Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/6ecKe0A8FdH_pCFTNXNYem6VwN0.roa
File: 6ecKe0A8FdH_pCFTNXNYem6VwN0.roa (raw, json)
Hash identifier: KZ+1oly4tcR/bcNP0ACIfGBzE0lasROyGqTBaCkUeaU=
Subject key identifier: E9:E7:0A:7B:40:3C:15:D1:FF:A4:21:53:35:73:58:7A:6E:95:C0:DD
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 019D88E719CDE14B238C2BA18623E6874868
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/6ecKe0A8FdH_pCFTNXNYem6VwN0.roa
Signing time: Mon 13 Apr 2026 22:12:20 +0000
ROA not before: Mon 13 Apr 2026 22:12:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42675
IP address blocks: 45.15.16.0/24 maxlen: 24
2a0e:1c80:1::/48 maxlen: 48
2a0e:1c80:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:88:e7:19:cd:e1:4b:23:8c:2b:a1:86:23:e6:87:48:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Apr 13 22:12:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9e70a7b403c15d1ffa421533573587a6e95c0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2d:77:11:e9:f8:1e:5b:47:c9:06:0f:ce:c0:
e4:91:1e:26:59:93:f8:7b:39:1b:b6:e5:78:76:e2:
bd:cf:a7:06:a2:71:6e:31:2b:7e:a1:a8:99:b2:97:
c0:38:15:df:eb:24:87:09:a1:ed:90:17:ae:bb:7b:
4d:60:13:5c:f4:25:47:87:1a:d2:df:0b:1c:08:f1:
3d:7d:7c:1a:9a:0c:b3:8d:37:03:f5:54:34:f5:84:
8f:5f:08:bf:aa:10:d3:03:46:5c:2d:67:c0:04:f4:
0d:0b:3d:a5:db:35:07:08:ee:37:c5:d5:6f:99:61:
2a:a4:cd:b9:36:36:64:0a:dc:9e:33:45:e7:24:c8:
37:7f:5b:15:d8:8e:48:73:56:fd:b9:a6:17:4a:fb:
e4:53:39:75:da:18:20:d4:d6:9b:3f:a9:0c:91:c1:
66:6c:b0:6e:60:39:5b:0f:ac:3b:1e:65:14:ff:64:
44:18:3b:9a:cc:15:2e:0e:6c:86:08:04:05:d1:62:
6d:5f:71:86:79:78:4c:6f:c5:ad:12:14:12:96:8f:
4e:e8:9c:76:6b:ee:bb:14:fa:db:cd:83:8c:4b:89:
a3:1e:cb:b8:2e:03:0b:e7:e0:b7:21:1f:5f:bf:ca:
26:e8:eb:5a:07:c6:98:a9:16:84:43:72:8f:87:96:
29:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E7:0A:7B:40:3C:15:D1:FF:A4:21:53:35:73:58:7A:6E:95:C0:DD
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/6ecKe0A8FdH_pCFTNXNYem6VwN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.16.0/24
IPv6:
2a0e:1c80:1::/48
2a0e:1c80:3::/48
Signature Algorithm: sha256WithRSAEncryption
04:51:fd:f7:63:b7:5c:e6:0d:09:43:3f:70:5f:f7:1b:17:75:
4e:a3:86:5f:08:2f:a6:53:69:7f:92:ec:1d:09:d7:cc:f2:b0:
f6:8e:d4:e3:6e:00:c9:27:9d:0f:ec:e7:6a:7b:52:43:cb:10:
cd:fb:9a:39:e3:2c:6b:d6:01:bd:26:0f:05:01:51:c9:82:59:
8a:5b:87:f7:fc:98:9c:44:db:73:d0:a5:41:2e:85:08:a5:5b:
ca:a7:12:e0:b2:bf:09:7a:56:31:1e:bd:81:09:5f:b5:77:96:
f7:53:a5:8c:74:e6:95:26:06:57:41:02:c2:da:61:3c:a2:73:
9d:64:f4:37:bf:6a:97:49:e3:bc:ba:61:24:9d:3b:34:b0:47:
4f:50:e4:9b:1d:9c:0d:27:89:b9:8d:63:a8:88:dd:4d:f8:c0:
8a:8a:bb:36:94:d2:95:d7:37:e6:bf:81:da:a1:d4:91:65:ae:
04:a4:d5:45:27:18:ef:94:62:67:4f:a5:51:d6:ee:e1:86:db:
8a:e6:bc:2c:98:7f:6c:e5:27:ef:2d:95:21:74:1a:d9:c0:3b:
5c:b9:31:ae:f5:66:c7:79:57:fd:37:b1:3e:82:08:73:e6:be:
5b:78:e4:b1:a7:b2:31:dc:e0:af:23:2e:e4:ba:7a:bf:d4:22:
62:16:05:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:38:48 2026 by rpki-client