Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/eky6-LpQgOOydbqURbVuuJt2ctI.roa
File: eky6-LpQgOOydbqURbVuuJt2ctI.roa (raw, json)
Hash identifier: 6VZfENHMhEaf4B4YFATqkxoG5kkgdt2vo9zrQ4oHQMw=
Subject key identifier: 7A:4C:BA:F8:BA:50:80:E3:B2:75:BA:94:45:B5:6E:B8:9B:76:72:D2
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019D9005ECB42D2F328B4BF858366664120A
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/eky6-LpQgOOydbqURbVuuJt2ctI.roa
Signing time: Wed 15 Apr 2026 07:23:20 +0000
ROA not before: Wed 15 Apr 2026 07:23:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205486
IP address blocks: 2a09:6282::/32 maxlen: 32
2a0e:b140::/29 maxlen: 29
2a11:b1c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:90:05:ec:b4:2d:2f:32:8b:4b:f8:58:36:66:64:12:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Apr 15 07:23:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a4cbaf8ba5080e3b275ba9445b56eb89b7672d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a1:33:b3:e8:dd:8e:88:9a:45:f6:a6:78:30:
f0:14:4c:e7:4c:94:9f:94:a6:2e:80:73:18:df:06:
cf:aa:45:d3:0c:87:18:56:6d:94:cb:3a:93:48:04:
23:91:b1:c6:e4:a6:01:27:26:fc:8c:a9:3f:90:e7:
1c:01:c8:8f:06:29:ff:57:15:16:da:47:6b:e8:e7:
8c:4e:15:60:47:3a:e3:da:0f:d5:9e:ea:a7:60:02:
d6:53:4e:18:e9:b3:b4:86:7a:b2:a3:16:f6:1f:e7:
04:a8:e5:86:d7:c3:b2:5f:59:b9:fe:6d:02:50:73:
d5:8f:9b:86:e3:b1:d9:d8:5b:67:3d:88:36:54:a8:
f3:da:d6:d9:6a:75:96:bc:4e:fd:5e:07:a2:d0:ea:
12:57:b8:59:8f:c9:91:b8:77:24:b4:f6:eb:cf:35:
2b:57:3c:59:f9:43:9e:cf:8c:8e:5d:0e:7f:3d:dc:
65:1f:6c:3b:b7:c0:7e:a6:1a:58:99:6d:d4:99:aa:
3a:fb:de:5a:3f:2c:5e:07:53:b2:cf:55:ac:da:7b:
fe:48:1b:20:4e:06:13:c3:3d:ea:6a:b1:fd:06:06:
d9:e1:0f:5c:9b:97:07:d4:57:4b:12:d0:de:03:31:
2a:95:b7:6d:66:6e:d3:fa:6a:83:3f:59:42:ef:eb:
17:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4C:BA:F8:BA:50:80:E3:B2:75:BA:94:45:B5:6E:B8:9B:76:72:D2
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/eky6-LpQgOOydbqURbVuuJt2ctI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6282::/32
2a0e:b140::/29
2a11:b1c0::/29
Signature Algorithm: sha256WithRSAEncryption
ce:fd:de:b9:62:b5:ea:fd:61:b2:48:6b:8f:bd:36:74:fc:34:
97:a9:2a:c6:16:f7:31:8b:a8:ff:23:b8:a8:eb:b2:07:6d:b6:
3f:fd:a4:41:76:07:d7:6e:c1:bd:04:ac:ad:c8:1d:47:1c:ce:
03:fd:3d:08:73:55:4e:b8:25:71:2d:f8:b7:19:1f:ec:c5:e3:
b8:27:53:4c:ef:40:a6:d4:c2:db:ad:61:1c:79:22:c8:82:bd:
e4:6d:d6:e9:95:96:71:31:9a:91:b5:59:66:c2:bb:58:5d:f8:
8c:04:da:1b:e4:66:f2:d8:8d:a2:9d:4a:cd:e1:47:32:d8:e5:
db:ef:12:14:a1:bc:6d:e1:1e:dd:a9:04:ed:54:4f:9e:54:32:
65:ca:c1:af:20:2d:d6:ff:2c:57:9e:95:78:6b:2a:f0:ef:2b:
7e:86:a9:8a:3a:3c:ab:e6:02:dc:f0:52:49:fb:85:97:7d:09:
4a:81:a1:09:59:ac:23:fe:d3:82:15:1a:b2:3e:71:1a:c6:06:
6f:0c:61:15:d8:2d:32:e5:8b:09:e6:09:53:0c:1f:e6:ff:d7:
86:2d:97:4a:8c:f9:0e:d9:93:ed:49:82:ac:78:0e:3e:92:e8:
17:6f:c4:8e:2d:9a:de:23:31:b9:03:74:2e:90:7e:5e:24:d7:
39:c0:77:94
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ2QBey0LS8yi0v4WDZmZBIKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjYwNDE1MDcyMzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTRjYmFmOGJhNTA4MGUzYjI3NWJhOTQ0NWI1NmViODliNzY3MmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6Ezs+jdjoiaRfameDDwFEznTJSf
lKYugHMY3wbPqkXTDIcYVm2UyzqTSAQjkbHG5KYBJyb8jKk/kOccAciPBin/VxUW
2kdr6OeMThVgRzrj2g/VnuqnYALWU04Y6bO0hnqyoxb2H+cEqOWG18OyX1m5/m0C
UHPVj5uG47HZ2FtnPYg2VKjz2tbZanWWvE79Xgei0OoSV7hZj8mRuHcktPbrzzUr
VzxZ+UOez4yOXQ5/PdxlH2w7t8B+phpYmW3Umao6+95aPyxeB1Oyz1Ws2nv+SBsg
TgYTwz3qarH9BgbZ4Q9cm5cH1FdLEtDeAzEqlbdtZm7T+mqDP1lC7+sXaQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHpMuvi6UIDjsnW6lEW1bribdnLSMB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvZWt5Ni1McFFnT095ZGJxVVJiVnV1SnQyY3RJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUAKgliggMF
AyoOsUADBQMqEbHAMA0GCSqGSIb3DQEBCwUAA4IBAQDO/d65YrXq/WGySGuPvTZ0
/DSXqSrGFvcxi6j/I7io67IHbbY//aRBdgfXbsG9BKytyB1HHM4D/T0Ic1VOuCVx
Lfi3GR/sxeO4J1NM70Cm1MLbrWEceSLIgr3kbdbplZZxMZqRtVlmwrtYXfiMBNob
5Gby2I2inUrN4Ucy2OXb7xIUobxt4R7dqQTtVE+eVDJlysGvIC3W/yxXnpV4ayrw
7yt+hqmKOjyr5gLc8FJJ+4WXfQlKgaEJWawj/tOCFRqyPnEaxgZvDGEV2C0y5YsJ
5glTDB/m/9eGLZdKjPkO2ZPtSYKseA4+kugXb8SOLZreIzG5A3QukH5eJNc5wHeU
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:11:30 2026 by rpki-client