Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/6SnIkEtZFVBLdSTOIU6tviuoiVk.roa
File: 6SnIkEtZFVBLdSTOIU6tviuoiVk.roa (raw, json)
Hash identifier: 2JU8mQnQnUntfGgBvsw+hNifJXLV5MKemaOmSAhzUSo=
Subject key identifier: E9:29:C8:90:4B:59:15:50:4B:75:24:CE:21:4E:AD:BE:2B:A8:89:59
Certificate issuer: /CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Certificate serial: 019F2368948D42F68C86A00B6CA7CA11A392
Authority key identifier: 9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/6SnIkEtZFVBLdSTOIU6tviuoiVk.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211798
IP address blocks: 185.232.41.0/24 maxlen: 24
193.46.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:94:8d:42:f6:8c:86:a0:0b:6c:a7:ca:11:a3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e929c8904b5915504b7524ce214eadbe2ba88959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:71:ae:3a:a9:d8:0f:c7:4d:6a:36:ff:8a:e4:
d4:4e:59:a8:6e:8c:96:36:a7:29:6c:a1:c0:b9:3e:
e9:5d:8f:56:5b:35:21:08:ba:6b:a1:75:e0:3e:a8:
3f:11:2d:71:34:40:88:4f:02:74:24:3b:64:d2:2e:
16:7e:f9:c9:a5:b8:e8:af:ef:02:11:9b:80:d4:4d:
f1:b9:a1:00:ed:8b:f1:d0:f2:d2:77:b8:cc:10:2d:
85:13:02:2f:2b:be:a5:1a:da:35:e5:70:17:1b:37:
fe:73:46:ae:11:42:b1:73:f6:92:73:f3:c9:4c:7d:
14:0b:bb:67:3b:eb:7b:e2:3f:03:19:0c:ac:0f:b9:
1b:d7:d7:7f:41:b6:21:45:6a:d7:9f:83:fa:d9:ac:
a8:ed:eb:cc:5c:c0:1c:63:1b:9c:09:39:3d:f5:8a:
df:d9:3d:06:8c:74:94:6c:e2:0f:a7:eb:cd:00:dd:
ae:2c:a6:4e:57:56:17:56:4a:03:fc:b8:33:bc:22:
62:a7:eb:03:ba:10:e6:3c:f4:4e:5a:2f:0a:db:8f:
07:0f:2e:52:69:09:7a:96:b8:4d:ec:d6:b6:f8:a7:
a9:d0:c7:c9:21:71:9f:8b:52:39:f3:b8:fb:4d:9d:
42:04:73:dd:eb:67:8c:80:1d:99:82:32:d2:66:a4:
65:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:29:C8:90:4B:59:15:50:4B:75:24:CE:21:4E:AD:BE:2B:A8:89:59
X509v3 Authority Key Identifier:
keyid:9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/6SnIkEtZFVBLdSTOIU6tviuoiVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.41.0/24
193.46.216.0/24
Signature Algorithm: sha256WithRSAEncryption
54:bf:dc:89:e9:e7:23:ad:02:9b:03:cd:55:c5:39:06:5b:9f:
de:ed:11:f8:c9:62:70:1f:3d:ff:26:35:65:b1:fc:8d:f5:c8:
cb:12:14:91:a3:7c:2d:2c:be:7b:f0:76:d9:6a:74:fe:9c:0d:
85:81:cb:01:dc:87:fd:a7:ab:9f:ba:0e:5b:7e:36:87:5f:b1:
37:84:d1:c2:23:85:97:71:ca:1e:96:5f:3d:92:f9:73:00:04:
c5:c7:2e:e2:d7:39:5a:ed:8f:eb:15:30:10:87:0d:9e:5d:82:
1b:d8:5d:d7:b1:3b:9d:03:3f:69:7b:23:93:c8:96:03:6a:1d:
98:7f:ba:77:94:c7:cf:38:b6:2f:cd:9d:d7:15:58:f5:45:43:
c0:fe:fc:6d:d2:a7:d7:b7:21:14:f1:7b:84:c5:7c:53:83:69:
a6:b1:8a:06:dd:9c:59:5f:e3:39:f0:57:f2:e2:f1:19:74:53:
f3:f2:d1:6f:9c:57:25:2c:25:0b:4b:68:97:f2:17:35:ee:5b:
48:97:26:70:fd:6a:d0:28:5e:65:a6:b6:03:f8:70:9e:6b:be:
b2:00:d1:82:10:7c:76:b4:a5:30:f3:ef:ac:73:1a:5f:c7:fe:
ad:70:12:3c:ca:75:1d:24:53:b6:59:06:e4:81:00:40:4e:8a:
d7:61:a4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 08:45:16 2026 by rpki-client