Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/6SMyxmh4uShN30HEo066S7U5EpE.roa
File: 6SMyxmh4uShN30HEo066S7U5EpE.roa (raw, json)
Hash identifier: bCsNOhWER533pwdVSaxanUyVPj7Ow215iWeaHCg1+VY=
Subject key identifier: E9:23:32:C6:68:78:B9:28:4D:DF:41:C4:A3:4E:BA:4B:B5:39:12:91
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019F699036DF980998CFCA56B65A650B3D7E
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/6SMyxmh4uShN30HEo066S7U5EpE.roa
Signing time: Thu 16 Jul 2026 06:14:46 +0000
ROA not before: Thu 16 Jul 2026 06:14:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 80.97.54.0/24 maxlen: 24
81.180.37.0/24 maxlen: 24
81.180.173.0/24 maxlen: 24
81.181.172.0/24 maxlen: 24
81.181.175.0/24 maxlen: 24
81.181.236.0/22 maxlen: 22
85.120.128.0/22 maxlen: 22
85.120.132.0/22 maxlen: 22
85.122.176.0/22 maxlen: 22
194.102.122.0/23 maxlen: 23
194.102.217.0/24 maxlen: 24
217.156.29.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:69:90:36:df:98:09:98:cf:ca:56:b6:5a:65:0b:3d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jul 16 06:14:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e92332c66878b9284ddf41c4a34eba4bb5391291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1b:84:a7:f5:33:50:89:f7:63:e7:e5:05:fb:
ff:04:98:9e:8d:52:92:c6:3f:f0:49:27:f8:41:29:
17:52:ee:81:1e:b5:9f:cc:f5:e1:87:e1:1b:4b:cf:
3d:64:53:8d:84:82:6f:89:df:b2:35:61:23:bd:1e:
19:1c:31:89:41:e1:c3:a0:60:87:12:d0:84:28:d9:
0f:33:12:fc:c5:20:e6:56:75:7b:f9:c3:04:23:e7:
ee:c5:09:4e:41:df:b9:c4:95:f3:5c:f1:99:70:21:
4d:28:72:a7:b1:47:7d:18:8c:be:26:6a:58:a8:38:
07:1e:c2:6f:df:c2:77:85:59:9a:e4:d7:9c:a1:8b:
ad:66:b7:3a:f4:e8:04:df:b9:28:cb:9a:94:ff:64:
e3:d6:e4:1e:07:88:31:21:9a:94:14:15:d1:9f:23:
c9:4d:99:aa:ad:fe:96:6a:c6:8a:01:9f:cc:d0:e7:
91:95:3e:b2:a5:37:22:04:f3:a8:19:4d:20:f5:a0:
8f:53:e4:a3:8a:e1:1f:62:bc:27:96:2e:a2:3c:7d:
5d:71:1a:15:82:d4:6c:0c:a1:8b:80:73:39:b3:e0:
13:ba:20:a0:db:30:35:a8:81:92:3d:a6:6b:6b:22:
88:c2:99:63:60:55:4c:67:ad:e6:46:32:94:51:b8:
c5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:23:32:C6:68:78:B9:28:4D:DF:41:C4:A3:4E:BA:4B:B5:39:12:91
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/6SMyxmh4uShN30HEo066S7U5EpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.97.54.0/24
81.180.37.0/24
81.180.173.0/24
81.181.172.0/24
81.181.175.0/24
81.181.236.0/22
85.120.128.0/21
85.122.176.0/22
194.102.122.0/23
194.102.217.0/24
217.156.29.0/24
217.156.57.0/24
217.156.112.0/22
Signature Algorithm: sha256WithRSAEncryption
24:46:62:2d:57:37:28:e3:a2:b2:18:d0:e2:f4:f2:3a:02:5a:
9b:18:f6:cd:3d:f0:06:e3:3b:ec:8b:9f:90:73:4f:92:7d:a1:
6a:46:f7:ec:4a:6a:70:c9:1b:e9:2b:e8:d2:16:a9:79:66:e9:
72:48:d7:be:16:a9:6c:a4:1b:72:65:72:b0:26:d4:e9:2e:33:
b8:d0:28:4d:b5:fa:16:df:97:cf:66:57:50:0c:a3:b6:da:9d:
96:48:1b:17:ab:d9:39:d3:57:61:0e:d9:3c:9b:7c:8b:4f:4e:
a9:e7:17:e6:e6:83:42:c7:c0:2b:56:b9:01:1f:f1:ba:12:39:
56:0e:86:02:2b:f8:6e:26:c3:5c:df:61:5b:54:f1:bb:12:88:
0e:af:4f:70:2b:c0:d7:83:4e:f4:80:4d:69:50:35:41:0a:63:
41:07:09:59:5e:3c:72:71:d3:78:c2:44:36:18:9d:be:a3:29:
1f:62:d8:e3:a9:77:b0:48:c5:8e:55:80:78:10:ce:11:4d:ed:
22:e6:6c:aa:ca:1c:76:a3:18:9f:f9:5d:60:68:ae:fa:80:7a:
ab:e9:8f:59:3c:c6:87:29:93:0e:8c:61:e1:78:90:9c:d5:74:
45:68:5e:af:ee:14:1a:c8:c5:11:c2:69:df:99:6e:39:39:2e:
12:55:1d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:44 2026 by rpki-client