Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6EDe1sI4D82XH0keFHcEvDlhiJw.roa
File: 6EDe1sI4D82XH0keFHcEvDlhiJw.roa (raw, json)
Hash identifier: 9fjJmVWplTFXvPY7QvFDXH9x8AgtxIo7gb2+XBZDvuo=
Subject key identifier: E8:40:DE:D6:C2:38:0F:CD:97:1F:49:1E:14:77:04:BC:39:61:88:9C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019DBFFD15E8991D4A537E8CBD59B1826E7B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6EDe1sI4D82XH0keFHcEvDlhiJw.roa
Signing time: Fri 24 Apr 2026 14:55:27 +0000
ROA not before: Fri 24 Apr 2026 14:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 79.99.75.0/24 maxlen: 24
81.168.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Apr 2026 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bf:fd:15:e8:99:1d:4a:53:7e:8c:bd:59:b1:82:6e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 24 14:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e840ded6c2380fcd971f491e147704bc3961889c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f2:57:e1:88:92:88:94:31:21:ea:a6:11:cb:
34:c8:d9:63:46:2c:47:35:03:aa:4c:10:50:db:04:
13:a6:00:77:3b:fa:7b:5b:53:99:21:0d:5c:83:bd:
e9:97:f3:7c:33:2a:75:b0:51:1a:63:c9:f0:cb:9b:
12:04:23:15:7f:b5:45:f6:9b:81:5e:02:83:75:f2:
c1:12:b7:ab:38:67:aa:c7:6a:c9:7e:90:35:04:85:
9c:fb:5d:b4:a9:1a:1e:20:65:ad:94:b8:a6:d7:4e:
c5:5f:9f:ae:20:e4:18:c7:86:29:32:ca:aa:97:33:
f9:75:09:e5:80:c7:76:26:4f:29:6e:82:b3:06:db:
83:2e:e6:9c:12:18:52:0f:95:88:60:3a:2f:ac:d3:
ba:4c:af:8e:67:e5:f4:37:08:76:7d:c9:99:95:8e:
38:51:85:e6:6a:d5:ec:79:59:87:de:4c:de:94:5d:
d6:fb:44:60:66:74:59:53:68:f4:a9:5e:1e:51:f9:
e8:6c:b6:b8:e3:9f:f2:ec:ac:8a:0c:5b:a3:a5:21:
25:d6:ee:74:ec:bb:32:49:b0:5e:aa:6a:84:e8:dd:
4f:d7:b9:38:d9:27:88:32:fb:86:a7:2e:7d:c5:14:
f4:65:f5:bd:bc:8b:7d:77:00:90:4c:e4:a6:bf:dc:
2b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:40:DE:D6:C2:38:0F:CD:97:1F:49:1E:14:77:04:BC:39:61:88:9C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/6EDe1sI4D82XH0keFHcEvDlhiJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.75.0/24
81.168.100.0/24
Signature Algorithm: sha256WithRSAEncryption
34:63:c7:42:b5:6b:e2:10:02:78:a0:71:b6:f8:8d:43:2b:1e:
b5:51:aa:33:6a:ec:d1:a3:08:75:eb:87:22:32:0b:3f:f4:1c:
44:4f:d8:de:3d:12:b5:de:0c:71:57:6e:79:b3:4e:1c:62:33:
4c:1c:98:8a:d5:0a:98:dd:68:92:9a:eb:bf:e7:eb:1e:b8:67:
13:c1:a3:74:3a:e0:1a:f8:e8:41:ca:ca:b4:be:b0:2d:67:5e:
f1:75:30:d8:e7:b0:83:5c:29:e2:9c:5b:f5:64:41:01:69:e4:
a6:7c:a5:83:f7:bd:6a:b9:e6:70:7f:ad:64:a9:9b:a1:f9:84:
7f:51:f9:90:3f:df:5c:44:75:05:0a:78:22:59:4e:e3:5e:79:
c4:fb:05:6f:94:8a:f2:d9:1b:c0:5e:16:cb:b5:5c:87:6f:53:
45:8f:68:bd:98:d7:a9:bb:f4:12:d9:4e:f3:e3:1d:91:c7:48:
35:ac:04:ab:66:93:1c:31:53:a0:ef:81:96:75:21:f4:30:a9:
4c:ea:97:ea:e9:49:b3:aa:e1:da:e6:37:ab:f1:35:17:b7:83:
17:61:e8:64:d2:92:20:a3:6a:14:98:eb:d2:90:f5:a8:89:66:
e5:a8:7d:be:c4:4d:25:ca:28:82:e8:3f:cc:39:de:c3:97:cb:
4a:b4:b7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 07:56:05 2026 by rpki-client