Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6Erz9VnTnsbDcEbu7fi5aGXujmI.roa
File: 6Erz9VnTnsbDcEbu7fi5aGXujmI.roa (raw, json)
Hash identifier: vrCvGdzPVVy1xmhjIMIcG80a5KEpFvbASmXo2xiWZoM=
Subject key identifier: E8:4A:F3:F5:59:D3:9E:C6:C3:70:46:EE:ED:F8:B9:68:65:EE:8E:62
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019E31248425197D05193CA98584BAB4F1BD
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6Erz9VnTnsbDcEbu7fi5aGXujmI.roa
Signing time: Sat 16 May 2026 14:15:37 +0000
ROA not before: Sat 16 May 2026 14:15:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58087
IP address blocks: 89.144.37.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.200.0/24 maxlen: 24
94.249.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:24:84:25:19:7d:05:19:3c:a9:85:84:ba:b4:f1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 16 14:15:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e84af3f559d39ec6c37046eeedf8b96865ee8e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bb:af:65:de:20:a7:24:49:2a:b6:d0:28:d4:
81:5c:e6:75:d7:ef:31:e6:8a:c6:d4:68:92:81:ff:
78:22:ae:a4:1e:04:26:1d:8e:ce:68:4d:05:0d:b0:
ac:54:15:3b:ef:b9:86:38:5e:4c:7d:08:d8:05:b4:
f7:9f:a9:75:29:ed:cd:5a:f9:ee:54:e4:ed:15:de:
53:86:7f:47:7b:db:1a:71:83:2f:d4:7d:43:91:74:
7d:1a:44:48:5b:fb:d2:98:72:1b:5c:92:38:22:42:
6e:f9:42:54:2b:e5:ac:b5:23:11:04:22:ed:29:0c:
48:5b:15:69:7a:2f:54:da:15:99:30:60:60:0f:ef:
dd:8c:57:00:25:89:46:10:87:bb:66:19:15:01:c0:
26:c8:c3:9c:e8:7b:2e:2d:b8:b8:0f:e9:be:16:f3:
68:03:4e:3f:c0:bc:8d:6f:38:d3:1f:1c:0c:b0:95:
69:a3:88:05:ed:6e:1d:75:68:19:38:d0:cc:e6:4a:
59:ac:c0:82:93:3c:f9:9e:d1:32:6a:e7:da:43:e8:
2e:ce:bc:5d:fc:eb:6f:f4:2f:7b:47:52:da:d4:b1:
e5:cc:65:9b:0d:f6:07:50:81:47:08:6a:ad:41:06:
5a:23:d5:ee:7a:cc:d7:a0:74:3f:16:c5:22:67:e1:
56:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4A:F3:F5:59:D3:9E:C6:C3:70:46:EE:ED:F8:B9:68:65:EE:8E:62
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6Erz9VnTnsbDcEbu7fi5aGXujmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.37.0/24
94.249.195.0/24
94.249.200.0/24
94.249.229.0/24
Signature Algorithm: sha256WithRSAEncryption
56:0d:5b:ad:2b:00:49:32:e8:a4:de:19:24:3c:81:63:27:ba:
b2:80:c2:10:d0:4b:f1:83:22:08:22:58:3e:22:45:3f:34:4f:
ea:36:f0:5f:fe:13:49:d7:f4:77:72:dd:93:af:74:07:16:ad:
60:8a:fd:1f:8f:fe:39:fa:5f:a8:af:5d:e6:25:de:11:dc:aa:
4b:84:bb:a2:44:7a:53:9a:6e:24:c1:3b:58:7a:24:44:b0:3f:
fb:4a:99:b2:1f:55:77:63:c1:ec:81:b1:a1:d3:16:af:f0:f2:
c8:10:40:9b:30:e1:07:8b:07:2c:07:38:58:be:01:91:a7:de:
ee:68:6e:03:6c:58:43:37:ae:ce:25:6e:26:19:59:35:4a:6d:
5c:7e:5a:af:b2:9b:38:b2:73:34:3c:e1:c0:ee:95:8f:a0:a3:
d6:9d:ad:f2:12:ef:08:ec:5a:72:06:93:68:2d:36:2d:c2:45:
03:c4:11:79:ec:69:2a:64:ac:32:0e:96:06:88:c1:99:f5:31:
4a:5c:41:b6:43:28:25:91:de:bb:b2:56:f9:54:5e:aa:3b:db:
fa:e4:0d:f4:47:cd:ab:eb:78:49:d9:a2:c1:f4:96:56:24:5d:
dc:96:58:7a:f1:c5:d1:af:5d:45:29:ce:a6:eb:27:82:ec:c5:
3d:02:b7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:59:23 2026 by rpki-client