Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/6MROEyhCnQoDzzzLgMuqSp8WWW4.roa
File: 6MROEyhCnQoDzzzLgMuqSp8WWW4.roa (raw, json)
Hash identifier: U2ETKysUzgCpOSOJ/qWrrLMDT5gA1Ft4qr0viHcAPBA=
Subject key identifier: E8:C4:4E:13:28:42:9D:0A:03:CF:3C:CB:80:CB:AA:4A:9F:16:59:6E
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01A12F1970C74EE43CBAB89C2CBCE62EA013
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/6MROEyhCnQoDzzzLgMuqSp8WWW4.roa
Signing time: Mon 12 Oct 2026 07:52:38 +0000
ROA not before: Mon 12 Oct 2026 07:52:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215496
IP address blocks: 185.136.135.0/24 maxlen: 24
2a05:9080:2::/48 maxlen: 48
2a05:9080:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:19:70:c7:4e:e4:3c:ba:b8:9c:2c:bc:e6:2e:a0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Oct 12 07:52:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8c44e1328429d0a03cf3ccb80cbaa4a9f16596e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b7:f0:d7:2f:4b:47:fe:cd:32:6d:f5:cf:3d:
2e:26:4a:55:78:ce:af:bf:fa:0b:c5:2d:14:f7:b3:
c9:b7:00:05:e2:15:7a:b6:89:e3:f8:e6:a7:65:2f:
45:89:8f:c4:4a:0e:6e:10:35:d2:4a:6a:30:c6:18:
b0:59:05:df:b6:24:aa:dc:84:0a:93:69:44:98:9d:
62:1a:61:9c:55:44:ef:fd:e9:38:a9:3e:d0:0c:54:
fc:c9:63:91:46:56:16:9b:a9:95:d8:45:ec:aa:d5:
55:54:86:a5:cb:f6:17:2f:8d:f4:33:fd:db:dd:6e:
10:65:68:ad:23:f9:6f:44:0c:8f:c6:0a:4a:bb:88:
1b:da:a8:c9:49:2f:ff:d4:f5:d1:c1:b6:77:df:42:
2e:c0:fd:66:05:06:a6:e0:3f:24:a1:c9:3b:a4:1d:
33:c7:3f:cf:0d:7f:e0:66:47:bb:39:71:e1:6b:47:
20:29:ae:63:ed:a5:47:30:8f:85:dd:f5:fe:67:ac:
0e:2c:64:b8:bc:86:2e:ed:16:ce:d1:df:57:0c:fa:
41:94:50:fa:3e:1c:48:16:c8:e4:4a:ca:a2:88:ef:
86:5f:89:c2:83:bd:d5:cd:7d:9e:c3:39:92:c8:17:
e8:4c:86:bf:83:6e:89:5c:ee:32:87:98:3a:eb:69:
82:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C4:4E:13:28:42:9D:0A:03:CF:3C:CB:80:CB:AA:4A:9F:16:59:6E
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/6MROEyhCnQoDzzzLgMuqSp8WWW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.135.0/24
IPv6:
2a05:9080:2::/48
2a05:9080:12::/48
Signature Algorithm: sha256WithRSAEncryption
d8:3c:4c:66:f3:03:46:d8:4d:65:51:9d:7f:09:6e:c0:72:d0:
b0:66:42:11:6b:fc:4e:f0:71:6a:e8:8b:c1:e3:ad:86:1b:ea:
d1:b2:c5:27:34:99:77:ea:3c:18:bb:e0:3f:69:b2:b9:46:4e:
ea:e9:a0:e5:42:73:bf:48:17:5e:e1:08:35:4b:30:c9:31:e3:
b9:c1:c8:8d:5b:5b:31:a0:42:88:15:f3:6b:29:b4:85:05:85:
4f:e3:71:63:7a:76:81:ca:b5:6b:05:22:8c:bb:dc:f1:08:fd:
6e:4e:ce:f3:6f:aa:61:92:74:90:4e:d6:95:51:8f:ee:85:04:
2a:c4:c8:15:ce:02:fc:93:10:24:4f:8e:0d:37:ef:0e:e4:3a:
c3:49:9f:0d:15:40:eb:e1:57:d5:bd:f7:ee:8c:fb:4f:b7:75:
d5:21:6f:8e:71:16:ab:9e:a8:8f:9d:45:3d:7e:d3:28:ac:dc:
21:63:42:42:5e:f5:c9:23:57:ac:7a:36:f0:57:04:09:56:91:
53:30:2a:46:fd:95:6b:57:86:3d:04:47:70:a0:fb:c8:83:67:
b5:bb:17:f1:66:2f:fe:0c:66:4f:85:96:ec:0e:cb:e0:e2:1e:
4e:4d:2f:7b:0a:c9:80:2f:93:09:81:53:46:45:d9:ce:ea:39:
cd:2c:be:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:12:13 2026 by rpki-client