Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/d6ItI_r9yN86_JuxNhgIRpd_mYs.roa
File: d6ItI_r9yN86_JuxNhgIRpd_mYs.roa (raw, json)
Hash identifier: CsL0RYDbH+7gxUo2SESj6CejUJThVCLmBvpqsgfpQmY=
Subject key identifier: 77:A2:2D:23:FA:FD:C8:DF:3A:FC:9B:B1:36:18:08:46:97:7F:99:8B
Certificate issuer: /CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Certificate serial: 019F847E8E21CE8DD9EE95C252D03617EF21
Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/d6ItI_r9yN86_JuxNhgIRpd_mYs.roa
Signing time: Tue 21 Jul 2026 11:45:14 +0000
ROA not before: Tue 21 Jul 2026 11:45:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211484
IP address blocks: 45.139.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:7e:8e:21:ce:8d:d9:ee:95:c2:52:d0:36:17:ef:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Validity
Not Before: Jul 21 11:45:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77a22d23fafdc8df3afc9bb136180846977f998b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:32:1e:94:96:ae:83:36:50:36:54:02:39:44:
69:90:cf:dc:b9:e4:4b:cc:d8:d1:fc:ba:5a:6c:0e:
bd:b0:f4:34:f9:ab:5f:2a:81:54:2b:3c:94:99:1e:
56:d5:00:04:a9:5b:79:ad:90:ab:8b:1a:43:28:89:
48:45:44:75:b5:ad:e0:48:6f:50:16:da:e8:28:c3:
3f:58:ae:88:19:d9:0d:6e:dd:35:f2:49:e7:a2:68:
a8:7e:be:27:e5:11:2e:db:87:12:a6:4d:bb:88:62:
f0:c3:a3:ae:a8:23:10:0c:44:97:ac:7c:6c:92:06:
ba:9b:3d:d8:e9:ac:1e:dc:e2:1b:8e:be:60:0e:e3:
a5:a2:1f:07:7e:2b:86:57:9f:27:98:a0:f7:3c:01:
c6:03:9a:06:1b:d8:5c:65:4e:b5:a4:4e:3f:14:6c:
8c:94:ba:f4:96:84:a3:7e:dd:59:7f:7a:a1:0a:6d:
33:36:99:83:8a:ac:5c:88:5f:f0:8b:ad:f7:b4:4d:
08:f6:e8:9d:11:ea:0d:f3:46:7a:38:0c:ca:75:c0:
12:67:7b:c4:44:01:bd:d6:a6:ad:ce:a8:22:18:e8:
9c:a4:5c:75:ab:ac:75:30:c8:66:9b:b2:2a:23:db:
33:2e:46:f3:4d:be:1f:4f:45:12:0d:79:f7:57:85:
0e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A2:2D:23:FA:FD:C8:DF:3A:FC:9B:B1:36:18:08:46:97:7F:99:8B
X509v3 Authority Key Identifier:
keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/d6ItI_r9yN86_JuxNhgIRpd_mYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.211.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:2c:5d:9e:fe:1b:bc:83:ce:a5:83:b8:6b:f5:81:8b:2d:31:
9c:2a:7e:7f:52:c2:56:d9:11:1a:ad:16:55:4a:e4:98:32:18:
6a:8b:98:ae:ae:94:e2:1b:dc:1a:c2:b3:9c:2f:bb:ab:74:bf:
d5:38:fa:91:29:8c:d0:0e:1d:21:33:c2:34:6e:d3:cc:b7:47:
49:52:56:77:42:70:69:db:4d:f6:96:c9:54:f5:48:1b:e3:d3:
e7:b8:88:8e:a9:95:25:25:f2:1b:ab:fb:82:2b:33:4f:fd:c8:
5d:b0:32:d2:25:70:6b:b9:19:5d:1f:cd:d8:b7:cf:6a:be:e6:
67:2d:a9:b1:20:f7:ea:26:8b:61:4e:de:0d:1f:83:2e:5d:0a:
77:ef:d0:b5:df:64:0e:b1:0f:61:56:2c:a2:02:72:38:3a:20:
a0:1a:a5:94:4b:15:b0:92:f1:18:27:a5:26:3b:48:29:a1:44:
8f:89:ce:02:21:f1:22:b1:21:ce:07:73:14:57:70:ec:fa:c3:
88:00:56:d6:37:c2:97:ad:e7:9e:5d:92:a9:d9:23:32:b4:97:
41:a7:cd:bb:09:97:f4:05:4b:c5:91:4c:4b:d5:ca:c7:78:e0:
8d:ff:01:52:f1:ee:bb:94:7a:2e:d0:75:8f:fb:a1:d9:7c:9c:
62:3c:bf:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:05 2026 by rpki-client