Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/joV_6cAQSK_je5KrB8bVTeK2szE.roa
File: joV_6cAQSK_je5KrB8bVTeK2szE.roa (raw, json)
Hash identifier: fk94vtPfOafs8CuY1ZMt1P+v4ADiKe8HjDC4WwhIxvs=
Subject key identifier: 8E:85:7F:E9:C0:10:48:AF:E3:7B:92:AB:07:C6:D5:4D:E2:B6:B3:31
Certificate issuer: /CN=f4ea1b0fcf429aa38b52d9171ce7c923ca8aac81
Certificate serial: 019F2368CC6B3E09AA0ADE1F21FE50D883A8
Authority key identifier: F4:EA:1B:0F:CF:42:9A:A3:8B:52:D9:17:1C:E7:C9:23:CA:8A:AC:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OobD89CmqOLUtkXHOfJI8qKrIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/joV_6cAQSK_je5KrB8bVTeK2szE.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34177
IP address blocks: 37.0.72.0/21 maxlen: 24
46.21.192.0/20 maxlen: 24
62.100.128.0/19 maxlen: 24
78.41.232.0/21 maxlen: 24
81.93.240.0/20 maxlen: 24
91.191.144.0/20 maxlen: 24
94.247.176.0/21 maxlen: 24
185.67.152.0/22 maxlen: 24
188.130.0.0/17 maxlen: 24
193.47.184.0/24 maxlen: 24
195.14.0.0/24 maxlen: 24
195.114.18.0/23 maxlen: 24
2001:758::/32 maxlen: 48
2001:900::/32 maxlen: 48
2a00:cb80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OobD89CmqOLUtkXHOfJI8qKrIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cc:6b:3e:09:aa:0a:de:1f:21:fe:50:d8:83:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ea1b0fcf429aa38b52d9171ce7c923ca8aac81
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e857fe9c01048afe37b92ab07c6d54de2b6b331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:56:8d:8d:e8:51:b9:40:34:f9:ba:6f:eb:b3:
e8:4f:7a:8a:32:54:22:76:64:7c:16:f9:1a:90:79:
cf:16:29:bc:47:f7:53:97:cd:7c:91:05:fb:31:af:
83:c4:c6:27:54:5a:70:f3:26:1b:47:8f:7c:82:a6:
48:a2:bc:07:26:d0:4c:f9:21:ed:6b:8d:21:4d:65:
b7:d3:27:a8:e6:5f:84:b5:26:d5:bf:12:dd:c8:dc:
0e:9d:bc:fe:31:9a:60:ed:16:99:42:7d:d2:29:d6:
b1:f9:a4:2f:1d:62:1b:19:98:21:50:1f:f4:d5:ea:
d1:10:a2:fa:db:2d:c4:c8:34:e4:ed:b3:3c:f4:38:
7f:69:49:3e:13:09:d0:63:69:16:8e:51:07:0e:15:
5a:91:c7:d1:7f:83:08:84:f8:08:d8:b7:bf:d3:58:
ed:6b:eb:e1:18:6d:56:c7:cd:10:60:9e:bc:07:e6:
f2:da:04:f3:a1:c4:29:b5:a4:5c:4f:0d:4e:89:5c:
67:59:c8:b5:a4:0c:a9:e3:fa:fb:83:76:74:ac:50:
a5:74:77:d4:0c:9a:78:67:0e:c3:f6:e9:6d:2a:93:
28:d3:c3:03:23:d6:a2:5a:9a:7e:dc:fd:23:cc:47:
19:26:f6:9e:58:98:fa:05:5d:9f:92:06:e2:74:d2:
c3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:85:7F:E9:C0:10:48:AF:E3:7B:92:AB:07:C6:D5:4D:E2:B6:B3:31
X509v3 Authority Key Identifier:
keyid:F4:EA:1B:0F:CF:42:9A:A3:8B:52:D9:17:1C:E7:C9:23:CA:8A:AC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OobD89CmqOLUtkXHOfJI8qKrIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/joV_6cAQSK_je5KrB8bVTeK2szE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.72.0/21
46.21.192.0/20
62.100.128.0/19
78.41.232.0/21
81.93.240.0/20
91.191.144.0/20
94.247.176.0/21
185.67.152.0/22
188.130.0.0/17
193.47.184.0/24
195.14.0.0/24
195.114.18.0/23
IPv6:
2001:758::/32
2001:900::/32
2a00:cb80::/32
Signature Algorithm: sha256WithRSAEncryption
17:0b:b6:9e:58:d7:11:c2:85:8a:fb:6b:40:ec:6d:69:1e:0b:
6c:39:76:4b:74:ec:99:36:ff:e3:f5:1d:c5:8c:0c:51:e9:ce:
dd:1b:41:9b:b5:6a:30:aa:d3:89:c5:30:f4:46:da:25:00:8b:
b6:e4:33:df:7f:77:84:ef:50:65:c5:5c:3b:74:8f:79:9a:d7:
dc:96:37:74:cb:b3:1a:ce:8e:5c:b6:8f:9d:2c:ee:1d:6f:3b:
ea:3b:6a:f1:c2:44:67:28:8d:14:aa:a7:0e:1d:3d:24:8c:94:
a7:10:ac:7e:03:b9:bc:f7:51:19:c7:54:4a:b1:e2:06:c8:76:
85:1b:0b:bb:30:92:d7:24:24:bd:4c:da:ed:97:d0:28:b1:19:
56:17:9a:b1:66:4b:7a:ed:86:dd:00:e0:87:8a:32:5d:c5:99:
07:6f:87:d4:07:d0:04:d4:12:b5:16:21:4e:e7:a1:7e:ee:62:
7a:2c:17:c9:0e:68:f5:39:92:7d:0f:af:5f:3f:c7:70:5a:7c:
04:38:ca:3e:76:10:69:d3:94:0e:5c:6e:fd:a1:a5:35:1c:fc:
a9:1d:3d:e1:3d:5d:fc:41:64:69:2d:e2:54:df:a6:d7:6c:1a:
a3:9b:a7:4b:47:8b:f3:40:0d:55:ff:0f:9b:3a:0a:2c:f6:56:
3b:5f:4c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:16 2026 by rpki-client