Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6L9XL0cCONTRfuttXBFFRrVWJII.roa
File: 6L9XL0cCONTRfuttXBFFRrVWJII.roa (raw, json)
Hash identifier: FXZxa1ScQYEU6UKQ1vYqYAnSNnu44F2ILH0uS0fg3yE=
Subject key identifier: E8:BF:57:2F:47:02:38:D4:D1:7E:EB:6D:5C:11:45:46:B5:56:24:82
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A03DC83F1A5FABDE9089F5FFE194E23469
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6L9XL0cCONTRfuttXBFFRrVWJII.roa
Signing time: Wed 26 Aug 2026 11:15:28 +0000
ROA not before: Wed 26 Aug 2026 11:15:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 37963
IP address blocks: 87.83.216.0/23 maxlen: 24
87.83.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:c8:3f:1a:5f:ab:de:90:89:f5:ff:e1:94:e2:34:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 26 11:15:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8bf572f470238d4d17eeb6d5c114546b5562482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f9:7d:bf:cb:e5:16:65:55:96:b0:c3:b1:f8:
9a:4c:f7:71:05:72:5a:61:e5:3c:92:46:f7:85:4d:
95:89:a6:c2:ab:9b:38:1d:cb:df:23:92:91:52:cd:
9d:65:39:fb:4a:f3:c9:6e:77:04:10:40:5c:4f:b4:
b1:3f:d1:2f:d2:d1:00:0c:a0:87:b9:f5:7b:4c:da:
dd:03:42:50:9b:5c:4b:92:67:a7:5a:cc:8a:5b:83:
b8:ed:6f:a2:a4:b0:2f:15:bb:cf:b0:36:2d:71:c3:
f6:55:8f:2d:b7:ee:71:73:d0:81:8a:bd:cb:f2:0e:
6b:25:ed:21:ea:f8:b3:49:4c:56:f4:eb:6d:26:ac:
51:a3:97:64:4f:42:d2:b0:78:b0:4e:0e:fa:a9:9e:
a2:68:28:25:4c:53:3d:d3:06:b3:67:5c:3b:0d:85:
65:43:9c:5a:74:ad:d0:c0:8f:9c:79:1d:a8:5c:36:
06:45:90:33:96:a3:dc:a8:ae:6e:8d:4c:dc:e8:fe:
8c:b2:18:30:95:77:28:4c:52:ed:c6:62:86:98:41:
5d:ac:cd:4a:21:9c:f4:f1:4b:b2:db:52:7f:a7:05:
cf:77:d6:80:f9:a1:af:7b:c7:a4:98:3d:ff:7b:a7:
3d:48:34:db:b2:98:05:89:ca:c3:37:81:1e:ef:72:
88:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BF:57:2F:47:02:38:D4:D1:7E:EB:6D:5C:11:45:46:B5:56:24:82
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6L9XL0cCONTRfuttXBFFRrVWJII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.216.0/23
87.83.234.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:92:1b:6a:5f:13:76:d4:7e:31:2a:00:9e:af:55:e4:45:e6:
fc:b6:5b:26:88:91:9c:30:a7:e7:9f:5b:ac:e1:db:b5:87:67:
97:07:07:18:5a:1b:6a:17:34:4e:32:23:9b:50:7a:d1:df:d7:
e9:2f:ca:73:b5:40:ed:6e:da:a4:03:b9:b8:80:10:b5:ca:e3:
f5:39:53:5a:21:c4:25:ad:5a:22:ed:be:f1:19:13:a8:ed:43:
e9:29:71:68:dc:2b:83:05:eb:61:17:37:85:7d:32:0d:6b:47:
0b:ea:0b:cc:3c:66:a1:6a:5d:f1:48:16:65:80:d7:0e:3c:d5:
bf:99:66:11:1f:3d:fc:d4:f6:42:95:d4:52:17:58:7c:bc:54:
03:9b:6e:e5:4a:73:46:15:48:2f:3f:46:f1:c2:73:85:d9:da:
1b:9b:0d:23:29:4b:d6:0d:90:30:07:dc:38:f4:cd:5b:51:23:
2d:33:32:cd:15:29:10:fa:df:f5:d7:57:13:89:8c:f6:a1:ec:
62:0a:3c:de:32:21:6b:2d:e1:29:2c:a4:ae:9f:94:4f:02:d9:
a8:2c:75:b3:04:70:02:f6:a9:3f:92:50:ff:75:8a:28:a7:68:
c6:d4:02:09:40:a9:ce:a7:73:0f:f2:c7:dd:ae:01:59:22:8a:
08:ab:bf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:38:41 2026 by rpki-client