Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/6x5ILUSvgOTagvvtbHogSJvWkOQ.roa
File: 6x5ILUSvgOTagvvtbHogSJvWkOQ.roa (raw, json)
Hash identifier: 3keZkVBi5zBSOFwHxOvIQC7c9jGWchJViw/DIikVTLE=
Subject key identifier: EB:1E:48:2D:44:AF:80:E4:DA:82:FB:ED:6C:7A:20:48:9B:D6:90:E4
Certificate issuer: /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial: 01A0B4E564D70B2D3DD8CFAF547F76383801
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/6x5ILUSvgOTagvvtbHogSJvWkOQ.roa
Signing time: Fri 18 Sep 2026 14:22:07 +0000
ROA not before: Fri 18 Sep 2026 14:22:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206575
IP address blocks: 185.98.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:e5:64:d7:0b:2d:3d:d8:cf:af:54:7f:76:38:38:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Validity
Not Before: Sep 18 14:22:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb1e482d44af80e4da82fbed6c7a20489bd690e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:0d:2e:46:6b:c1:e2:a0:5b:ac:79:62:12:
97:d9:7b:43:5d:4a:78:e3:65:6e:5b:bc:31:4c:6b:
72:88:68:bc:bf:c3:d9:69:2a:57:50:55:83:93:74:
54:11:8e:b8:34:90:b5:17:93:c7:7e:35:b4:f7:95:
d4:02:c7:c4:d3:f5:69:af:b5:18:50:45:db:d4:0c:
d1:e7:23:86:43:0f:fc:07:91:11:b0:77:f8:f9:09:
8c:a3:f6:0d:38:2e:87:b7:3d:34:e0:79:20:4e:db:
72:7d:4d:ef:ba:18:b1:15:db:8f:60:a0:26:61:63:
56:6f:1a:99:86:75:16:92:cb:cf:0b:b2:5a:1d:d0:
22:5d:2e:d2:45:2c:6b:c6:5c:be:5e:f7:7c:57:dd:
5c:0e:63:05:3e:36:00:02:17:42:d7:97:41:48:41:
d4:e0:ea:e5:d1:d4:8b:b8:06:3c:3c:7e:74:04:cd:
80:3b:48:3d:df:9a:3a:c3:0d:d2:aa:94:4b:88:4f:
4f:78:63:9a:c4:41:61:e3:d6:b8:d9:8f:2e:f1:a5:
eb:60:65:d1:07:79:06:c6:94:a1:74:c1:48:c0:e2:
99:81:47:46:40:5a:3f:2b:f4:7f:d4:b5:c5:ee:50:
50:d3:69:b6:fe:1b:e4:e1:64:34:cb:4c:47:ed:04:
4f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1E:48:2D:44:AF:80:E4:DA:82:FB:ED:6C:7A:20:48:9B:D6:90:E4
X509v3 Authority Key Identifier:
keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/6x5ILUSvgOTagvvtbHogSJvWkOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.12.0/23
Signature Algorithm: sha256WithRSAEncryption
23:5d:f2:50:41:88:74:2d:32:17:7e:bc:fd:78:ac:da:be:d8:
89:d6:e7:ed:84:3f:53:d2:3e:4a:c0:0b:8b:39:4c:cb:03:17:
91:c4:93:7a:c7:af:1e:fc:27:f0:75:6a:a8:a4:f1:72:81:34:
14:90:68:ba:c0:4e:38:c1:68:31:0c:32:1e:3a:0f:99:d0:08:
0f:cd:e4:ba:7d:71:74:8c:46:20:4b:07:30:03:4b:03:36:67:
2f:39:3a:10:0c:fe:2f:d3:5c:b9:5f:b5:25:98:69:6d:fa:40:
39:70:03:4e:f7:4f:a4:3a:e1:db:1f:e4:07:d4:42:83:55:68:
49:3d:92:71:d3:ae:4e:b8:c8:73:d5:07:93:e6:e5:1c:8f:9d:
cf:79:da:22:5e:a8:ad:ae:ba:1c:76:d3:80:4d:5c:00:7c:1d:
ad:e4:08:e0:35:f3:8c:d2:db:7b:9d:72:b6:62:65:9e:b9:a1:
2b:32:ca:40:eb:52:24:ad:60:10:2a:6b:2e:59:66:55:5f:c6:
ab:d3:e1:1d:89:11:75:8e:7e:c7:b0:ac:9a:f9:1b:01:06:cd:
61:d6:22:07:4b:69:6e:05:87:70:e5:65:ba:a1:d6:60:04:46:
88:d4:13:2f:9e:ed:11:9c:80:98:cf:1d:e9:24:10:7e:f6:91:
97:0a:38:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:02:23 2026 by rpki-client