Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/6x9CPs_nlZiUZrDNRm0LLBkO_98.roa
File: 6x9CPs_nlZiUZrDNRm0LLBkO_98.roa (raw, json)
Hash identifier: Yk43DdM3FfOmE1cEqfYPkL0TlyUIekd9szEn2O6/f08=
Subject key identifier: EB:1F:42:3E:CF:E7:95:98:94:66:B0:CD:46:6D:0B:2C:19:0E:FF:DF
Certificate issuer: /CN=83f8fd7493a2fe056222db41ed693083b50eccfb
Certificate serial: 01A0CE434858C2A94643B53C623CF13154E3
Authority key identifier: 83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/6x9CPs_nlZiUZrDNRm0LLBkO_98.roa
Signing time: Wed 23 Sep 2026 12:35:10 +0000
ROA not before: Wed 23 Sep 2026 12:35:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205111
IP address blocks: 91.103.153.0/24 maxlen: 24
91.103.155.0/24 maxlen: 24
136.143.168.0/24 maxlen: 24
136.143.169.0/24 maxlen: 24
136.143.170.0/23 maxlen: 23
136.143.170.0/24 maxlen: 24
136.143.171.0/24 maxlen: 24
144.89.64.0/23 maxlen: 23
144.89.64.0/24 maxlen: 24
144.89.65.0/24 maxlen: 24
144.89.66.0/23 maxlen: 23
144.89.66.0/24 maxlen: 24
144.89.67.0/24 maxlen: 24
144.89.68.0/23 maxlen: 23
144.89.68.0/24 maxlen: 24
144.89.69.0/24 maxlen: 24
144.89.70.0/23 maxlen: 23
169.148.128.0/24 maxlen: 24
169.148.129.0/24 maxlen: 24
169.148.130.0/24 maxlen: 24
169.148.131.0/24 maxlen: 24
169.148.188.0/24 maxlen: 24
169.148.189.0/24 maxlen: 24
185.230.212.0/23 maxlen: 23
185.230.212.0/24 maxlen: 24
185.230.213.0/24 maxlen: 24
185.230.214.0/23 maxlen: 23
185.230.214.0/24 maxlen: 24
185.230.215.0/24 maxlen: 24
199.67.72.0/23 maxlen: 23
199.67.74.0/23 maxlen: 23
199.67.74.0/24 maxlen: 24
199.67.75.0/24 maxlen: 24
199.67.88.0/23 maxlen: 23
199.67.90.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:43:48:58:c2:a9:46:43:b5:3c:62:3c:f1:31:54:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f8fd7493a2fe056222db41ed693083b50eccfb
Validity
Not Before: Sep 23 12:35:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb1f423ecfe795989466b0cd466d0b2c190effdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:5d:38:47:93:55:e5:99:ff:1c:26:5a:d8:
04:10:2a:e3:16:24:9a:26:10:b1:b6:ad:d1:6d:da:
c4:44:09:b5:54:ec:75:a7:54:1c:32:60:a2:5d:9a:
4f:37:a7:66:b7:f1:af:df:e8:5d:a1:6f:09:c6:6f:
92:0e:b0:5f:fc:fc:2c:b0:14:a0:ef:e2:4e:49:0d:
35:13:85:f5:ec:e1:0a:a1:59:9d:56:f6:2c:dc:67:
7a:28:69:78:ea:1b:c5:3e:73:14:55:90:1c:a0:aa:
d3:6f:6a:d1:0c:bc:c6:8d:cc:79:d9:2a:24:74:ff:
61:2d:69:ea:87:26:9c:6b:85:5f:c4:10:a9:b2:f4:
e2:ba:69:bf:80:79:84:9c:d5:b2:c0:a9:33:81:9b:
32:d9:e0:2e:7d:54:df:0e:e0:7d:3d:f3:21:25:67:
04:ef:f2:ba:f6:2d:bb:71:4f:fe:a0:f8:a7:ce:46:
f7:fc:a8:0a:b9:72:0f:11:3b:22:f4:08:68:a0:72:
4c:e2:2b:12:79:59:20:5d:c7:2b:3c:7a:cc:40:41:
65:01:bc:37:c7:92:7a:52:b5:20:d9:fc:4d:05:bf:
28:cc:df:9d:3e:34:81:7e:61:3b:09:ab:e7:b4:e1:
e3:8b:5c:fa:57:9f:4e:29:44:8e:eb:0b:70:8a:46:
65:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1F:42:3E:CF:E7:95:98:94:66:B0:CD:46:6D:0B:2C:19:0E:FF:DF
X509v3 Authority Key Identifier:
keyid:83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/6x9CPs_nlZiUZrDNRm0LLBkO_98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.153.0/24
91.103.155.0/24
136.143.168.0/22
144.89.64.0/21
169.148.128.0/22
169.148.188.0/23
185.230.212.0/22
199.67.72.0/22
199.67.88.0/22
Signature Algorithm: sha256WithRSAEncryption
18:f8:ae:b8:13:a9:12:05:46:43:64:92:03:86:53:b0:21:32:
31:f4:24:5e:2f:9f:21:48:22:2e:31:9c:bb:41:37:1e:23:f6:
37:d4:6f:4f:75:8b:d4:e6:2d:94:be:68:fc:35:f2:2c:61:5b:
de:2d:75:46:5a:22:4a:d5:89:50:e4:d4:3a:63:91:57:ca:a1:
6a:ae:c2:e2:b5:b5:18:34:df:a8:07:37:e8:10:ee:d8:3a:85:
97:75:69:ea:06:67:dd:2b:38:6f:6d:a3:9e:ec:71:e6:9b:97:
0c:6e:36:85:15:f4:70:f6:70:7a:71:9d:df:2d:cc:d0:6b:46:
55:74:c0:c9:b2:d3:33:6d:f2:62:4f:b2:e0:f0:01:d0:ee:bc:
e5:d4:9f:8d:6e:42:fb:f6:19:a7:56:41:ed:cb:47:fc:f3:18:
7b:df:dc:75:ad:d2:18:70:4a:6c:94:c2:ac:02:b4:ab:8e:c3:
1b:d1:30:a8:82:fd:85:61:0f:4d:f9:64:cb:a9:2b:e0:56:3e:
4d:80:84:9f:f1:3b:18:3d:03:c4:74:44:ce:54:0a:44:11:46:
90:ae:86:fa:e7:17:c2:47:e7:dd:42:7e:00:e7:48:48:7d:01:
00:0e:9b:39:12:93:f2:3e:96:46:95:68:59:2f:74:2f:5a:97:
40:6a:98:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:13:11 2026 by rpki-client