Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/6fDrTcvZ7XtkLeZaIB2S4IAIkZA.roa
File: 6fDrTcvZ7XtkLeZaIB2S4IAIkZA.roa (raw, json)
Hash identifier: /YxjD3K7+jHGXFvdGkD2ngOHHPkPdZ9v1JjdUb+mafM=
Subject key identifier: E9:F0:EB:4D:CB:D9:ED:7B:64:2D:E6:5A:20:1D:92:E0:80:08:91:90
Certificate issuer: /CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Certificate serial: 019F21B08BE142472FA17653B98521FD8C4D
Authority key identifier: 6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/6fDrTcvZ7XtkLeZaIB2S4IAIkZA.roa
Signing time: Thu 02 Jul 2026 07:17:26 +0000
ROA not before: Thu 02 Jul 2026 07:17:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 185.101.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:b0:8b:e1:42:47:2f:a1:76:53:b9:85:21:fd:8c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Validity
Not Before: Jul 2 07:17:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9f0eb4dcbd9ed7b642de65a201d92e080089190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:51:97:75:9b:37:8a:34:b4:2b:41:85:e5:b6:
01:f7:cf:99:a6:ca:e1:6f:3e:41:24:64:43:12:bc:
07:8c:86:36:77:ec:e2:b9:db:11:b2:92:a3:83:56:
08:9d:b9:c5:a1:51:c4:15:e2:55:49:14:3c:43:9d:
93:d5:99:5c:42:09:84:ad:47:b6:9b:14:ab:ea:b3:
7d:e7:40:78:1b:d7:8e:47:e6:38:14:30:32:66:92:
c3:07:5b:76:fc:47:e7:bc:d9:f1:01:dc:5e:d2:26:
47:8f:12:0a:25:2e:48:42:9a:61:0f:9b:69:6c:89:
55:1e:28:db:69:b4:e0:04:fc:42:fa:69:82:69:4c:
18:4f:ad:42:62:21:63:57:7d:40:a8:c9:a3:55:1a:
4a:b0:b0:e2:1d:89:60:81:a1:87:ab:85:23:37:ac:
3b:42:af:c8:f7:29:95:71:08:24:da:d5:1e:33:ae:
d9:b1:22:7d:bd:40:63:1b:1a:3d:38:17:1a:1b:bc:
c2:81:b0:2b:7c:5c:b0:95:4b:b9:9f:50:da:28:ea:
2f:5a:c1:8a:aa:ee:a3:2e:6e:3b:33:1e:58:38:9e:
d7:8b:6a:c9:28:3d:d6:0c:06:4f:39:b4:c1:b2:f0:
e8:f1:0d:38:60:1d:c4:54:40:ce:15:04:f3:cd:07:
9c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F0:EB:4D:CB:D9:ED:7B:64:2D:E6:5A:20:1D:92:E0:80:08:91:90
X509v3 Authority Key Identifier:
keyid:6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/6fDrTcvZ7XtkLeZaIB2S4IAIkZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.8.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:50:14:96:05:6a:37:71:ec:3b:56:d3:7c:7d:b4:32:db:09:
78:73:bf:ca:e4:23:34:45:76:52:a0:73:87:53:2a:30:58:c6:
eb:85:dd:bb:4d:e4:06:33:18:f7:f9:bb:f5:0b:f7:d5:d9:7f:
6f:46:ed:98:c8:73:33:20:03:cc:ba:85:05:7c:96:98:76:90:
49:a8:52:37:3c:89:0b:73:3d:07:4c:ce:b1:a0:70:95:e3:eb:
91:eb:74:2f:ee:3f:79:3e:e4:d4:06:ef:66:c8:b4:a3:f7:8f:
ae:f5:7e:20:4f:b9:9f:b9:43:a4:77:6d:e8:26:1d:4b:e5:aa:
b6:c6:2d:91:14:94:e7:c5:c7:b7:a4:a0:f4:89:90:41:60:16:
ee:fc:83:4e:46:f8:4a:4c:b0:51:71:1f:8c:8e:b0:16:f6:7a:
5a:20:41:51:7d:c3:a7:09:bc:f2:a2:f0:b3:9e:1b:77:aa:78:
54:6a:19:3c:8e:24:37:70:c7:e6:da:1a:8a:07:08:71:62:5c:
7a:a5:6c:d0:88:30:cc:c0:27:ff:41:f0:e7:cd:5e:83:2d:7e:
2e:26:e5:c0:c4:c0:81:d8:ae:b4:91:62:80:0a:0e:29:e4:6e:
24:97:26:c8:d0:8f:03:24:f9:9d:c4:15:ea:e0:2e:af:6d:7a:
46:73:c1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:02:51 2026 by rpki-client