Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6AsKH6cIYm6PKz7G8OY2x04bdyQ.roa
File: 6AsKH6cIYm6PKz7G8OY2x04bdyQ.roa (raw, json)
Hash identifier: 7rW5h8lkHU5OUNeQyZVvG/sF9tJQzbfynorxiO73qqk=
Subject key identifier: E8:0B:0A:1F:A7:08:62:6E:8F:2B:3E:C6:F0:E6:36:C7:4E:1B:77:24
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0CD55C1D6A59470B213491C0B5A73CE8A
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6AsKH6cIYm6PKz7G8OY2x04bdyQ.roa
Signing time: Wed 23 Sep 2026 08:15:44 +0000
ROA not before: Wed 23 Sep 2026 08:15:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213962
IP address blocks: 82.109.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:55:c1:d6:a5:94:70:b2:13:49:1c:0b:5a:73:ce:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 23 08:15:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e80b0a1fa708626e8f2b3ec6f0e636c74e1b7724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:73:f0:58:08:a7:e9:41:1e:31:e1:61:b5:8e:
ef:7c:e2:98:78:5f:3b:b7:47:c6:45:f6:d6:2e:07:
7e:15:fe:74:23:39:72:a1:6e:e9:f1:2b:c3:85:d7:
f5:5a:b3:59:9f:a9:1a:17:2e:80:96:e7:59:c0:17:
73:71:bd:c6:f4:6b:46:c1:77:b4:b5:19:6f:61:76:
99:ae:7e:2d:dd:0e:21:bc:95:a6:76:ef:d9:f7:8c:
1d:3e:80:b0:b8:e2:c9:b7:3e:2c:93:3a:34:27:d4:
35:a3:33:14:91:90:90:50:2a:79:8b:02:ad:1e:1c:
4c:ab:fa:d6:84:7c:47:d0:e0:c2:b4:7a:d0:0d:77:
26:05:1a:7b:6e:11:cc:70:46:42:5e:01:43:89:ef:
52:f9:bd:fb:5d:2c:28:68:ac:c3:7f:57:0c:6d:5e:
cb:85:72:43:94:a2:f3:61:65:88:3e:29:f7:95:72:
57:53:9f:07:1a:b9:58:28:c2:ef:b9:39:6a:4e:a1:
71:25:a2:d0:4d:06:2b:2f:b8:2f:f3:7e:e6:4b:c5:
7d:c8:a5:6e:e4:f5:01:94:43:c8:65:88:91:c0:84:
3f:74:28:eb:e2:74:e2:ee:6b:31:d0:22:22:03:06:
57:78:92:f1:b0:3a:f3:d2:9e:d3:71:69:e2:2a:4f:
2e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0B:0A:1F:A7:08:62:6E:8F:2B:3E:C6:F0:E6:36:C7:4E:1B:77:24
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6AsKH6cIYm6PKz7G8OY2x04bdyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.207.0/24
Signature Algorithm: sha256WithRSAEncryption
42:7b:23:a8:7d:59:fd:74:3a:49:f4:5e:90:39:43:47:f1:34:
0e:37:97:4c:e6:2a:3a:6a:50:3c:b3:a4:15:49:a4:0b:d4:de:
81:52:ee:5a:2d:be:f2:ad:6d:e5:fd:fc:1d:b5:69:5d:14:74:
84:0c:21:65:fc:f9:ec:dd:6c:f9:3c:70:b1:bc:ee:bb:3d:aa:
7b:d5:12:f2:ef:c6:f3:24:5e:ca:1e:48:9d:58:a9:f7:86:19:
7b:90:89:d3:8d:21:44:33:ad:e9:89:d4:25:d9:82:23:56:a2:
76:9f:3b:97:c9:f0:3f:0d:8c:4c:38:cf:69:c2:f2:72:d6:cb:
74:a1:a6:82:7c:20:ce:00:26:f6:7c:48:bb:e9:33:5c:cd:ae:
53:92:75:77:dd:49:de:bd:71:24:dc:f1:92:2f:e6:38:14:3b:
44:95:56:e0:f8:7e:64:36:2d:ec:7c:64:ff:56:c8:a6:53:c9:
8e:ee:9b:25:14:f9:73:e9:ed:29:26:32:4b:ad:87:00:e1:29:
63:bf:cc:b0:94:c3:4b:11:90:d7:22:da:01:cd:ca:5e:ce:82:
f9:70:61:f3:78:b2:55:be:33:20:24:90:b5:5a:03:27:71:0a:
8c:e5:9c:a0:cd:16:ab:87:44:16:26:38:bf:48:f5:6f:49:91:
50:50:40:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDNVcHWpZRwshNJHAtac86KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwOTIzMDgxNTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODBiMGExZmE3MDg2MjZlOGYyYjNlYzZmMGU2MzZjNzRlMWI3NzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnPwWAin6UEeMeFhtY7vfOKYeF87
t0fGRfbWLgd+Ff50IzlyoW7p8SvDhdf1WrNZn6kaFy6AludZwBdzcb3G9GtGwXe0
tRlvYXaZrn4t3Q4hvJWmdu/Z94wdPoCwuOLJtz4skzo0J9Q1ozMUkZCQUCp5iwKt
HhxMq/rWhHxH0ODCtHrQDXcmBRp7bhHMcEZCXgFDie9S+b37XSwoaKzDf1cMbV7L
hXJDlKLzYWWIPin3lXJXU58HGrlYKMLvuTlqTqFxJaLQTQYrL7gv837mS8V9yKVu
5PUBlEPIZYiRwIQ/dCjr4nTi7msx0CIiAwZXeJLxsDrz0p7TcWniKk8uiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOgLCh+nCGJujys+xvDmNsdOG3ckMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvNkFzS0g2Y0lZbTZQS3o3RzhPWTJ4MDRiZHlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUm3PMA0G
CSqGSIb3DQEBCwUAA4IBAQBCeyOofVn9dDpJ9F6QOUNH8TQON5dM5io6alA8s6QV
SaQL1N6BUu5aLb7yrW3l/fwdtWldFHSEDCFl/Pns3Wz5PHCxvO67Pap71RLy78bz
JF7KHkidWKn3hhl7kInTjSFEM63pidQl2YIjVqJ2nzuXyfA/DYxMOM9pwvJy1st0
oaaCfCDOACb2fEi76TNcza5TknV33UnevXEk3PGSL+Y4FDtElVbg+H5kNi3sfGT/
VsimU8mO7pslFPlz6e0pJjJLrYcA4Sljv8ywlMNLEZDXItoBzcpezoL5cGHzeLJV
vjMgJJC1WgMncQqM5ZygzRarh0QWJji/SPVvSZFQUEDD
-----END CERTIFICATE-----
Generated at Fri Sep 25 04:03:38 2026 by rpki-client