Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/8_6z_ALRGz-CVjgclabyD5HofuI.roa
File: 8_6z_ALRGz-CVjgclabyD5HofuI.roa (raw, json)
Hash identifier: 87JSE9qMyZcP6Ekmnt+zFI5GapB2S4KMZVgpMzi9vh4=
Subject key identifier: F3:FE:B3:FC:02:D1:1B:3F:82:56:38:1C:95:A6:F2:0F:91:E8:7E:E2
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019D62FF842399D8429C1DBCD93715E0D6EC
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/8_6z_ALRGz-CVjgclabyD5HofuI.roa
Signing time: Mon 06 Apr 2026 13:33:25 +0000
ROA not before: Mon 06 Apr 2026 13:33:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 46.38.136.0/24 maxlen: 24
185.143.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 14:30:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:62:ff:84:23:99:d8:42:9c:1d:bc:d9:37:15:e0:d6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Apr 6 13:33:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3feb3fc02d11b3f8256381c95a6f20f91e87ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:67:4e:29:85:96:f9:1b:3d:5d:8f:54:e1:bf:
e0:22:ff:33:50:aa:69:b7:60:03:c3:b7:9b:21:bc:
1c:96:bc:81:e6:ce:5f:3d:66:93:96:02:09:d0:48:
0a:db:7e:5d:fa:9d:1b:de:76:c3:4f:c2:73:c9:fb:
e4:8c:fc:df:ef:b2:8b:a1:35:2d:6f:89:ea:fa:17:
9a:35:1c:69:e1:da:51:08:84:b7:09:17:98:5f:9f:
fb:ce:95:02:ee:4c:1d:1a:61:ec:f3:d6:cd:b4:a3:
36:60:f3:56:27:d0:89:61:9b:59:38:56:cb:38:b5:
e6:9d:3f:69:69:f9:e3:9d:ba:9e:c4:4d:e8:07:d3:
5b:84:5e:41:86:b7:61:b1:41:1d:27:a7:49:32:5b:
20:35:ae:90:4e:10:97:a7:5b:3b:7e:eb:af:4c:93:
db:af:09:b5:31:fc:f6:7d:d8:87:2e:f2:17:47:70:
be:96:55:5d:5d:96:0a:f8:73:39:b1:be:da:3d:8c:
57:32:44:0b:f6:95:9b:a2:5f:0b:1a:cc:a2:28:f5:
92:e7:23:b3:ef:df:15:25:35:a0:5d:81:05:6c:85:
89:9f:06:fb:7c:c7:7b:ca:40:53:1a:92:40:1b:49:
5b:fd:07:6b:b8:66:00:4b:98:ff:6e:86:36:c6:40:
da:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FE:B3:FC:02:D1:1B:3F:82:56:38:1C:95:A6:F2:0F:91:E8:7E:E2
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/8_6z_ALRGz-CVjgclabyD5HofuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.136.0/24
185.143.72.0/24
Signature Algorithm: sha256WithRSAEncryption
08:22:d9:56:09:ae:0b:c0:08:f3:16:7e:31:85:87:85:18:86:
2d:e0:da:c2:0e:95:1f:28:81:7c:a6:95:60:86:b0:17:1a:56:
fc:6d:c9:14:ff:5f:42:79:80:65:17:c4:f3:07:9b:7b:ff:4c:
cf:19:7e:a3:c9:f3:84:1c:11:70:82:7f:21:e7:11:4b:ac:0f:
70:9d:40:e2:86:7f:9c:87:f2:f5:e2:71:cc:44:12:79:c7:3d:
1c:fa:a5:8d:ca:c6:0a:ed:8b:d8:74:33:62:c1:c7:c7:b3:c1:
b5:b3:d9:36:8e:ff:64:31:5a:02:09:cb:c3:35:82:76:e5:8d:
32:79:ca:c3:d6:27:6d:8a:63:f2:15:7f:51:77:e2:06:23:d7:
4c:07:6a:7b:e5:44:20:0b:62:53:fa:33:f5:53:0d:34:cd:34:
d0:6f:e3:15:01:0c:9e:c6:3e:fd:41:6a:a3:a1:cf:7e:b8:f3:
23:56:c7:7e:21:df:e6:c8:a6:f9:02:19:11:71:6f:67:23:ad:
35:ed:c1:69:51:2f:df:4c:cd:05:7a:83:7f:ca:13:1d:08:1e:
97:64:68:74:1e:74:24:37:30:e3:7f:d4:21:83:21:e0:f0:be:
9f:97:d2:cc:76:f0:29:31:05:46:3e:b4:a1:9a:c7:ca:a7:c8:
da:1e:fb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:21 2026 by rpki-client