Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/6tnjb-DeIDKnhN6ciQBp6-L9xYQ.roa
File: 6tnjb-DeIDKnhN6ciQBp6-L9xYQ.roa (raw, json)
Hash identifier: AO57VcUafr5lsDRoKco7xf7/YR+CAfYaivpZiseCrqY=
Subject key identifier: EA:D9:E3:6F:E0:DE:20:32:A7:84:DE:9C:89:00:69:EB:E2:FD:C5:84
Certificate issuer: /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Certificate serial: 01A038F35AA04F3559B67F0E1B82D3775FFC
Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/6tnjb-DeIDKnhN6ciQBp6-L9xYQ.roa
Signing time: Tue 25 Aug 2026 12:44:27 +0000
ROA not before: Tue 25 Aug 2026 12:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12348
IP address blocks: 86.109.224.0/24 maxlen: 24
193.23.167.0/24 maxlen: 24
212.34.161.0/24 maxlen: 24
212.34.162.0/24 maxlen: 24
2a01:120::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:f3:5a:a0:4f:35:59:b6:7f:0e:1b:82:d3:77:5f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Validity
Not Before: Aug 25 12:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ead9e36fe0de2032a784de9c890069ebe2fdc584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bd:df:3f:b6:7c:0c:5c:02:f1:db:7d:1f:85:
0d:d8:35:dc:1b:46:3c:37:7a:fb:ba:58:5f:2a:15:
8e:ef:11:22:44:02:65:c6:2d:19:44:2f:07:b5:6c:
2e:22:3e:df:b0:e8:63:4d:07:ac:e1:fe:a5:84:2e:
89:1d:2f:c7:ce:5c:7a:61:35:a6:18:be:3b:7a:b6:
9a:37:d6:80:77:c9:88:41:ae:a4:e1:fa:31:46:3e:
b4:b8:53:37:a1:df:8f:0c:69:0b:6e:ce:90:b0:81:
dc:7c:07:0a:ed:04:ff:e8:81:cc:c6:24:80:cb:7a:
c9:f7:4f:a8:86:81:46:12:bf:a4:c6:02:2e:b5:9b:
8d:ca:39:a7:cb:43:aa:7f:dc:61:98:97:bd:32:ff:
57:42:fe:be:d3:e8:e4:b6:73:79:e3:62:81:22:ad:
78:20:2c:fa:52:76:3e:6f:11:bf:7d:33:09:66:11:
cd:10:d0:f3:35:c4:9b:91:29:de:92:e6:36:40:cb:
a7:6c:0b:bd:9f:1f:63:ca:51:3f:34:95:51:a8:bb:
bf:39:7a:32:eb:cf:6b:a9:74:22:d7:39:10:fa:34:
b4:ae:3f:76:ca:9f:1c:12:ea:e1:d6:37:03:03:2d:
2f:aa:d2:59:3a:06:38:c8:fd:a0:ce:71:be:1e:7e:
2e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D9:E3:6F:E0:DE:20:32:A7:84:DE:9C:89:00:69:EB:E2:FD:C5:84
X509v3 Authority Key Identifier:
keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/6tnjb-DeIDKnhN6ciQBp6-L9xYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.109.224.0/24
193.23.167.0/24
212.34.161.0-212.34.162.255
IPv6:
2a01:120::/29
Signature Algorithm: sha256WithRSAEncryption
36:d9:65:c7:84:fe:33:06:fc:9c:e1:db:7a:38:84:83:11:38:
fb:b0:58:c9:b9:74:66:a1:56:3b:5e:dc:2c:97:e2:fc:8d:44:
b7:15:67:47:23:eb:dc:c9:29:50:c6:d2:07:d5:fd:7b:73:59:
be:9f:53:b5:1d:c3:36:75:b7:f0:b2:55:11:58:ec:4d:17:36:
1b:b3:ae:4f:42:59:cc:81:d8:65:df:69:06:6d:ac:a5:e2:85:
7e:d0:d1:93:18:b5:59:b5:21:22:67:db:f1:45:d2:ed:1b:89:
86:35:93:c8:f4:c6:c1:32:67:b9:a8:5b:47:db:cd:51:30:77:
36:3c:a6:fd:63:c3:0e:d4:1e:d5:2e:99:81:fd:35:d8:3d:86:
3e:fc:07:87:86:0c:3e:fc:b2:d6:78:1a:84:f8:52:33:01:97:
0a:02:ca:35:a8:03:e0:49:bb:b7:50:2b:51:a6:aa:b4:95:a2:
d6:09:08:2c:41:38:8f:40:b1:16:3d:ed:88:72:9e:82:dc:b7:
10:e7:36:02:30:e0:2c:9e:61:1f:42:14:75:92:ac:2b:ab:9f:
51:fe:53:3d:77:0e:0d:e0:14:2d:25:be:67:64:21:45:c9:97:
23:6e:14:13:05:e9:13:06:08:46:b6:31:53:41:dd:05:21:67:
64:2e:4b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:21:27 2026 by rpki-client