Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/6OqTpgmhzn6PJTKFB1lTcULSUt4.roa
File: 6OqTpgmhzn6PJTKFB1lTcULSUt4.roa (raw, json)
Hash identifier: 0yR0XfZvnK3OQ/1YUSPxxfbZ0KMJ3RWvdqB7yb8/Z9c=
Subject key identifier: E8:EA:93:A6:09:A1:CE:7E:8F:25:32:85:07:59:53:71:42:D2:52:DE
Certificate issuer: /CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
Certificate serial: 019B79ED63456F153B37E664F60DD45B6005
Authority key identifier: B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/6OqTpgmhzn6PJTKFB1lTcULSUt4.roa
Signing time: Thu 01 Jan 2026 14:19:18 +0000
ROA not before: Thu 01 Jan 2026 14:19:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8913
IP address blocks: 212.20.64.0/19 maxlen: 19
2a01:8fc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:63:45:6f:15:3b:37:e6:64:f6:0d:d4:5b:60:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
Validity
Not Before: Jan 1 14:19:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8ea93a609a1ce7e8f2532850759537142d252de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:43:bd:f6:74:ba:7d:ad:7d:f3:2e:22:93:4c:
99:65:df:f1:f5:f4:65:53:0a:48:06:fc:17:3d:6d:
b4:9a:30:ea:74:5c:ca:ab:c3:d6:6b:13:5e:83:5c:
c7:64:f1:83:6b:82:53:64:9b:68:37:27:5d:fd:31:
dd:f6:0c:7a:c5:22:ec:af:68:c1:87:96:29:ab:cc:
e1:55:59:fa:2b:48:5e:66:bb:04:36:4a:1f:a9:93:
dc:d4:ed:56:50:bb:bd:0b:d0:fc:2d:7d:7c:0e:04:
63:68:a5:a1:43:af:54:4d:5e:04:05:41:93:0e:25:
15:cd:a7:3d:db:60:22:61:a6:1b:55:a1:c2:68:38:
23:14:de:96:8b:ef:11:7d:b4:59:bc:aa:7c:11:64:
50:6d:5e:9c:ee:ac:a0:b5:c3:96:db:8e:29:e5:aa:
8e:0c:70:96:fb:c5:c3:db:9d:17:45:9a:10:c7:eb:
8d:c6:55:41:05:4b:e8:92:ce:e5:f1:a7:88:2e:91:
27:71:ce:23:8e:ae:62:d8:fa:2e:df:4e:28:ff:9e:
e4:49:03:99:77:52:6f:64:5b:b3:b6:e4:c0:ef:41:
21:90:a4:1c:54:02:87:b3:7a:04:82:0b:e4:fb:5f:
92:02:7a:34:f0:45:53:88:cf:99:80:f1:32:67:96:
3f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EA:93:A6:09:A1:CE:7E:8F:25:32:85:07:59:53:71:42:D2:52:DE
X509v3 Authority Key Identifier:
keyid:B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/6OqTpgmhzn6PJTKFB1lTcULSUt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.20.64.0/19
IPv6:
2a01:8fc0::/32
Signature Algorithm: sha256WithRSAEncryption
0d:35:d8:77:9a:bc:34:b0:5a:5e:71:d9:d0:d6:8b:aa:b3:54:
6e:5a:dd:a4:06:09:f3:a8:46:e5:80:25:7e:19:88:68:a7:62:
e9:c7:84:85:46:4f:94:45:16:c2:b9:11:b0:57:28:e9:5a:f7:
1b:8d:36:13:68:11:7c:ae:57:c2:fd:69:eb:7a:5d:43:88:90:
a6:9b:f7:b5:77:81:71:63:f4:5b:a3:56:64:c8:32:e8:87:24:
cc:6b:d3:5e:d8:62:80:00:7f:be:f4:1d:8e:c8:de:c6:a5:0f:
09:e1:6d:7c:7d:72:27:24:53:ec:68:40:78:c1:13:32:b2:d9:
5c:66:f9:e3:3e:f2:d6:53:88:2a:7d:d1:6f:41:ae:20:6e:93:
c9:41:23:5d:e5:9b:45:eb:83:f8:23:00:57:c6:e0:79:78:ec:
c2:13:db:f9:69:49:08:aa:55:d6:99:40:a0:ab:97:86:2e:0b:
50:af:6f:30:81:cc:e7:41:3f:4f:e9:e0:84:c3:a8:2b:3b:6f:
87:a1:43:ff:bb:f5:4a:d8:43:30:e2:f7:f1:27:53:11:b9:ea:
5b:68:c0:fb:c0:c2:ff:68:1b:c4:64:c4:fa:fc:e8:17:8b:74:
b6:9b:6c:0a:c6:0c:72:8c:a4:5f:2d:f5:0f:93:c6:77:75:02:
79:24:09:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:19:10 2026 by rpki-client