Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6qFAirB1LbvXRZ2vRNHYKQdMNDw.roa
File: 6qFAirB1LbvXRZ2vRNHYKQdMNDw.roa (raw, json)
Hash identifier: AL9mCp2lW8MeyMDdkwrY1JbVtPVr/2VORvWpnMgI1cE=
Subject key identifier: EA:A1:40:8A:B0:75:2D:BB:D7:45:9D:AF:44:D1:D8:29:07:4C:34:3C
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EB1611C20F032CDB52AFB7CFC0C5AF40A
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6qFAirB1LbvXRZ2vRNHYKQdMNDw.roa
Signing time: Wed 10 Jun 2026 11:53:11 +0000
ROA not before: Wed 10 Jun 2026 11:53:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 87.83.3.0/24 maxlen: 24
195.40.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:61:1c:20:f0:32:cd:b5:2a:fb:7c:fc:0c:5a:f4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 10 11:53:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eaa1408ab0752dbbd7459daf44d1d829074c343c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fb:1a:7a:6e:72:54:c5:2f:5e:3b:ea:dd:52:
8a:b1:3c:50:4b:70:7c:4b:73:77:55:4c:22:3f:74:
4e:a8:a2:54:58:a6:9e:6f:d4:ae:4a:e4:70:19:df:
db:b1:b2:d4:ee:08:08:6b:06:05:67:90:eb:b7:df:
8c:cc:89:4f:7f:c2:b4:54:0e:b9:8a:2b:02:ad:37:
37:5d:91:32:bf:4e:32:50:d5:f8:eb:ca:cc:8a:ac:
87:c0:ad:ac:3b:64:99:bf:42:68:76:63:2e:03:a7:
2a:1b:fd:b5:1b:22:8a:42:d5:76:a7:c6:cc:5e:32:
42:e5:40:2b:22:78:0d:aa:ad:b6:55:62:c7:7d:71:
7d:13:95:23:32:1a:96:4f:01:c3:98:b0:77:06:1a:
72:06:d0:a2:38:36:d0:d8:d5:a5:76:a4:cf:90:eb:
20:b1:b5:4e:8f:c6:ae:9c:50:a2:35:3d:a1:79:18:
4c:9f:0f:76:a8:91:b4:8e:be:68:6f:a8:33:d9:0d:
27:80:71:fd:83:1b:a2:e4:4c:75:c5:17:a6:56:ef:
82:20:de:e9:78:58:f8:8a:a9:7f:ac:c3:0e:fd:f5:
7a:71:26:46:2c:3c:a5:69:f9:4f:e6:86:d8:85:f1:
72:c8:40:65:7a:d3:08:cc:5b:e9:37:dd:5a:60:c0:
86:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A1:40:8A:B0:75:2D:BB:D7:45:9D:AF:44:D1:D8:29:07:4C:34:3C
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6qFAirB1LbvXRZ2vRNHYKQdMNDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.3.0/24
195.40.159.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:12:a5:ab:14:58:8b:4c:90:b0:6c:a7:0c:33:c5:99:0e:57:
f3:2f:28:ea:e7:33:b5:50:2f:7f:75:df:d3:d6:ae:3e:39:8e:
f6:8f:75:59:20:48:88:cf:95:5e:aa:78:25:c0:4a:7e:b0:8e:
8b:78:d7:cd:13:d0:57:5c:b8:e9:14:a6:41:5d:58:76:21:54:
8e:50:9f:bd:b1:8c:c3:10:cb:3d:63:43:8b:44:84:97:98:4d:
e6:3f:87:57:52:7e:bf:c7:f2:42:31:32:a5:02:11:cd:da:71:
ec:8a:15:71:2e:f4:36:82:76:d2:93:be:98:12:2e:a6:7f:1f:
1a:fe:b4:d3:a0:11:df:90:0d:1e:a5:b3:b5:46:f2:82:1b:69:
1f:6e:47:6d:3f:a9:a9:fd:6f:af:cb:a2:8a:f8:2f:25:50:b0:
0f:5f:84:7a:af:8c:a8:e1:5b:08:63:db:e8:a3:67:03:ab:f2:
dd:9c:6b:ad:18:3f:7e:04:f8:73:f1:d3:d7:46:f6:a1:85:64:
aa:84:e0:d6:40:91:f3:cb:d7:15:a5:6d:73:48:51:88:e4:96:
8b:bd:77:e1:e0:ef:61:22:36:1c:b0:27:50:d8:d5:8d:24:9a:
5f:48:5e:99:e7:e9:1d:09:14:48:a1:b6:95:6b:37:2f:0e:57:
e1:e0:20:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:41:26 2026 by rpki-client