Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/6hHyJvgfZ7hI-rvTQg30OP8uZOk.roa
File: 6hHyJvgfZ7hI-rvTQg30OP8uZOk.roa (raw, json)
Hash identifier: tb5yoL6DHfMFy0H1u/TLI8OpyyFIEJ1vLTzwk81h5qY=
Subject key identifier: EA:11:F2:26:F8:1F:67:B8:48:FA:BB:D3:42:0D:F4:38:FF:2E:64:E9
Certificate issuer: /CN=4017b4c9f01da83469a9851f95106e396fd25e64
Certificate serial: 019F64A8FBE6269DC17B1612F3AA074B77E8
Authority key identifier: 40:17:B4:C9:F0:1D:A8:34:69:A9:85:1F:95:10:6E:39:6F:D2:5E:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/6hHyJvgfZ7hI-rvTQg30OP8uZOk.roa
Signing time: Wed 15 Jul 2026 07:23:43 +0000
ROA not before: Wed 15 Jul 2026 07:23:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 81.87.0.0/16 maxlen: 16
83.138.32.0/21 maxlen: 21
89.207.208.0/21 maxlen: 21
193.60.0.0/14 maxlen: 14
194.66.0.0/16 maxlen: 16
194.80.0.0/14 maxlen: 14
195.194.0.0/15 maxlen: 15
212.121.0.0/19 maxlen: 19
212.121.192.0/19 maxlen: 19
212.219.0.0/16 maxlen: 16
2001:630::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:64:a8:fb:e6:26:9d:c1:7b:16:12:f3:aa:07:4b:77:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4017b4c9f01da83469a9851f95106e396fd25e64
Validity
Not Before: Jul 15 07:23:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea11f226f81f67b848fabbd3420df438ff2e64e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:68:4e:e9:f8:8f:82:fb:34:db:8f:d2:56:13:
58:89:6d:87:9c:5f:f5:81:c0:44:0f:b5:bc:68:94:
5a:59:80:c9:fe:e9:30:e2:86:8f:84:8e:7f:63:31:
b1:ca:05:fd:0c:e5:db:ce:25:0e:92:22:0a:64:3f:
bf:7f:32:09:ae:a9:de:01:51:82:51:21:7c:b3:9d:
d0:4c:a3:37:84:1e:5a:12:59:31:a8:fc:fa:21:44:
95:7a:60:57:1a:ae:c7:67:e3:98:d8:3c:b5:16:cf:
08:3e:67:dc:c3:6a:41:39:13:cd:7d:b2:7b:1d:30:
95:35:19:05:60:33:30:77:52:33:0f:b0:a0:d6:61:
c5:a1:12:1e:cf:23:01:94:ea:d9:ed:57:9d:9b:92:
fa:0f:85:95:2b:0e:be:ba:69:7c:96:25:8e:34:ff:
e3:0e:44:e3:05:8a:cd:4d:c5:31:75:0f:03:c0:a2:
76:b7:da:ee:23:71:53:e4:62:23:9e:e0:1a:29:52:
6b:e8:69:18:bf:6e:65:25:87:e8:43:fb:45:54:27:
04:db:88:cd:e4:4f:60:18:54:ea:cb:c8:a7:55:d6:
fc:e1:fc:4d:22:02:ac:35:f9:c3:ca:6c:d4:30:42:
6f:f6:7c:66:e9:d1:fa:77:06:6f:ac:c9:2b:e2:3b:
69:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:11:F2:26:F8:1F:67:B8:48:FA:BB:D3:42:0D:F4:38:FF:2E:64:E9
X509v3 Authority Key Identifier:
keyid:40:17:B4:C9:F0:1D:A8:34:69:A9:85:1F:95:10:6E:39:6F:D2:5E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/6hHyJvgfZ7hI-rvTQg30OP8uZOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.87.0.0/16
83.138.32.0/21
89.207.208.0/21
193.60.0.0/14
194.66.0.0/16
194.80.0.0/14
195.194.0.0/15
212.121.0.0/19
212.121.192.0/19
212.219.0.0/16
IPv6:
2001:630::/32
Signature Algorithm: sha256WithRSAEncryption
62:77:07:d8:b3:77:1b:87:66:d7:4e:df:23:04:7d:c8:af:c1:
02:44:02:70:17:85:68:13:64:d5:38:ee:48:5c:ba:6e:17:26:
95:cc:da:22:b0:5b:01:04:bc:9a:29:ea:8f:c7:e7:d3:d2:08:
7c:1f:9a:84:dd:99:29:6c:ca:39:94:3c:ce:f1:db:37:6d:d8:
76:a6:dc:be:b8:cf:8b:e5:14:79:36:d7:a1:d0:bb:4a:02:0b:
83:13:7a:3a:68:fc:98:3b:6e:a8:56:72:bb:25:b9:a6:96:9f:
28:d2:88:3a:67:ce:5f:71:52:a4:f3:b0:20:be:29:54:6f:24:
95:25:bb:ef:d1:cc:e6:d1:3d:c6:52:ff:c7:ed:cc:ac:95:1c:
47:b6:68:47:fc:33:3a:c0:f0:05:08:87:21:fc:56:3f:5f:70:
6e:91:6a:ee:cb:03:47:7a:4b:67:af:0e:de:56:40:d1:a6:08:
fa:dd:7d:b0:0f:c8:ce:04:26:4d:f7:8c:7c:bc:55:4c:ec:06:
e3:37:4d:e2:fe:dd:56:71:fd:c0:9b:32:3a:41:d8:4f:ce:7f:
f7:cb:dd:b6:1e:27:5d:f9:aa:85:22:2a:6e:45:9a:04:83:69:
48:63:07:61:ac:2e:ec:8d:9f:56:68:c4:de:9b:99:8c:3a:fb:
13:ed:27:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:09 2026 by rpki-client