Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/6SaDRF5yWGG_wN_QwUllNIcaTfE.roa
File: 6SaDRF5yWGG_wN_QwUllNIcaTfE.roa (raw, json)
Hash identifier: JQURG/l4/kgP1onv9e5ayzV5li7ACj/urJahIKW9M94=
Subject key identifier: E9:26:83:44:5E:72:58:61:BF:C0:DF:D0:C1:49:65:34:87:1A:4D:F1
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019EB87F016007B826540D26A600D72EE08F
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/6SaDRF5yWGG_wN_QwUllNIcaTfE.roa
Signing time: Thu 11 Jun 2026 21:03:11 +0000
ROA not before: Thu 11 Jun 2026 21:03:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50049
IP address blocks: 87.232.117.0/24 maxlen: 24
87.232.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7f:01:60:07:b8:26:54:0d:26:a6:00:d7:2e:e0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Jun 11 21:03:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e92683445e725861bfc0dfd0c1496534871a4df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:34:19:f6:73:e3:87:f3:a6:53:9a:29:19:5a:
c2:39:71:f1:de:02:08:13:cc:6c:fc:4f:8c:eb:43:
65:54:b8:8f:9a:ee:bf:c8:f7:a0:16:0c:4d:da:30:
f0:ce:10:df:d0:6a:8a:d2:04:b4:0d:ff:16:5f:0f:
f7:8b:66:2e:5a:c7:64:98:1b:9e:39:dc:b5:78:16:
81:39:43:04:06:e4:9c:aa:29:21:de:13:6c:47:23:
d5:39:bc:05:bd:d4:3a:0b:b7:56:fe:12:4b:fc:19:
72:b6:81:a0:00:40:bd:ce:45:ab:86:db:4d:89:7e:
ec:99:f3:e0:a5:4c:a8:cc:b1:c7:5c:11:ba:73:ef:
54:a6:bb:e7:82:d4:2d:e5:d7:47:c7:27:0f:59:41:
2e:ad:bc:09:52:e8:d9:5f:35:a2:84:a7:49:5f:11:
cb:f0:eb:fa:ff:5d:b6:85:2c:41:bf:5c:f2:23:d3:
1d:be:41:27:48:c6:f4:f9:ff:b3:88:dc:cd:71:37:
a4:da:d5:d0:60:38:49:7b:ba:14:0c:eb:bd:08:fa:
e2:bd:bc:d2:05:ea:01:16:6e:d4:1a:2c:25:84:f1:
92:9d:d0:a6:88:5a:bf:c1:c5:20:19:75:3d:a0:b1:
78:10:be:b5:7d:6b:55:21:f9:dc:17:c6:83:44:46:
8f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:26:83:44:5E:72:58:61:BF:C0:DF:D0:C1:49:65:34:87:1A:4D:F1
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/6SaDRF5yWGG_wN_QwUllNIcaTfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.117.0/24
87.232.122.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e1:3b:c7:c7:69:2f:bd:7c:23:c3:e5:a7:f3:fe:70:bc:9d:
2b:44:e6:3a:67:de:69:72:66:8d:8a:e3:02:3e:cb:50:52:87:
af:f2:4e:5b:0e:bc:44:a2:5f:05:68:f7:99:36:38:2a:d4:1c:
67:fe:b7:cc:d5:ee:0d:b9:55:b5:de:52:42:4b:60:6f:55:2d:
c5:d5:dd:a4:17:09:b8:7f:1c:5d:5c:f4:73:60:a8:02:6c:b9:
97:fb:a1:b9:46:bf:93:42:8e:c5:15:8b:73:54:de:bb:55:31:
61:6f:6d:82:2a:08:db:c8:04:0d:d2:5b:ff:84:c3:a9:79:10:
a9:e4:5d:1b:c2:b2:c5:45:7b:aa:bb:da:33:27:a8:15:22:8d:
24:44:c9:68:ca:74:58:7e:c5:3b:e8:33:e7:48:65:32:95:3e:
77:16:6c:65:79:a5:2d:2e:39:81:29:e7:4c:bb:00:91:a3:42:
fe:f8:27:48:32:45:6a:dc:3a:e3:95:a2:6a:ea:fd:c8:91:64:
a3:8f:8e:3b:e5:24:58:a4:6f:67:dd:63:a8:5e:8a:14:8e:33:
a2:8a:8a:aa:08:4e:d4:43:9f:c1:7a:11:fa:94:ed:a4:1d:a3:
39:d0:1e:d6:11:84:0f:1f:d6:4c:5b:3b:ef:d3:81:a0:cc:8b:
55:45:6c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:27 2026 by rpki-client