Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/6PNq7FkmkwoGvQ7nEoMTJLXDiKM.roa
File: 6PNq7FkmkwoGvQ7nEoMTJLXDiKM.roa (raw, json)
Hash identifier: 3mSQiaXvNc3clXTT3+J9NGR/sfgLmFoq36+zVVtNRUY=
Subject key identifier: E8:F3:6A:EC:59:26:93:0A:06:BD:0E:E7:12:83:13:24:B5:C3:88:A3
Certificate issuer: /CN=48de4638c972c8ce19c4669ab57db266af7285b7
Certificate serial: 019B7AC8DC1B413B4EA2FD04EC2E86C6E118
Authority key identifier: 48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/6PNq7FkmkwoGvQ7nEoMTJLXDiKM.roa
Signing time: Thu 01 Jan 2026 18:19:02 +0000
ROA not before: Thu 01 Jan 2026 18:19:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209284
IP address blocks: 92.118.116.0/22 maxlen: 22
92.118.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:dc:1b:41:3b:4e:a2:fd:04:ec:2e:86:c6:e1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48de4638c972c8ce19c4669ab57db266af7285b7
Validity
Not Before: Jan 1 18:19:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8f36aec5926930a06bd0ee712831324b5c388a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:31:c3:7d:31:47:89:71:db:dc:29:e8:70:14:
8b:6d:07:53:78:11:8e:17:93:43:cb:3c:93:e9:6f:
d4:14:f3:55:f8:7f:4a:8c:b0:c2:fa:6e:80:24:14:
2f:32:dd:ac:0e:cb:e4:d3:df:9f:7d:05:53:e9:83:
00:17:83:e3:2d:88:93:c5:8b:0f:84:33:f3:a4:52:
6f:6c:58:03:35:13:85:1f:22:ff:be:0c:5c:10:1b:
6a:8a:f7:a7:00:44:bf:0e:f5:f3:cc:63:9c:fc:a1:
51:6d:94:25:29:da:3f:ac:d8:d6:95:14:10:3c:77:
e1:9f:f5:5a:15:69:e6:43:fd:66:4d:ef:94:e6:29:
70:3c:b2:ef:7a:97:ef:c9:13:01:20:b3:d2:9b:be:
e3:76:41:17:f4:8e:9c:7a:0b:36:20:33:1d:47:bd:
8c:ae:4c:ae:98:0c:55:b4:d8:87:a1:05:41:35:1f:
e8:1d:90:f4:23:e1:7f:15:71:fb:25:d4:90:75:df:
c2:ca:7e:af:82:02:4f:29:4b:e9:aa:7e:72:20:6d:
26:cb:10:8f:0e:c9:15:bb:5e:fc:07:f2:d1:3c:54:
72:49:e9:d2:a7:2c:1b:5e:42:7a:4d:b7:6f:5f:03:
f3:45:6e:72:f9:1e:db:d9:1b:ea:63:85:9c:a2:02:
2c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F3:6A:EC:59:26:93:0A:06:BD:0E:E7:12:83:13:24:B5:C3:88:A3
X509v3 Authority Key Identifier:
keyid:48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/6PNq7FkmkwoGvQ7nEoMTJLXDiKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.116.0/22
Signature Algorithm: sha256WithRSAEncryption
50:29:3f:01:5f:2b:ce:3f:56:18:af:b9:6d:db:57:f4:f8:86:
27:ee:0d:b2:cb:33:ae:3b:44:3f:7b:5a:4f:40:94:3e:51:68:
c5:cc:f1:49:bf:34:ff:c9:8e:66:19:d6:77:43:cf:d6:0c:48:
48:31:43:a2:7b:fe:4b:53:2a:2b:bb:40:f3:7a:bb:77:1a:1b:
64:06:bf:dd:3c:39:60:7d:85:55:bf:0d:1a:8a:ef:22:0e:25:
1c:3c:e4:0f:a4:d9:06:eb:36:ac:92:a8:c3:f4:8a:27:8c:c5:
db:2f:5b:63:1f:37:2c:b8:68:04:86:0f:f2:e6:e2:ba:8f:71:
90:9e:aa:d6:f4:c9:25:cb:5f:2b:e4:23:66:ee:dd:84:8b:91:
05:6f:9d:35:bc:f2:81:3a:c6:f7:85:c1:72:07:15:a5:73:c7:
6c:40:b6:9b:10:a8:2c:1e:f4:e3:46:bb:68:62:43:c4:2a:99:
9e:cf:b5:b0:23:bf:94:16:51:5f:eb:b2:88:b2:c5:21:10:11:
32:b4:65:d2:b9:4a:5d:b2:19:ce:1b:56:35:ae:78:5c:74:a4:
e3:8e:b4:6d:59:cf:b3:ee:79:32:1b:f4:59:8e:86:6f:e7:5c:
1e:a9:45:40:07:72:1e:fa:2b:ad:06:d2:6b:8e:01:3d:2d:47:
33:24:20:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:02:34 2026 by rpki-client