Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/B6xDnv8HDCFywpfiB0UuCgZWVWw.roa
File: B6xDnv8HDCFywpfiB0UuCgZWVWw.roa (raw, json)
Hash identifier: WnSysYF5eL+I2hCfl+Xlu30Tuloa46LSgtcTfwUnQ6U=
Subject key identifier: 07:AC:43:9E:FF:07:0C:21:72:C2:97:E2:07:45:2E:0A:06:56:55:6C
Certificate issuer: /CN=b44d5d7a746396f24cfd8d200bfd590fd088eca8
Certificate serial: 019F2368EC480230583745B973096F4E97B0
Authority key identifier: B4:4D:5D:7A:74:63:96:F2:4C:FD:8D:20:0B:FD:59:0F:D0:88:EC:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tE1denRjlvJM_Y0gC_1ZD9CI7Kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/B6xDnv8HDCFywpfiB0UuCgZWVWw.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35535
IP address blocks: 80.241.112.0/20 maxlen: 20
80.241.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/tE1denRjlvJM_Y0gC_1ZD9CI7Kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/tE1denRjlvJM_Y0gC_1ZD9CI7Kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tE1denRjlvJM_Y0gC_1ZD9CI7Kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ec:48:02:30:58:37:45:b9:73:09:6f:4e:97:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b44d5d7a746396f24cfd8d200bfd590fd088eca8
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07ac439eff070c2172c297e207452e0a0656556c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0f:80:20:fb:57:00:65:d7:a6:9b:1b:1a:8e:
d8:29:aa:b6:73:13:05:d6:9f:20:ae:58:7e:49:6f:
93:a7:96:67:09:9c:c4:49:cf:6c:91:93:74:1a:1a:
17:96:9d:95:f7:1d:12:a7:28:aa:03:0c:64:48:7b:
8c:f7:a5:68:0c:b6:95:30:c7:e7:75:3c:dd:3b:70:
b4:9f:27:99:b4:22:2f:ce:07:fa:1f:a5:84:6b:0d:
95:73:12:a8:33:dd:e7:66:17:ac:d5:ae:84:de:90:
6f:fb:95:73:90:69:14:26:94:1b:1c:fd:bf:ab:12:
5c:61:cf:8c:97:b3:e1:a9:7d:d5:53:37:99:fa:a4:
78:fc:3d:a6:89:47:f8:22:86:af:ea:b8:56:8c:c5:
04:09:6d:3e:d0:50:44:17:1e:76:56:d7:d3:6d:c3:
31:a3:87:5b:2f:51:3d:a6:e3:6f:6c:c3:c9:b0:36:
01:31:39:71:e5:e9:25:c0:f4:80:7a:26:30:d6:4a:
41:0f:4d:e0:81:c5:b0:09:1a:d3:86:33:4e:bd:7d:
7e:af:21:bf:65:5a:1f:66:3c:c0:ae:a8:5c:82:e2:
70:3d:db:07:f8:48:e9:e3:3f:1a:ba:6a:32:49:9e:
89:31:df:b9:d6:0c:ad:46:67:c7:26:6a:01:5e:b6:
af:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AC:43:9E:FF:07:0C:21:72:C2:97:E2:07:45:2E:0A:06:56:55:6C
X509v3 Authority Key Identifier:
keyid:B4:4D:5D:7A:74:63:96:F2:4C:FD:8D:20:0B:FD:59:0F:D0:88:EC:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tE1denRjlvJM_Y0gC_1ZD9CI7Kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/B6xDnv8HDCFywpfiB0UuCgZWVWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/tE1denRjlvJM_Y0gC_1ZD9CI7Kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.241.112.0/20
Signature Algorithm: sha256WithRSAEncryption
81:3b:ce:57:26:3c:82:e0:c7:77:39:df:39:f6:c8:5b:48:ae:
d0:eb:bb:0e:a2:6f:2a:21:a8:e8:46:d1:2a:0a:d3:67:25:6e:
73:a4:d8:80:7a:3d:96:a7:1b:6e:9d:27:83:82:0e:64:09:67:
99:f9:31:fb:fb:7d:4b:cd:e9:80:65:fa:b0:8d:e9:1c:97:17:
e2:1a:33:7b:95:cb:cc:18:b3:68:d0:d7:5f:4e:b1:fc:e2:29:
9f:cc:a4:0c:6b:1b:02:cf:62:e5:e7:d6:3e:c1:66:2c:8f:f5:
7e:39:f2:a9:a7:4d:bc:36:6c:1f:b0:cd:a2:ce:57:d5:5a:dc:
7a:94:ce:f1:cc:fd:29:39:79:a4:9b:1d:b1:15:18:8d:29:ec:
e9:29:78:7a:f5:22:c0:61:bf:a9:33:51:ae:3c:f5:bd:b2:a5:
61:09:ab:94:18:de:de:6b:ea:e2:b5:d9:86:f5:45:a1:58:98:
23:54:cd:81:5e:6e:26:70:b3:b0:67:90:7d:65:15:e7:8e:c1:
f9:3a:83:84:34:2e:c1:75:67:a9:a4:9e:f8:d4:a4:3c:59:19:
bc:21:10:b1:af:f3:04:49:ae:ee:41:1a:90:11:4b:12:7a:71:
e7:f1:21:cb:ae:77:43:de:3f:6e:ab:50:49:69:16:b0:52:fe:
bb:94:f6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:19:48 2026 by rpki-client