Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/6ZaAZfrbqSGT4LOT3i_mVhgD7So.roa
File: 6ZaAZfrbqSGT4LOT3i_mVhgD7So.roa (raw, json)
Hash identifier: MfVkMjXOIWgEuM0VtTKJjmdz8Id17WhGPoBDNjngOo4=
Subject key identifier: E9:96:80:65:FA:DB:A9:21:93:E0:B3:93:DE:2F:E6:56:18:03:ED:2A
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019C50E3D081FB267C6256BC26D13A0E7D82
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/6ZaAZfrbqSGT4LOT3i_mVhgD7So.roa
Signing time: Thu 12 Feb 2026 08:07:13 +0000
ROA not before: Thu 12 Feb 2026 08:07:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 812
IP address blocks: 82.197.194.0/23 maxlen: 24
82.197.198.0/23 maxlen: 24
82.197.206.0/23 maxlen: 24
84.245.20.0/23 maxlen: 24
84.245.24.0/23 maxlen: 24
84.245.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:50:e3:d0:81:fb:26:7c:62:56:bc:26:d1:3a:0e:7d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 12 08:07:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9968065fadba92193e0b393de2fe6561803ed2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:87:d1:e0:39:4e:35:76:ab:7b:07:dc:bc:5b:
b2:da:86:96:30:4b:99:17:c5:73:46:ea:8f:c8:5c:
79:b3:0a:44:d6:1f:37:f2:3b:41:b9:56:e3:52:89:
94:71:a0:c7:60:ab:bd:a5:4d:bd:8a:3a:a4:c2:8f:
2f:0e:ad:ac:db:29:24:8a:65:38:11:05:78:64:ce:
29:52:e7:66:9c:d2:a5:12:1f:08:44:8d:34:ff:8f:
e5:fa:86:27:b9:e1:94:ad:99:57:db:a5:16:bd:b8:
47:13:c6:49:19:99:7f:36:a8:f1:4c:97:ef:ae:c5:
f4:12:15:6c:8d:7b:2b:0e:ed:a4:07:6a:a1:0f:3b:
1a:4a:f2:28:52:33:1f:0b:b4:8a:2d:a1:9a:90:0f:
b3:64:4c:9e:68:48:bf:6f:65:50:b7:eb:9b:34:93:
c6:60:c9:3f:bc:b4:b7:cd:37:95:6c:8e:67:a1:df:
4a:c3:bf:72:8d:a2:63:6a:55:fb:69:e1:56:27:ab:
cd:4d:b7:2c:2e:ac:c6:e0:a7:38:8f:f9:e6:c1:cb:
8c:f0:92:7d:5d:aa:e9:b9:92:d6:de:52:3f:ef:59:
d7:96:3f:6b:8e:f1:74:76:06:bc:91:7a:bb:7b:ef:
0f:25:9b:23:85:8e:4c:41:8e:9e:7e:82:11:21:e7:
07:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:96:80:65:FA:DB:A9:21:93:E0:B3:93:DE:2F:E6:56:18:03:ED:2A
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/6ZaAZfrbqSGT4LOT3i_mVhgD7So.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.194.0/23
82.197.198.0/23
82.197.206.0/23
84.245.20.0/23
84.245.24.0/23
84.245.30.0/23
Signature Algorithm: sha256WithRSAEncryption
71:15:fd:2f:6f:f8:e8:83:0a:4f:c2:6b:47:31:55:c6:1d:27:
30:87:0c:72:68:e6:66:54:ff:1d:47:42:3c:f4:54:02:b0:04:
0b:a6:67:f8:8b:1b:56:a1:da:46:65:60:3f:ed:77:ca:9a:c0:
7c:22:d6:98:04:a7:d9:2a:ef:ef:75:40:51:43:80:72:13:16:
20:5c:60:81:99:ef:9e:ba:7c:bd:d2:ec:05:76:a5:92:b3:43:
2d:eb:6f:e1:53:3a:75:73:d6:a0:db:91:96:7b:a4:75:b9:67:
f2:2a:8c:11:54:33:58:3a:e6:82:b9:2f:04:53:7a:ab:7a:47:
df:74:cd:b7:b7:a7:76:80:a2:19:65:4f:74:6e:43:f0:b3:e8:
5a:51:b2:34:08:93:2e:47:e6:0d:6e:f9:a1:3f:ed:9d:e6:28:
2c:d5:46:1a:a1:46:2d:c1:9a:e0:d9:7c:3d:04:6b:a6:80:81:
1f:51:89:77:88:90:c0:24:1a:2e:2e:e6:7b:72:2b:9b:ba:0a:
81:bb:5c:ec:6e:78:0c:a0:3d:7c:6b:56:2a:7f:d2:42:83:4c:
0c:aa:4c:ec:af:1d:25:cc:f8:f7:c8:9c:f2:72:78:a5:6e:5f:
a9:25:23:f3:a9:5c:a7:34:c0:ff:d2:94:a9:2d:a1:37:6d:91:
f7:34:4d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:19:35 2026 by rpki-client