Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/6eIRyeCu3DuhOHztVXWukRMlVQA.roa
File: 6eIRyeCu3DuhOHztVXWukRMlVQA.roa (raw, json)
Hash identifier: DP3c7R08RGBcAiJwXHjmhLQIdE9Va1ZG6ASQ9GdKigk=
Subject key identifier: E9:E2:11:C9:E0:AE:DC:3B:A1:38:7C:ED:55:75:AE:91:13:25:55:00
Certificate issuer: /CN=4d13128815103574417ca7a70412da3ab3b84511
Certificate serial: 019FFF679A5AB2DD1E4EA9A416F70D69996B
Authority key identifier: 4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/6eIRyeCu3DuhOHztVXWukRMlVQA.roa
Signing time: Fri 14 Aug 2026 08:33:27 +0000
ROA not before: Fri 14 Aug 2026 08:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8587
IP address blocks: 91.208.251.0/24 maxlen: 24
94.247.72.0/21 maxlen: 21
195.114.224.0/21 maxlen: 21
195.114.232.0/22 maxlen: 22
195.114.236.0/23 maxlen: 23
212.104.210.0/24 maxlen: 24
2a02:ca0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:67:9a:5a:b2:dd:1e:4e:a9:a4:16:f7:0d:69:99:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d13128815103574417ca7a70412da3ab3b84511
Validity
Not Before: Aug 14 08:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9e211c9e0aedc3ba1387ced5575ae9113255500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e4:f3:fa:a1:42:b2:7a:49:fd:bd:c3:1c:5f:
a7:0a:6c:96:7c:25:c6:81:62:55:09:a0:98:ed:25:
16:f0:a3:89:88:8a:3c:26:89:61:6f:6a:73:50:c5:
6e:12:1e:17:5d:35:fc:7a:8d:65:92:ec:ec:ae:d1:
ac:b5:0a:b8:1e:60:c9:9a:fb:cd:d3:b9:66:dd:7f:
2f:a7:1c:32:61:06:bc:7f:aa:4c:82:ff:6a:5b:74:
10:4c:f9:8f:29:a2:fb:60:88:56:a2:34:c6:4a:98:
46:cb:16:6d:f4:32:e3:37:22:35:91:e1:15:d4:ce:
95:02:6d:be:20:df:34:92:d8:73:4e:cd:dd:ba:5d:
44:8d:46:b1:ff:12:6c:5a:ac:37:78:8b:f2:21:c2:
ed:e8:93:29:56:9d:9b:aa:09:45:6a:8b:2d:f1:28:
43:f0:73:3f:db:c0:bf:27:68:04:3b:55:a0:43:15:
5c:fb:80:95:d2:18:98:77:64:d8:da:92:d9:04:fa:
96:fb:e0:43:6b:a7:2c:a9:69:02:4b:ce:a6:76:b8:
6f:d9:20:6c:7b:5d:1e:bf:1d:1b:d4:b1:06:e2:ae:
77:94:70:be:47:1c:c5:af:aa:37:bc:3a:8a:e1:fe:
14:45:2f:46:e4:29:38:2f:58:b8:b6:68:eb:41:f5:
90:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E2:11:C9:E0:AE:DC:3B:A1:38:7C:ED:55:75:AE:91:13:25:55:00
X509v3 Authority Key Identifier:
keyid:4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/6eIRyeCu3DuhOHztVXWukRMlVQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.251.0/24
94.247.72.0/21
195.114.224.0-195.114.237.255
212.104.210.0/24
IPv6:
2a02:ca0::/32
Signature Algorithm: sha256WithRSAEncryption
06:23:9b:a7:83:a1:05:2c:d8:cf:28:7f:21:b1:68:74:d8:d6:
32:ae:03:0d:93:ec:21:d7:67:8f:7d:19:80:a3:ba:41:dc:d8:
ae:2a:52:cd:47:b9:bb:54:62:d3:7f:62:7e:d5:57:24:e4:0e:
30:3f:4d:d1:36:67:56:60:13:24:80:15:f2:9b:73:65:68:0a:
43:b3:d8:0e:6d:f7:a6:c4:f1:9b:19:69:7a:12:0e:df:4d:22:
c2:54:84:3d:81:45:a0:8f:2b:3a:1e:8b:9e:46:70:3f:c1:ce:
a9:9e:be:24:77:c2:45:b7:ce:97:30:37:b3:4e:88:a3:87:8c:
6a:31:f7:ce:2c:7e:41:a1:2b:28:b5:2f:7b:d9:1d:25:86:4c:
40:b6:9f:8e:73:68:d3:7e:6e:26:c9:61:ef:05:c8:c4:c2:63:
a6:23:b5:ba:e9:b0:ad:ba:10:f1:0e:15:07:24:48:12:97:5e:
90:d6:f7:d7:05:e9:c0:fb:cd:a4:2b:8d:14:f5:99:6a:8f:3d:
ab:0b:cf:88:19:26:24:eb:a0:88:40:a7:26:3a:02:a9:03:0b:
10:5b:31:93:2b:53:bb:ea:39:95:4c:08:c6:df:b8:37:93:80:
b8:d0:68:82:70:8a:f4:0c:67:81:20:af:9d:b1:5f:dd:80:0e:
16:ce:eb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 00:36:32 2026 by rpki-client