Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/s6OfUi_93bNmCk0LoqqQsPRf3XQ.roa
File: s6OfUi_93bNmCk0LoqqQsPRf3XQ.roa (raw, json)
Hash identifier: PX3/dss6fVnR1sM4prrLM9KGqiRqjaUHFQOQkts9Vkk=
Subject key identifier: B3:A3:9F:52:2F:FD:DD:B3:66:0A:4D:0B:A2:AA:90:B0:F4:5F:DD:74
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 01A06C49F1B3EC95E85EC0162252AC0C8963
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/s6OfUi_93bNmCk0LoqqQsPRf3XQ.roa
Signing time: Fri 04 Sep 2026 11:59:40 +0000
ROA not before: Fri 04 Sep 2026 11:59:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218910
IP address blocks: 82.206.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:49:f1:b3:ec:95:e8:5e:c0:16:22:52:ac:0c:89:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Sep 4 11:59:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3a39f522ffdddb3660a4d0ba2aa90b0f45fdd74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f0:5c:4f:c7:8d:4e:18:6c:4e:7a:c3:0e:d1:
a4:d9:04:9e:f4:ca:15:ee:af:4f:09:4e:f4:0b:84:
1d:dc:98:be:85:d5:d9:6b:3c:71:fa:b4:43:62:f4:
a6:0b:15:31:f4:7b:d2:26:22:9f:98:cc:81:0b:bb:
f7:7f:cb:f9:7c:4c:bb:a4:d3:c4:e5:75:53:df:70:
5d:f7:52:69:9c:9d:70:58:82:1b:09:0e:eb:0c:14:
b1:1c:04:2f:82:44:e1:cf:16:da:8d:47:89:d6:86:
49:18:ed:16:a3:6a:29:e7:38:b8:fc:ac:52:60:50:
1c:b1:73:b3:7b:d2:9b:69:15:93:5b:57:be:b2:95:
55:1b:fc:ce:41:c1:61:8c:a4:de:2c:36:f5:1f:c7:
c9:11:3d:b1:d6:f7:cd:3c:3a:b1:53:47:a1:12:47:
5e:b7:ad:05:e9:bc:8e:ba:aa:3d:80:39:6a:4b:40:
cc:7c:cf:4c:11:19:7e:40:f1:37:0f:c2:cf:3f:c9:
97:46:0c:ec:dc:ff:89:7e:a2:a9:f3:8a:c8:21:6d:
db:29:d6:04:7f:4d:a4:96:8b:9e:8d:a9:67:7f:c5:
bb:60:55:5d:34:05:80:20:d7:d9:37:77:27:6a:1c:
80:b3:de:c1:97:fc:4f:1b:86:37:95:18:75:04:d2:
b8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A3:9F:52:2F:FD:DD:B3:66:0A:4D:0B:A2:AA:90:B0:F4:5F:DD:74
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/s6OfUi_93bNmCk0LoqqQsPRf3XQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.3.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:bf:e0:14:6a:a7:1c:cf:01:b1:ab:2e:ea:61:dc:fe:48:75:
da:6c:3f:be:37:e9:39:0e:56:46:68:bf:2e:25:b2:66:73:fa:
dd:40:29:6a:f7:20:25:ff:de:0d:2e:a7:7a:5a:6c:f3:2a:da:
1c:77:de:3d:da:1c:45:d5:7a:b7:61:2f:92:31:eb:e6:e8:d4:
bc:80:cd:bc:ec:73:f3:b4:bb:44:41:16:37:ba:aa:69:91:ab:
a6:6e:ca:ed:b6:30:77:24:5a:b5:38:55:31:7d:c4:c1:f1:95:
e6:09:39:58:3d:67:37:43:7d:b0:d6:9a:9c:2b:6c:96:6f:f9:
ea:bb:50:eb:7c:f0:82:f5:b7:4f:b0:ff:ee:ae:6b:04:b2:4b:
a1:a2:10:c1:49:4e:63:71:31:01:32:b6:cc:84:92:3c:bf:26:
e6:ee:5b:c6:6d:b3:3b:40:6a:e7:90:9f:f9:b2:34:32:c1:e8:
4d:06:55:ca:1c:84:d5:63:19:72:f5:be:5d:58:79:42:27:3c:
5c:5b:f2:9b:1e:39:32:47:c7:63:f1:54:b8:28:2d:02:7d:58:
c3:6d:9e:79:c2:26:a8:08:c3:6c:4e:8b:fe:5f:c1:32:a9:a2:
68:5d:91:b2:f1:e6:a3:e9:1e:26:2c:f0:bc:ce:57:ce:c4:8d:
8b:5d:70:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:21:03 2026 by rpki-client