Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/6S9TC5KFrvNh_FP--N7LB0uDWDk.roa
File: 6S9TC5KFrvNh_FP--N7LB0uDWDk.roa (raw, json)
Hash identifier: /ZidtI9Los7lnP2xwos5GWLgFkE8A5plIAVg9Rs5yOE=
Subject key identifier: E9:2F:53:0B:92:85:AE:F3:61:FC:53:FE:F8:DE:CB:07:4B:83:58:39
Certificate issuer: /CN=56c0ff08907a984b8e7763e7aa8a9fc8af51eda6
Certificate serial: 019F236886DFC217D3E6A4764BAB5F1554F1
Authority key identifier: 56:C0:FF:08:90:7A:98:4B:8E:77:63:E7:AA:8A:9F:C8:AF:51:ED:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/6S9TC5KFrvNh_FP--N7LB0uDWDk.roa
Signing time: Thu 02 Jul 2026 15:18:00 +0000
ROA not before: Thu 02 Jul 2026 15:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208938
IP address blocks: 82.193.86.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:86:df:c2:17:d3:e6:a4:76:4b:ab:5f:15:54:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56c0ff08907a984b8e7763e7aa8a9fc8af51eda6
Validity
Not Before: Jul 2 15:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e92f530b9285aef361fc53fef8decb074b835839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:d2:01:87:c5:9e:45:bc:aa:ed:8d:24:90:
51:a6:f5:aa:ad:17:28:ac:47:3c:0f:13:a9:8f:a9:
5f:0d:ef:db:a9:53:41:d6:18:11:4d:ca:4c:25:cb:
67:03:73:ff:dd:4c:9a:11:8c:6a:ca:b4:6d:36:83:
58:59:a2:89:a3:21:29:8f:87:93:43:ea:60:07:a9:
a2:93:2e:d5:62:12:90:91:7f:41:74:51:54:66:bb:
4d:a6:59:91:03:d3:ba:9e:fa:9d:48:c4:a1:d9:8a:
aa:f3:25:55:8e:06:5a:48:40:80:b9:72:2c:ef:a8:
98:f1:92:a6:f4:6e:57:ae:28:1b:5b:67:10:8a:d0:
3f:df:e6:b2:9c:c3:73:40:2a:95:5b:a9:75:55:fc:
54:8d:e6:98:a4:a2:a6:d6:21:d9:54:90:75:a2:66:
bc:a9:75:44:db:a2:5b:1c:21:76:b6:e6:be:09:c1:
d1:c2:ea:ca:5b:d1:2a:6a:b1:99:9d:7b:06:43:31:
fb:8a:ab:e9:dd:4e:31:ba:25:7c:6a:06:80:cf:53:
1c:bb:3f:c4:a5:81:f9:63:d6:6d:c8:64:b3:4a:ca:
0f:80:c2:f0:2a:d1:67:10:65:f7:8b:b3:01:55:7d:
dc:47:39:78:e4:ce:d0:f9:93:f2:bf:3f:11:24:ea:
83:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2F:53:0B:92:85:AE:F3:61:FC:53:FE:F8:DE:CB:07:4B:83:58:39
X509v3 Authority Key Identifier:
keyid:56:C0:FF:08:90:7A:98:4B:8E:77:63:E7:AA:8A:9F:C8:AF:51:ED:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/6S9TC5KFrvNh_FP--N7LB0uDWDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.193.86.0/24
Signature Algorithm: sha256WithRSAEncryption
96:0e:97:d4:a5:1d:96:9d:71:36:d2:60:bc:05:94:5c:f7:92:
b4:35:51:34:87:bd:1a:09:0d:4e:f5:7c:4a:70:a5:4a:ff:40:
c3:dd:0e:97:33:6c:b6:af:99:71:cb:c4:ff:81:9f:2c:dc:90:
f0:2d:86:a6:bf:d6:cb:fa:ce:85:12:28:2f:24:ca:81:0a:31:
a2:71:d1:47:3b:7f:6c:a1:8f:1e:5f:20:f5:4a:20:94:99:04:
2e:96:07:69:30:76:20:13:f7:70:52:7c:de:c3:33:4f:eb:90:
e7:9a:fa:68:e6:ab:1f:5e:7e:c6:12:95:64:e2:4c:81:4c:ce:
6c:cb:8b:6c:0c:89:e1:51:6a:fd:e2:81:80:a3:3b:63:c1:49:
d3:c7:e1:5a:6e:10:2e:43:0d:99:d2:93:89:1f:54:21:6f:77:
23:0e:03:28:12:d9:ff:15:43:85:08:ba:30:13:15:8c:cb:13:
1e:02:80:bf:85:7d:ea:56:d5:3c:1c:0f:d5:63:a5:20:6a:0d:
4c:28:a9:75:36:85:b1:cf:9d:5d:57:d9:51:58:b9:f3:2b:90:
e6:61:6c:f3:69:5c:14:6b:72:f0:c9:ff:34:02:ae:5c:b6:04:
32:1c:90:1a:25:82:e6:45:80:e2:d0:07:43:ce:87:b8:48:ed:
35:06:fb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:02:26 2026 by rpki-client