Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e28313-a11a-495a-8203-4b129e0c792e/1/6FnXpjQ59g5sXxs58-cmakXFI6c.roa
File: 6FnXpjQ59g5sXxs58-cmakXFI6c.roa (raw, json)
Hash identifier: 7jdSARNoDZ421UFIkyjxe0IGl8Z6A3h2G9Qzi9YoQnU=
Subject key identifier: E8:59:D7:A6:34:39:F6:0E:6C:5F:1B:39:F3:E7:26:6A:45:C5:23:A7
Certificate issuer: /CN=09ef69b70efa5832b615a98df9d8ee4af5a0feb6
Certificate serial: 019C8AA04BAD16256C4221A4C47867618037
Authority key identifier: 09:EF:69:B7:0E:FA:58:32:B6:15:A9:8D:F9:D8:EE:4A:F5:A0:FE:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce9ptw76WDK2FamN-djuSvWg_rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e28313-a11a-495a-8203-4b129e0c792e/1/6FnXpjQ59g5sXxs58-cmakXFI6c.roa
Signing time: Mon 23 Feb 2026 13:11:26 +0000
ROA not before: Mon 23 Feb 2026 13:11:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211774
IP address blocks: 91.219.240.0/22 maxlen: 22
185.219.60.0/22 maxlen: 22
2a0b:e440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e28313-a11a-495a-8203-4b129e0c792e/1/Ce9ptw76WDK2FamN-djuSvWg_rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e28313-a11a-495a-8203-4b129e0c792e/1/Ce9ptw76WDK2FamN-djuSvWg_rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce9ptw76WDK2FamN-djuSvWg_rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8a:a0:4b:ad:16:25:6c:42:21:a4:c4:78:67:61:80:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ef69b70efa5832b615a98df9d8ee4af5a0feb6
Validity
Not Before: Feb 23 13:11:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e859d7a63439f60e6c5f1b39f3e7266a45c523a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d0:ab:5f:0c:95:21:9f:c5:73:c9:d2:7f:c2:
9a:13:a7:ea:c0:e1:82:d7:ec:51:0a:b9:ff:d3:af:
0e:1c:6e:cb:ba:01:72:1c:6a:89:c8:6d:41:08:bb:
f5:e0:1e:5a:05:57:05:ce:31:67:5f:f6:56:a0:26:
73:a2:b9:2e:a6:25:25:99:ba:5a:0e:e6:07:f3:de:
b9:ef:fe:c1:98:7a:4f:8c:e1:67:b5:e8:f1:77:79:
14:21:db:63:9f:4a:1e:a8:45:f5:69:c9:6b:50:bd:
63:d1:e3:ad:a9:fb:54:b7:57:10:73:29:41:34:0e:
70:ab:26:35:f8:54:c3:e9:01:38:23:0d:cb:2a:71:
8f:9c:3a:76:0e:7b:75:d8:86:88:21:c0:94:5b:78:
48:28:64:1e:88:0a:78:03:d6:dd:68:33:ac:b3:ac:
44:36:36:26:bc:4b:6c:82:f1:b5:5e:08:9d:ce:c8:
02:f7:87:ee:17:80:cb:ce:c4:55:b9:dc:9d:00:e2:
ec:1b:22:1f:42:a4:7f:b8:59:12:f0:3e:db:22:f5:
15:f1:df:55:15:3d:42:6d:ff:9b:43:ff:63:69:fa:
5e:66:6a:9e:2e:9f:8a:3a:b5:0c:86:ec:33:d6:8d:
9f:66:73:9c:2b:47:d4:be:98:75:86:34:3f:13:27:
62:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:59:D7:A6:34:39:F6:0E:6C:5F:1B:39:F3:E7:26:6A:45:C5:23:A7
X509v3 Authority Key Identifier:
keyid:09:EF:69:B7:0E:FA:58:32:B6:15:A9:8D:F9:D8:EE:4A:F5:A0:FE:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce9ptw76WDK2FamN-djuSvWg_rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e28313-a11a-495a-8203-4b129e0c792e/1/6FnXpjQ59g5sXxs58-cmakXFI6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e28313-a11a-495a-8203-4b129e0c792e/1/Ce9ptw76WDK2FamN-djuSvWg_rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.240.0/22
185.219.60.0/22
IPv6:
2a0b:e440::/29
Signature Algorithm: sha256WithRSAEncryption
7e:dd:33:46:78:9e:b0:24:f3:39:3c:97:97:ac:ac:f3:bd:93:
f9:8c:16:81:37:07:a8:c0:f3:7e:a4:b6:23:15:02:e5:93:44:
f2:37:49:cc:55:c9:98:c7:16:61:1d:5e:43:b5:70:cc:46:d3:
c2:cd:1f:bb:29:3a:42:c7:72:c4:38:27:bf:ea:73:f3:ea:d8:
1a:b1:7d:63:19:27:0e:15:f1:f0:ed:61:e4:a4:63:1c:3d:c4:
06:02:5c:14:f4:3e:94:1c:30:fc:dd:30:0b:8d:9a:bd:13:36:
02:62:f3:57:75:e4:21:ec:94:b6:97:98:0e:51:a3:e2:42:16:
87:09:0f:f5:89:df:86:56:6b:f0:9e:24:da:1e:a7:b2:d4:5d:
79:aa:c6:91:a5:54:b3:4b:67:94:3d:e6:9e:94:0f:e8:91:bd:
60:f4:87:47:2e:6a:2e:5d:d9:b7:b5:1a:ae:15:70:70:a6:98:
7d:1e:87:4e:a2:99:70:81:0e:57:8b:ea:3a:30:b8:44:95:fc:
87:8a:53:50:e9:7e:32:cb:ef:a6:ba:09:d2:e1:f7:0b:3c:1f:
2b:f2:18:ec:4d:73:fa:a7:ba:31:a8:6d:bf:bf:e7:08:0d:fa:
0b:0e:47:20:7e:e6:d4:86:dc:f3:01:e2:ad:c9:06:41:77:09:
a4:76:4d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:08:01 2026 by rpki-client