Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/6nu1OXtk7kpMQlaYK9eE_KRKv_8.roa
File: 6nu1OXtk7kpMQlaYK9eE_KRKv_8.roa (raw, json)
Hash identifier: wI/dM+o6nDmiOXGvtoGjVjdd+0fyCUU9tuBohCftX8M=
Subject key identifier: EA:7B:B5:39:7B:64:EE:4A:4C:42:56:98:2B:D7:84:FC:A4:4A:BF:FF
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 01A0C5B8F28F9916E7FCDB8943D4F6443F52
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/6nu1OXtk7kpMQlaYK9eE_KRKv_8.roa
Signing time: Mon 21 Sep 2026 20:47:07 +0000
ROA not before: Mon 21 Sep 2026 20:47:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62206
IP address blocks: 31.133.80.0/22 maxlen: 24
176.103.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:b8:f2:8f:99:16:e7:fc:db:89:43:d4:f6:44:3f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Sep 21 20:47:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea7bb5397b64ee4a4c4256982bd784fca44abfff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a2:f1:49:43:22:08:9e:67:3d:2a:2b:bc:d4:
86:4c:ef:08:69:de:3e:85:1d:9b:89:a9:1c:91:23:
3a:50:16:04:83:e2:9e:7b:ea:b1:7e:fc:e6:ed:14:
66:db:eb:43:0b:c8:2d:c5:c4:cb:1e:71:11:ab:08:
d5:a1:bf:ae:ab:ce:bd:9b:b5:f2:cd:10:e9:3c:89:
12:0d:0e:9a:bf:fa:75:a6:56:1c:80:62:b6:10:df:
37:b5:1d:4d:70:95:48:a7:96:a4:b6:e9:f9:f5:74:
1d:21:05:d5:1f:8c:87:28:82:91:a6:9e:5f:cc:7b:
56:29:e8:39:c9:ce:3c:20:7d:52:57:12:f1:f4:4c:
3e:b0:bd:ec:a2:fa:ad:b6:05:d9:ce:59:b0:95:7d:
3a:5a:cb:be:29:3c:a5:ad:94:5a:b4:b8:49:bc:f3:
fd:63:29:3e:31:bc:49:3f:b1:76:13:12:01:6b:e6:
5e:36:51:1b:63:a1:8e:28:62:5c:35:e1:b8:75:03:
1c:19:63:c4:d6:cc:55:64:11:a5:87:7b:ae:47:c6:
5a:83:39:e5:74:36:e6:28:5f:76:87:69:9f:d8:2b:
f0:82:02:15:08:1e:2a:f8:14:c4:64:6d:e4:ea:19:
b7:63:8a:12:0a:55:27:bc:e3:b8:e7:48:6d:a1:ac:
3a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7B:B5:39:7B:64:EE:4A:4C:42:56:98:2B:D7:84:FC:A4:4A:BF:FF
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/6nu1OXtk7kpMQlaYK9eE_KRKv_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.80.0/22
176.103.236.0/22
Signature Algorithm: sha256WithRSAEncryption
17:78:e9:08:fb:6b:6b:19:d2:0d:ee:12:2c:8c:22:73:19:68:
8a:91:24:77:47:e8:c2:e2:55:d2:75:17:a8:0f:90:2b:b4:9a:
ca:39:bf:fb:c2:17:e3:3b:59:9b:f1:e3:5e:49:c6:16:7d:36:
23:2b:d0:f8:27:64:86:18:54:25:06:29:95:51:dc:2b:69:cd:
1d:03:e8:22:3a:c6:20:76:73:46:b6:a9:f4:03:0a:44:c9:13:
09:63:60:f5:d0:1d:3a:9b:e6:bc:a7:7a:b1:14:7f:53:b7:cc:
8b:95:87:9b:95:b6:9a:af:a9:bd:db:32:51:87:21:c3:cc:16:
f6:5e:60:a1:62:1e:64:7d:67:f3:01:4e:c7:d6:8a:a9:66:39:
cf:e4:58:8a:f6:00:b6:85:d6:8e:ba:f8:3d:ef:fe:f7:da:1e:
09:cf:61:b4:f5:e5:14:59:3a:c1:70:f3:31:f5:c2:31:49:04:
cd:7f:6c:7b:26:5d:fe:c4:dd:91:0b:02:5a:12:57:82:ea:08:
04:62:d9:3f:01:ee:a5:17:12:fc:e5:b5:76:75:99:5d:21:e5:
91:d7:db:97:c4:57:ae:4f:a2:0a:e4:77:23:79:2b:52:7e:fc:
72:f0:6f:a6:03:7c:cc:d6:da:a5:88:d0:b6:15:61:6a:fe:58:
92:ca:d2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:13:38 2026 by rpki-client