Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6g3pF3-dx6eT3aYbDtjIbEDmxpg.roa
File: 6g3pF3-dx6eT3aYbDtjIbEDmxpg.roa (raw, json)
Hash identifier: 4n8kp2+bPyBxS4gowrg+vE5r7XVYnOu1i5xZHywCa2I=
Subject key identifier: EA:0D:E9:17:7F:9D:C7:A7:93:DD:A6:1B:0E:D8:C8:6C:40:E6:C6:98
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A014978483F553409D354243A58093EEFC
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6g3pF3-dx6eT3aYbDtjIbEDmxpg.roa
Signing time: Tue 18 Aug 2026 11:17:49 +0000
ROA not before: Tue 18 Aug 2026 11:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218965
IP address blocks: 87.85.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:97:84:83:f5:53:40:9d:35:42:43:a5:80:93:ee:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 18 11:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea0de9177f9dc7a793dda61b0ed8c86c40e6c698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a2:8d:49:a0:8d:43:53:73:78:d6:3f:06:f0:
9e:66:4f:3b:59:d3:5c:3b:25:bf:13:04:da:30:10:
ea:ba:f4:5c:e9:4e:91:9d:9c:6e:7e:bd:04:46:b1:
09:28:3b:6b:89:f1:18:2d:42:a6:1c:73:76:e5:8b:
bc:02:10:f9:d0:f8:6c:e9:b1:5c:a6:03:a7:af:96:
67:a6:eb:22:dc:a9:4a:e7:06:8b:42:65:04:95:7a:
cf:f3:63:36:10:53:59:2d:f8:76:1e:e4:2f:e7:71:
d2:62:f7:1a:a7:c2:7a:2e:f1:ac:ee:d6:d1:25:97:
55:48:71:57:96:35:a5:2d:37:da:4d:26:33:87:63:
b8:a2:5a:6c:7c:75:ed:38:2f:4d:4a:a4:88:cf:1f:
e5:2d:d6:87:d2:93:46:50:0f:c6:7e:39:cd:a0:df:
2e:ec:cf:a3:97:8a:49:9a:9c:4f:5b:ea:6e:14:a9:
80:78:ff:ef:53:97:75:61:40:55:81:57:cf:bb:21:
54:31:10:23:85:69:e0:c9:93:a2:de:ac:a4:0a:90:
ed:9e:cf:cc:52:ad:6d:91:cd:11:3f:70:34:75:ed:
3c:12:9e:33:ea:21:32:0a:ab:c3:c1:45:ac:c4:a1:
87:ab:2c:9e:44:40:28:a5:00:22:8c:fa:37:29:95:
3d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0D:E9:17:7F:9D:C7:A7:93:DD:A6:1B:0E:D8:C8:6C:40:E6:C6:98
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6g3pF3-dx6eT3aYbDtjIbEDmxpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.85.164.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:31:13:a4:91:b5:ce:8b:93:ae:18:1b:3f:01:b3:ca:bf:67:
26:23:3c:85:4b:e1:aa:71:43:7a:6d:40:01:fa:f0:c8:1b:c0:
3e:90:af:c6:6b:9d:92:f8:54:f8:01:4a:e6:82:47:30:41:9c:
92:e5:fb:40:64:04:05:6f:f5:53:42:64:fa:df:10:95:40:5b:
c4:7a:06:43:45:8e:1e:74:1b:b5:54:59:88:84:31:42:38:8b:
38:77:a4:61:65:4c:a0:b8:e6:02:06:64:7b:f2:88:b3:68:0c:
ea:1d:0f:86:d8:23:cb:b1:78:64:2c:d1:34:31:24:2b:d9:f6:
91:96:ac:e8:f2:8c:69:f1:18:42:9a:0b:1a:c6:62:b1:f4:91:
de:1e:bc:81:a5:8f:4d:e3:e0:e0:3e:b4:ba:d8:e4:7d:a8:ac:
60:10:07:31:ba:82:cd:87:4c:4f:73:f5:d7:e7:e1:bb:a5:02:
e2:74:36:cc:03:fb:94:6f:a3:32:60:f9:a7:9f:ff:57:72:1f:
e4:0e:fe:65:7b:5b:cc:8d:2e:eb:d2:50:42:ee:86:13:02:1b:
48:d8:b6:f4:93:79:c3:07:c4:d4:bf:86:e2:e8:14:c3:4e:0f:
90:81:22:1e:9d:11:e7:e7:c2:b3:dd:1e:c1:fb:7a:50:7e:bd:
af:15:8d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:27:49 2026 by rpki-client