72:ef:1d:0f:41:70:
fb:06:95:02:7a:46:23:3e:e8:de:60:4e:c8:7f:23:
e7:25:b8:9a:27:b2:0d:79:58:ae:98:b4:3a:e5:40:
7d:83:85:f3:fb:5d:0c:d9:86:75:7c:51:ad:07:68:
28:d1:d3:a7:bd:59:aa:7e:76:9f:9c:8a:bd:4a:ef:
17:d6:83:9b:17:3b:fa:f3:07:cb:7b:a7:f5:bb:cd:
ef:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7D:E0:2F:99:29:E9:1D:0A:1D:2A:FC:98:0C:2D:FF:0E:11:AC:19
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/6X3gL5kp6R0KHSr8mAwt_w4RrBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.130.0/24
IPv6:
2a11:cd40::/48
2a11:cd40:1000::/48
2a11:cd40:2000::/48
2a11:cd40:3000::/48
2a11:cd40:f00d::/48
Signature Algorithm: sha256WithRSAEncryption
2f:c2:c8:1d:b7:e2:38:44:aa:81:c3:32:8b:08:45:77:a4:ef:
56:e1:d2:cc:6d:a8:67:5e:94:73:e4:3c:5f:9b:65:25:c1:c4:
bc:9a:27:93:c0:20:e2:84:38:4b:a1:52:1c:62:46:bc:cb:05:
8d:ec:fa:9d:e3:eb:4d:ce:f9:c8:26:2d:6f:81:4c:fa:61:3e:
3b:c4:56:4e:b4:ad:06:52:76:9b:75:5a:15:a8:bd:e4:7d:b1:
cf:3b:d6:f8:bb:07:89:f7:6d:e0:84:10:58:b4:ed:a5:ef:67:
5b:02:b7:1f:d7:4a:71:ec:eb:ba:a7:5d:78:5c:92:31:31:43:
82:f5:95:a4:e7:09:91:55:5d:c8:9f:58:50:0b:11:4f:c7:3e:
77:a3:66:4f:5d:32:12:ef:c4:53:86:28:c7:e0:a4:1a:00:c5:
5a:f9:69:81:f4:87:75:b8:15:61:6d:99:62:67:9e:f0:a1:55:
e9:e7:a2:48:69:24:e0:87:63:cb:53:ce:69:97:c5:39:74:d7:
19:06:37:f6:b9:af:a7:05:d5:b5:33:d0:d3:da:4b:ba:b4:40:
1b:80:56:ef:16:da:d3:d2:94:3e:7c:b0:59:5b:c3:9c:8c:84:
6f:98:f0:ac:e5:c7:62:e2:bf:7d:9d:74:5a:04:c8:df:86:c3:
94:22:f5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:35:54 2026 by rpki-client