Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/6QBO41c6AtvmDLllik0pj6CxqAI.roa
File: 6QBO41c6AtvmDLllik0pj6CxqAI.roa (raw, json)
Hash identifier: pxDESWPt4AI6IzTwim2ADE5JDN6GUJH62WPh++1Yk1Y=
Subject key identifier: E9:00:4E:E3:57:3A:02:DB:E6:0C:B9:65:8A:4D:29:8F:A0:B1:A8:02
Certificate issuer: /CN=d8114a92206f0a19f7339da0b89669c4a5fe52b9
Certificate serial: 01A07B2420BDB7EF50F732C4E420CC85D44B
Authority key identifier: D8:11:4A:92:20:6F:0A:19:F7:33:9D:A0:B8:96:69:C4:A5:FE:52:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/6QBO41c6AtvmDLllik0pj6CxqAI.roa
Signing time: Mon 07 Sep 2026 09:12:40 +0000
ROA not before: Mon 07 Sep 2026 09:12:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30766
IP address blocks: 31.99.208.0/21 maxlen: 21
91.132.220.0/22 maxlen: 22
185.101.172.0/22 maxlen: 22
192.109.71.0/24 maxlen: 24
192.109.74.0/24 maxlen: 24
192.109.77.0/24 maxlen: 24
192.109.79.0/24 maxlen: 24
213.232.100.0/22 maxlen: 22
217.113.176.0/20 maxlen: 20
2a05:e2c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:24:20:bd:b7:ef:50:f7:32:c4:e4:20:cc:85:d4:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8114a92206f0a19f7339da0b89669c4a5fe52b9
Validity
Not Before: Sep 7 09:12:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9004ee3573a02dbe60cb9658a4d298fa0b1a802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e1:2f:50:58:47:54:3e:26:8e:c3:39:ae:a3:
a3:48:71:d8:b7:a8:88:d4:a7:ec:d1:2d:ff:25:b8:
cf:4a:12:79:3b:fb:85:73:df:76:25:3e:e1:5a:f4:
82:05:9b:8e:b0:b2:da:35:5c:67:60:a0:c2:79:1b:
1a:02:35:39:c1:76:73:b5:0c:96:1c:97:e3:ed:7b:
bd:88:1c:6c:42:6e:1b:ab:c2:b5:69:c2:e8:c6:00:
7c:02:43:20:b3:ec:7b:cb:79:09:65:ef:26:de:00:
6e:e9:eb:f4:70:f3:79:95:dd:c8:11:2e:8a:87:15:
4e:7f:f1:76:ac:3c:dd:7e:4b:0e:10:4c:22:da:ba:
8c:fe:03:f2:96:fe:b8:ce:de:4d:aa:34:db:e8:49:
6e:ce:58:ab:f5:02:0d:c0:f3:49:cd:83:29:11:1c:
5b:a0:92:c4:08:b8:c9:04:d6:85:31:f1:4c:f3:2e:
bc:a1:7a:06:ca:8c:6e:27:96:98:be:ab:b6:da:80:
15:bf:b4:d7:1c:65:f9:01:82:c8:72:57:34:ea:62:
e4:ce:63:67:3d:aa:1a:e4:7e:7b:eb:1a:ce:4a:19:
c5:e8:b6:3c:fe:44:33:d3:c3:4c:6c:00:21:fa:9a:
aa:e5:70:75:3f:51:c0:a7:e0:63:53:83:c2:7d:66:
5b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:00:4E:E3:57:3A:02:DB:E6:0C:B9:65:8A:4D:29:8F:A0:B1:A8:02
X509v3 Authority Key Identifier:
keyid:D8:11:4A:92:20:6F:0A:19:F7:33:9D:A0:B8:96:69:C4:A5:FE:52:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BFKkiBvChn3M52guJZpxKX-Urk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/6QBO41c6AtvmDLllik0pj6CxqAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fdace9-8212-4ce1-a999-5208d9854364/1/2BFKkiBvChn3M52guJZpxKX-Urk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.99.208.0/21
91.132.220.0/22
185.101.172.0/22
192.109.71.0/24
192.109.74.0/24
192.109.77.0/24
192.109.79.0/24
213.232.100.0/22
217.113.176.0/20
IPv6:
2a05:e2c0::/29
Signature Algorithm: sha256WithRSAEncryption
6b:ba:d7:15:c8:0c:28:e6:81:3b:4b:e6:2f:9e:24:f0:72:63:
21:e0:0b:28:da:99:c7:08:45:2d:d1:de:45:9d:f4:18:4b:6c:
e2:ae:d5:7d:39:2b:5b:dc:7b:fc:81:44:79:4d:d8:fd:38:ef:
16:68:07:5e:af:53:81:4b:1d:29:61:8a:fb:4c:9b:63:ee:49:
06:17:8f:91:aa:35:57:8e:de:11:98:72:80:7e:ae:0b:85:fa:
53:84:8a:e3:ba:3c:87:fa:d3:29:5a:80:68:6e:b9:2b:07:69:
91:3e:35:d5:52:90:36:35:20:a5:83:d5:c4:84:13:0f:e0:19:
16:72:e2:86:03:ce:9b:c5:e5:36:34:86:ac:ca:48:e2:ad:ce:
f2:e5:9a:67:a4:1c:7a:c2:09:8b:ae:1b:eb:71:e8:96:e7:48:
ba:54:d1:24:bf:1a:ad:4c:f7:eb:4a:ca:9e:31:80:76:49:5e:
d2:65:00:00:b8:0b:dd:75:9c:7b:33:63:ba:84:7d:3a:7a:7d:
64:b1:35:c0:b9:56:cc:29:9f:53:15:c1:9c:d4:52:57:91:0a:
c4:70:17:06:f0:26:24:c3:aa:f1:f6:0e:ce:6a:26:9b:4d:9e:
a6:0b:1b:71:3a:ae:e5:18:ec:dc:c9:1b:56:5e:7d:c9:93:c7:
70:16:c8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:21:27 2026 by rpki-client