Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/6e3BXy4IZY9SEVNuA1QwmzMPm3A.roa
File: 6e3BXy4IZY9SEVNuA1QwmzMPm3A.roa (raw, json)
Hash identifier: 2EgctP9ze1++765N8xK9OYE4vjFDmQMhEza5e9CNkRU=
Subject key identifier: E9:ED:C1:5F:2E:08:65:8F:52:11:53:6E:03:54:30:9B:33:0F:9B:70
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 019C462B0FE275FA9A12F9B8C09D0E17FC22
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/6e3BXy4IZY9SEVNuA1QwmzMPm3A.roa
Signing time: Tue 10 Feb 2026 06:09:12 +0000
ROA not before: Tue 10 Feb 2026 06:09:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205473
IP address blocks: 188.72.0.0/24 maxlen: 24
188.72.20.0/24 maxlen: 24
188.72.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:46:2b:0f:e2:75:fa:9a:12:f9:b8:c0:9d:0e:17:fc:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Feb 10 06:09:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9edc15f2e08658f5211536e0354309b330f9b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c6:e4:d0:dd:8d:01:e7:95:0d:e7:b3:0f:74:
70:9c:3d:1e:f7:99:7f:43:4d:81:c4:07:23:20:da:
75:83:4f:58:7b:fc:2d:67:a5:f5:60:0c:0b:17:48:
de:d2:ba:0c:ca:71:86:43:3a:fa:56:61:fc:d0:80:
6e:11:0e:97:eb:82:b4:cd:35:e3:a2:71:54:4a:04:
3a:95:3a:02:c6:cd:f3:52:34:a5:5b:c0:fb:d2:04:
4e:e4:44:c6:bd:80:5b:43:c4:32:3a:a8:36:35:6e:
77:25:57:75:e5:77:fc:1d:99:f0:de:8f:32:09:2d:
f9:6f:b5:15:4f:58:c9:5e:05:6d:e4:b3:eb:50:94:
8a:d4:f8:e9:37:82:83:14:5b:38:3d:cb:9b:92:a5:
07:74:62:b0:93:40:f7:1f:7a:3e:2d:c8:3d:b2:eb:
8a:b4:85:f8:75:74:80:af:ce:2c:b2:70:33:45:61:
16:d1:81:78:5f:4e:52:ba:ac:61:16:01:99:e4:71:
14:a5:87:26:79:61:28:00:ea:ce:ec:da:a6:84:ed:
af:9f:b1:43:99:c2:20:84:92:94:90:4b:08:a1:e6:
d0:8f:82:43:c8:af:af:88:6d:da:ee:68:52:a1:b2:
4e:a0:ce:4e:4e:ed:6c:6b:92:5c:67:1c:11:e7:cb:
20:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:ED:C1:5F:2E:08:65:8F:52:11:53:6E:03:54:30:9B:33:0F:9B:70
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/6e3BXy4IZY9SEVNuA1QwmzMPm3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.0.0/24
188.72.20.0/24
188.72.51.0/24
Signature Algorithm: sha256WithRSAEncryption
17:0f:74:30:a6:2e:30:1b:f1:26:c5:9f:18:32:3e:bf:63:a7:
7b:0e:04:f4:dc:b9:65:29:81:f2:8b:d4:35:9e:ce:14:dd:75:
7b:df:2e:9a:76:6a:a4:03:51:4b:c6:60:93:61:b0:f3:0a:05:
76:3a:18:4e:90:c3:fb:43:83:aa:9d:1a:a5:7e:ff:84:57:40:
4c:b7:6c:37:d8:48:04:76:a8:06:02:a4:85:07:84:82:4c:9b:
db:e1:0d:40:21:83:65:a7:13:25:c2:81:fb:ac:c3:e9:1d:d4:
a2:70:6a:6d:ff:db:af:a4:7c:82:a2:68:1e:62:8c:10:44:65:
84:a8:32:7f:54:76:f7:7b:70:f0:c6:30:cd:f3:69:d5:f0:c2:
65:c1:9d:58:9b:9f:0f:e1:53:b4:19:39:d3:3e:b9:f3:ba:ff:
6c:b5:f0:35:60:5f:7a:8f:ec:49:91:25:8c:8a:60:fa:f9:d4:
6a:9d:67:32:ee:ab:f9:8d:8c:bb:19:cb:a0:92:71:9d:ba:6b:
51:ed:75:07:28:1b:2e:1d:11:6d:bf:30:52:37:76:de:5a:e1:
e7:4e:62:9e:0f:48:67:72:fe:22:5e:f9:07:ea:e3:bc:d4:36:
a5:b9:59:95:de:24:6d:a0:16:6e:7d:2c:5b:bd:3e:70:9e:d9:
81:94:ad:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:14:37 2026 by rpki-client