Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/e6pHWoc7emq2cZpRlVco0GTqUts.roa
File: e6pHWoc7emq2cZpRlVco0GTqUts.roa (raw, json)
Hash identifier: tQJMNiJbSpV+Egj41STQAOLzSg8uJIvo8/M2/CrP5Xc=
Subject key identifier: 7B:AA:47:5A:87:3B:7A:6A:B6:71:9A:51:95:57:28:D0:64:EA:52:DB
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A05D1DDA9C596E5B29E42F7D6774C7BF69
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/e6pHWoc7emq2cZpRlVco0GTqUts.roa
Signing time: Tue 01 Sep 2026 13:17:12 +0000
ROA not before: Tue 01 Sep 2026 13:17:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212895
IP address blocks: 79.175.70.0/24 maxlen: 24
81.18.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:1d:da:9c:59:6e:5b:29:e4:2f:7d:67:74:c7:bf:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 1 13:17:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7baa475a873b7a6ab6719a51955728d064ea52db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:39:be:99:ea:ce:56:3a:bf:70:fe:bc:39:c5:
13:62:43:88:44:7f:26:c1:c9:4b:ab:58:8a:a7:70:
93:c9:8b:81:85:99:1d:3d:91:ef:87:be:12:6c:e0:
c9:92:42:08:96:2d:90:f3:27:37:43:f3:a3:93:6a:
2d:4b:dc:5d:f7:a4:5a:7f:e7:d9:1f:21:70:7e:b0:
0f:d4:fe:b5:9b:d9:99:80:74:bd:3b:ba:cf:e4:c2:
c7:2e:74:74:ff:c1:45:59:8e:6a:c6:b2:ab:89:71:
9d:f4:0a:09:96:53:5f:a3:40:c0:c8:fc:8c:6f:97:
1d:2a:2e:e3:01:02:74:c7:9b:2f:e4:d0:48:08:35:
3f:8a:9a:19:7e:ef:1b:f1:b2:4d:87:73:60:55:01:
9a:97:f4:e4:ee:b3:92:2b:fc:71:bc:51:41:26:7a:
29:22:ba:5d:64:b8:2e:78:c2:cb:6d:9c:72:9a:30:
ef:9a:af:09:d7:6a:d1:43:9a:56:1c:20:c5:09:ed:
98:17:de:48:e1:ac:86:ec:4d:57:6d:8c:d8:70:5d:
7c:ea:c1:0d:2b:4d:3f:8a:7c:c4:f4:d1:43:ed:50:
a9:12:e2:89:d2:33:12:39:18:63:4e:9b:b9:40:d3:
1c:44:af:72:c0:71:03:76:15:08:3b:24:f3:06:a1:
88:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AA:47:5A:87:3B:7A:6A:B6:71:9A:51:95:57:28:D0:64:EA:52:DB
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/e6pHWoc7emq2cZpRlVco0GTqUts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.70.0/24
81.18.58.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:11:c5:58:b0:42:8f:22:fa:0a:c2:42:b0:5e:00:89:d5:fd:
0e:3c:4a:9f:8e:ea:5a:36:bd:04:c6:56:82:1b:f8:2a:c8:f5:
73:03:03:e6:f6:9a:ea:d4:96:10:c5:43:89:3a:7a:b0:e1:94:
01:ad:64:42:78:ee:95:20:b6:65:77:66:b4:56:03:a6:35:95:
4c:9e:25:24:d0:ff:ce:cf:fa:0a:8e:cb:aa:39:df:ae:09:3d:
04:60:b0:15:b2:d4:0b:01:1b:db:c2:9b:29:1f:d0:26:aa:ed:
ed:bb:c5:66:eb:6c:83:9f:d1:3d:66:5c:0d:bf:d6:8a:1d:21:
51:05:67:5a:82:8e:7f:7f:db:1c:9a:9c:a2:d8:22:4b:db:3c:
26:a6:50:e2:56:88:b5:14:96:4b:c4:ba:00:b8:8d:8d:0f:cf:
d1:fa:e8:fc:95:1b:0e:e1:52:85:87:e5:fb:db:f8:82:7c:d6:
83:34:de:24:26:5c:c4:d6:31:68:79:fa:4f:ff:8f:f7:3f:9c:
ae:af:97:ae:0c:ee:30:2f:02:65:f1:27:51:35:5e:ca:58:74:
b0:ee:76:d5:5a:45:c6:58:0d:b5:13:a8:07:ac:d0:56:84:36:
2c:b3:2b:24:d1:af:fb:6c:87:93:52:3a:7c:75:b4:df:21:f2:
9e:52:66:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:54 2026 by rpki-client