Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/6fFSKxooiZ02qCBp2Hp2YsrhYw4.roa
File: 6fFSKxooiZ02qCBp2Hp2YsrhYw4.roa (raw, json)
Hash identifier: WXzY4f3u5JQjX40pGEpdB10HXKmkV5vsO5q3+OkfgwM=
Subject key identifier: E9:F1:52:2B:1A:28:89:9D:36:A8:20:69:D8:7A:76:62:CA:E1:63:0E
Certificate issuer: /CN=d90482763070955e7ea87e2ca37b891b864b2577
Certificate serial: 019FE5C576EF03B3C7B904B609D4F3D69E61
Authority key identifier: D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/6fFSKxooiZ02qCBp2Hp2YsrhYw4.roa
Signing time: Sun 09 Aug 2026 09:05:51 +0000
ROA not before: Sun 09 Aug 2026 09:05:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209642
IP address blocks: 195.78.120.0/24 maxlen: 24
2a14:7540::/40 maxlen: 48
2a14:7540:100::/40 maxlen: 40
2a14:7540:200::/40 maxlen: 40
2a14:7540:400::/40 maxlen: 40
2a14:7540:500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e5:c5:76:ef:03:b3:c7:b9:04:b6:09:d4:f3:d6:9e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90482763070955e7ea87e2ca37b891b864b2577
Validity
Not Before: Aug 9 09:05:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9f1522b1a28899d36a82069d87a7662cae1630e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fd:ad:2e:2e:a6:0a:37:9b:6b:62:17:e3:21:
77:e8:f3:81:41:37:c9:50:c9:a6:41:d0:36:c5:1d:
89:85:29:7f:62:86:f0:79:e7:85:91:19:bf:07:57:
40:a6:6d:f5:40:45:ba:5c:1e:23:4f:73:ec:c8:26:
0c:64:20:01:97:09:7a:f5:77:9c:ff:10:8b:ce:c3:
d7:65:29:68:ef:52:89:ef:a4:c4:d6:c5:24:44:6c:
1c:15:3a:f5:7b:36:bd:8b:41:22:ad:00:33:af:e1:
a5:48:0d:b6:a6:88:df:3f:3d:a7:09:bb:fc:dc:ba:
a3:c5:cb:d4:0b:26:dd:84:23:17:61:c9:8b:20:a5:
88:0e:4b:22:a8:5c:4e:34:9d:89:25:e2:94:08:bc:
d5:5b:65:5f:17:cc:9e:89:ff:e5:dc:2f:5b:84:c1:
4a:54:8c:6a:85:90:f4:96:92:94:2a:59:52:bc:0a:
e0:05:09:09:d2:8a:63:85:03:40:80:3b:68:b5:a7:
9c:e0:fb:01:88:10:ea:62:3e:6c:8d:9e:c2:12:2e:
b1:7a:d5:c5:8a:91:fb:6e:fb:20:c0:ba:1f:3e:50:
8d:13:ff:b9:bb:0a:17:9e:f3:f4:2d:8d:09:0c:7f:
78:12:26:3f:54:5e:4e:36:d3:0d:79:49:0d:d1:91:
bc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F1:52:2B:1A:28:89:9D:36:A8:20:69:D8:7A:76:62:CA:E1:63:0E
X509v3 Authority Key Identifier:
keyid:D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/6fFSKxooiZ02qCBp2Hp2YsrhYw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.78.120.0/24
IPv6:
2a14:7540::-2a14:7540:2ff:ffff:ffff:ffff:ffff:ffff
2a14:7540:400::/39
Signature Algorithm: sha256WithRSAEncryption
92:ca:f4:0a:ba:56:59:73:80:7f:64:51:ec:fc:e8:72:65:21:
1c:cd:ef:dc:4c:25:88:51:86:dd:07:8e:ee:97:0e:56:7a:1b:
8e:cb:4e:46:c8:fa:03:bd:9e:ad:5f:1f:f6:bb:13:f7:ce:3c:
83:1a:75:a7:3d:45:93:be:f2:f6:28:92:fa:b9:e7:fa:4b:56:
21:82:7c:51:aa:34:53:a4:23:72:3f:a8:ae:21:6a:0d:6b:cf:
b5:0a:3b:5c:ac:07:7e:90:50:97:83:a0:5e:7b:a0:fc:bc:27:
b5:32:79:94:fa:f7:10:d3:94:e1:bc:a9:0a:95:69:d6:6c:c5:
fa:5d:44:91:2a:cf:4f:b2:e1:cb:60:6a:7b:5c:47:bb:61:2a:
fa:70:fd:a7:2a:8b:25:e8:d2:66:10:6c:41:cb:1a:1c:be:b1:
32:4d:da:51:a2:df:2e:74:9c:e5:d3:67:90:f9:16:28:71:49:
a0:52:1b:eb:71:65:e8:e4:f3:86:43:6f:84:87:ca:06:d1:34:
72:de:9b:d6:cb:f5:16:44:f6:84:17:d0:38:68:9a:b6:1d:49:
3c:20:d1:28:1a:b0:bf:d0:10:01:1d:aa:30:0f:d2:81:0a:14:
5a:e4:02:85:fc:09:aa:d4:86:f5:00:56:3a:85:ab:cd:62:a2:
ff:fa:e2:57
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZ/lxXbvA7PHuQS2CdTz1p5hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MDQ4Mjc2MzA3MDk1NWU3ZWE4N2UyY2EzN2I4OTFiODY0
YjI1NzcwHhcNMjYwODA5MDkwNTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWYxNTIyYjFhMjg4OTlkMzZhODIwNjlkODdhNzY2MmNhZTE2MzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0f2tLi6mCjeba2IX4yF36POBQTfJ
UMmmQdA2xR2JhSl/YobweeeFkRm/B1dApm31QEW6XB4jT3PsyCYMZCABlwl69Xec
/xCLzsPXZSlo71KJ76TE1sUkRGwcFTr1eza9i0EirQAzr+GlSA22pojfPz2nCbv8
3LqjxcvUCybdhCMXYcmLIKWIDksiqFxONJ2JJeKUCLzVW2VfF8yeif/l3C9bhMFK
VIxqhZD0lpKUKllSvArgBQkJ0opjhQNAgDtotaec4PsBiBDqYj5sjZ7CEi6xetXF
ipH7bvsgwLofPlCNE/+5uwoXnvP0LY0JDH94EiY/VF5ONtMNeUkN0ZG8rQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFOnxUisaKImdNqggadh6dmLK4WMOMB8GA1UdIwQY
MBaAFNkEgnYwcJVefqh+LKN7iRuGSyV3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlFTQ2RqQndsVjUtcUg0c28zdUpHNFpMSlhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85NGMyYmItZTgwYS00ZjJjLTgyMDgt
YTliMjc2Njc3M2FhLzEvNmZGU0t4b29pWjAycUNCcDJIcDJZc3JoWXc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC85NGMyYmItZTgwYS00ZjJjLTgyMDgtYTliMjc2Njc3M2Fh
LzEvMlFTQ2RqQndsVjUtcUg0c28zdUpHNFpMSlhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAMBAIAATAGAwQAw054MB8E
AgACMBkwDwMFBioUdUADBgAqFHVAAgMGASoUdUAEMA0GCSqGSIb3DQEBCwUAA4IB
AQCSyvQKulZZc4B/ZFHs/OhyZSEcze/cTCWIUYbdB47ulw5WehuOy05GyPoDvZ6t
Xx/2uxP3zjyDGnWnPUWTvvL2KJL6uef6S1YhgnxRqjRTpCNyP6iuIWoNa8+1Cjtc
rAd+kFCXg6Bee6D8vCe1MnmU+vcQ05ThvKkKlWnWbMX6XUSRKs9PsuHLYGp7XEe7
YSr6cP2nKosl6NJmEGxByxocvrEyTdpRot8udJzl02eQ+RYocUmgUhvrcWXo5POG
Q2+Eh8oG0TRy3pvWy/UWRPaEF9A4aJq2HUk8INEoGrC/0BABHaowD9KBChRa5AKF
/Amq1Ib1AFY6havNYqL/+uJX
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:25:49 2026 by rpki-client