Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/6R28sM8NerO2u18G_AMWCWlWH18.roa
File: 6R28sM8NerO2u18G_AMWCWlWH18.roa (raw, json)
Hash identifier: NDy+Juig3WdCXI1JH5AcQ2fEURwLEtaXUjO+rQmeRKY=
Subject key identifier: E9:1D:BC:B0:CF:0D:7A:B3:B6:BB:5F:06:FC:03:16:09:69:56:1F:5F
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 019F1DA0C67D81BC569B597F54E75993A7FE
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/6R28sM8NerO2u18G_AMWCWlWH18.roa
Signing time: Wed 01 Jul 2026 12:21:43 +0000
ROA not before: Wed 01 Jul 2026 12:21:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56582
IP address blocks: 31.169.64.0/24 maxlen: 24
31.169.65.0/24 maxlen: 24
31.169.66.0/24 maxlen: 24
31.169.67.0/24 maxlen: 24
31.169.69.0/24 maxlen: 24
31.169.70.0/24 maxlen: 24
31.169.71.0/24 maxlen: 24
31.169.72.0/24 maxlen: 24
31.169.74.0/24 maxlen: 24
31.169.76.0/24 maxlen: 24
31.169.77.0/24 maxlen: 24
31.169.78.0/24 maxlen: 24
31.169.79.0/24 maxlen: 24
31.169.80.0/24 maxlen: 24
31.169.81.0/24 maxlen: 24
31.169.82.0/24 maxlen: 24
31.169.84.0/24 maxlen: 24
31.169.85.0/24 maxlen: 24
31.169.87.0/24 maxlen: 24
31.169.88.0/24 maxlen: 24
31.169.90.0/24 maxlen: 24
31.169.92.0/24 maxlen: 24
31.169.93.0/24 maxlen: 24
31.169.94.0/24 maxlen: 24
31.169.95.0/24 maxlen: 24
185.33.63.0/24 maxlen: 24
2a00:5740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:a0:c6:7d:81:bc:56:9b:59:7f:54:e7:59:93:a7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jul 1 12:21:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e91dbcb0cf0d7ab3b6bb5f06fc03160969561f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:66:0b:dc:ec:5a:02:5f:22:80:5c:19:29:
59:0a:21:85:9a:12:19:4f:14:c2:b2:85:b5:45:83:
e1:8f:46:87:b2:65:6b:6e:cd:75:22:ba:cf:14:cf:
13:01:e0:7d:12:2f:2e:3f:1b:5c:c2:e9:8a:05:1a:
29:64:86:64:f4:b1:31:fb:06:6a:6e:d0:80:25:9d:
e9:25:1f:bd:99:e0:af:bd:b7:60:4e:10:c0:53:f9:
d8:55:eb:f4:ea:65:df:67:c4:4c:e6:89:d9:0c:52:
49:91:7f:43:b3:6c:b0:cc:85:eb:71:be:b4:b0:1f:
53:69:93:48:54:76:48:5b:ce:26:64:2c:b3:63:58:
b8:08:2c:98:92:ab:9a:8f:75:7e:3c:e2:b3:d0:0f:
ae:13:b0:12:5a:f4:2a:7d:a7:d4:e3:45:9d:a9:1f:
39:ef:ef:96:9c:bd:02:ec:3f:1f:b8:cd:2c:43:33:
a2:86:79:2b:ef:91:35:65:1b:f0:bc:4b:09:76:b9:
eb:e4:32:d8:9f:bf:e3:1d:e4:db:b4:92:8e:61:5d:
28:b6:3d:01:28:2b:fc:d1:76:a9:55:f7:c4:a1:b5:
b7:3b:6e:bb:c3:e1:a9:43:4b:84:6f:fc:1d:3e:23:
ed:f5:25:1d:2f:85:4d:0c:57:5c:c9:bd:a9:58:b3:
7a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1D:BC:B0:CF:0D:7A:B3:B6:BB:5F:06:FC:03:16:09:69:56:1F:5F
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/6R28sM8NerO2u18G_AMWCWlWH18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.64.0/22
31.169.69.0-31.169.72.255
31.169.74.0/24
31.169.76.0-31.169.82.255
31.169.84.0/23
31.169.87.0-31.169.88.255
31.169.90.0/24
31.169.92.0/22
185.33.63.0/24
IPv6:
2a00:5740::/29
Signature Algorithm: sha256WithRSAEncryption
61:e5:49:68:da:4b:e9:50:4e:ee:b1:15:ae:77:3e:22:12:d5:
0d:32:f9:a5:88:00:aa:8b:ab:34:0c:24:44:78:73:42:7f:e6:
9a:06:c6:1a:2f:0e:22:e9:2e:8b:6a:6a:89:6d:e9:49:30:a1:
97:89:9c:46:dc:f4:bf:d4:32:b8:32:37:17:b1:66:d2:ed:45:
06:62:c8:6c:90:c6:59:a0:3c:7e:a2:34:0c:48:d9:15:60:91:
17:d9:60:fa:e7:ac:a2:81:52:90:f8:84:d9:07:01:f3:15:f3:
ed:9a:dc:c3:3b:15:2b:8e:7d:e5:0d:cf:e9:89:5a:27:0b:35:
09:e3:69:bc:4d:c3:c9:8a:b3:51:2c:aa:87:c7:65:6a:7c:1a:
ad:66:50:29:78:22:25:9e:a5:6a:99:23:97:60:7c:ea:3d:dc:
6d:5d:3d:a5:d2:e4:71:06:b3:ac:7e:3b:ba:41:c5:97:f3:4e:
e3:7a:1b:03:65:df:b9:6e:7d:b0:bd:83:19:1c:e4:fa:69:d9:
d1:66:87:46:7d:ef:1f:00:fa:56:d5:17:c4:88:14:15:4a:38:
4c:09:b7:15:8c:a1:40:a2:da:31:2e:89:c8:95:08:bb:fc:3e:
15:dc:47:be:da:6f:3d:f2:c5:99:94:3f:a4:14:4f:d1:71:b1:
40:e3:d7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:20:38 2026 by rpki-client