Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/6_mKfmRyYh_HHt_1AeGy1B2emsw.roa
File: 6_mKfmRyYh_HHt_1AeGy1B2emsw.roa (raw, json)
Hash identifier: 71vWDant5UDHMxwkBCq/hUEjKeIJZzb0rpoKSTkfucY=
Subject key identifier: EB:F9:8A:7E:64:72:62:1F:C7:1E:DF:F5:01:E1:B2:D4:1D:9E:9A:CC
Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Certificate serial: 019FB8F50DF687FB46F46E7FBB92DF3A7311
Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/6_mKfmRyYh_HHt_1AeGy1B2emsw.roa
Signing time: Fri 31 Jul 2026 16:14:55 +0000
ROA not before: Fri 31 Jul 2026 16:14:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208802
IP address blocks: 45.84.200.0/22 maxlen: 24
45.84.200.0/23 maxlen: 23
45.84.203.0/24 maxlen: 24
2a0e:9f80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b8:f5:0d:f6:87:fb:46:f4:6e:7f:bb:92:df:3a:73:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Validity
Not Before: Jul 31 16:14:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebf98a7e6472621fc71edff501e1b2d41d9e9acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6b:22:e4:5b:ad:80:b3:7e:2b:03:d0:a0:91:
0e:e4:2a:c1:c4:12:a9:65:b4:46:db:4d:56:8f:53:
f5:4d:bb:51:1f:56:66:57:fc:62:27:08:f5:fd:b6:
41:56:01:5e:a6:21:5e:30:d9:5b:72:9e:ff:b7:78:
a6:05:0b:49:d2:45:a4:2d:d1:06:9d:85:a6:98:64:
b8:62:1a:e5:13:c2:c4:74:a9:69:b9:b4:75:0f:2a:
14:ae:3f:1c:a8:19:65:69:d2:b9:1b:d7:2d:ca:34:
da:c7:5f:be:d4:ec:42:52:83:b2:ad:4c:04:c3:5d:
aa:90:cd:4f:5e:75:ba:97:fa:61:69:83:01:30:3f:
60:c7:74:ab:f9:82:c6:f6:93:25:99:4b:f3:32:21:
e6:d2:08:df:ae:ea:59:df:ee:6b:6e:c4:d0:3f:dc:
1e:d3:a8:7b:e1:f3:dc:e6:69:67:83:67:a5:7d:0a:
cc:95:10:33:4a:a9:c7:85:b1:4d:96:d9:ba:2c:0e:
a0:03:68:7a:54:a1:eb:02:c5:52:bd:3e:c3:6f:f6:
94:28:92:47:d5:04:f7:43:b3:b0:7a:19:88:c3:d0:
00:64:9f:df:f2:2b:bb:f1:da:3c:ae:88:6d:e0:78:
16:a9:f8:0d:78:43:f5:00:0e:c2:94:ec:a6:f2:c6:
b0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F9:8A:7E:64:72:62:1F:C7:1E:DF:F5:01:E1:B2:D4:1D:9E:9A:CC
X509v3 Authority Key Identifier:
keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/6_mKfmRyYh_HHt_1AeGy1B2emsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.200.0/22
IPv6:
2a0e:9f80::/29
Signature Algorithm: sha256WithRSAEncryption
33:5c:2a:46:d8:07:27:b6:69:f1:5b:a8:e0:0e:f9:10:a8:74:
1c:56:07:fd:6a:fa:69:55:78:45:71:8d:c3:e3:ae:12:55:a5:
c5:cd:05:47:8b:54:af:61:c4:6b:6b:71:65:e0:ab:f0:96:49:
a6:c1:7b:86:c2:eb:8e:f4:09:eb:de:78:41:f6:6f:e6:b5:f3:
35:f8:68:6a:92:5e:b2:de:38:08:91:2d:87:a1:75:c4:b7:39:
e2:24:dc:46:c1:41:f0:08:92:3b:8e:31:2b:2e:19:94:4b:00:
63:ea:5a:54:56:a9:78:6f:40:ca:ef:bc:bc:e8:33:e8:99:7a:
d7:4f:2b:c4:06:22:ea:70:9f:d8:1b:9f:ab:92:1b:88:4a:b9:
9f:6b:36:a1:7b:a3:d4:10:6b:21:5c:d0:61:bd:d2:0b:3c:6e:
ee:4d:7c:be:3f:9a:d1:b9:23:53:20:13:69:16:59:e0:ec:99:
f1:ee:3c:06:2e:68:4a:e9:50:54:b0:6f:54:28:20:3f:02:0b:
92:27:56:27:b5:c0:2a:27:c5:e1:74:13:9f:fa:b2:ab:c0:a6:
68:2c:9c:bf:33:fc:71:bd:ed:60:25:24:75:a8:e3:d7:60:f5:
7a:b1:d4:cb:23:06:9c:12:c7:a2:3f:85:a2:b1:89:79:f4:11:
96:42:02:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:52:04 2026 by rpki-client