Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/6C3W-9CaPuwWdYDqcHjWkkZoegM.roa
File: 6C3W-9CaPuwWdYDqcHjWkkZoegM.roa (raw, json)
Hash identifier: wit/WjbZgKAb0zGvhEAh6NwGMMeu36jdvCHn/RDLjog=
Subject key identifier: E8:2D:D6:FB:D0:9A:3E:EC:16:75:80:EA:70:78:D6:92:46:68:7A:03
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 01A019A7937CBC73CC2E840441A8062A80C2
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/6C3W-9CaPuwWdYDqcHjWkkZoegM.roa
Signing time: Wed 19 Aug 2026 10:53:27 +0000
ROA not before: Wed 19 Aug 2026 10:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202611
IP address blocks: 89.104.112.0/23 maxlen: 32
91.107.80.0/22 maxlen: 32
92.255.13.0/24 maxlen: 32
188.72.103.0/24 maxlen: 32
188.72.104.0/24 maxlen: 32
188.72.105.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:a7:93:7c:bc:73:cc:2e:84:04:41:a8:06:2a:80:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: Aug 19 10:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e82dd6fbd09a3eec167580ea7078d69246687a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:86:12:69:76:52:cf:36:3f:95:84:a2:e7:26:
a8:3e:3c:88:e4:59:77:e4:2d:5e:9e:ff:a2:e7:95:
05:53:cc:9b:8c:b3:8a:34:e1:25:39:8f:c0:28:84:
da:33:35:ab:40:c7:5d:5f:ea:86:fb:b5:ea:83:14:
8f:cc:d9:2c:73:22:e4:4e:14:d2:a5:f1:e5:7b:34:
6b:57:72:37:38:a8:8d:48:16:56:0b:5a:07:7d:31:
35:d9:05:f1:59:f6:98:3c:09:ee:65:36:1b:a4:99:
4c:78:4b:25:e4:81:31:ac:f6:e6:f3:e6:fd:f0:c0:
2d:6c:f3:c6:27:1d:c8:0e:64:42:17:bd:74:fe:4c:
ec:98:c4:63:09:7e:9e:66:cd:0e:a0:7f:2b:11:9a:
e9:76:2d:54:37:cf:9b:40:95:6a:3f:46:8c:f6:b9:
93:c4:fd:30:67:33:1b:eb:9d:93:f5:46:af:a8:d5:
74:52:68:80:ac:bf:fc:a8:3b:52:76:4a:99:c6:74:
a7:75:8b:b4:3c:02:77:b7:6b:ae:c7:be:1e:44:a2:
9e:88:36:8b:41:01:e3:c4:26:ce:61:58:0f:89:74:
34:8e:65:ef:19:a8:8c:72:be:f3:44:1f:51:cc:73:
da:e4:73:4f:ff:21:e2:86:80:63:21:8f:33:fc:ea:
d3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2D:D6:FB:D0:9A:3E:EC:16:75:80:EA:70:78:D6:92:46:68:7A:03
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/6C3W-9CaPuwWdYDqcHjWkkZoegM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.104.112.0/23
91.107.80.0/22
92.255.13.0/24
188.72.103.0-188.72.105.255
Signature Algorithm: sha256WithRSAEncryption
83:a5:15:de:7b:de:f3:52:6e:62:ae:dd:95:97:db:ea:e0:66:
d9:73:eb:15:9c:35:1f:cc:07:ef:97:ac:47:2c:c7:da:4b:61:
7c:0b:8f:ac:7a:66:81:0c:18:ba:48:02:43:dc:6e:c6:23:35:
84:22:77:9e:e3:cf:9e:a9:ce:2a:00:8e:5b:99:79:26:49:b1:
6f:8e:05:40:ad:6b:4c:e8:80:da:39:b9:41:95:dc:09:25:89:
72:56:cc:bf:ce:6c:bd:9c:88:33:f8:a4:7e:e5:da:60:18:8d:
3e:ed:bb:e3:6b:37:45:bd:d3:cd:3f:c3:91:70:a5:5b:0c:94:
7b:cc:ff:04:a5:75:a1:9d:b4:bc:bd:87:e9:31:50:fb:48:b0:
92:ac:18:b0:0d:bc:49:bd:e2:68:97:7b:f6:65:77:4f:33:0b:
69:fa:c4:49:c0:98:f2:9c:c2:23:bc:3a:5e:11:e2:9c:d4:7e:
cc:86:dd:d4:f1:3e:96:52:73:94:f3:77:55:a0:16:22:5d:ab:
b8:80:7d:42:99:ef:8f:59:15:2e:91:0d:12:71:b9:81:3d:f1:
95:79:15:c6:3b:9d:b4:fe:f1:d0:7d:8e:7a:cc:74:90:37:d4:
e6:e8:b9:49:85:1e:86:3d:17:5f:67:3d:c6:57:8d:80:ce:61:
c0:7a:f6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:25:43 2026 by rpki-client