Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/6xujGy_csnf2vaNZZqZLk3QI2Y0.roa
File: 6xujGy_csnf2vaNZZqZLk3QI2Y0.roa (raw, json)
Hash identifier: X3lIyx0pabMGJQ3NnvLZ8f6G7rEOt+MFJaqgfsEDnRU=
Subject key identifier: EB:1B:A3:1B:2F:DC:B2:77:F6:BD:A3:59:66:A6:4B:93:74:08:D9:8D
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019C7A2CAC37AC2A81A43A9F637D766484C4
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/6xujGy_csnf2vaNZZqZLk3QI2Y0.roa
Signing time: Fri 20 Feb 2026 08:31:13 +0000
ROA not before: Fri 20 Feb 2026 08:31:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 213.220.42.0/24 maxlen: 24
213.220.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7a:2c:ac:37:ac:2a:81:a4:3a:9f:63:7d:76:64:84:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Feb 20 08:31:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb1ba31b2fdcb277f6bda35966a64b937408d98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:50:de:45:be:ce:5d:bd:00:00:af:84:44:
0d:85:ee:51:f4:35:d7:e6:96:14:5f:96:81:17:55:
ca:b1:b2:b5:9b:5d:d4:ea:c4:c3:e7:e1:26:07:ba:
af:4d:ed:8a:71:65:53:e7:64:ee:f9:7a:32:db:ae:
44:06:79:cf:b7:c3:62:77:b4:01:16:35:b6:8c:fb:
26:b3:3e:4d:57:1d:2a:35:28:bb:25:51:82:65:5c:
47:d6:96:66:2f:15:8a:fb:15:fe:f0:52:b1:39:cd:
ae:d9:b2:e2:b0:99:42:8b:c4:b9:7c:47:65:c0:5e:
db:fc:34:ce:a2:7a:13:d1:13:59:de:06:26:b1:2f:
ca:2a:f5:ad:f7:bf:e7:6f:03:9a:32:09:50:1d:a2:
4d:65:7f:8e:f0:fc:52:34:c7:82:36:54:0e:29:69:
76:27:03:e2:0a:de:12:d1:fd:24:24:31:5e:e1:f7:
e7:0a:4a:57:94:f5:11:02:d5:e8:ef:41:3e:38:9e:
20:4f:8b:b5:0a:dc:4f:89:6f:73:a8:72:1d:10:8b:
66:3c:a2:c7:6e:d1:b4:72:15:b5:c4:ec:bc:53:67:
b5:b6:52:3c:b7:8a:77:54:9a:38:0f:3d:4f:62:01:
cf:60:4a:f3:1a:8a:db:1d:3e:6c:36:be:1a:51:86:
92:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1B:A3:1B:2F:DC:B2:77:F6:BD:A3:59:66:A6:4B:93:74:08:D9:8D
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/6xujGy_csnf2vaNZZqZLk3QI2Y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.220.42.0/24
213.220.50.0/24
Signature Algorithm: sha256WithRSAEncryption
91:1a:56:9c:b4:86:2c:00:87:4e:6b:b5:56:ee:64:d1:57:21:
d2:8e:be:6a:dc:77:6c:39:3c:f8:cc:78:15:df:c8:51:ae:d9:
10:08:99:61:da:7b:0f:f3:4c:a8:e0:1c:d3:d5:07:cb:38:57:
f5:07:12:d7:4c:30:69:04:8f:26:45:14:42:dc:de:8f:8f:f3:
78:b6:22:57:38:d1:6a:41:0a:bf:da:b6:29:e0:7c:90:4d:85:
84:ce:fb:fd:54:50:e8:33:40:7c:37:a8:6a:3e:e8:5e:b2:b6:
e4:b5:22:b0:81:fe:f8:37:9b:2a:18:3f:98:e9:62:0b:a5:79:
36:14:9c:78:15:c8:9e:59:f3:52:6d:22:13:de:62:d4:c4:4c:
93:49:28:11:e7:83:1d:07:39:bc:66:23:d9:af:47:be:33:2e:
7a:dc:a0:61:8e:83:fb:c3:c4:51:db:17:a3:96:86:3a:f5:3c:
51:2b:62:c7:15:d8:05:f3:ac:33:3c:1c:36:59:73:93:a9:3c:
5b:61:02:92:74:19:46:a5:04:09:5c:95:ce:f1:9a:2b:0b:c6:
05:89:a5:fb:81:93:16:43:5c:43:72:7c:4c:84:d6:34:ff:39:
f6:b9:d9:d4:6e:31:72:fc:32:68:c8:60:bc:9c:9d:13:2d:2f:
02:5d:66:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:44:56 2026 by rpki-client