Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/6GPblw6DV3CHVZNWZ0QdaVy6klk.roa
File: 6GPblw6DV3CHVZNWZ0QdaVy6klk.roa (raw, json)
Hash identifier: DqtHDBDEhiMvYHUrl8XYbcaTNh8BiLqth+UKaws4rT8=
Subject key identifier: E8:63:DB:97:0E:83:57:70:87:55:93:56:67:44:1D:69:5C:BA:92:59
Certificate issuer: /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Certificate serial: 019D911FE7934E008C67E4686191093C1018
Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/6GPblw6DV3CHVZNWZ0QdaVy6klk.roa
Signing time: Wed 15 Apr 2026 12:31:20 +0000
ROA not before: Wed 15 Apr 2026 12:31:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59676
IP address blocks: 91.212.90.0/24 maxlen: 24
95.215.175.0/24 maxlen: 24
2001:67c:2278::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:91:1f:e7:93:4e:00:8c:67:e4:68:61:91:09:3c:10:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Validity
Not Before: Apr 15 12:31:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e863db970e8357708755935667441d695cba9259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f7:29:29:c4:94:76:6e:c6:f0:a4:51:83:cb:
b5:ed:6a:e9:cb:c7:b8:b5:c9:67:2a:aa:cb:3e:c5:
e5:dc:88:f1:4b:32:7a:66:a9:61:61:63:13:d1:f6:
07:65:c6:9c:98:db:08:80:8a:0a:d9:8d:d7:4c:2a:
a5:17:73:9f:1d:87:5d:60:e0:5b:30:36:30:c5:13:
f0:f7:01:c8:30:d9:9e:53:6d:5d:bc:f0:e0:3b:ce:
09:75:de:2e:4c:2f:c8:a1:2a:33:51:67:da:eb:8a:
b7:2c:07:c5:e4:8b:0b:91:f9:44:7d:5c:cf:a2:f5:
e9:37:47:ac:50:5a:db:d4:03:43:43:17:70:50:52:
63:4d:4e:b6:81:bb:34:df:06:62:49:47:a7:45:ee:
b8:02:35:a9:46:06:d6:39:47:ab:8a:bb:24:75:e0:
3f:a6:a0:e9:4d:c6:54:cc:cb:35:cc:4c:eb:4e:52:
ad:60:67:a1:1a:d5:d2:ec:89:aa:aa:30:fe:75:14:
ed:5f:6c:79:de:10:0f:4b:c5:7b:23:7c:e8:e0:1e:
26:f2:d3:bd:20:cb:db:de:99:73:9a:61:c0:ca:06:
3a:df:a5:9c:1a:d7:ef:ae:89:d6:bf:4b:bb:62:7e:
e7:e5:5f:6b:90:d1:f0:fa:14:e4:6c:59:ef:ed:d3:
d1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:63:DB:97:0E:83:57:70:87:55:93:56:67:44:1D:69:5C:BA:92:59
X509v3 Authority Key Identifier:
keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/6GPblw6DV3CHVZNWZ0QdaVy6klk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.90.0/24
95.215.175.0/24
IPv6:
2001:67c:2278::/48
Signature Algorithm: sha256WithRSAEncryption
63:44:7c:68:bc:a4:fd:5c:48:e0:b2:54:9e:99:55:89:2e:c1:
b5:5c:b0:a2:40:c6:e1:1c:f8:9c:91:dd:b6:75:b6:cf:38:e6:
6d:9d:eb:b1:ab:03:20:6a:cc:93:ca:85:ef:9e:f1:15:bf:e3:
4f:83:c3:4b:38:a4:fa:82:39:58:20:98:0b:73:b7:f3:3a:c5:
51:70:54:2c:53:94:b5:95:e7:7c:a5:b5:39:00:3a:59:1a:d6:
18:57:9b:1b:0f:41:88:9e:86:66:6d:b2:20:30:36:2d:b8:34:
69:3f:24:41:97:d2:63:96:65:1f:6f:d6:28:5c:d8:78:10:bb:
7c:b0:7a:7e:73:2c:bb:78:36:3f:f5:fa:03:ca:d4:aa:be:d3:
a1:21:ff:05:85:fc:33:02:2a:45:d2:f8:f6:97:6a:96:9b:32:
61:1f:bb:4c:6b:62:6f:26:0d:ac:97:dd:03:1b:6a:ab:17:01:
5d:b3:28:1d:92:18:0e:7a:3a:8e:55:1a:a6:c2:91:1c:94:1f:
ab:82:c2:a7:39:af:9c:e4:eb:80:44:a1:83:ed:27:d6:ba:a7:
a1:e7:1c:3b:7f:4d:10:6b:48:3b:5b:2b:e2:7e:eb:96:8b:67:
a2:0d:63:db:2b:b8:30:c2:3f:56:bd:26:e3:c9:09:67:5f:ea:
c9:35:20:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:55:14 2026 by rpki-client