Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/6s4kPzAq8cKYr7AGzVAlO81o_b8.roa
File: 6s4kPzAq8cKYr7AGzVAlO81o_b8.roa (raw, json)
Hash identifier: mBC7QSBiyyjDGqiKtPNcf8ZZJZOmeZIXAoHi/i7/GoY=
Subject key identifier: EA:CE:24:3F:30:2A:F1:C2:98:AF:B0:06:CD:50:25:3B:CD:68:FD:BF
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 019F12757B1C95B243FDDA1D0C794D9A3E6A
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/6s4kPzAq8cKYr7AGzVAlO81o_b8.roa
Signing time: Mon 29 Jun 2026 08:18:36 +0000
ROA not before: Mon 29 Jun 2026 08:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198154
IP address blocks: 81.12.32.0/22 maxlen: 24
81.12.46.0/24 maxlen: 24
81.12.80.0/24 maxlen: 24
81.12.83.0/24 maxlen: 24
87.107.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:75:7b:1c:95:b2:43:fd:da:1d:0c:79:4d:9a:3e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jun 29 08:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eace243f302af1c298afb006cd50253bcd68fdbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:4a:50:80:5d:c5:d3:37:07:54:71:14:11:
49:cb:99:84:a0:3b:0d:91:e0:a2:78:91:d1:1c:cb:
74:b9:1f:62:d6:a0:c3:59:2b:95:b5:4b:f3:86:ec:
78:b5:c9:ee:43:d0:9a:2a:cf:62:68:3f:e2:1f:26:
f7:15:13:15:09:27:b9:d4:49:ac:d4:6c:ef:8a:15:
41:e8:66:fb:ae:d6:62:2c:4f:8b:0b:ee:a5:b7:7a:
0c:4a:7f:0d:59:f9:e4:a6:6a:24:a2:a9:97:61:b6:
d4:5c:8f:c2:e6:6f:5e:cd:15:3d:d6:8b:25:42:74:
b9:66:08:71:8b:5c:0e:a0:33:9b:58:81:a3:0a:60:
77:2c:6b:70:bf:ff:c6:2c:24:f8:32:c7:a9:d8:9b:
ea:53:43:56:3b:8d:0f:2b:2f:26:88:e1:37:0b:49:
c3:8e:62:35:39:00:67:f7:f1:dd:e4:c7:00:d8:4b:
ae:1a:78:54:6d:f2:a4:80:0e:0c:b4:5c:cd:64:18:
23:23:44:3f:a5:60:2a:9a:b0:0f:98:ad:0e:95:a9:
33:57:7e:20:c8:a9:55:1a:82:18:43:df:0e:a1:27:
b0:b1:f4:8f:98:fd:e5:56:24:cb:c0:da:29:9a:48:
7e:a8:b7:9c:03:b2:c7:c7:dd:aa:5f:42:7d:36:c0:
74:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CE:24:3F:30:2A:F1:C2:98:AF:B0:06:CD:50:25:3B:CD:68:FD:BF
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/6s4kPzAq8cKYr7AGzVAlO81o_b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.32.0/22
81.12.46.0/24
81.12.80.0/24
81.12.83.0/24
87.107.156.0/22
Signature Algorithm: sha256WithRSAEncryption
58:b9:36:13:39:27:1b:57:21:43:db:63:83:63:44:fa:56:b1:
f3:e2:d3:fd:d7:41:2f:63:34:13:f7:fe:13:cb:c1:ef:a9:0f:
9e:68:59:e8:41:26:db:4b:af:e8:45:e2:c6:5d:aa:f8:fa:21:
5b:a0:27:de:f2:2e:c0:1b:dd:64:6c:d5:8b:d9:e8:1a:93:16:
d4:09:7e:f3:50:45:9d:32:4a:52:38:bc:af:58:b8:8f:89:b0:
a3:6f:f2:e9:0c:63:96:68:dc:9a:2d:25:9c:1a:50:bf:4e:21:
7d:79:70:e2:47:67:a5:46:3d:19:50:56:5a:dc:0a:55:de:94:
06:c8:46:1b:44:a8:3a:5d:59:5c:61:ab:1d:91:6d:63:d5:3b:
52:6d:29:8e:92:81:f2:b9:4d:b6:19:46:8e:73:87:39:00:21:
7f:e1:30:2f:5f:e0:4c:0b:73:cc:49:cc:1e:ce:96:e7:4d:f0:
71:23:6e:58:9a:ee:dc:9f:61:ef:06:b7:68:84:2f:f3:de:c3:
cc:3b:59:db:97:f1:6e:71:53:a5:b6:13:6f:fb:30:42:c6:9d:
37:76:c8:c9:5f:b8:53:7a:c0:ff:9d:5e:ae:bd:64:52:c5:e8:
3e:e6:a8:92:9a:b8:9b:b1:23:53:d4:b8:71:62:ce:08:d1:01:
ab:b5:45:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:42 2026 by rpki-client