Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/m6plvVtKPYUhTVh8qo6yQzJmI6w.roa
File: m6plvVtKPYUhTVh8qo6yQzJmI6w.roa (raw, json)
Hash identifier: /n38nBFN6Q02MJ8fb9NkZxeTdHf9cx5Z06jj8RQetq0=
Subject key identifier: 9B:AA:65:BD:5B:4A:3D:85:21:4D:58:7C:AA:8E:B2:43:32:66:23:AC
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01A1683A9CDF4B7B3B2FD2FDD6E254F83911
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/m6plvVtKPYUhTVh8qo6yQzJmI6w.roa
Signing time: Fri 23 Oct 2026 10:07:14 +0000
ROA not before: Fri 23 Oct 2026 10:07:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218320
IP address blocks: 185.210.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:3a:9c:df:4b:7b:3b:2f:d2:fd:d6:e2:54:f8:39:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Oct 23 10:07:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9baa65bd5b4a3d85214d587caa8eb243326623ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:87:4c:9a:28:e0:12:bd:89:b4:7b:ce:64:
98:51:3c:86:1f:d8:42:f7:c9:94:01:c2:66:5b:a6:
44:b1:ab:dd:3c:bd:4d:6e:2d:bf:d4:5c:7e:86:0a:
ab:9c:99:8a:be:00:0d:57:14:f9:16:b8:cf:ab:18:
4c:d3:ef:b1:f8:6e:93:09:d1:5b:20:1d:95:5e:12:
82:54:c9:a8:29:a6:44:11:77:96:5d:23:5d:a1:8c:
1d:f5:4a:03:2a:d4:b5:88:bb:0f:e9:db:b6:f1:8f:
33:aa:f9:f7:a0:c1:15:6a:49:94:fd:29:33:d5:24:
b6:66:5b:96:9f:45:0c:2f:07:13:76:e8:cb:6b:6d:
d6:c8:f3:7c:df:a7:47:28:71:ef:34:f7:fa:9e:25:
47:37:0c:36:d3:3b:a2:ae:2b:03:ee:43:e4:fd:e9:
9a:5f:d0:5e:d3:5b:af:f9:16:4b:b8:fa:e9:11:c4:
07:4a:3c:11:6d:dd:45:c3:cf:6b:0c:12:3d:95:e5:
3b:d4:61:f1:a0:22:32:45:52:1d:89:e2:10:8b:2c:
9f:7b:ac:ea:01:af:93:de:9b:aa:5a:89:5d:a4:b0:
51:05:ce:71:19:71:d3:ed:37:a5:dd:31:ab:79:4d:
b9:16:b4:c7:88:2b:15:2f:a1:46:72:51:60:f8:70:
f1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AA:65:BD:5B:4A:3D:85:21:4D:58:7C:AA:8E:B2:43:32:66:23:AC
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/m6plvVtKPYUhTVh8qo6yQzJmI6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.137.0/24
Signature Algorithm: sha256WithRSAEncryption
06:58:b8:ee:f1:f6:87:97:5a:89:b5:f8:f8:63:6c:d7:0e:67:
36:26:47:5e:9a:7c:aa:1c:49:a3:af:09:0d:6b:a2:7f:e7:df:
54:41:74:be:c1:15:7b:7a:33:c2:1f:41:84:de:87:cf:36:5c:
5e:08:75:25:18:db:32:d7:6f:ce:8c:fd:01:28:0b:53:65:01:
7d:26:cb:74:0a:00:d7:93:3d:1a:e5:d2:5d:d6:bd:6a:01:a6:
39:71:b8:aa:95:1f:0c:e5:60:5d:f0:1a:73:fc:be:3a:b2:fe:
64:f7:58:c9:13:c6:d4:61:7d:ef:67:45:2c:33:1c:72:74:2c:
e9:8f:ac:cb:5b:77:b8:4f:d6:d2:a0:0c:c4:19:d7:28:e2:f6:
0a:cd:7a:ab:ab:17:47:d8:a1:cc:b8:7f:53:93:8d:00:9c:e5:
71:8d:08:dc:e6:50:3d:29:c1:b4:34:a7:5d:96:fc:bc:53:61:
b8:7c:b9:4a:3d:2d:2b:a5:70:99:99:8f:d9:cf:a4:ba:5e:2d:
ba:19:d0:d0:83:41:d9:41:93:ed:ef:3b:7b:2e:77:b6:06:23:
24:50:8f:75:6e:ca:69:91:82:02:48:3f:1b:84:ca:70:fa:54:
d7:b1:0c:e7:fe:1f:82:9f:d1:35:b2:f3:d1:55:27:a6:ec:30:
bd:f7:10:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:18:06 2026 by rpki-client