Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/6TXIWhg_dj01-me-k1P4_47fCbM.roa
File: 6TXIWhg_dj01-me-k1P4_47fCbM.roa (raw, json)
Hash identifier: vHHDblVylOZOlwGNXFxDBlUBWPHibG51KRYOrdX4gD0=
Subject key identifier: E9:35:C8:5A:18:3F:76:3D:35:FA:67:BE:93:53:F8:FF:8E:DF:09:B3
Certificate issuer: /CN=95cae2c37c86630e61afdf8903fe174de8b945be
Certificate serial: 019B7B35647C1C6A773417FB1740C992288C
Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/6TXIWhg_dj01-me-k1P4_47fCbM.roa
Signing time: Thu 01 Jan 2026 20:17:35 +0000
ROA not before: Thu 01 Jan 2026 20:17:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43193
IP address blocks: 37.46.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:64:7c:1c:6a:77:34:17:fb:17:40:c9:92:28:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be
Validity
Not Before: Jan 1 20:17:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e935c85a183f763d35fa67be9353f8ff8edf09b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e3:48:ed:58:23:fa:ef:1a:9d:50:7c:e7:5a:
9f:07:c3:23:91:e8:18:24:d3:d7:34:4f:95:7d:80:
3f:35:e1:ec:1c:b6:df:d9:a4:b1:bc:ab:4b:9c:a7:
c2:b7:b9:8c:88:64:40:22:d9:e9:2a:bc:0a:70:2c:
d4:fa:90:57:e6:35:51:ed:49:cb:87:b4:85:74:1f:
d2:d3:4d:1f:7f:df:92:88:d0:de:68:44:de:5f:e0:
ca:e8:4f:1e:92:4d:ee:8a:70:e6:2a:3a:43:24:57:
01:8d:82:8a:d4:ae:12:25:e0:89:f2:ae:d3:0d:05:
19:38:c1:af:30:82:c0:fd:20:f4:a6:a8:3f:de:57:
87:56:b1:20:07:3f:e1:83:c4:de:2d:f6:41:be:93:
59:f1:9d:8c:b5:7f:ab:12:54:10:f3:b9:ff:ba:1c:
00:4a:cf:1f:d6:13:0f:51:46:07:45:db:52:7f:73:
9c:34:f0:07:9f:d8:1f:a4:c1:a2:37:97:80:47:b7:
8a:42:f4:34:b1:bb:26:71:36:9e:9f:84:6c:5a:a4:
62:c9:2f:ff:25:d0:7c:33:93:c0:b2:37:20:5d:e7:
9e:18:b0:3c:fc:f0:4f:c2:7b:cd:f6:c7:1b:9d:d4:
3c:e0:0e:ed:c0:7c:54:9c:2d:a5:4e:8c:e4:f2:e6:
46:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:35:C8:5A:18:3F:76:3D:35:FA:67:BE:93:53:F8:FF:8E:DF:09:B3
X509v3 Authority Key Identifier:
keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/6TXIWhg_dj01-me-k1P4_47fCbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.8.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:c6:f5:a1:9e:b2:b3:ff:a9:08:8e:cc:d1:59:8a:ce:a6:b5:
a0:11:f8:48:19:50:1d:7e:e9:d2:f9:45:a8:b2:09:3c:06:bc:
11:c9:9d:39:f7:ae:a4:eb:da:86:87:ed:39:00:44:db:9e:5e:
3b:70:b1:36:70:6b:06:ae:87:bd:21:dd:fe:e3:35:8a:be:f5:
1d:e0:99:3a:e0:6f:64:e6:f5:88:bf:81:18:5c:c0:32:05:19:
05:7e:e8:67:dd:dc:49:fa:a1:d5:53:14:52:91:c2:3a:c9:17:
28:99:6f:e3:60:44:86:0a:ae:cd:49:59:17:1d:5e:52:6d:96:
a4:75:e0:f5:31:5c:ef:e2:37:b1:8c:51:7d:6a:ca:e6:5a:d3:
38:f7:5c:d6:d9:0f:06:44:4b:db:40:0f:e5:f9:9b:b2:23:fc:
69:f5:23:2b:3f:92:87:13:44:ec:c7:3c:d8:b6:3f:34:12:24:
1e:35:39:6a:0e:d1:8d:48:dd:e9:e6:a8:b6:90:cc:bb:f1:b8:
36:dd:ef:1c:f0:2c:53:a5:b2:bf:77:72:11:52:80:ad:86:fc:
5b:ef:1b:bf:d6:42:59:68:1d:80:66:08:39:e6:c6:da:90:b8:
30:6f:a7:24:7b:2f:d2:68:03:a7:eb:35:02:23:10:6d:ed:7d:
80:c7:91:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:00:39 2026 by rpki-client