Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6KqPxwz5HN8tB4czCK5TC9aRWjk.roa
File: 6KqPxwz5HN8tB4czCK5TC9aRWjk.roa (raw, json)
Hash identifier: LIe7on9yf/qyzu9vp2pTn8miDNvuDmAxNQ8IOORYtdA=
Subject key identifier: E8:AA:8F:C7:0C:F9:1C:DF:2D:07:87:33:08:AE:53:0B:D6:91:5A:39
Certificate issuer: /CN=eab40339fea78674cb63493451b1d31a16b338e8
Certificate serial: 019F2368743AF8EF3B40F8BBBC75B043AA5B
Authority key identifier: EA:B4:03:39:FE:A7:86:74:CB:63:49:34:51:B1:D3:1A:16:B3:38:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rQDOf6nhnTLY0k0UbHTGhazOOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6KqPxwz5HN8tB4czCK5TC9aRWjk.roa
Signing time: Thu 02 Jul 2026 15:17:55 +0000
ROA not before: Thu 02 Jul 2026 15:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50563
IP address blocks: 45.8.76.0/22 maxlen: 22
45.8.76.0/23 maxlen: 23
45.8.76.0/24 maxlen: 24
45.8.77.0/24 maxlen: 24
45.8.78.0/23 maxlen: 23
45.8.78.0/24 maxlen: 24
45.8.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rQDOf6nhnTLY0k0UbHTGhazOOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:74:3a:f8:ef:3b:40:f8:bb:bc:75:b0:43:aa:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab40339fea78674cb63493451b1d31a16b338e8
Validity
Not Before: Jul 2 15:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8aa8fc70cf91cdf2d07873308ae530bd6915a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:ff:d8:cd:e9:c3:b4:a3:bf:13:20:d6:c3:
53:f6:ab:6a:3c:03:a6:cc:8e:1b:58:d8:dc:82:d4:
f5:9d:3f:af:84:77:6c:ce:08:bc:6a:79:d8:52:6d:
0b:18:24:2d:bb:af:ac:e1:1b:81:a6:35:a0:6c:59:
c9:0b:72:e0:8a:a5:d4:60:6a:3c:2e:a5:78:27:f9:
1d:96:74:3f:35:7c:b8:fc:70:c2:a4:90:21:fc:41:
6d:26:28:c6:22:54:39:15:26:9b:32:22:f2:00:65:
ba:f7:cb:49:3a:41:9a:42:a6:9f:05:3c:9c:f5:2f:
5a:23:5c:9d:25:46:23:ef:ae:98:47:9e:0f:9a:0d:
22:5d:02:ac:51:52:77:b0:db:6e:ea:31:55:b2:66:
79:6f:6f:5a:c1:87:5d:f0:0b:fb:ce:4e:03:cb:72:
7e:e5:4a:47:7e:8a:85:80:55:1e:0c:8d:b0:6e:7c:
be:43:2f:24:27:db:05:d6:2b:c1:cf:cc:e8:e5:bc:
bd:89:c6:b4:5a:df:87:00:14:31:27:01:7d:24:b9:
31:29:56:ef:78:f6:37:74:fa:15:13:ff:66:f0:74:
21:8e:76:95:12:51:63:af:2b:da:ce:85:66:af:be:
03:13:80:01:50:c0:88:27:8a:1b:97:c2:4d:76:be:
9a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AA:8F:C7:0C:F9:1C:DF:2D:07:87:33:08:AE:53:0B:D6:91:5A:39
X509v3 Authority Key Identifier:
keyid:EA:B4:03:39:FE:A7:86:74:CB:63:49:34:51:B1:D3:1A:16:B3:38:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rQDOf6nhnTLY0k0UbHTGhazOOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6KqPxwz5HN8tB4czCK5TC9aRWjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/6rQDOf6nhnTLY0k0UbHTGhazOOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.76.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:62:66:47:c9:fb:3c:46:f9:0f:22:6c:2a:30:da:20:d6:04:
07:42:04:fb:3d:72:f5:3e:bd:b3:8f:bd:d0:87:c8:1e:0f:88:
09:7d:1f:f5:ae:b0:20:7c:c2:ff:8f:ff:38:53:44:be:81:bd:
b5:96:cf:49:1d:f7:7f:29:5f:5e:41:99:23:d5:87:d2:a7:91:
98:bc:3f:92:ae:f4:73:76:f4:55:5e:c5:ab:f0:88:38:39:f5:
2e:72:6a:58:9a:7d:a0:9c:6f:59:9b:92:e8:51:bf:dc:a3:de:
d1:9e:71:63:74:13:d4:50:e5:30:37:64:4e:17:e1:7c:7a:ee:
5f:0a:ac:dc:73:55:6b:06:06:e8:d9:0f:89:f5:80:e7:83:3f:
05:c8:8e:c9:04:77:c5:41:5e:43:8e:dc:e5:b5:9f:00:ec:a4:
f7:0b:4e:2f:86:b9:e9:1e:d2:88:8d:1b:3b:fa:6d:39:02:b5:
bb:55:c0:a5:23:2b:89:48:f4:ce:fe:7d:fb:4d:c0:b5:26:1c:
6b:9c:2c:5d:e8:66:f8:d8:3b:05:f7:f6:0b:77:0b:7a:14:ed:
b1:cd:00:26:01:a0:08:04:bf:cd:af:0a:30:ec:90:85:11:23:
8d:a9:1c:da:b1:fb:70:b8:cf:61:a2:8f:be:bd:70:2a:1c:36:
19:80:0b:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaHQ6+O87QPi7vHWwQ6pbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYjQwMzM5ZmVhNzg2NzRjYjYzNDkzNDUxYjFkMzFhMTZi
MzM4ZTgwHhcNMjYwNzAyMTUxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGFhOGZjNzBjZjkxY2RmMmQwNzg3MzMwOGFlNTMwYmQ2OTE1YTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthP/2M3pw7SjvxMg1sNT9qtqPAOm
zI4bWNjcgtT1nT+vhHdszgi8annYUm0LGCQtu6+s4RuBpjWgbFnJC3LgiqXUYGo8
LqV4J/kdlnQ/NXy4/HDCpJAh/EFtJijGIlQ5FSabMiLyAGW698tJOkGaQqafBTyc
9S9aI1ydJUYj766YR54Pmg0iXQKsUVJ3sNtu6jFVsmZ5b29awYdd8Av7zk4Dy3J+
5UpHfoqFgFUeDI2wbny+Qy8kJ9sF1ivBz8zo5by9ica0Wt+HABQxJwF9JLkxKVbv
ePY3dPoVE/9m8HQhjnaVElFjryvazoVmr74DE4ABUMCIJ4obl8JNdr6a3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOiqj8cM+RzfLQeHMwiuUwvWkVo5MB8GA1UdIwQY
MBaAFOq0Azn+p4Z0y2NJNFGx0xoWszjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnJRRE9mNm5oblRMWTBrMFViSFRHaGF6T09nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80YzJiNjgtODE4Yi00OTAyLWI0MmYt
NmZjYWYyNzI5YmU1LzEvNktxUHh3ejVITjh0QjRjekNLNVRDOWFSV2prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80YzJiNjgtODE4Yi00OTAyLWI0MmYtNmZjYWYyNzI5YmU1
LzEvNnJRRE9mNm5oblRMWTBrMFViSFRHaGF6T09nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQhMMA0G
CSqGSIb3DQEBCwUAA4IBAQBtYmZHyfs8RvkPImwqMNog1gQHQgT7PXL1Pr2zj73Q
h8geD4gJfR/1rrAgfML/j/84U0S+gb21ls9JHfd/KV9eQZkj1YfSp5GYvD+SrvRz
dvRVXsWr8Ig4OfUucmpYmn2gnG9Zm5LoUb/co97RnnFjdBPUUOUwN2ROF+F8eu5f
Cqzcc1VrBgbo2Q+J9YDngz8FyI7JBHfFQV5DjtzltZ8A7KT3C04vhrnpHtKIjRs7
+m05ArW7VcClIyuJSPTO/n37TcC1JhxrnCxd6Gb42DsF9/YLdwt6FO2xzQAmAaAI
BL/Nrwow7JCFESONqRzasftwuM9hoo++vXAqHDYZgAv3
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:33 2026 by rpki-client