Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/6Kn6KERntDi_4eNpvTRVmFsjPbs.roa
File: 6Kn6KERntDi_4eNpvTRVmFsjPbs.roa (raw, json)
Hash identifier: S7y4QiK56lUGKhpEffmK8PyadtfZ3aD7k2+Jzek5K7Y=
Subject key identifier: E8:A9:FA:28:44:67:B4:38:BF:E1:E3:69:BD:34:55:98:5B:23:3D:BB
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 01A0C883F8CB3ECCBE2B63D707456A7A6F23
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/6Kn6KERntDi_4eNpvTRVmFsjPbs.roa
Signing time: Tue 22 Sep 2026 09:48:07 +0000
ROA not before: Tue 22 Sep 2026 09:48:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218998
IP address blocks: 87.232.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:83:f8:cb:3e:cc:be:2b:63:d7:07:45:6a:7a:6f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Sep 22 09:48:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8a9fa284467b438bfe1e369bd3455985b233dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3e:ee:75:ff:b6:c7:14:24:1a:e0:04:25:c8:
c6:ba:0f:83:b5:38:42:3c:70:59:a3:e8:3e:15:f0:
62:ce:ad:48:97:c5:bb:8e:fd:48:29:d1:6c:f6:39:
64:89:d1:74:92:41:b8:89:6d:f0:91:e2:3b:cf:04:
0a:ba:e0:39:6c:85:71:10:77:de:2b:c9:c3:b2:80:
a1:f3:c7:05:f9:a2:d8:cf:83:1e:26:0e:b0:23:3b:
3c:9f:0a:a3:b1:38:ac:1b:bf:b9:cc:7f:f1:e1:6b:
3e:93:8d:8e:97:82:ae:40:a9:bf:fe:4c:58:e6:66:
2b:39:35:e4:c2:a0:3f:f0:56:4d:56:92:81:96:0a:
ab:41:ac:01:2a:fa:fc:19:22:56:27:51:d7:91:96:
07:9e:79:aa:5a:c4:05:5f:b3:97:c7:34:23:68:78:
9a:16:8a:21:71:08:53:68:a5:8b:f1:f7:bf:ec:1d:
d0:10:1d:ab:a7:8f:bf:7b:53:79:4f:69:d3:76:c3:
18:9c:1a:47:45:bc:e5:50:37:b8:f2:7e:75:fe:84:
55:8f:7c:31:d7:20:6b:26:70:13:d7:c0:72:e4:07:
e0:d3:29:f1:3b:b3:1e:ec:26:bf:6f:60:88:90:ac:
7a:20:dd:23:94:2a:aa:e1:81:ae:65:ba:c1:f0:bb:
a1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A9:FA:28:44:67:B4:38:BF:E1:E3:69:BD:34:55:98:5B:23:3D:BB
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/6Kn6KERntDi_4eNpvTRVmFsjPbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.88.0/24
Signature Algorithm: sha256WithRSAEncryption
91:4b:85:df:54:1b:c9:a2:04:cb:b3:b0:13:74:b3:f6:1f:02:
ac:6b:2d:17:17:81:5a:fa:f4:68:31:a2:68:d8:8f:2b:12:2a:
62:a4:92:61:4b:5a:57:8d:61:9b:d6:83:93:d7:b6:a2:ac:0a:
3d:25:c8:b4:75:f6:68:9b:7c:6b:b0:95:3a:c9:8a:ae:35:f7:
0d:9a:9c:45:c3:51:64:19:38:b4:2d:13:b5:82:d9:ff:7a:02:
4a:db:26:9b:e7:32:2a:6c:15:2f:ff:32:81:55:fc:f5:88:fa:
dc:49:d6:e6:eb:0b:bb:27:f0:f6:b2:d6:9b:2f:c2:b7:0e:87:
49:3c:b0:7c:2b:7a:6a:4d:36:ce:2f:5a:7f:ed:94:fd:40:bf:
f1:e8:9f:47:c9:d0:dc:00:82:02:1f:2f:4c:25:82:ad:c9:cd:
41:14:d5:f0:05:75:02:66:0c:cb:14:16:de:0a:20:dc:fb:8c:
d0:b4:7b:1c:bb:c3:88:2d:a0:d0:6d:12:47:f0:a0:2c:ea:f9:
e3:cb:22:a5:c4:36:c2:e7:93:dc:c5:4e:17:5e:79:e7:8d:51:
5e:24:8e:59:94:41:6b:bb:31:e6:f8:c0:32:d6:6d:ef:c2:7d:
de:2a:e8:42:43:e9:8f:c7:f3:7b:fc:18:90:51:49:a0:fb:3c:
0e:a3:a3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:07:22 2026 by rpki-client