Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/6TXT9ablV4LVCmi_k3OpnYEj1Wg.roa
File: 6TXT9ablV4LVCmi_k3OpnYEj1Wg.roa (raw, json)
Hash identifier: RWPdZZfoKBXzOGAFBE4s3FzfbfbvMdOxeWvRnz9S04k=
Subject key identifier: E9:35:D3:F5:A6:E5:57:82:D5:0A:68:BF:93:73:A9:9D:81:23:D5:68
Certificate issuer: /CN=21aa28de21bc91f39dbf2d012fd552d22d0f5aaa
Certificate serial: 019B7BA5357BBB866ECAFD117F7BAB55EA37
Authority key identifier: 21:AA:28:DE:21:BC:91:F3:9D:BF:2D:01:2F:D5:52:D2:2D:0F:5A:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/6TXT9ablV4LVCmi_k3OpnYEj1Wg.roa
Signing time: Thu 01 Jan 2026 22:19:43 +0000
ROA not before: Thu 01 Jan 2026 22:19:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201641
IP address blocks: 185.102.100.0/22 maxlen: 24
194.15.212.0/24 maxlen: 24
2001:67c:6e8::/48 maxlen: 48
2a10:a600::/32 maxlen: 48
2a10:a600:c0da::/48 maxlen: 48
2a10:a600:c0db::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a5:35:7b:bb:86:6e:ca:fd:11:7f:7b:ab:55:ea:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21aa28de21bc91f39dbf2d012fd552d22d0f5aaa
Validity
Not Before: Jan 1 22:19:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e935d3f5a6e55782d50a68bf9373a99d8123d568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:93:78:dc:bc:12:f5:f9:3f:eb:c2:20:8c:c5:
c2:3e:03:00:5c:f7:de:1b:10:6f:25:53:9f:74:75:
01:49:e9:78:5f:4f:8f:e0:5f:b8:70:ad:4f:6f:66:
e2:49:59:63:78:02:28:82:90:ff:d0:e9:36:36:38:
c3:0d:af:dc:aa:74:cf:68:4b:af:13:85:b2:76:f8:
e7:77:fb:eb:fb:41:58:96:f3:f0:90:04:37:68:0d:
e0:3b:ea:75:4f:bf:0b:ec:c6:03:9c:0b:25:32:05:
81:38:5b:1b:1e:df:af:b4:bc:ec:39:35:ba:83:20:
65:94:00:47:23:4a:0e:4c:92:25:81:9e:6b:00:43:
94:85:0a:2f:37:83:55:0d:86:54:b2:a4:00:ee:99:
fa:09:0f:dc:00:02:8d:1a:1c:b5:df:7b:67:93:18:
2c:c3:1c:6d:44:0b:8e:d7:d7:71:8d:7e:7d:a9:63:
9f:c0:d8:f4:e0:85:95:3c:9b:3a:df:c6:86:bb:76:
86:d3:e3:a3:60:aa:72:d3:9f:4e:67:b7:da:fa:60:
f3:ca:e5:39:4b:d4:e6:99:61:eb:a1:f7:1e:05:7f:
ab:e8:0c:5d:65:c5:95:45:27:42:9a:a8:07:82:b5:
36:13:92:47:bb:33:62:e3:28:75:a6:ff:76:d9:47:
22:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:35:D3:F5:A6:E5:57:82:D5:0A:68:BF:93:73:A9:9D:81:23:D5:68
X509v3 Authority Key Identifier:
keyid:21:AA:28:DE:21:BC:91:F3:9D:BF:2D:01:2F:D5:52:D2:2D:0F:5A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/6TXT9ablV4LVCmi_k3OpnYEj1Wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.100.0/22
194.15.212.0/24
IPv6:
2001:67c:6e8::/48
2a10:a600::/32
Signature Algorithm: sha256WithRSAEncryption
2a:69:47:51:0b:8c:ce:e4:f8:d9:a2:ef:f7:fc:50:3f:38:63:
d4:1b:bc:c9:1b:62:51:2b:bf:66:52:dc:06:50:12:58:9f:55:
8d:c0:bd:05:07:03:16:fc:4a:59:ab:66:98:5e:5a:82:c2:aa:
c5:ee:81:9f:54:4d:a9:82:00:30:04:1a:f2:aa:d2:e6:e1:a9:
d3:cb:32:b8:00:a8:ca:7f:b3:88:8f:3d:33:e8:7d:57:dd:59:
0a:87:6e:27:13:71:3d:1c:42:8e:0e:b4:93:f5:d0:d4:5e:2d:
32:7f:19:e6:13:53:a5:b0:ea:6b:08:52:54:c0:96:9f:5d:34:
fa:6e:f3:2c:ac:53:e6:59:c0:b6:0c:89:f4:91:7e:e1:67:96:
19:0d:71:71:7f:42:2c:96:74:93:2f:1e:bf:9b:30:44:67:1f:
5f:fa:30:17:d4:48:99:c8:80:dd:2f:6b:35:f7:80:5d:2b:5a:
1d:a3:12:84:1c:47:c9:4a:93:91:20:e0:a0:ab:e1:37:9d:e1:
7e:3a:9e:5b:7d:0e:28:f6:d5:b6:ba:eb:6a:da:cd:41:d1:13:
1d:3d:6b:1f:da:1b:16:94:14:20:6f:dc:46:7e:e1:36:1a:d8:
ce:ad:b1:06:08:f1:cf:47:b4:20:e1:36:b1:52:37:62:0f:1f:
fe:ff:38:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:27:12 2026 by rpki-client