Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/6c80kLbYMnNxeRUnfm-JdcZjyIc.roa
File: 6c80kLbYMnNxeRUnfm-JdcZjyIc.roa (raw, json)
Hash identifier: fXeOWb1qD6zS3d8pAFs8PMaRWeRMXrtdVyvhFO9LoVM=
Subject key identifier: E9:CF:34:90:B6:D8:32:73:71:79:15:27:7E:6F:89:75:C6:63:C8:87
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01A0EC55C2A1B9D910C65642F72B4554B16B
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/6c80kLbYMnNxeRUnfm-JdcZjyIc.roa
Signing time: Tue 29 Sep 2026 08:43:58 +0000
ROA not before: Tue 29 Sep 2026 08:43:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216078
IP address blocks: 146.255.189.0/24 maxlen: 24
212.46.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:55:c2:a1:b9:d9:10:c6:56:42:f7:2b:45:54:b1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Sep 29 08:43:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9cf3490b6d83273717915277e6f8975c663c887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:94:aa:02:8f:95:7e:11:78:45:d8:86:e0:
99:f4:c4:55:28:1c:c4:c9:5b:b5:b5:f1:f0:b2:50:
65:8e:47:46:3c:d4:b0:02:78:fc:47:a0:2e:09:a0:
eb:5f:a9:df:e4:04:c2:2b:51:26:e2:81:9e:7f:47:
4f:b9:c6:50:d9:b1:b8:6a:7d:de:6a:8d:ab:ad:e8:
ff:88:17:b1:64:48:6d:af:35:3d:9a:ab:14:9e:82:
d2:df:f8:94:b0:b3:4b:d0:64:c8:97:b8:fc:34:6f:
eb:81:3f:59:e4:ab:1c:40:5a:ff:93:0e:0d:2e:71:
a2:aa:a9:3d:3c:22:86:c7:ed:d3:38:6a:9e:78:15:
b4:36:80:b1:0b:0e:bc:fd:af:66:39:09:de:34:de:
0a:aa:af:1b:55:c1:42:20:f7:7b:e1:51:7c:0e:8f:
4d:09:ce:d0:32:04:47:91:4d:16:5d:15:1c:38:31:
08:60:c5:fb:bd:e6:6c:d7:30:51:10:5e:43:41:cf:
40:75:08:18:d2:62:a4:2a:12:25:6f:5c:9e:6c:e7:
44:6b:ac:59:fb:e1:0f:fe:a5:e4:29:fc:fa:ef:a7:
e6:9c:5c:47:80:27:35:8c:e4:eb:58:80:b7:93:33:
c4:04:75:21:52:f6:bf:b7:77:bd:77:c7:60:48:c5:
de:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CF:34:90:B6:D8:32:73:71:79:15:27:7E:6F:89:75:C6:63:C8:87
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/6c80kLbYMnNxeRUnfm-JdcZjyIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.189.0/24
212.46.33.0/24
Signature Algorithm: sha256WithRSAEncryption
39:32:20:71:00:50:6b:83:4a:4d:61:07:28:a2:60:a9:ab:42:
f1:58:d5:7a:3d:15:cf:3b:a2:55:e4:d9:13:b8:86:3c:f8:3d:
ec:64:c4:3f:39:9f:28:86:98:f6:5d:16:52:50:43:b0:8f:ad:
7d:27:7a:84:d7:b7:fb:d1:36:93:58:a7:d2:82:61:3e:49:81:
01:f6:97:1d:a5:d5:6c:b7:a2:0a:18:75:3d:01:e6:e3:b3:12:
fd:ab:60:65:ff:92:89:bd:49:aa:34:8b:d6:56:fc:2b:ff:c2:
a9:ab:1e:95:13:d4:63:6a:19:63:57:4e:31:65:18:82:aa:18:
5a:03:68:9e:02:5d:b3:62:2e:2e:dd:f6:79:5d:ef:18:84:fe:
6b:69:da:cb:d4:2b:ec:f1:39:4b:18:ed:6f:5d:f5:94:dc:24:
0b:65:cd:00:22:fd:f7:bb:08:0c:9b:38:a5:15:f2:25:cf:c6:
ef:e3:de:42:63:dc:3d:23:a9:2e:f2:d4:df:e3:c2:0b:d4:fa:
d8:09:66:c9:80:ea:2c:63:d2:c4:a3:c0:47:4a:d7:e9:77:e6:
f3:dd:7e:4b:c1:c4:03:34:3e:bc:57:cf:d0:68:cf:bd:c2:a2:
8c:65:a2:96:e2:0e:49:a0:ff:e0:ce:4c:fb:73:f6:64:da:3d:
b3:81:fa:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:13:46 2026 by rpki-client