Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/6FFD_ey-_RvM2dEWTIqzXtsbMkM.roa
File: 6FFD_ey-_RvM2dEWTIqzXtsbMkM.roa (raw, json)
Hash identifier: 4tSyP0mrzibGjSzdKGNjJpqhsCYh9wKxG3Vtf9QtoCE=
Subject key identifier: E8:51:43:FD:EC:BE:FD:1B:CC:D9:D1:16:4C:8A:B3:5E:DB:1B:32:43
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019F8E003F709EC7AAE39F403E8CC90E1E9D
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/6FFD_ey-_RvM2dEWTIqzXtsbMkM.roa
Signing time: Thu 23 Jul 2026 08:03:28 +0000
ROA not before: Thu 23 Jul 2026 08:03:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141957
IP address blocks: 87.229.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:00:3f:70:9e:c7:aa:e3:9f:40:3e:8c:c9:0e:1e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 23 08:03:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e85143fdecbefd1bccd9d1164c8ab35edb1b3243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:25:f9:6c:d8:2b:ed:5f:17:1d:e3:37:94:c6:
ee:0d:47:a4:c1:50:51:32:7e:07:1e:e3:15:43:1a:
97:6c:00:a7:23:d0:37:cf:86:b5:7b:9e:16:32:1b:
a1:84:13:54:68:6b:a4:ba:de:ef:8e:6a:19:9c:b8:
98:ab:a8:82:99:c3:55:c9:aa:5a:2d:75:8b:ba:43:
db:9f:9e:d1:98:a6:75:c0:ca:49:e6:1a:62:d5:38:
5c:d7:07:77:54:a4:a6:b5:3a:e3:25:8b:48:fd:3c:
8d:10:5a:1d:d4:ac:6d:40:8a:fe:b2:7e:5f:db:b7:
b8:d0:a8:41:4d:37:5b:34:ca:ec:9c:79:77:0a:41:
4b:0e:00:16:88:74:3e:00:41:86:34:51:18:bf:5f:
ce:92:c1:66:c8:38:28:7e:79:b0:50:c4:98:a9:1a:
de:98:d8:9b:37:17:cd:4a:74:e4:f6:59:44:9c:d2:
82:d4:fe:86:7c:35:a1:cb:4f:9a:19:13:24:aa:34:
c5:db:9e:78:c4:d5:17:9c:d9:a6:4c:ee:e0:04:4e:
73:a0:b9:bc:49:d3:c4:b6:43:69:39:9e:e9:2e:6f:
59:3b:cf:13:dc:23:70:b2:88:0f:d4:ec:5b:4d:57:
6c:d0:bd:5e:50:ea:ae:11:3a:bc:07:df:6b:ff:fa:
b1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:51:43:FD:EC:BE:FD:1B:CC:D9:D1:16:4C:8A:B3:5E:DB:1B:32:43
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/6FFD_ey-_RvM2dEWTIqzXtsbMkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.48.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e6:08:b7:d0:2a:db:5d:8c:ae:c0:4c:82:9f:1b:1a:60:55:
fd:d7:8c:fb:53:a7:aa:d0:be:4f:84:e1:9a:39:ed:08:1b:fd:
e4:20:bb:0e:9f:0c:90:17:af:c4:c0:1f:8e:5a:30:b0:0c:3b:
8f:73:f3:21:fa:d3:a3:1f:56:2f:89:ef:7e:ef:6c:e5:60:ed:
6e:4f:1b:1a:0c:06:6f:95:2a:9c:6c:ad:62:00:51:6c:76:a4:
49:4a:e4:08:e8:e7:dd:94:5c:d5:2e:63:c2:a9:2f:40:4f:3f:
e6:24:d8:1c:3b:d0:db:3b:5e:25:c4:71:78:1b:5c:9a:a0:7b:
1b:6c:8d:e7:b0:c2:d4:13:0c:82:55:12:55:63:94:4d:f4:69:
78:7e:f4:0f:54:cb:98:cb:ee:51:6e:bd:4d:31:b4:e3:1b:67:
44:ab:82:cc:b0:0b:f4:99:f0:e7:42:b2:15:f1:94:b2:7d:53:
85:04:19:c4:41:1a:f5:5b:d9:6d:99:52:d4:97:ce:e7:5e:bc:
93:a4:28:98:ae:e9:00:99:4c:07:29:bf:ac:00:61:b2:51:a9:
55:73:42:91:57:bb:b6:e5:46:9b:5c:04:13:78:87:ea:af:10:
75:87:5e:1a:4e:97:af:18:72:5f:61:89:c9:39:e3:01:39:5d:
f9:24:bb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:34:44 2026 by rpki-client