Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/854exVD_2RkS3V9jQmbIjk7GRZc.roa
File: 854exVD_2RkS3V9jQmbIjk7GRZc.roa (raw, json)
Hash identifier: kAd6TVN9y1mBTZeU0hdgLPvOdRjgwz/+iiz74zWV3NE=
Subject key identifier: F3:9E:1E:C5:50:FF:D9:19:12:DD:5F:63:42:66:C8:8E:4E:C6:45:97
Certificate issuer: /CN=6fe142f6be009a070c7d7e277851e05862765286
Certificate serial: 019F40C694501471687516F2F632BFF2AA79
Authority key identifier: 6F:E1:42:F6:BE:00:9A:07:0C:7D:7E:27:78:51:E0:58:62:76:52:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-FC9r4AmgcMfX4neFHgWGJ2UoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/854exVD_2RkS3V9jQmbIjk7GRZc.roa
Signing time: Wed 08 Jul 2026 08:09:43 +0000
ROA not before: Wed 08 Jul 2026 08:09:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35676
IP address blocks: 178.213.64.0/22 maxlen: 24
178.213.68.0/22 maxlen: 24
185.16.252.0/22 maxlen: 24
194.5.88.0/23 maxlen: 24
195.234.36.0/24 maxlen: 24
2a03:6f80::/32 maxlen: 40
2a03:6f81::/32 maxlen: 40
2a03:6f82::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/b-FC9r4AmgcMfX4neFHgWGJ2UoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/b-FC9r4AmgcMfX4neFHgWGJ2UoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-FC9r4AmgcMfX4neFHgWGJ2UoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:c6:94:50:14:71:68:75:16:f2:f6:32:bf:f2:aa:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe142f6be009a070c7d7e277851e05862765286
Validity
Not Before: Jul 8 08:09:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f39e1ec550ffd91912dd5f634266c88e4ec64597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2f:20:14:04:7e:10:e1:ac:77:96:95:60:df:
32:74:23:9e:35:84:38:a7:21:ac:99:ac:c8:cd:8f:
df:d5:2c:a3:d9:40:fe:ff:bc:70:e3:ac:1f:2f:94:
74:ff:30:06:18:f0:e4:83:fe:78:07:98:92:25:3f:
7c:b3:03:92:22:1b:4a:8f:5d:49:36:39:8b:3a:8a:
f5:9c:77:b2:07:4a:4e:43:b1:fb:0e:91:45:f3:f5:
bf:a0:bc:e1:5e:4d:74:11:6b:9f:27:0b:cb:4b:2a:
be:92:fc:36:6c:14:ce:51:12:b6:92:b0:e7:cd:6a:
0e:63:5f:7f:12:05:0a:1e:41:f8:77:06:4b:9a:24:
a2:fb:c2:2f:59:22:e8:3d:fe:4e:a4:57:1f:51:ef:
2a:16:d1:ff:ab:f2:b5:a5:2c:62:5b:05:69:46:0d:
09:21:e3:b5:a4:47:4a:26:81:62:b7:d4:c8:9a:e1:
b8:57:a9:34:52:05:4b:7f:7e:11:07:06:dc:45:20:
87:32:a0:3e:97:06:c0:98:84:a4:ef:34:27:9c:aa:
6a:b5:43:31:ea:4b:c6:78:95:a3:09:aa:54:dd:5e:
f2:31:63:f3:7a:d6:9a:45:64:df:7e:ff:52:20:c8:
4f:b9:06:7c:49:08:96:b1:7d:90:87:a0:0d:b9:4c:
0e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9E:1E:C5:50:FF:D9:19:12:DD:5F:63:42:66:C8:8E:4E:C6:45:97
X509v3 Authority Key Identifier:
keyid:6F:E1:42:F6:BE:00:9A:07:0C:7D:7E:27:78:51:E0:58:62:76:52:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-FC9r4AmgcMfX4neFHgWGJ2UoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/854exVD_2RkS3V9jQmbIjk7GRZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/b-FC9r4AmgcMfX4neFHgWGJ2UoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.213.64.0/21
185.16.252.0/22
194.5.88.0/23
195.234.36.0/24
IPv6:
2a03:6f80::-2a03:6f82:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b0:09:1d:5c:01:50:43:eb:4c:e2:13:aa:a7:6e:10:9e:4d:a1:
8e:cc:dc:f8:4a:28:32:13:08:1e:4d:c4:59:30:c5:7c:12:2b:
eb:ba:7f:08:f1:a4:10:f9:6a:13:f6:43:f1:c6:1d:cf:bb:55:
49:8e:b3:da:14:b7:32:d6:ad:58:12:30:ce:bf:15:14:b7:64:
d7:9c:c7:db:f8:b7:28:50:4b:3c:56:61:29:93:ec:6d:2a:f7:
c6:be:94:94:ee:8e:b0:25:db:c7:ed:2d:8b:80:2b:6d:a1:53:
ba:77:8f:89:2e:0a:96:0e:eb:d9:c4:7d:f1:5f:ac:cb:c9:38:
9e:7d:15:ff:01:b9:cd:6d:93:ae:2f:c9:ce:8e:ca:1b:c1:ad:
55:c6:e0:9d:ba:a0:81:cf:65:c6:d3:d5:00:9b:85:e7:42:17:
5f:9b:56:97:64:7f:aa:3c:72:89:06:ab:80:3c:07:44:6f:31:
6d:38:4a:b0:cc:ae:0c:25:3b:c7:4c:40:28:6f:f1:1f:d7:17:
64:2d:36:49:99:1f:39:7a:86:2c:d5:e9:48:ad:73:a0:6e:07:
4c:92:94:e3:0e:51:a0:c0:a9:52:2a:bc:ea:18:36:ec:a2:21:
49:fd:19:32:2a:87:66:94:9d:b9:5f:5b:5c:bb:5c:dc:1e:d5:
cc:3c:7e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:17 2026 by rpki-client