Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6c8vX6mjG-emLz9T6Xjf1Rjuvsk.roa
File: 6c8vX6mjG-emLz9T6Xjf1Rjuvsk.roa (raw, json)
Hash identifier: uIFLJtMN1Nx+Ng18MB/3aS+7XW3bGtNUrWDbYXIBj9c=
Subject key identifier: E9:CF:2F:5F:A9:A3:1B:E7:A6:2F:3F:53:E9:78:DF:D5:18:EE:BE:C9
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FE0A49D50F58967064E00CDEB9FFAC3BF
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6c8vX6mjG-emLz9T6Xjf1Rjuvsk.roa
Signing time: Sat 08 Aug 2026 09:11:52 +0000
ROA not before: Sat 08 Aug 2026 09:11:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210542
IP address blocks: 87.83.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e0:a4:9d:50:f5:89:67:06:4e:00:cd:eb:9f:fa:c3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 8 09:11:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9cf2f5fa9a31be7a62f3f53e978dfd518eebec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:86:e9:70:9f:26:4b:85:b4:70:69:7b:0f:d0:
db:12:43:36:7e:ee:22:30:63:c8:46:f7:7f:b9:1f:
7a:b1:b7:d7:c0:1a:db:3a:5d:a3:13:a8:8b:f6:40:
40:d1:70:44:08:09:b7:ed:85:0e:9d:2d:f7:ae:59:
ae:70:7d:ab:70:c4:a1:35:96:61:65:c1:cb:41:aa:
76:a4:42:6e:90:7b:d7:6e:a0:da:ac:cc:76:78:b5:
ac:eb:89:76:7d:27:a5:dc:ed:25:31:4f:72:05:45:
20:eb:74:28:5d:13:72:13:2e:d6:b0:6a:09:ee:c5:
d1:80:cc:39:69:ca:a0:94:04:17:e9:a2:8a:4c:98:
ab:b0:53:89:34:b0:6e:09:0c:99:76:a3:57:03:ab:
9b:1f:b8:ab:c6:87:ab:d0:b6:fc:a2:5e:07:b3:d9:
71:da:fa:8c:ac:a5:89:19:01:ce:2c:21:95:80:af:
b4:e4:ca:d1:29:b0:20:75:3d:52:5b:af:06:cd:0b:
bc:5b:dd:98:6a:6b:25:69:22:51:1b:f4:0b:d7:d8:
6c:08:a6:95:fa:68:8b:c7:4a:75:55:93:d6:13:7d:
b8:97:14:90:36:89:2e:ba:92:f8:69:9b:6f:da:4e:
88:2a:f0:52:ab:d6:6b:10:ea:a4:6a:ff:03:c2:10:
d6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CF:2F:5F:A9:A3:1B:E7:A6:2F:3F:53:E9:78:DF:D5:18:EE:BE:C9
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6c8vX6mjG-emLz9T6Xjf1Rjuvsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.63.0/24
Signature Algorithm: sha256WithRSAEncryption
66:9e:16:eb:1a:8b:84:c9:2e:28:c7:9d:85:c4:e4:1d:50:25:
9d:0b:f7:9d:37:8e:63:84:96:56:3f:7c:3b:82:43:5d:dd:29:
1c:96:c1:d5:c5:9c:20:5b:80:43:98:20:27:13:65:65:cf:8a:
87:50:45:67:bc:e5:c2:a9:f9:db:ef:95:58:5d:80:f7:59:ac:
bf:62:68:e6:97:b6:7e:ed:34:77:f3:fe:c1:95:b7:29:d4:49:
8d:92:74:30:e6:13:2e:78:0e:ce:5a:2a:47:41:c9:8b:ba:37:
c5:0c:2e:d1:7c:13:a1:2b:2b:71:bc:12:79:47:8a:d0:2f:25:
c2:8a:97:3f:d8:d3:98:f4:b3:a0:84:7c:7e:a2:af:51:d6:b8:
16:ad:5e:0d:a7:3e:53:2c:21:05:4a:b8:61:c7:26:b0:8c:4c:
75:42:c1:04:6f:0f:27:5f:08:9f:47:64:9b:62:c6:fe:a9:88:
0c:eb:88:67:e7:d4:18:0e:28:c0:39:05:55:81:58:1f:08:0e:
40:f6:6c:0e:22:a6:a7:3a:da:9b:e3:9a:67:a6:0e:ba:b9:dd:
2c:af:3c:a8:2c:84:76:3c:6e:68:a8:e4:3b:43:3c:a5:3e:fd:
0a:d3:34:5a:83:29:a0:61:34:03:57:7d:22:7a:90:7c:55:a6:
1a:c6:de:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:08:19 2026 by rpki-client