Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/I6-j-8BvQfa7uemDIhOjpDrfaIo.roa
File: I6-j-8BvQfa7uemDIhOjpDrfaIo.roa (raw, json)
Hash identifier: 4oPWEYVGarVF168W3qSKbbTkYi3cD0iLoXF1q+SMw64=
Subject key identifier: 23:AF:A3:FB:C0:6F:41:F6:BB:B9:E9:83:22:13:A3:A4:3A:DF:68:8A
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A0CF1EE4383DE933CEC4DE0A24C7D888A3
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/I6-j-8BvQfa7uemDIhOjpDrfaIo.roa
Signing time: Wed 23 Sep 2026 16:35:03 +0000
ROA not before: Wed 23 Sep 2026 16:35:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206491
IP address blocks: 165.84.224.0/24 maxlen: 24
192.145.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:1e:e4:38:3d:e9:33:ce:c4:de:0a:24:c7:d8:88:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Sep 23 16:35:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23afa3fbc06f41f6bbb9e9832213a3a43adf688a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b2:ec:4b:ba:57:f6:71:70:62:6b:3d:fa:b4:
8f:9b:db:6b:a5:9e:38:c8:59:3e:5b:8f:0e:40:8c:
ec:39:c3:f8:40:93:3f:db:2b:ee:08:81:df:17:1d:
00:3b:cb:58:5b:da:2e:ba:3a:63:b7:0f:67:7b:66:
e8:9d:c6:12:0a:7d:d0:13:7a:25:6d:59:33:c1:23:
e6:2c:8d:37:da:8d:8f:d0:0e:3f:7e:4a:9c:a7:93:
7c:a4:22:15:3b:a6:2e:ca:39:0a:f5:27:01:b0:c9:
90:87:c5:e0:90:ea:d2:39:93:39:9d:56:26:c5:8d:
3f:0c:09:cd:cc:59:37:7a:fe:ea:72:26:71:1b:95:
1e:9e:59:2f:2e:ec:f7:1f:27:32:cb:29:cf:b8:83:
3c:5a:42:a3:3f:25:49:4d:32:47:0c:ca:71:83:7a:
2e:97:ae:e3:df:d9:fa:a6:aa:24:97:a4:26:12:09:
a8:9e:80:67:31:3f:4a:52:cc:b3:45:59:cc:55:09:
8b:cb:25:8e:2e:5f:93:f6:2a:81:bf:d4:f3:be:2b:
82:d6:10:ec:00:7f:f3:0b:fb:79:b0:7e:55:ee:d5:
18:17:a7:4b:c2:07:e8:fc:01:49:e4:24:d0:81:f4:
55:5c:90:b1:db:b6:07:d8:dd:f6:fd:e9:2d:6a:59:
e7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AF:A3:FB:C0:6F:41:F6:BB:B9:E9:83:22:13:A3:A4:3A:DF:68:8A
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/I6-j-8BvQfa7uemDIhOjpDrfaIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.84.224.0/24
192.145.54.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:51:2b:e0:1f:6c:7b:2c:a3:86:ec:fe:09:ec:3b:23:45:f4:
4a:9d:1c:13:f5:ee:8c:d9:8d:20:67:f3:fe:f3:aa:48:e9:3a:
25:2c:fc:0d:13:b9:f2:5b:aa:4d:02:c3:52:20:36:d5:c1:75:
35:a2:a6:d7:2b:58:96:01:9c:17:8b:2f:fa:2c:ad:dc:5e:d5:
a8:a1:67:e5:7f:2a:a8:c7:72:b9:52:32:c8:f7:d2:1d:d1:79:
e0:82:84:ab:f5:28:86:44:3e:e7:f9:eb:f2:9c:4b:c7:f9:92:
20:1c:1c:4d:15:9e:ef:e9:f7:68:63:bb:d6:ae:fb:02:ba:ef:
ca:c1:7d:60:23:d5:2b:a9:1e:bc:61:d1:c0:b5:89:57:51:e3:
45:d0:52:f7:b3:7b:ed:0f:00:03:94:68:e9:9b:26:d1:2d:2b:
81:52:3b:b6:8c:fc:b4:6f:ac:b6:8c:46:5f:d8:5a:c6:b8:23:
61:44:f6:04:b2:7d:ae:79:05:c5:a2:5b:51:44:a5:3a:15:e4:
3f:f3:cf:54:1e:47:f5:00:ba:c0:63:e7:85:13:93:c8:c5:39:
53:fb:bc:0a:62:38:14:df:8e:96:2c:aa:ce:a0:09:61:47:08:
04:ff:07:15:09:39:6e:03:19:0d:c8:b8:4d:95:c4:90:7e:74:
96:d4:5e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:36:46 2026 by rpki-client