Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/fc12cd-e29a-42ac-9e4f-402af529443b/1/1-eOJkO9YL4xZg--gf6qwumHEDtk.roa
File: 1-eOJkO9YL4xZg--gf6qwumHEDtk.roa (raw, json)
Hash identifier: GR80Sq/bTbd5unKoNza5U5i+PbZ/S05QHDYglZZW7qo=
Subject key identifier: F9:E3:89:90:EF:58:2F:8C:59:83:EF:A0:7F:AA:B0:BA:61:C4:0E:D9
Certificate issuer: /CN=6a7293095a55f0d77e25164e7d74b7a8a239df47
Certificate serial: 01A0824ED815A18B6F7E03F8766A3A86CE7B
Authority key identifier: 6A:72:93:09:5A:55:F0:D7:7E:25:16:4E:7D:74:B7:A8:A2:39:DF:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anKTCVpV8Nd-JRZOfXS3qKI530c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/fc12cd-e29a-42ac-9e4f-402af529443b/1/1-eOJkO9YL4xZg--gf6qwumHEDtk.roa
Signing time: Tue 08 Sep 2026 18:36:40 +0000
ROA not before: Tue 08 Sep 2026 18:36:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 185.203.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/fc12cd-e29a-42ac-9e4f-402af529443b/1/anKTCVpV8Nd-JRZOfXS3qKI530c.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/fc12cd-e29a-42ac-9e4f-402af529443b/1/anKTCVpV8Nd-JRZOfXS3qKI530c.mft
rsync://rpki.ripe.net/repository/DEFAULT/anKTCVpV8Nd-JRZOfXS3qKI530c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:4e:d8:15:a1:8b:6f:7e:03:f8:76:6a:3a:86:ce:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a7293095a55f0d77e25164e7d74b7a8a239df47
Validity
Not Before: Sep 8 18:36:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9e38990ef582f8c5983efa07faab0ba61c40ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:3d:7c:69:83:2f:05:42:8e:ee:ab:cd:ed:
95:da:2e:04:11:37:b4:47:2a:91:0e:09:dd:9f:a5:
84:e3:32:8f:14:28:52:44:81:b0:2e:de:15:1f:bd:
97:57:91:f8:3f:f0:f4:aa:80:02:a1:aa:b9:a0:aa:
4c:50:f8:b4:29:c2:ed:6c:ca:51:5a:d9:ac:1e:0c:
de:90:9d:70:2e:0a:78:67:b9:b3:95:b0:61:55:8e:
a7:4f:ea:f2:42:30:23:44:dd:7d:37:28:86:2b:9e:
55:b6:84:45:6f:e5:83:85:e5:ec:85:2d:c4:99:60:
02:d1:60:35:10:71:9a:7e:78:75:ff:7b:9f:60:39:
91:24:69:0e:1a:55:cb:1b:da:ca:6b:55:7c:3b:cb:
7f:d6:66:f3:ed:8d:f7:0f:26:71:98:5d:ed:ce:54:
47:39:27:7c:55:43:af:f6:23:7e:7a:19:61:cc:ac:
da:37:2f:cb:7d:b6:ce:3f:0f:38:3b:75:45:61:d8:
d8:06:39:76:04:24:20:eb:d1:79:84:1b:bd:22:4f:
6e:68:5f:92:35:99:c3:de:6d:a2:2a:4c:45:31:9f:
63:1e:e8:62:05:a3:9e:3c:d1:ae:5b:ab:28:1c:4d:
e8:aa:de:a8:be:0b:85:ea:3d:34:b4:a0:c5:73:72:
63:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E3:89:90:EF:58:2F:8C:59:83:EF:A0:7F:AA:B0:BA:61:C4:0E:D9
X509v3 Authority Key Identifier:
keyid:6A:72:93:09:5A:55:F0:D7:7E:25:16:4E:7D:74:B7:A8:A2:39:DF:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anKTCVpV8Nd-JRZOfXS3qKI530c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/fc12cd-e29a-42ac-9e4f-402af529443b/1/1-eOJkO9YL4xZg--gf6qwumHEDtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/fc12cd-e29a-42ac-9e4f-402af529443b/1/anKTCVpV8Nd-JRZOfXS3qKI530c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.249.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:06:8b:b7:e2:97:be:8d:aa:03:bc:15:4e:bc:a0:b7:b3:57:
85:ec:8b:68:cd:6f:e1:97:88:63:4e:14:de:84:28:0a:49:03:
a9:48:6d:2a:53:8f:e5:d0:90:0c:ca:c7:fc:3e:8e:c8:cf:25:
66:a0:07:6c:e8:31:87:fc:45:62:f5:fc:35:e9:b4:11:16:0a:
6d:10:e3:0e:06:30:a9:f0:f5:3b:84:93:8b:e8:f4:dc:0a:9a:
20:ac:6a:71:b1:11:24:6a:89:1d:a4:72:8d:4d:34:1c:44:0f:
d4:a4:99:b8:d3:5c:04:07:9a:8d:36:a9:88:e1:bb:90:a8:53:
a4:0e:ce:66:f8:f6:65:3d:85:dc:6d:3f:e8:f9:53:ec:3c:62:
b7:ca:b5:60:9f:db:8c:a4:d3:32:6b:20:00:40:62:e7:4a:f9:
0a:2d:de:46:4c:4c:e7:5a:3d:3b:25:c6:83:12:34:30:96:05:
6f:c0:70:eb:7f:72:3c:d9:7e:32:f5:55:63:27:bf:a5:d0:ae:
74:58:f3:f6:c7:aa:05:57:3a:d2:0c:35:19:14:a7:7a:a0:46:
c3:01:52:94:6b:cb:b7:3e:e3:17:5a:9a:59:a7:f1:ee:a1:8d:
f9:3d:a1:f9:17:26:40:bf:64:40:eb:19:6d:63:51:06:d9:5e:
85:4c:f1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:17:25 2026 by rpki-client