Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/3H6PgooRGLT_mSPUyDMorwjEhUs.roa
File: 3H6PgooRGLT_mSPUyDMorwjEhUs.roa (raw, json)
Hash identifier: U5HujpHe+LmaURpE34QxCKE6KhEyc2Pqe68mUX3PjZQ=
Subject key identifier: DC:7E:8F:82:8A:11:18:B4:FF:99:23:D4:C8:33:28:AF:08:C4:85:4B
Certificate issuer: /CN=860c9ec0d1b34e4bd7a64f9002059357409b33ca
Certificate serial: 019F23692B3CDFC4906B13B91816656BEDD8
Authority key identifier: 86:0C:9E:C0:D1:B3:4E:4B:D7:A6:4F:90:02:05:93:57:40:9B:33:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgyewNGzTkvXpk-QAgWTV0CbM8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/3H6PgooRGLT_mSPUyDMorwjEhUs.roa
Signing time: Thu 02 Jul 2026 15:18:42 +0000
ROA not before: Thu 02 Jul 2026 15:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51420
IP address blocks: 109.164.64.0/19 maxlen: 19
109.164.64.0/20 maxlen: 20
109.164.80.0/20 maxlen: 20
109.164.83.0/24 maxlen: 24
109.164.84.0/24 maxlen: 24
109.164.85.0/24 maxlen: 24
109.164.87.0/24 maxlen: 24
109.164.88.0/24 maxlen: 24
109.164.89.0/24 maxlen: 24
109.164.90.0/24 maxlen: 24
109.164.91.0/24 maxlen: 24
109.164.92.0/24 maxlen: 24
109.164.93.0/24 maxlen: 24
109.164.94.0/24 maxlen: 24
109.164.95.0/24 maxlen: 24
109.164.96.0/23 maxlen: 23
109.164.96.0/24 maxlen: 24
109.164.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/hgyewNGzTkvXpk-QAgWTV0CbM8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/hgyewNGzTkvXpk-QAgWTV0CbM8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgyewNGzTkvXpk-QAgWTV0CbM8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2b:3c:df:c4:90:6b:13:b9:18:16:65:6b:ed:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860c9ec0d1b34e4bd7a64f9002059357409b33ca
Validity
Not Before: Jul 2 15:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc7e8f828a1118b4ff9923d4c83328af08c4854b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0c:81:d1:61:f6:66:47:8c:13:9c:9e:66:a1:
7b:22:fa:66:83:48:35:ac:cc:05:47:e2:07:79:b7:
d7:c9:53:07:70:2c:c5:8b:80:3a:10:ab:5d:74:16:
79:33:43:cb:69:9a:50:f4:24:9b:46:8f:41:ad:30:
0c:91:a1:73:b1:6d:f3:63:78:be:cb:a3:63:72:de:
75:35:29:1c:05:0a:98:c0:cb:f5:83:37:f9:3b:bf:
7b:09:b8:c0:7e:20:e7:7d:f8:57:1a:a0:a7:cf:9c:
00:24:bc:a8:f7:16:e9:97:55:80:02:b3:62:27:35:
ed:41:c2:87:fa:d2:f6:db:9a:b8:cf:c9:06:c9:de:
3f:ed:19:09:c3:ce:b8:e8:6c:72:01:d5:f4:45:94:
2c:b0:91:a2:01:3e:88:7d:51:0b:8a:af:78:bc:66:
bb:ef:f7:78:1e:ba:3d:01:eb:d9:34:63:02:2f:7d:
9d:22:ba:ed:a4:79:bb:f5:93:4d:06:89:f9:49:41:
33:9f:c4:ea:a7:3d:1d:87:ca:88:bb:c4:1d:75:59:
0f:95:be:5a:b0:86:d9:f0:bb:f0:f8:15:f9:44:16:
01:65:38:81:7b:09:0a:55:21:59:35:80:38:fb:5c:
b3:46:3e:74:9c:45:6f:a2:77:2f:54:d3:bb:b0:40:
7a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7E:8F:82:8A:11:18:B4:FF:99:23:D4:C8:33:28:AF:08:C4:85:4B
X509v3 Authority Key Identifier:
keyid:86:0C:9E:C0:D1:B3:4E:4B:D7:A6:4F:90:02:05:93:57:40:9B:33:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgyewNGzTkvXpk-QAgWTV0CbM8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/3H6PgooRGLT_mSPUyDMorwjEhUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/hgyewNGzTkvXpk-QAgWTV0CbM8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.164.64.0-109.164.97.255
Signature Algorithm: sha256WithRSAEncryption
17:28:bd:d4:1a:33:1e:86:2e:e0:20:ab:db:91:0b:a5:70:26:
c7:70:1b:21:ba:bb:3c:51:8f:68:1d:52:96:32:08:2c:8c:25:
6f:8d:04:81:a0:5d:3f:94:ef:19:51:fe:82:79:fa:f4:bb:53:
3e:1f:77:8f:4e:a4:27:21:79:39:f7:0e:aa:3c:f5:49:32:97:
05:5f:9a:c5:ae:2d:9a:01:69:b8:f2:e5:90:7c:5a:ad:96:bc:
7d:55:55:b0:71:86:98:84:3b:51:2e:a2:af:8c:db:d6:ec:ab:
04:e6:73:0c:be:0c:44:45:5f:30:c7:35:bf:c6:d0:9e:a4:84:
6b:b4:d3:7f:0f:ee:57:cb:19:7e:49:86:c5:cd:05:c5:09:2a:
0e:26:b7:0c:5f:a5:d1:7f:b7:2e:9e:d1:1a:bf:83:ae:cd:85:
74:71:35:e9:89:4f:73:2a:1d:f7:60:5d:7a:0a:67:35:c1:3c:
b0:cb:8f:ad:60:10:17:24:58:bf:16:82:e4:e3:20:80:e6:6d:
93:06:25:3f:1f:07:1f:97:ea:db:c0:77:7f:df:88:bf:62:0b:
90:19:1d:a9:2c:8e:0c:13:21:3e:06:5b:3a:f0:3d:70:66:c6:
3d:0e:f4:b6:2d:42:1e:1d:c2:39:05:43:fc:69:4a:c5:6d:06:
3b:c6:f0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 04:06:16 2026 by rpki-client