Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/6KbEffyBChHqrCF-Y9XzmeT1IIY.roa
File: 6KbEffyBChHqrCF-Y9XzmeT1IIY.roa (raw, json)
Hash identifier: MpqA67nhI9XSKSkztVm3x38JYbfXDTvJbiCIVcqc0xA=
Subject key identifier: E8:A6:C4:7D:FC:81:0A:11:EA:AC:21:7E:63:D5:F3:99:E4:F5:20:86
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0D057179D3D62EC8EF2CD82ED85636E37
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/6KbEffyBChHqrCF-Y9XzmeT1IIY.roa
Signing time: Wed 23 Sep 2026 22:16:03 +0000
ROA not before: Wed 23 Sep 2026 22:16:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218754
IP address blocks: 109.66.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:57:17:9d:3d:62:ec:8e:f2:cd:82:ed:85:63:6e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 23 22:16:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8a6c47dfc810a11eaac217e63d5f399e4f52086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4a:ba:f3:c5:95:d2:c9:d1:4a:1c:1d:71:c3:
05:3d:aa:41:62:8b:d1:0d:e3:fa:ff:07:97:5b:7e:
32:95:0b:89:1d:4f:d2:fb:4f:d7:a5:3f:57:04:27:
f1:13:75:6a:7a:73:0d:ae:50:2e:33:6f:f9:50:10:
5c:70:a6:ad:de:f1:d4:4b:b4:68:3a:1c:50:d5:65:
1b:f7:03:ae:b8:f5:9d:22:01:e2:7e:4d:e1:bf:13:
cb:28:97:02:f5:47:b9:d7:b5:32:1c:ce:8c:bb:4b:
6d:5b:de:bc:f7:92:be:48:19:1d:b3:40:00:3b:ee:
ed:c3:26:41:60:77:ba:8f:73:b7:59:49:77:27:0e:
92:36:ae:6f:fc:b6:75:0d:98:7d:83:92:08:dd:e5:
9e:66:e1:08:79:9d:3a:72:f9:01:9b:81:f9:28:39:
a0:05:a9:24:ad:10:cb:3e:50:09:0a:9c:aa:71:f2:
3c:9a:36:3b:9f:99:dc:99:c2:0a:d0:dd:bd:3b:1d:
df:19:a3:36:3b:db:b1:13:39:07:42:57:22:3a:99:
45:c9:be:ad:a7:f6:96:d7:3b:02:07:12:d4:bf:dd:
7d:ba:45:12:a6:33:c4:bc:af:48:ab:ea:47:58:b5:
c3:dc:3a:95:5f:8e:ea:56:b9:0d:99:2b:5a:5c:b7:
c4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A6:C4:7D:FC:81:0A:11:EA:AC:21:7E:63:D5:F3:99:E4:F5:20:86
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/6KbEffyBChHqrCF-Y9XzmeT1IIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.200.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:84:72:68:08:0e:bc:9d:cc:c5:62:c1:9b:3f:9b:52:40:93:
f5:8a:33:08:08:98:75:af:ce:f3:a2:4c:38:fa:c1:1f:91:ce:
f1:c4:5c:fe:59:13:98:79:72:19:0a:05:da:08:d8:1c:5b:46:
5a:16:65:56:fb:36:77:3c:29:6f:5a:f9:6c:91:98:aa:9d:48:
5f:6b:2e:f6:80:d1:93:5b:d6:bd:28:6d:17:6e:fc:d8:75:a5:
03:a8:f7:f3:fb:6c:6c:bd:18:8b:29:e1:fb:13:76:11:c8:c9:
4a:be:c4:c6:94:07:00:ef:15:4c:35:c4:3e:b6:7c:4c:5b:13:
9a:9c:b2:07:f1:3e:d1:89:5c:77:c3:cf:83:eb:dc:b8:c7:90:
ab:ce:4e:b3:0b:54:1e:8d:cd:fe:97:88:3a:71:dd:92:6b:4a:
fe:00:a5:9f:50:00:f7:67:c0:77:63:25:c4:a8:aa:07:ef:bd:
64:58:15:3e:ed:9b:ac:fd:d1:00:28:ae:a6:e1:35:94:93:16:
24:19:ef:66:b3:79:0d:f3:16:10:86:24:b4:d5:f5:b9:c7:fa:
6a:4b:e2:fd:0a:b1:52:70:2f:b8:08:19:ac:a4:01:5e:b5:83:
b8:6f:ac:c9:af:e1:ca:22:7c:e1:dc:eb:c5:eb:bf:26:8f:11:
7b:22:27:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:11:03 2026 by rpki-client