Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6DLmNhevQ-HHfr96_dWbMp0ZQ94.roa
File: 6DLmNhevQ-HHfr96_dWbMp0ZQ94.roa (raw, json)
Hash identifier: tpi5Ny0QQSWaBI3wUPulIOUA0oo47y96VX93wMf0agw=
Subject key identifier: E8:32:E6:36:17:AF:43:E1:C7:7E:BF:7A:FD:D5:9B:32:9D:19:43:DE
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0AB89C823344D794670F9E5C790A322C4
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6DLmNhevQ-HHfr96_dWbMp0ZQ94.roa
Signing time: Wed 16 Sep 2026 18:45:28 +0000
ROA not before: Wed 16 Sep 2026 18:45:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209043
IP address blocks: 87.86.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ab:89:c8:23:34:4d:79:46:70:f9:e5:c7:90:a3:22:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 16 18:45:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e832e63617af43e1c77ebf7afdd59b329d1943de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d5:69:0b:0d:51:ee:61:13:1e:e5:91:ec:e7:
da:87:46:28:5b:2a:5a:61:91:2f:1e:df:d3:ae:49:
1b:ee:eb:6c:ca:d2:98:3a:73:da:1d:63:2f:41:06:
a6:a8:98:a5:1c:35:1b:03:5a:81:0f:68:55:6f:20:
9a:34:91:27:23:11:e5:70:78:6c:62:ac:75:cb:00:
23:28:48:a2:15:d4:be:ad:80:58:ff:aa:17:45:7d:
e0:69:03:15:94:a9:ca:ee:40:22:12:f5:8c:a8:15:
de:5a:20:37:7f:70:c6:39:a7:12:f2:b6:86:24:7c:
35:64:c1:d9:da:87:39:9f:38:20:eb:10:5f:2f:05:
28:16:d3:e6:d4:b6:74:ea:55:69:d9:81:47:91:6a:
aa:f7:31:a9:55:3f:f7:2b:62:98:7a:8d:9f:df:13:
d5:de:36:9c:16:c5:52:95:50:cb:3c:f1:14:54:ee:
4e:2c:d5:38:48:07:30:15:2c:64:51:bd:2d:32:f6:
31:6d:51:8e:98:f8:40:a3:53:8a:59:6e:42:e0:e6:
fc:49:1a:fa:9c:26:2b:02:13:c5:05:31:c4:4a:a5:
c4:7d:3b:85:04:7d:65:0e:51:75:b6:54:39:b6:1e:
92:f4:24:f8:e9:16:89:e7:5f:3f:01:ca:f5:94:37:
58:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:32:E6:36:17:AF:43:E1:C7:7E:BF:7A:FD:D5:9B:32:9D:19:43:DE
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6DLmNhevQ-HHfr96_dWbMp0ZQ94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.86.189.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:02:70:cb:a4:cb:30:b0:72:31:3a:73:89:ba:6b:25:4e:70:
07:ad:68:eb:02:5c:90:ce:97:96:72:03:af:0d:0d:94:02:d4:
93:46:a3:1c:01:49:85:4e:c6:20:14:34:e4:76:e1:f2:72:41:
7f:b3:be:15:e5:74:c5:4c:1d:21:3b:4f:b4:d3:c7:14:fc:e5:
a5:5c:8d:a0:f1:24:ad:15:12:6f:be:e6:45:0a:96:1b:a3:19:
d1:a4:6b:23:ae:f6:13:ba:2b:e3:38:04:96:c1:93:82:8a:0a:
d6:67:41:f8:ba:c4:46:36:16:2c:5a:fe:b3:6d:79:9a:88:4a:
71:b6:02:4e:10:be:4a:f8:01:91:84:7a:89:b6:1c:16:93:42:
82:ee:31:a4:f1:06:a8:6d:99:b7:67:2a:aa:9c:ce:a2:10:54:
f3:4d:df:dc:33:c1:49:46:c2:95:6a:de:9b:94:ea:3e:8c:84:
e3:23:99:80:00:17:04:69:fc:39:64:97:4b:dc:7a:46:4a:b7:
eb:83:c7:87:d4:a8:95:91:64:e1:ef:8d:60:5c:bc:ae:a6:ee:
00:09:28:5f:5c:67:9e:56:5b:01:59:26:4e:7b:e2:63:c9:93:
7d:5f:9b:d8:60:7f:ca:5d:f5:df:8d:60:a3:28:f5:0c:01:b2:
fa:a8:89:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:16:54 2026 by rpki-client