Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/6Kyov9rVqDSqc-QvmrSX38ZaEQ8.roa
File: 6Kyov9rVqDSqc-QvmrSX38ZaEQ8.roa (raw, json)
Hash identifier: oHMcfPeyYNxs6iJPJ3lArML/IHlFsU5Jk/WJi21Cqsk=
Subject key identifier: E8:AC:A8:BF:DA:D5:A8:34:AA:73:E4:2F:9A:B4:97:DF:C6:5A:11:0F
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019EBD13CBCC2F9579C31BE78C67FBA28EA9
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/6Kyov9rVqDSqc-QvmrSX38ZaEQ8.roa
Signing time: Fri 12 Jun 2026 18:24:11 +0000
ROA not before: Fri 12 Jun 2026 18:24:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 79.172.250.0/23 maxlen: 24
79.172.250.0/24 maxlen: 24
87.229.8.0/22 maxlen: 22
87.229.8.0/24 maxlen: 24
87.229.11.0/24 maxlen: 24
87.229.35.0/24 maxlen: 24
87.229.37.0/24 maxlen: 24
87.229.56.0/24 maxlen: 24
87.229.80.0/23 maxlen: 24
87.229.81.0/24 maxlen: 24
87.229.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:13:cb:cc:2f:95:79:c3:1b:e7:8c:67:fb:a2:8e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jun 12 18:24:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8aca8bfdad5a834aa73e42f9ab497dfc65a110f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:05:80:38:fd:00:1a:52:87:3e:96:57:f0:
de:64:89:14:4e:86:a9:0e:07:86:4c:d5:cd:80:d1:
dd:47:b6:04:7e:49:3e:cf:7c:6c:5c:a7:5f:fa:ee:
5f:8d:bc:6b:fa:c3:dc:72:24:54:35:68:2c:83:7f:
e0:55:b4:99:d9:7e:4b:da:88:65:c9:90:70:fd:6d:
1f:02:b7:ed:4f:4f:41:97:09:33:b2:6e:1a:da:81:
a8:af:49:a3:ca:bb:b6:e4:b2:8c:2d:69:38:60:4a:
49:de:83:14:60:dc:8a:ce:73:e4:91:29:ae:69:55:
ef:38:21:24:75:27:a8:c5:a7:d5:c4:b2:2a:c6:47:
d4:f4:a1:81:e9:f6:72:0e:c8:bc:34:49:31:c8:15:
22:6f:3c:d4:fe:94:cb:5b:a5:a9:db:88:9b:d0:22:
e5:4a:bc:93:72:35:9e:4e:21:1d:93:a2:d6:36:d2:
ba:2e:16:aa:c7:f0:cd:d9:ed:ee:30:ec:dc:90:46:
ad:bc:fa:a5:ad:47:ff:4c:42:cf:49:3e:5c:43:4f:
ef:37:a2:b8:e4:4c:54:18:ae:33:69:5a:ad:23:69:
7b:87:81:2a:28:76:56:4e:04:16:48:49:31:ed:cd:
30:93:40:92:f4:d0:df:50:0b:11:3b:90:97:ca:a5:
ed:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AC:A8:BF:DA:D5:A8:34:AA:73:E4:2F:9A:B4:97:DF:C6:5A:11:0F
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/6Kyov9rVqDSqc-QvmrSX38ZaEQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.250.0/23
87.229.8.0/22
87.229.35.0/24
87.229.37.0/24
87.229.56.0/24
87.229.80.0/23
87.229.124.0/23
Signature Algorithm: sha256WithRSAEncryption
41:02:a5:00:2d:37:e5:6e:0d:93:87:2f:56:32:a7:68:96:6b:
69:ef:48:51:8c:e2:2a:4a:02:be:24:db:0f:c0:77:36:7f:7e:
d7:4b:64:e9:3c:ed:b6:52:97:72:65:8f:0b:a7:4d:14:a0:ce:
c6:78:cc:53:85:33:ae:45:60:46:11:b2:b1:48:eb:1c:f6:31:
f0:f8:0e:18:5d:40:d0:fa:2f:b3:f2:da:1e:a5:3b:8e:d0:67:
b0:d3:df:74:20:1a:18:6d:94:0d:6c:6a:1b:0b:39:7b:b8:0b:
f6:5d:a3:47:21:72:75:10:29:30:0d:3f:87:49:68:d4:fe:6a:
ef:ab:ce:2a:ab:19:37:f2:2d:90:55:f4:f4:34:83:29:8d:7e:
c3:e0:e9:c8:78:12:1b:6a:66:cb:4a:cb:75:fe:ca:cc:4f:a7:
35:ce:c8:80:ec:0c:86:55:7b:c0:8c:c8:cc:92:eb:b1:a8:d7:
ac:02:01:77:d1:f6:59:8a:23:f4:99:75:5e:1d:08:e3:8c:0a:
d8:90:87:f4:cb:3c:6b:d9:d9:4e:24:12:e1:4d:f4:06:eb:f5:
bd:77:ab:c4:98:33:a5:dd:3a:64:c4:33:2f:96:ac:84:84:4c:
1d:d9:09:b9:fd:a5:67:93:a4:49:fa:1e:7c:15:0b:21:55:51:
cc:9c:10:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:08:47 2026 by rpki-client