Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/6QrvKUXRS0E79JjHBWp8_hcCEes.roa
File: 6QrvKUXRS0E79JjHBWp8_hcCEes.roa (raw, json)
Hash identifier: ymzP6jlTFTp39yan3cMEMlPi7zfW/J0ojGIV/ZFlg6Y=
Subject key identifier: E9:0A:EF:29:45:D1:4B:41:3B:F4:98:C7:05:6A:7C:FE:17:02:11:EB
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01A068346B247D6ED0E3AAC5F255178D2A81
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/6QrvKUXRS0E79JjHBWp8_hcCEes.roa
Signing time: Thu 03 Sep 2026 16:57:40 +0000
ROA not before: Thu 03 Sep 2026 16:57:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8474
IP address blocks: 195.138.96.0/19 maxlen: 24
195.138.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:34:6b:24:7d:6e:d0:e3:aa:c5:f2:55:17:8d:2a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 3 16:57:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e90aef2945d14b413bf498c7056a7cfe170211eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:15:9f:65:7c:81:18:8d:2e:0d:d7:fb:04:5f:
11:73:95:e4:ed:08:ab:f7:90:e3:4a:99:5d:0c:fe:
7b:dc:1b:c0:d5:05:17:da:1f:70:2d:cc:33:27:f5:
18:8f:2b:71:07:0a:e2:c7:54:3f:bb:32:1e:b9:8d:
24:10:d9:8f:5a:c2:d5:c8:90:15:72:57:92:4b:9d:
84:0b:be:25:d3:33:1e:d2:6f:df:b8:a3:56:82:9a:
e4:e5:45:53:f0:b5:48:7a:4a:d2:36:48:a3:4d:47:
f1:4f:f3:1c:6d:cc:07:77:cf:16:34:55:5f:cc:59:
e2:e3:48:82:4e:38:ea:c2:10:94:c6:40:62:eb:3f:
2a:a7:bb:dc:eb:ac:51:52:42:27:60:dd:16:75:f8:
1f:ed:06:b4:2c:9a:97:19:ee:52:cf:da:ce:e3:ed:
f0:c8:ba:3f:50:24:eb:38:56:b1:e2:7f:52:eb:3b:
bd:68:7a:b2:ed:a7:ec:67:a5:96:66:ac:df:7f:19:
0e:f7:32:51:dc:c2:78:5e:8f:e0:ff:45:2d:34:c1:
0c:0f:d5:66:b5:65:78:0f:18:83:b9:ac:90:26:11:
13:c4:68:06:26:44:3c:59:7e:25:60:24:b6:b9:a1:
c6:b5:b9:f2:00:a8:a0:dc:23:4c:2d:ce:7a:0a:9c:
c0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0A:EF:29:45:D1:4B:41:3B:F4:98:C7:05:6A:7C:FE:17:02:11:EB
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/6QrvKUXRS0E79JjHBWp8_hcCEes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.96.0/19
Signature Algorithm: sha256WithRSAEncryption
b4:59:60:1b:b6:0d:3b:f7:81:cd:22:36:1b:cf:09:f2:c0:bf:
86:02:0b:41:77:43:55:b7:16:71:23:30:49:82:c4:35:89:7d:
87:aa:0e:cc:56:25:b8:d1:1f:5a:17:d7:b6:b0:2d:66:e8:89:
cc:cc:57:6c:f9:80:58:e2:5c:92:db:23:1b:74:09:5b:11:6a:
14:b9:81:9b:c8:71:65:42:c5:2f:e9:73:d1:5e:97:15:63:ae:
b5:5a:e0:9d:d4:01:2f:00:ba:a5:b9:8d:10:74:fe:e8:c3:49:
11:60:c2:3d:1d:19:33:4d:6b:49:ff:fd:aa:df:38:d9:ea:8d:
ca:24:8f:ca:13:42:fb:df:98:e8:4e:1b:96:89:fb:c6:02:11:
3b:f6:53:d3:8b:7d:79:ec:4d:fb:34:39:25:f5:4e:9a:1f:6e:
63:b8:8c:eb:25:b2:59:08:78:ed:4b:e3:24:0f:1a:85:3e:bc:
0f:16:27:b5:0d:74:fc:5e:65:ce:55:3e:4c:97:d0:0f:bd:26:
06:37:d1:03:02:bd:d6:f3:cc:c0:de:29:17:1e:04:a8:4b:c6:
03:1b:b1:71:7c:69:fd:8f:ed:e3:83:80:80:1e:59:01:8a:a0:
8c:ec:0b:7a:6c:78:4e:b5:c1:fa:08:a2:4b:21:f7:35:56:53:
78:2e:b6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:18 2026 by rpki-client