Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/k6iWItFW5V00Idllc9trWB2bfK8.roa
File: k6iWItFW5V00Idllc9trWB2bfK8.roa (raw, json)
Hash identifier: KjRPDhd+AbYqmBPh6DGEy68FCTTg6HQt6hTRRM4f1kw=
Subject key identifier: 93:A8:96:22:D1:56:E5:5D:34:21:D9:65:73:DB:6B:58:1D:9B:7C:AF
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019C96D06AE5B5D016BC07E5C9F0DFB8E28E
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/k6iWItFW5V00Idllc9trWB2bfK8.roa
Signing time: Wed 25 Feb 2026 21:59:27 +0000
ROA not before: Wed 25 Feb 2026 21:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 94.229.212.0/24 maxlen: 24
103.41.46.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:96:d0:6a:e5:b5:d0:16:bc:07:e5:c9:f0:df:b8:e2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 25 21:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93a89622d156e55d3421d96573db6b581d9b7caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:82:cf:cb:af:e8:36:28:3b:bf:c2:49:be:47:
14:45:67:67:c6:84:46:89:07:0b:d3:cb:f4:16:1f:
01:ef:1d:fc:20:fc:bb:1f:84:af:0e:6a:0a:69:39:
6a:b3:e6:47:1d:61:86:91:8a:bd:cf:1c:5c:a2:c0:
b7:63:aa:69:8a:3f:ff:c5:ed:94:85:f2:10:6c:14:
75:13:e0:c7:81:26:20:78:9b:74:da:4d:60:11:b4:
82:6b:21:41:e6:b4:ba:e1:13:c8:6a:cc:29:54:9d:
1f:47:3a:63:27:5e:26:97:9a:2b:1d:a5:2d:d0:22:
03:6a:29:5e:fb:0e:5a:63:13:8b:05:b8:e7:89:19:
16:84:e8:e9:5f:11:21:7e:9e:1a:bb:20:23:b9:c3:
7a:99:39:57:ea:98:5a:7a:a8:4e:4e:57:63:55:c3:
ce:2c:17:be:cc:81:7e:7d:ff:27:4a:14:38:41:ba:
ad:4e:6d:8a:42:cd:22:58:3c:d2:aa:f8:35:12:97:
94:b9:ed:fb:cf:86:a5:65:26:94:63:a3:67:76:f6:
4c:57:4e:a1:50:f9:30:eb:48:bc:85:00:77:01:74:
21:62:28:86:31:6f:45:75:4e:61:9d:54:c2:bd:2a:
80:09:7d:b4:07:c9:0e:6e:35:ef:a7:9e:e7:29:f4:
a4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A8:96:22:D1:56:E5:5D:34:21:D9:65:73:DB:6B:58:1D:9B:7C:AF
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/k6iWItFW5V00Idllc9trWB2bfK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.212.0/24
103.41.46.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:22:f4:07:9c:35:bf:f5:68:c6:38:7d:0f:f6:6b:19:1a:35:
84:5f:51:cc:33:87:20:5b:b1:e2:6d:b9:ce:db:53:fc:f3:e9:
20:2e:d4:d4:11:41:77:69:59:90:bd:e2:e6:18:eb:55:df:99:
41:35:47:b0:cc:4a:dc:c8:15:d3:52:5b:83:90:1e:4c:de:5a:
7d:6c:f5:28:4f:c5:94:0c:b1:83:b9:60:54:76:c5:b2:be:86:
3b:0d:ff:1b:05:a4:cd:cc:f5:a2:d8:e8:36:64:bc:41:b8:9b:
28:e3:61:23:d9:c6:ed:9a:a7:29:42:d6:8c:e9:01:38:ee:57:
7c:8d:52:d1:49:a3:53:77:97:09:9c:a0:65:db:45:c1:46:4f:
44:d0:90:c1:52:bf:b9:d8:9e:5b:00:12:75:04:bc:a3:25:f0:
8d:c3:b6:58:d0:cd:15:65:37:c7:86:82:28:0f:64:a3:c0:c4:
80:2d:d0:cf:6a:13:fb:a8:66:0a:22:ab:aa:f0:d1:49:fa:f8:
be:40:20:15:22:70:8b:63:bf:e2:0e:7d:e8:af:71:94:d8:4b:
fa:d7:e1:1f:1c:3a:39:5f:7e:4f:d8:1e:3b:2c:26:b0:a7:48:
09:4c:b8:2e:ad:1f:8e:e8:f9:97:8a:6d:3d:b1:9a:7f:30:7a:
ed:26:d8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:05:53 2026 by rpki-client