Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6E1xGPR8gJQzBvBU4G6V1KFJmMc.roa
File: 6E1xGPR8gJQzBvBU4G6V1KFJmMc.roa (raw, json)
Hash identifier: XaKdvoxRpcawC0KBzLskv/XR9czhFpFJVKIlHvd1apE=
Subject key identifier: E8:4D:71:18:F4:7C:80:94:33:06:F0:54:E0:6E:95:D4:A1:49:98:C7
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01991A1D31F728A1F91F717B6A495E0482DF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6E1xGPR8gJQzBvBU4G6V1KFJmMc.roa
Signing time: Fri 05 Sep 2025 13:42:24 +0000
ROA not before: Fri 05 Sep 2025 13:42:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215885
IP address blocks: 80.240.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 15:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1a:1d:31:f7:28:a1:f9:1f:71:7b:6a:49:5e:04:82:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 5 13:42:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e84d7118f47c80943306f054e06e95d4a14998c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:a8:77:75:50:27:46:46:45:5d:8a:2f:8f:
49:38:d4:cc:03:32:72:37:90:38:a2:96:23:e7:0c:
f6:4b:21:20:2f:06:54:56:f1:79:b8:0b:e1:9a:d5:
33:ac:77:a5:31:3e:df:7d:17:9a:d6:e7:4a:6d:52:
b9:b5:6b:1e:0c:a6:1d:52:9b:e8:fd:08:c5:1b:6a:
21:d0:69:c5:15:37:0b:0f:aa:a9:a6:8e:b6:6b:7f:
2d:b8:9d:80:58:69:76:e0:76:88:3f:04:fd:98:28:
07:a3:76:a3:b1:04:25:d2:b6:25:bb:39:82:1b:aa:
4c:1d:b3:2e:b4:75:b4:11:31:9f:fd:b6:01:4d:2c:
a8:1a:ff:19:da:f5:7e:54:c6:c5:73:06:97:92:6d:
d5:cf:f7:e0:4e:e2:6f:72:e2:f8:bd:6c:d7:5f:d3:
05:48:66:31:39:04:ab:8c:11:36:d2:7b:36:94:b8:
73:1a:bf:27:19:f9:40:45:fd:fb:d5:93:43:f9:35:
54:ab:ba:ca:2e:52:04:ef:79:f8:6f:7c:a5:a5:3c:
ff:22:71:9e:22:e6:42:a6:38:8e:75:48:45:0d:ad:
c2:4d:24:b1:d7:c5:14:b9:59:52:0c:b6:90:ff:da:
b6:63:bd:e3:71:a8:fa:27:9a:10:52:15:6b:39:72:
1f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4D:71:18:F4:7C:80:94:33:06:F0:54:E0:6E:95:D4:A1:49:98:C7
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6E1xGPR8gJQzBvBU4G6V1KFJmMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.86.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b8:b4:13:4d:66:54:2a:78:0d:76:a1:0e:d9:eb:3e:7a:0a:
de:f5:8c:4e:fc:88:e5:e8:f9:ee:65:92:3a:02:0c:2c:9e:99:
95:5d:ff:c2:9c:08:f6:8d:eb:be:ad:ef:16:99:c1:ac:9a:99:
41:eb:6e:13:05:3b:3c:3f:ce:88:fb:0f:3b:18:47:69:c2:57:
96:62:98:b9:cd:23:42:1d:8d:9f:77:8e:7c:b7:f8:fc:33:8d:
7a:54:f7:e9:04:71:70:73:af:fa:52:0e:47:a1:af:29:f1:90:
b5:dd:e9:0d:80:e3:ee:0e:20:d8:25:78:dc:5b:0f:f2:84:7d:
9c:e6:60:b8:29:bf:bd:6e:77:02:5f:b6:4c:90:b8:87:70:ae:
59:2c:47:ea:8d:ee:be:82:26:68:19:2f:71:f7:d4:de:73:cf:
06:82:5c:0f:17:1a:cb:1d:18:ef:3d:5f:9f:af:5d:47:76:b3:
67:91:73:7e:67:62:45:7d:66:17:34:15:c8:e6:b9:7c:37:a4:
bd:21:41:32:c1:70:8d:db:f2:4a:ed:ab:10:d1:a4:69:f8:82:
ce:e1:03:95:36:50:0e:52:92:49:37:8f:f6:99:44:3d:a7:4c:
ab:78:0e:d9:83:46:24:07:21:13:26:9d:21:74:51:b9:7d:c6:
ae:9c:94:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZkaHTH3KKH5H3F7akleBILfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwOTA1MTM0MjI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODRkNzExOGY0N2M4MDk0MzMwNmYwNTRlMDZlOTVkNGExNDk5OGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPiod3VQJ0ZGRV2KL49JONTMAzJy
N5A4opYj5wz2SyEgLwZUVvF5uAvhmtUzrHelMT7ffRea1udKbVK5tWseDKYdUpvo
/QjFG2oh0GnFFTcLD6qppo62a38tuJ2AWGl24HaIPwT9mCgHo3ajsQQl0rYluzmC
G6pMHbMutHW0ETGf/bYBTSyoGv8Z2vV+VMbFcwaXkm3Vz/fgTuJvcuL4vWzXX9MF
SGYxOQSrjBE20ns2lLhzGr8nGflARf371ZND+TVUq7rKLlIE73n4b3ylpTz/InGe
IuZCpjiOdUhFDa3CTSSx18UUuVlSDLaQ/9q2Y73jcaj6J5oQUhVrOXIfYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOhNcRj0fICUMwbwVOBuldShSZjHMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvNkUxeEdQUjhnSlF6QnZCVTRHNlYxS0ZKbU1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPBWMA0G
CSqGSIb3DQEBCwUAA4IBAQADuLQTTWZUKngNdqEO2es+egre9YxO/Ijl6PnuZZI6
AgwsnpmVXf/CnAj2jeu+re8WmcGsmplB624TBTs8P86I+w87GEdpwleWYpi5zSNC
HY2fd458t/j8M416VPfpBHFwc6/6Ug5Hoa8p8ZC13ekNgOPuDiDYJXjcWw/yhH2c
5mC4Kb+9bncCX7ZMkLiHcK5ZLEfqje6+giZoGS9x99Tec88GglwPFxrLHRjvPV+f
r11HdrNnkXN+Z2JFfWYXNBXI5rl8N6S9IUEywXCN2/JK7asQ0aRp+ILO4QOVNlAO
UpJJN4/2mUQ9p0yreA7Zg0YkByETJp0hdFG5fcaunJQ5
-----END CERTIFICATE-----
Generated at Tue Sep 9 23:45:00 2025 by rpki-client