Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/ar6_0kqJcBt8igB0_qSlxPvj70w.roa
File: ar6_0kqJcBt8igB0_qSlxPvj70w.roa (raw, json)
Hash identifier: 27Wz72a6t/aYVBgVqKw/1AM47tTpfu2zI/SxkRMyx4U=
Subject key identifier: 6A:BE:BF:D2:4A:89:70:1B:7C:8A:00:74:FE:A4:A5:C4:FB:E3:EF:4C
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01A0D2A8D9D549FE6C3E452B52813134D045
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/ar6_0kqJcBt8igB0_qSlxPvj70w.roa
Signing time: Thu 24 Sep 2026 09:04:36 +0000
ROA not before: Thu 24 Sep 2026 09:04:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 24
85.115.210.0/23 maxlen: 24
85.115.211.0/24 maxlen: 24
213.145.68.0/23 maxlen: 23
213.145.70.0/23 maxlen: 24
213.145.70.0/24 maxlen: 24
213.145.71.0/24 maxlen: 24
213.145.72.0/21 maxlen: 24
213.145.72.0/23 maxlen: 24
213.145.84.0/23 maxlen: 23
213.145.86.0/23 maxlen: 23
213.145.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a8:d9:d5:49:fe:6c:3e:45:2b:52:81:31:34:d0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Sep 24 09:04:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6abebfd24a89701b7c8a0074fea4a5c4fbe3ef4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7a:d2:22:eb:72:3f:5c:5c:a2:91:ff:46:51:
be:1e:81:79:18:84:3a:59:4d:57:a2:b2:d8:eb:08:
28:da:48:96:fd:6e:70:e6:ba:13:c9:a3:b2:69:07:
46:44:ae:ed:c2:78:f8:16:70:8c:3a:a3:75:0c:f1:
31:a6:fd:b5:d3:27:1f:fd:94:78:8d:e6:18:8a:b8:
65:33:2f:c9:cf:45:9e:6d:23:c3:2f:fa:3b:03:cb:
dc:81:7b:3d:7a:fe:09:4e:cb:d9:01:51:52:30:0b:
c0:0c:df:9d:58:b4:85:ec:0a:7f:25:30:c1:f0:c5:
be:25:72:9f:c5:cf:dc:5f:33:27:50:8e:3d:1d:b3:
23:0e:45:39:cf:eb:db:39:b4:a1:a1:59:8e:0e:87:
d1:ad:3b:3e:31:a7:32:fb:e3:68:d8:4b:e9:30:95:
9c:d5:39:49:6b:f0:cc:bb:d2:50:4b:a0:ae:ee:90:
0d:d9:d0:2f:41:dd:30:7b:64:0c:08:d4:9d:0d:8a:
d3:b5:76:d1:b4:30:f4:37:d6:c7:2e:e8:bd:a1:fb:
6c:fb:89:a4:20:94:48:fb:04:6a:cb:40:ee:af:b1:
50:49:a4:87:8f:35:cb:97:e3:71:4b:6b:57:ba:13:
e4:50:9c:1b:71:9a:24:d1:33:4e:b3:2c:38:26:09:
6b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BE:BF:D2:4A:89:70:1B:7C:8A:00:74:FE:A4:A5:C4:FB:E3:EF:4C
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/ar6_0kqJcBt8igB0_qSlxPvj70w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/22
213.145.68.0-213.145.79.255
213.145.84.0-213.145.89.255
Signature Algorithm: sha256WithRSAEncryption
d5:d9:96:0d:25:5a:dc:7c:2d:fb:1c:bb:cd:55:02:1d:7b:d9:
d1:d1:9c:20:f0:62:05:7b:e7:ab:b5:fb:e6:ba:66:fb:60:22:
64:1e:12:24:fd:4f:15:1c:9e:ee:fa:e6:59:5b:54:40:4a:da:
c3:c2:f8:27:71:63:31:11:9c:85:fc:60:0f:86:2c:3c:05:94:
bd:53:59:ac:12:ab:08:77:0c:ee:70:90:b0:fd:a2:03:04:19:
43:44:56:b4:99:d9:e8:88:2f:c6:7e:a6:9d:6f:bd:92:3a:fa:
20:9c:20:9a:b2:7b:1e:a0:ba:de:0c:96:30:1d:a6:1c:07:de:
91:f6:4f:aa:63:e9:5c:19:4d:28:30:b7:c2:2b:4d:cb:92:38:
12:a8:18:a5:94:da:0b:c7:b9:06:b9:94:86:9d:b3:1c:d1:75:
3d:8e:b9:36:5d:87:e3:6e:ed:62:4c:06:c4:bd:ec:d8:0b:b1:
6c:e5:e4:04:dc:a0:48:5c:9e:ec:f4:82:ac:a4:8c:66:a7:bc:
47:e8:84:aa:7e:af:02:0b:92:b4:10:2d:cd:37:f7:ac:73:36:
b3:f4:c9:76:30:2d:e6:04:63:a7:ef:a4:db:29:57:d6:60:89:
ab:b3:d8:d1:0c:b2:92:52:6c:61:cc:c5:0f:02:26:64:be:f2:
e4:13:82:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:26:56 2026 by rpki-client