Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/aq3i12d4RnhCIDtYmHqAcmphQJ8.roa
File: aq3i12d4RnhCIDtYmHqAcmphQJ8.roa (raw, json)
Hash identifier: 9PSr1JDA0gICV87x9cJdxaLdp3T83srUZx9qFOZAUVs=
Subject key identifier: 6A:AD:E2:D7:67:78:46:78:42:20:3B:58:98:7A:80:72:6A:61:40:9F
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019D872940F9EAE3EFF321258D78A11A4305
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/aq3i12d4RnhCIDtYmHqAcmphQJ8.roa
Signing time: Mon 13 Apr 2026 14:05:20 +0000
ROA not before: Mon 13 Apr 2026 14:05:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 185.210.136.0/24 maxlen: 24
188.64.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:87:29:40:f9:ea:e3:ef:f3:21:25:8d:78:a1:1a:43:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Apr 13 14:05:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aade2d76778467842203b58987a80726a61409f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c3:dc:38:cc:91:8c:d3:7f:99:81:28:7f:fd:
ab:ed:da:ea:d7:01:09:ce:32:60:13:64:03:1c:d1:
d2:d2:3d:3c:22:f3:7d:9d:5c:51:76:42:57:bb:f0:
4f:f4:62:e0:f2:7a:de:d9:57:f4:f6:7f:b6:45:c4:
be:68:d8:db:2b:f7:f3:b8:eb:91:80:ac:5c:98:dc:
bd:10:71:82:c7:3d:09:18:8a:77:39:30:5e:75:ed:
63:b3:7d:e0:f8:7b:38:dd:1a:3e:a2:f5:be:76:d8:
b1:cb:70:e4:4a:85:88:67:84:26:12:d5:1f:2a:a3:
77:f0:70:78:74:89:5b:6b:fa:5e:a7:b8:5c:0c:09:
20:8a:8e:07:ed:1e:a8:4c:db:1a:1f:15:3f:d2:3f:
6c:71:2e:26:19:f7:71:9b:4e:15:5e:92:e2:53:b7:
f5:8c:89:e9:bb:19:14:6b:ef:5d:8e:a3:bf:a7:c7:
da:08:01:48:99:dc:c1:ae:5b:3e:9f:34:48:57:0c:
54:8a:24:27:5f:80:4a:1f:69:8e:0d:d0:2f:2e:fc:
87:43:7f:c7:bf:85:fa:61:19:0d:b9:1b:c0:57:4e:
23:be:ed:d7:4d:9b:b6:e3:ab:3a:78:b2:f7:5d:4d:
d1:0a:d5:5b:27:99:c4:ac:08:07:2c:23:bd:cf:dd:
80:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AD:E2:D7:67:78:46:78:42:20:3B:58:98:7A:80:72:6A:61:40:9F
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/aq3i12d4RnhCIDtYmHqAcmphQJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.136.0/24
188.64.162.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:28:b1:f8:e0:89:36:dd:16:21:fc:99:f4:98:88:7c:1f:bf:
bc:05:0c:fd:c1:c4:55:26:f4:48:42:4d:bd:2e:07:bc:ec:1b:
02:62:50:da:f2:22:41:92:a0:87:b8:f9:95:a7:84:18:8b:45:
d1:d7:51:b6:15:d2:c6:b9:cf:19:47:ae:20:69:84:3a:71:77:
18:99:de:f4:c4:22:18:c5:ee:0b:15:ec:ef:b4:11:d9:47:01:
d8:cc:1a:0d:24:e5:b9:bd:19:c4:5c:3f:1d:e7:c4:35:bd:04:
69:30:94:9b:98:fa:78:91:69:fb:92:5b:3a:2a:1a:da:50:cf:
14:29:b6:83:0d:10:f1:3a:c0:92:40:24:f2:3e:63:05:3b:9b:
fb:3d:bd:87:a4:9a:63:ca:e7:ab:2c:6d:bf:75:fb:32:99:35:
87:89:19:36:a6:ad:04:e3:7a:2c:fe:0e:3e:27:dc:36:b8:a3:
14:87:0b:97:e1:14:2e:5e:76:b1:5b:46:b6:52:ec:0e:47:33:
c2:88:7e:54:db:5f:f8:ae:c3:08:ab:33:56:d1:cf:b6:dc:bc:
87:e9:37:75:59:a8:aa:07:7f:05:00:b5:36:0b:98:fb:fc:48:
ef:7b:a8:47:77:98:42:d1:4a:ee:f9:bc:04:87:41:01:f2:41:
37:2b:46:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:40:21 2026 by rpki-client