Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/6H30vP-omZ3fXnYoSZ8Js7FCYcU.roa
File: 6H30vP-omZ3fXnYoSZ8Js7FCYcU.roa (raw, json)
Hash identifier: U7YWHf0fdvfrVufMy3qwWFihjJAwE1e+lVBT2+hUqLI=
Subject key identifier: E8:7D:F4:BC:FF:A8:99:9D:DF:5E:76:28:49:9F:09:B3:B1:42:61:C5
Certificate issuer: /CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Certificate serial: 01A0C955A0494F244DF73DAFD829DB07DAE8
Authority key identifier: 2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/6H30vP-omZ3fXnYoSZ8Js7FCYcU.roa
Signing time: Tue 22 Sep 2026 13:37:07 +0000
ROA not before: Tue 22 Sep 2026 13:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209658
IP address blocks: 2a11:1fc7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:55:a0:49:4f:24:4d:f7:3d:af:d8:29:db:07:da:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1c16f7ea710af45e2b3a11e628a38ce67bc7a5
Validity
Not Before: Sep 22 13:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e87df4bcffa8999ddf5e7628499f09b3b14261c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3d:4a:9c:b5:84:9f:32:4d:ad:09:24:57:2b:
97:a2:a0:48:c3:7c:f3:22:c6:43:fa:35:85:3c:2a:
f8:af:10:0d:98:75:0e:f5:c0:a3:5e:cd:27:8c:0d:
a3:60:e8:47:7e:cb:dc:ad:43:3b:69:1c:11:a9:36:
de:9e:7e:b1:a5:fc:28:f9:92:c4:65:ef:c1:df:b4:
b9:a0:ee:9b:34:d6:18:d3:8d:f8:40:bf:fe:7e:02:
34:62:67:69:7c:96:e3:84:c0:af:f8:c7:9f:ee:54:
67:cd:7b:d4:28:98:a4:b1:7c:68:4f:97:e0:a4:75:
e5:ce:ca:17:a0:c7:a7:f2:8a:c4:51:d3:c7:10:e2:
e6:f1:cb:31:d0:58:81:c0:98:92:7d:85:5b:c8:9f:
31:59:44:2d:7b:91:6c:06:9c:0c:ad:d8:9c:f2:17:
89:bc:2f:47:15:1b:b5:ff:20:92:3f:0e:00:38:d8:
c5:57:d6:88:b3:96:88:86:a0:6a:cc:81:63:19:5e:
d7:04:d2:87:76:4a:2b:54:fa:50:f8:83:68:d2:38:
a7:8a:0e:91:f3:78:9a:0b:2f:da:fc:1b:b2:d7:df:
bf:65:62:49:14:f7:b9:57:18:07:3d:94:09:af:40:
7b:ad:38:e6:c0:00:f5:be:f8:e3:7e:46:10:51:45:
83:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7D:F4:BC:FF:A8:99:9D:DF:5E:76:28:49:9F:09:B3:B1:42:61:C5
X509v3 Authority Key Identifier:
keyid:2D:1C:16:F7:EA:71:0A:F4:5E:2B:3A:11:E6:28:A3:8C:E6:7B:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRwW9-pxCvReKzoR5iijjOZ7x6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/6H30vP-omZ3fXnYoSZ8Js7FCYcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5eb212-46f5-438c-8672-1fa78018a6e9/1/LRwW9-pxCvReKzoR5iijjOZ7x6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1fc7::/32
Signature Algorithm: sha256WithRSAEncryption
a6:5c:94:bd:32:36:00:09:fd:23:d8:ae:02:e5:c0:25:81:cf:
2e:05:19:24:0e:ff:87:21:f7:2c:a6:00:f0:73:dd:5e:0a:48:
6c:74:24:b5:9e:4b:c2:63:cb:72:67:65:36:0b:8c:88:57:a6:
05:f2:54:4b:62:ce:4d:1a:1d:97:f4:85:b4:75:19:ba:a0:03:
5f:a6:3f:cb:7d:e5:4c:a7:d8:de:10:e3:e3:aa:a8:69:e4:a3:
6b:16:46:a9:07:bb:26:83:6c:5e:3b:51:9c:5a:9a:f4:eb:97:
6f:e3:d7:c5:3b:3e:ac:9e:0a:9c:83:8d:7e:3e:46:c7:ef:31:
db:f9:0f:58:ab:7d:a3:12:1a:58:f2:ac:fe:6b:81:8a:01:1e:
1c:9f:e7:6f:7d:28:f4:4c:ed:e5:1d:82:2d:20:ab:17:33:73:
11:6d:22:3a:55:f8:0f:48:5e:3c:bf:3b:fb:66:00:29:7a:b7:
1f:f6:21:c4:86:b7:43:cf:a6:5e:02:c6:ae:9d:53:05:e5:91:
80:c8:ad:bd:54:9c:f4:3e:bb:81:64:a1:41:a0:48:3e:46:c7:
51:df:db:27:ef:e0:be:f2:64:31:f7:c8:6e:af:f4:f8:cf:76:
a2:f6:d6:64:7c:5f:fd:cc:09:01:cf:dd:8f:10:5f:5e:39:d8:
48:dd:fa:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:59:42 2026 by rpki-client