Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/puE6u0HKBVhoiNbcuu-ULYY8Kk8.roa
File: puE6u0HKBVhoiNbcuu-ULYY8Kk8.roa (raw, json)
Hash identifier: Nsy+BGKO8DFH8hsL6UVbzQQ8Z1YVvGEGRofMSsrpZ4s=
Subject key identifier: A6:E1:3A:BB:41:CA:05:58:68:88:D6:DC:BA:EF:94:2D:86:3C:2A:4F
Certificate issuer: /CN=d4a8deea569b4f4018b0ba6e443b5563aeb76220
Certificate serial: 019FEC3E90D9D497080D9110761F5D89E83B
Authority key identifier: D4:A8:DE:EA:56:9B:4F:40:18:B0:BA:6E:44:3B:55:63:AE:B7:62:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Kje6labT0AYsLpuRDtVY663YiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/puE6u0HKBVhoiNbcuu-ULYY8Kk8.roa
Signing time: Mon 10 Aug 2026 15:15:51 +0000
ROA not before: Mon 10 Aug 2026 15:15:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203622
IP address blocks: 37.18.58.0/24 maxlen: 24
95.86.172.0/24 maxlen: 24
95.86.173.0/24 maxlen: 24
95.86.174.0/24 maxlen: 24
95.86.175.0/24 maxlen: 24
95.86.176.0/24 maxlen: 24
95.86.177.0/24 maxlen: 24
95.86.178.0/24 maxlen: 24
95.86.179.0/24 maxlen: 24
185.26.184.0/24 maxlen: 24
185.26.185.0/24 maxlen: 24
185.26.186.0/24 maxlen: 24
185.26.187.0/24 maxlen: 24
185.129.0.0/24 maxlen: 24
185.129.1.0/24 maxlen: 24
185.129.2.0/24 maxlen: 24
185.129.3.0/24 maxlen: 24
2a0f:7040::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Kje6labT0AYsLpuRDtVY663YiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ec:3e:90:d9:d4:97:08:0d:91:10:76:1f:5d:89:e8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a8deea569b4f4018b0ba6e443b5563aeb76220
Validity
Not Before: Aug 10 15:15:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6e13abb41ca05586888d6dcbaef942d863c2a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:19:3a:82:2d:40:61:38:5e:fe:d8:34:2b:ee:
c1:59:a6:9d:ef:02:f6:d0:67:71:82:69:7f:e9:2d:
a5:a4:a2:c2:1e:34:9b:d3:d7:37:db:c5:5c:84:4b:
3f:33:07:91:38:de:a4:4f:24:75:c4:e8:6a:b1:b1:
bd:f1:57:bc:00:19:32:da:01:67:e6:1d:bf:43:c9:
3f:72:d2:a3:b0:7f:a7:9f:bc:7e:b4:66:ab:b5:c5:
98:d6:8e:f9:07:6c:94:31:cd:43:13:59:d8:af:2c:
0e:da:37:92:f6:43:4b:b6:d6:f7:35:34:ae:a0:bd:
2e:60:be:2a:b9:bc:3f:8f:32:f7:fb:5c:95:18:01:
91:18:78:cc:41:03:ca:de:38:27:7c:36:cb:3c:e9:
ee:2a:24:aa:f7:af:20:97:5c:2b:e1:bf:1e:3d:21:
f6:61:c3:b2:5d:04:43:1f:d7:27:16:6a:d3:bc:c3:
b5:7e:25:2e:b3:22:e2:6a:8d:d7:21:2e:d9:a6:51:
57:02:4f:f3:d2:3d:8a:76:74:71:1f:7f:00:d8:64:
e6:12:59:98:15:f3:cc:09:e8:2e:5d:30:de:eb:ff:
fd:5b:9b:71:40:32:a9:0b:2b:2d:04:77:64:33:d1:
88:30:69:32:0e:e7:32:c0:ab:ab:df:8a:2a:14:40:
cf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E1:3A:BB:41:CA:05:58:68:88:D6:DC:BA:EF:94:2D:86:3C:2A:4F
X509v3 Authority Key Identifier:
keyid:D4:A8:DE:EA:56:9B:4F:40:18:B0:BA:6E:44:3B:55:63:AE:B7:62:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Kje6labT0AYsLpuRDtVY663YiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/puE6u0HKBVhoiNbcuu-ULYY8Kk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.58.0/24
95.86.172.0-95.86.179.255
185.26.184.0/22
185.129.0.0/22
IPv6:
2a0f:7040::/32
Signature Algorithm: sha256WithRSAEncryption
6e:db:be:55:da:34:b0:00:d9:22:ba:87:3a:d6:a2:50:72:da:
e2:89:6d:62:78:fe:92:12:c4:c7:65:fe:6f:86:cc:d6:ea:16:
67:e4:a4:4a:fa:69:c6:ff:ec:65:a5:b8:4a:3d:42:85:fd:69:
79:e7:81:f8:09:4b:2d:79:3c:fb:6f:b3:bb:cf:e6:e4:30:6f:
b6:fa:21:b1:db:02:2a:ed:27:23:ad:b9:90:c1:3f:f8:3e:78:
b3:d5:74:0b:b8:26:cd:8a:6f:a9:88:e5:be:63:9a:28:e8:62:
62:51:d1:1e:8e:e2:7c:6f:20:eb:3c:01:a6:5e:fa:5b:07:40:
c3:f2:37:ef:f1:d5:f6:0f:43:30:b6:69:a9:c2:b7:54:7e:c7:
c9:ab:0b:b1:be:4a:f2:67:82:2a:36:a6:8c:9a:8f:25:6a:8f:
71:44:5b:ff:93:c8:dc:ae:db:38:a6:1f:a2:1a:d5:d1:24:5b:
d6:64:79:ca:c1:96:45:79:cc:eb:1e:d4:2a:89:ae:da:29:cb:
63:01:c3:71:56:ba:b0:b6:3f:b5:bb:b4:0b:ed:68:2d:99:11:
53:8e:18:64:7b:24:22:40:b9:db:1a:dc:04:a2:2e:01:d3:fc:
7e:67:36:67:81:16:3c:02:c7:bd:5d:7a:91:d8:90:b3:df:a3:
79:7b:c9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 00:08:20 2026 by rpki-client