Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/6vVxzg1To3jRLZRe5eAGfm3AXO8.roa
File: 6vVxzg1To3jRLZRe5eAGfm3AXO8.roa (raw, json)
Hash identifier: J5x0w+XQYRKdT8cjk+sBpm9ywaXeHXB36cqOs9BFfgw=
Subject key identifier: EA:F5:71:CE:0D:53:A3:78:D1:2D:94:5E:E5:E0:06:7E:6D:C0:5C:EF
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 01A08A3423BD932FCE286A98276E791723DD
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/6vVxzg1To3jRLZRe5eAGfm3AXO8.roa
Signing time: Thu 10 Sep 2026 07:24:27 +0000
ROA not before: Thu 10 Sep 2026 07:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 185.220.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:34:23:bd:93:2f:ce:28:6a:98:27:6e:79:17:23:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Sep 10 07:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eaf571ce0d53a378d12d945ee5e0067e6dc05cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:50:99:4f:06:9d:d2:be:b5:a9:c5:c3:c0:ac:
30:bb:6f:ad:98:e3:e0:50:65:aa:31:3c:33:2e:a9:
60:e1:63:e2:15:0e:70:50:60:eb:87:73:5f:82:67:
cf:85:4e:2c:a7:c6:8c:e7:df:78:ab:61:e9:11:7c:
78:c2:08:87:b5:1b:39:ea:b7:e7:28:29:a3:82:81:
aa:92:b6:cc:16:0b:43:1d:7a:20:5d:05:da:da:0d:
d0:32:6d:54:fc:4e:c3:71:15:cb:1a:e5:da:ca:5e:
c8:d8:5f:0d:96:09:0e:e0:cf:a3:ca:f9:0a:4b:37:
5d:db:fe:93:e1:cb:91:5b:03:a8:ee:69:23:0e:e7:
d5:14:41:d1:32:32:2f:b8:90:01:5f:97:cb:52:40:
3e:d1:e8:b0:ab:9e:01:37:d6:d1:8b:c1:40:c7:21:
ee:b7:c4:94:e5:07:67:eb:f1:3f:22:e0:16:36:33:
cf:88:8a:80:50:78:45:ee:8d:65:2b:f1:7f:ca:fb:
b0:a2:df:f4:f8:9f:41:59:27:8a:bc:07:d3:a6:d4:
90:ed:00:ee:60:25:56:d9:25:c9:69:e8:0c:50:7a:
fc:69:b3:64:15:63:33:da:44:1d:d4:9c:20:59:64:
32:57:9e:3c:ff:27:41:b3:94:5e:ef:28:69:f2:e2:
ee:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F5:71:CE:0D:53:A3:78:D1:2D:94:5E:E5:E0:06:7E:6D:C0:5C:EF
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/6vVxzg1To3jRLZRe5eAGfm3AXO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.199.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:f8:be:52:d7:f2:32:84:9e:68:cc:01:15:f9:4f:fd:54:20:
55:94:59:de:ea:2d:8c:3f:ef:22:10:66:b9:54:0c:40:4e:4b:
58:9b:5d:7c:70:0c:fd:c5:23:1f:01:b4:32:1e:da:c3:cd:1f:
fc:a7:f0:6a:9f:af:9a:2a:db:d6:dd:bc:c0:7c:cf:49:b6:22:
2c:10:9c:cc:5c:73:09:5a:91:f9:f4:53:6f:84:06:8f:18:1e:
92:1b:82:c5:38:a5:d2:43:31:b3:4f:77:64:51:31:73:c2:2a:
27:85:ae:7d:96:b5:a6:3d:d8:45:a4:86:c2:2a:3a:04:95:d5:
18:da:f9:d5:94:00:84:6a:85:fe:83:ec:5a:51:bb:6d:50:3e:
46:a0:d6:45:4a:3a:0c:d1:58:bb:eb:0a:09:d6:07:4d:84:c1:
24:3d:cd:e7:30:ef:d6:80:57:00:61:0b:d8:3e:ab:f8:4d:61:
6b:6a:d2:bd:9d:32:75:6f:3b:69:01:1a:e9:c8:e2:b8:ea:f7:
49:e8:f7:cd:c9:c3:13:cc:d0:46:62:0f:d2:03:4b:9d:73:ca:
6f:e2:3b:e1:fe:2f:5d:58:b1:2b:a5:fc:72:ff:78:fd:e0:92:
9f:99:16:ad:9d:8b:e8:63:55:6f:d8:91:db:05:ab:3a:96:b0:
03:92:39:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 17:00:35 2026 by rpki-client