Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/6D-B1oT3Xej3PD_aAEPZhMH_WI4.roa
File: 6D-B1oT3Xej3PD_aAEPZhMH_WI4.roa (raw, json)
Hash identifier: BNTN6fDo238uP3+GkU68E9CQziGYvVq1d9TXOCCqbdc=
Subject key identifier: E8:3F:81:D6:84:F7:5D:E8:F7:3C:3F:DA:00:43:D9:84:C1:FF:58:8E
Certificate issuer: /CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1
Certificate serial: 019EC66FBAD0DECA00EA03EB171B10167539
Authority key identifier: 8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/6D-B1oT3Xej3PD_aAEPZhMH_WI4.roa
Signing time: Sun 14 Jun 2026 14:01:11 +0000
ROA not before: Sun 14 Jun 2026 14:01:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44444
IP address blocks: 85.115.32.0/24 maxlen: 24
85.115.33.0/24 maxlen: 24
85.115.34.0/24 maxlen: 24
85.115.35.0/24 maxlen: 24
85.115.36.0/24 maxlen: 24
85.115.37.0/24 maxlen: 24
85.115.39.0/24 maxlen: 24
85.115.40.0/24 maxlen: 24
85.115.41.0/24 maxlen: 24
85.115.42.0/24 maxlen: 24
85.115.43.0/24 maxlen: 24
85.115.44.0/24 maxlen: 24
85.115.45.0/24 maxlen: 24
85.115.46.0/24 maxlen: 24
85.115.47.0/24 maxlen: 24
85.115.49.0/24 maxlen: 24
85.115.50.0/24 maxlen: 24
85.115.51.0/24 maxlen: 24
85.115.52.0/24 maxlen: 24
85.115.53.0/24 maxlen: 24
85.115.54.0/24 maxlen: 24
85.115.55.0/24 maxlen: 24
85.115.56.0/24 maxlen: 24
85.115.58.0/24 maxlen: 24
85.115.59.0/24 maxlen: 24
85.115.60.0/24 maxlen: 24
85.115.61.0/24 maxlen: 24
85.115.62.0/24 maxlen: 24
85.115.63.0/24 maxlen: 24
86.111.222.0/24 maxlen: 24
157.167.0.0/24 maxlen: 24
157.167.4.0/24 maxlen: 24
157.167.5.0/24 maxlen: 24
157.167.6.0/24 maxlen: 24
157.167.10.0/24 maxlen: 24
157.167.11.0/24 maxlen: 24
157.167.12.0/24 maxlen: 24
157.167.13.0/24 maxlen: 24
157.167.14.0/24 maxlen: 24
157.167.15.0/24 maxlen: 24
157.167.16.0/24 maxlen: 24
157.167.17.0/24 maxlen: 24
157.167.18.0/24 maxlen: 24
157.167.19.0/24 maxlen: 24
157.167.20.0/24 maxlen: 24
157.167.21.0/24 maxlen: 24
157.167.22.0/24 maxlen: 24
157.167.23.0/24 maxlen: 24
157.167.24.0/24 maxlen: 24
157.167.25.0/24 maxlen: 24
157.167.26.0/24 maxlen: 24
157.167.27.0/24 maxlen: 24
157.167.28.0/24 maxlen: 24
157.167.29.0/24 maxlen: 24
157.167.30.0/24 maxlen: 24
157.167.31.0/24 maxlen: 24
157.167.32.0/24 maxlen: 24
157.167.33.0/24 maxlen: 24
157.167.34.0/24 maxlen: 24
157.167.35.0/24 maxlen: 24
157.167.36.0/24 maxlen: 24
157.167.37.0/24 maxlen: 24
157.167.38.0/24 maxlen: 24
157.167.39.0/24 maxlen: 24
157.167.40.0/24 maxlen: 24
157.167.41.0/24 maxlen: 24
157.167.42.0/24 maxlen: 24
157.167.43.0/24 maxlen: 24
157.167.44.0/24 maxlen: 24
157.167.45.0/24 maxlen: 24
157.167.46.0/24 maxlen: 24
157.167.47.0/24 maxlen: 24
157.167.48.0/24 maxlen: 24
157.167.49.0/24 maxlen: 24
157.167.50.0/24 maxlen: 24
157.167.51.0/24 maxlen: 24
157.167.52.0/24 maxlen: 24
157.167.53.0/24 maxlen: 24
157.167.54.0/24 maxlen: 24
157.167.55.0/24 maxlen: 24
157.167.56.0/24 maxlen: 24
157.167.57.0/24 maxlen: 24
157.167.58.0/24 maxlen: 24
157.167.59.0/24 maxlen: 24
157.167.60.0/24 maxlen: 24
157.167.61.0/24 maxlen: 24
157.167.62.0/24 maxlen: 24
157.167.63.0/24 maxlen: 24
157.167.64.0/24 maxlen: 24
157.167.65.0/24 maxlen: 24
157.167.66.0/24 maxlen: 24
157.167.67.0/24 maxlen: 24
157.167.68.0/24 maxlen: 24
157.167.69.0/24 maxlen: 24
157.167.70.0/24 maxlen: 24
157.167.71.0/24 maxlen: 24
157.167.72.0/24 maxlen: 24
157.167.73.0/24 maxlen: 24
157.167.74.0/24 maxlen: 24
157.167.75.0/24 maxlen: 24
157.167.76.0/24 maxlen: 24
157.167.77.0/24 maxlen: 24
157.167.78.0/24 maxlen: 24
157.167.79.0/24 maxlen: 24
157.167.80.0/24 maxlen: 24
157.167.81.0/24 maxlen: 24
157.167.82.0/24 maxlen: 24
157.167.83.0/24 maxlen: 24
157.167.84.0/24 maxlen: 24
157.167.85.0/24 maxlen: 24
157.167.86.0/24 maxlen: 24
157.167.87.0/24 maxlen: 24
157.167.88.0/24 maxlen: 24
157.167.89.0/24 maxlen: 24
157.167.90.0/24 maxlen: 24
157.167.91.0/24 maxlen: 24
157.167.92.0/24 maxlen: 24
157.167.93.0/24 maxlen: 24
157.167.94.0/24 maxlen: 24
157.167.95.0/24 maxlen: 24
157.167.96.0/24 maxlen: 24
157.167.97.0/24 maxlen: 24
157.167.98.0/24 maxlen: 24
157.167.99.0/24 maxlen: 24
157.167.100.0/24 maxlen: 24
157.167.101.0/24 maxlen: 24
157.167.102.0/24 maxlen: 24
157.167.103.0/24 maxlen: 24
157.167.104.0/24 maxlen: 24
157.167.105.0/24 maxlen: 24
157.167.106.0/24 maxlen: 24
157.167.107.0/24 maxlen: 24
157.167.108.0/24 maxlen: 24
157.167.109.0/24 maxlen: 24
157.167.110.0/24 maxlen: 24
157.167.111.0/24 maxlen: 24
157.167.112.0/24 maxlen: 24
157.167.113.0/24 maxlen: 24
157.167.114.0/24 maxlen: 24
157.167.115.0/24 maxlen: 24
157.167.116.0/24 maxlen: 24
157.167.117.0/24 maxlen: 24
157.167.118.0/24 maxlen: 24
157.167.119.0/24 maxlen: 24
157.167.120.0/24 maxlen: 24
157.167.121.0/24 maxlen: 24
157.167.122.0/24 maxlen: 24
157.167.123.0/24 maxlen: 24
157.167.124.0/24 maxlen: 24
157.167.125.0/24 maxlen: 24
157.167.126.0/24 maxlen: 24
157.167.127.0/24 maxlen: 24
157.167.128.0/24 maxlen: 24
157.167.130.0/24 maxlen: 24
157.167.131.0/24 maxlen: 24
157.167.132.0/24 maxlen: 24
157.167.157.0/24 maxlen: 24
157.167.158.0/24 maxlen: 24
157.167.159.0/24 maxlen: 24
157.167.163.0/24 maxlen: 24
157.167.164.0/24 maxlen: 24
157.167.165.0/24 maxlen: 24
157.167.166.0/24 maxlen: 24
185.4.96.0/24 maxlen: 24
185.4.97.0/24 maxlen: 24
185.4.98.0/24 maxlen: 24
2001:4010::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c6:6f:ba:d0:de:ca:00:ea:03:eb:17:1b:10:16:75:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1
Validity
Not Before: Jun 14 14:01:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e83f81d684f75de8f73c3fda0043d984c1ff588e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:59:dd:b0:45:a4:7f:a9:88:36:7a:c7:0f:
e6:8a:2a:14:6c:6e:01:75:28:86:5c:72:af:7d:a3:
bb:6b:83:96:5c:20:f7:e7:f3:f0:f9:15:2e:98:cd:
bf:a7:b6:7d:3f:5c:31:bc:8e:b5:35:15:37:90:a2:
51:f1:f5:e1:43:53:99:7c:86:b6:71:85:b5:58:31:
66:3b:60:41:ca:66:91:4b:11:f4:da:b5:c4:92:a0:
62:21:35:e7:5b:cc:e8:86:b5:7e:1b:11:b0:cc:49:
fd:46:85:9d:4c:60:c9:0d:63:78:61:70:ea:6b:5c:
26:8f:8c:17:f3:96:4e:b8:65:66:84:5f:3b:82:73:
69:df:18:61:8c:6a:cc:47:f5:db:54:f6:27:2c:fb:
54:6b:c2:17:46:c2:23:de:e4:52:e6:f3:67:76:5f:
2e:dd:88:80:ec:40:ec:93:ed:97:c2:29:1b:69:3f:
a3:9e:52:b4:93:49:2f:05:e8:8e:3f:40:4a:a8:4d:
7a:25:9f:2d:0e:2f:76:54:1d:27:a7:a7:2f:05:9f:
17:78:06:c0:c8:91:dc:15:ff:d3:0b:74:c8:cd:f4:
e2:85:08:cc:f8:dd:ab:cc:ec:a8:a0:d1:44:58:fa:
fc:f1:97:a9:2c:dd:dd:01:88:17:07:46:74:06:05:
b7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3F:81:D6:84:F7:5D:E8:F7:3C:3F:DA:00:43:D9:84:C1:FF:58:8E
X509v3 Authority Key Identifier:
keyid:8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/6D-B1oT3Xej3PD_aAEPZhMH_WI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.32.0-85.115.37.255
85.115.39.0-85.115.47.255
85.115.49.0-85.115.56.255
85.115.58.0-85.115.63.255
86.111.222.0/24
157.167.0.0/24
157.167.4.0-157.167.6.255
157.167.10.0-157.167.128.255
157.167.130.0-157.167.132.255
157.167.157.0-157.167.159.255
157.167.163.0-157.167.166.255
185.4.96.0-185.4.98.255
IPv6:
2001:4010::/32
Signature Algorithm: sha256WithRSAEncryption
2b:cd:f3:9b:88:17:7a:3b:c1:e7:18:a9:84:82:ca:e0:2a:ac:
e4:59:e9:42:0f:e6:e2:98:c0:21:f1:bb:01:07:ec:83:55:60:
ef:45:29:28:42:2a:83:4c:04:80:32:97:4d:af:79:32:ec:68:
4d:95:f1:43:93:83:cd:18:6c:eb:9c:18:c3:04:a3:dd:83:2c:
cf:08:ed:d7:34:20:61:bf:a7:9e:40:89:8b:40:53:a7:f0:84:
b0:2c:89:d7:7f:c7:36:e7:67:04:7e:44:57:70:29:6b:1a:34:
45:35:ab:a3:2c:9c:bd:e4:96:a7:2b:f3:cd:de:03:e0:c8:9a:
d8:a3:a8:a9:da:c9:a6:06:22:82:44:d9:c6:3e:4f:ba:2e:6c:
03:e7:1e:50:f0:54:9a:ff:77:96:25:9e:99:9f:63:ca:47:57:
ff:05:c1:1e:6b:9d:76:79:81:a4:51:33:3d:a0:f6:c5:8c:7e:
ca:26:28:ed:93:df:f8:ff:11:06:86:91:3a:7d:cc:b1:9e:f5:
32:57:1d:7f:59:21:d7:61:51:89:a4:be:0c:58:a3:7f:c5:54:
1d:2b:dd:e8:95:aa:ae:a6:0d:5d:47:16:fd:ce:fe:63:72:7d:
53:5a:15:db:0c:3d:bd:7a:44:12:58:43:df:63:ee:0d:16:d1:
53:c3:d7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 22:29:50 2026 by rpki-client