Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/6nzwEiOcA5UVBF0ovWTG8zz-_Cs.roa
File: 6nzwEiOcA5UVBF0ovWTG8zz-_Cs.roa (raw, json)
Hash identifier: 1Tm0VQ7P2QtJmUgGJczY7O1NMh1/0L+w2c7xb8mc9Bo=
Subject key identifier: EA:7C:F0:12:23:9C:03:95:15:04:5D:28:BD:64:C6:F3:3C:FE:FC:2B
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019E267893F570F2DDAA3422A3FE4D27D4BC
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/6nzwEiOcA5UVBF0ovWTG8zz-_Cs.roa
Signing time: Thu 14 May 2026 12:31:36 +0000
ROA not before: Thu 14 May 2026 12:31:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 87.232.96.0/24 maxlen: 24
87.232.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:26:78:93:f5:70:f2:dd:aa:34:22:a3:fe:4d:27:d4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: May 14 12:31:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea7cf012239c039515045d28bd64c6f33cfefc2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4d:f3:44:28:91:25:3f:78:32:b8:f5:d7:29:
f0:2c:97:8a:bf:bf:7d:20:52:7a:4c:56:e6:39:1f:
d5:c5:9e:95:17:64:2e:fc:0e:43:b9:a7:f9:af:47:
e3:6b:a8:b1:a0:b1:27:1e:53:53:f2:38:04:ac:4f:
57:29:58:11:02:70:d8:64:8e:ab:2f:17:b3:44:de:
69:fa:a2:dd:c4:77:79:5b:45:7d:83:dc:3c:cb:56:
b1:60:b8:33:2b:e6:5a:e3:04:1a:e3:53:56:7d:33:
a0:4a:d1:4d:dc:88:d6:6e:f6:13:11:fb:0f:97:b5:
0a:5c:4a:90:e6:ec:55:92:78:d1:3a:04:79:fd:92:
40:64:e2:aa:f2:59:48:8e:07:0d:43:8a:7a:7d:5e:
c0:3d:7b:59:41:1a:a8:e8:b8:74:2f:e5:a5:4d:ad:
6d:1a:b9:a3:e1:79:dd:e2:c7:69:50:31:e8:8d:50:
95:e5:bb:1c:18:97:08:b6:b8:99:a9:8f:22:b6:23:
c1:41:e3:c8:9e:8b:f1:ab:ea:a0:15:73:a0:42:23:
c5:13:fd:b9:be:4d:df:33:b0:f0:13:9a:21:a2:a0:
e1:41:74:60:ff:3b:fd:af:e1:a6:7a:9d:58:00:57:
ed:da:ce:6d:87:bb:42:66:1f:16:4d:16:e2:5b:1f:
50:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7C:F0:12:23:9C:03:95:15:04:5D:28:BD:64:C6:F3:3C:FE:FC:2B
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/6nzwEiOcA5UVBF0ovWTG8zz-_Cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.96.0/24
87.232.117.0/24
Signature Algorithm: sha256WithRSAEncryption
be:ee:7d:86:32:91:83:a4:6a:66:ac:f8:3d:bd:45:e6:1b:65:
bc:ff:55:bc:41:81:a9:6f:d1:09:d2:74:76:0f:c5:37:fb:06:
a3:7e:af:33:e5:37:00:c0:b4:33:74:08:15:04:d0:46:c5:a7:
f3:b7:34:10:f3:86:de:72:ff:0c:40:67:02:51:c9:a6:31:1b:
f5:02:ac:4d:75:a5:15:0c:49:1c:dc:59:10:6b:38:79:12:c9:
71:cc:fa:65:21:6e:2a:1d:22:bf:f8:4f:84:d3:58:e3:c2:36:
e5:db:e7:fc:0d:4b:55:a8:b6:4c:e5:12:0b:e3:bf:03:f5:ec:
6d:a9:92:c0:44:e8:e3:c7:b8:78:92:be:16:54:d9:72:63:d9:
ac:29:21:07:8e:63:ad:c9:f0:a6:81:6e:c2:fa:d4:89:e0:cb:
1c:55:09:ef:71:28:c2:80:4e:69:c8:e9:6a:79:0c:b9:3b:38:
13:76:29:c5:c0:ab:5b:c1:d7:cc:56:24:b1:9a:5c:7d:38:5e:
3a:69:ab:74:79:49:be:0a:93:6c:1c:63:f2:96:84:04:8e:da:
54:2d:29:c5:06:df:d2:01:60:3f:20:1d:82:81:df:b0:fa:2a:
d8:b7:4b:5a:fd:b3:2f:c8:7b:c9:21:f6:04:d0:cd:34:56:2f:
f7:a9:0a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 06:28:11 2026 by rpki-client