Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6-WMkj0lAVFvbJoDXRTwn__DjdA.roa
File: 6-WMkj0lAVFvbJoDXRTwn__DjdA.roa (raw, json)
Hash identifier: 9j/UzLw4b1Fcl5+b0HMe2QvAjlJUCrfGVcqVgt3AuYI=
Subject key identifier: EB:E5:8C:92:3D:25:01:51:6F:6C:9A:03:5D:14:F0:9F:FF:C3:8D:D0
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0B71DF1B3015AAF59D81CF58DD2DB0032
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6-WMkj0lAVFvbJoDXRTwn__DjdA.roa
Signing time: Sat 19 Sep 2026 00:43:08 +0000
ROA not before: Sat 19 Sep 2026 00:43:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 87.85.233.0/24 maxlen: 24
195.40.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b7:1d:f1:b3:01:5a:af:59:d8:1c:f5:8d:d2:db:00:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 19 00:43:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebe58c923d2501516f6c9a035d14f09fffc38dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:80:21:76:82:cc:af:3f:e2:1e:68:70:2c:e9:
69:7f:90:65:97:d8:cd:97:50:68:32:47:f9:5b:1d:
fd:58:f1:16:3a:a8:8f:4a:b5:92:0e:35:ff:d4:6b:
66:53:c4:ca:69:db:c4:c3:eb:d4:12:32:09:5b:24:
03:5a:44:29:d5:00:84:c2:f1:ae:75:30:aa:86:6f:
de:28:6d:97:21:b4:7c:2b:41:01:ff:67:c3:9d:68:
08:5b:a5:b2:ff:e7:fa:70:d6:6c:ab:6c:3f:97:73:
a2:58:aa:b5:63:44:4e:c2:d5:24:f9:22:b8:5f:92:
e1:83:d8:5d:f8:94:12:f4:a0:e3:72:c1:31:ea:63:
6b:65:26:11:1b:87:9d:cc:33:d9:10:c7:46:22:f6:
a9:51:eb:4d:b3:ae:05:e1:bc:31:ec:d2:44:37:7c:
cf:a7:dc:3e:5a:3a:3e:c1:4d:d2:1f:d8:79:f4:a5:
75:cd:b2:cc:43:9d:21:65:63:9d:60:81:fc:48:cc:
27:8b:38:a1:c7:29:c3:58:b1:f3:52:3e:4f:89:65:
a7:61:f2:91:1c:dd:ec:a2:15:f6:53:2e:af:97:3f:
5f:e3:9b:af:d0:4f:f2:70:4c:ec:5c:3d:1e:81:15:
09:e7:54:28:17:06:41:d9:94:1d:55:f0:e3:80:04:
53:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E5:8C:92:3D:25:01:51:6F:6C:9A:03:5D:14:F0:9F:FF:C3:8D:D0
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6-WMkj0lAVFvbJoDXRTwn__DjdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.85.233.0/24
195.40.156.0/24
Signature Algorithm: sha256WithRSAEncryption
28:90:d8:96:94:ed:f8:db:d7:9e:d0:d1:cf:de:92:36:6a:45:
95:89:8a:71:6b:93:89:e6:b1:71:7d:45:be:a9:be:95:e0:4a:
07:5b:06:4c:df:12:99:7d:94:b2:44:d3:a8:5e:eb:aa:33:6d:
42:66:7a:f8:2f:5c:89:e3:77:53:76:9f:a6:16:0f:d6:29:cb:
d0:b9:b8:54:8d:e8:09:ba:e4:c4:50:ba:bc:f5:19:25:28:03:
12:25:d0:42:a9:2e:ef:6b:29:3f:3d:af:f4:ae:cd:41:95:02:
07:fd:e1:bf:41:48:50:5a:e4:31:b6:34:e0:c3:c8:80:b0:e3:
e6:88:d0:e1:53:2f:ab:da:3f:5e:b7:67:3c:bd:e5:f1:85:1d:
7e:44:61:dc:a2:12:82:4e:62:e4:f9:0f:4e:ad:0e:4a:fb:0b:
38:bc:7f:a1:88:b4:74:8b:b9:a6:18:59:16:c8:8f:10:e3:95:
18:20:b5:27:3f:3f:a6:c3:37:fb:81:96:e3:c2:6f:ce:7a:a9:
dc:5e:a6:96:89:98:c8:ac:b6:44:25:12:64:0a:47:a7:5b:1e:
e9:c5:a8:08:cf:b5:3c:b0:b6:54:53:f4:27:e9:99:64:af:94:
40:16:7c:54:ce:e5:f9:13:f8:e3:4e:df:b1:f3:d1:ba:36:31:
a8:50:e5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:11:55 2026 by rpki-client