Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/6Kp8Q7FDy8zVl6KS7XGPmtjTZrI.roa
File: 6Kp8Q7FDy8zVl6KS7XGPmtjTZrI.roa (raw, json)
Hash identifier: LSjD6nMfWSQxNszQ+KYKSl3MtwhSLODWVrEJPytMoHE=
Subject key identifier: E8:AA:7C:43:B1:43:CB:CC:D5:97:A2:92:ED:71:8F:9A:D8:D3:66:B2
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 01A066462B2436F98B28AAE5088CD98353D2
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/6Kp8Q7FDy8zVl6KS7XGPmtjTZrI.roa
Signing time: Thu 03 Sep 2026 07:57:49 +0000
ROA not before: Thu 03 Sep 2026 07:57:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 45.74.148.0/22 maxlen: 32
45.142.24.0/24 maxlen: 24
45.142.25.0/24 maxlen: 32
45.142.27.0/24 maxlen: 32
62.101.160.0/24 maxlen: 24
103.93.40.0/24 maxlen: 32
103.93.41.0/24 maxlen: 32
103.93.42.0/24 maxlen: 32
103.93.43.0/24 maxlen: 32
103.111.0.0/22 maxlen: 32
103.124.164.0/24 maxlen: 32
103.124.166.0/24 maxlen: 32
103.204.120.0/24 maxlen: 32
103.204.122.0/24 maxlen: 32
103.204.123.0/24 maxlen: 32
109.104.132.0/24 maxlen: 32
109.104.133.0/24 maxlen: 32
109.104.134.0/24 maxlen: 32
144.48.52.0/24 maxlen: 32
144.48.53.0/24 maxlen: 32
185.153.124.0/22 maxlen: 32
185.233.124.0/22 maxlen: 32
199.168.120.0/24 maxlen: 32
199.168.121.0/24 maxlen: 32
199.168.122.0/24 maxlen: 32
199.168.123.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:46:2b:24:36:f9:8b:28:aa:e5:08:8c:d9:83:53:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Sep 3 07:57:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8aa7c43b143cbccd597a292ed718f9ad8d366b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e0:67:7b:fe:05:b4:fb:8a:0c:7c:98:1b:8b:
d9:85:17:82:fe:cd:e3:3e:20:81:4b:47:e7:d1:49:
87:a5:0f:96:5c:de:ac:61:c3:cb:d6:26:c3:fd:fd:
2f:ac:d5:4a:ed:32:d2:a1:2e:4d:ba:b5:1e:01:ce:
37:3f:eb:48:46:65:17:c4:19:84:f9:19:8b:d4:70:
6b:97:d2:a2:3c:83:36:8d:dd:78:3c:ec:92:91:4d:
c1:04:40:cc:13:93:5a:8e:15:64:4a:d8:a3:1f:3c:
a4:cd:7f:0d:84:10:cd:3d:14:42:59:e2:96:30:5c:
21:8d:4c:8b:16:33:ec:3e:00:bf:1f:ba:37:f3:77:
ef:3e:b6:19:60:06:8f:ed:7d:8c:8c:a5:46:23:5f:
8a:d1:59:d7:41:cd:54:fc:52:91:be:2b:b6:ea:f4:
13:09:fc:1e:31:92:4c:e0:04:21:8e:e5:c4:2e:74:
64:0b:d7:0e:ba:6e:3a:dd:df:9c:98:52:75:e0:b3:
70:23:62:82:74:38:33:ec:b5:a6:95:30:b9:07:74:
9c:90:5c:df:b8:26:53:a5:e5:2c:0c:e0:8f:f3:24:
c3:99:80:56:ec:4b:8b:35:cc:6f:a8:52:43:ab:f3:
39:e0:cc:e2:5b:9c:63:f0:8c:48:95:b9:59:36:74:
a5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AA:7C:43:B1:43:CB:CC:D5:97:A2:92:ED:71:8F:9A:D8:D3:66:B2
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/6Kp8Q7FDy8zVl6KS7XGPmtjTZrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.148.0/22
45.142.24.0/23
45.142.27.0/24
62.101.160.0/24
103.93.40.0/22
103.111.0.0/22
103.124.164.0/24
103.124.166.0/24
103.204.120.0/24
103.204.122.0/23
109.104.132.0-109.104.134.255
144.48.52.0/23
185.153.124.0/22
185.233.124.0/22
199.168.120.0/22
Signature Algorithm: sha256WithRSAEncryption
91:db:9a:99:ab:95:34:67:1f:9e:a7:8c:18:0d:08:b1:8f:97:
c2:65:4f:f3:f7:43:82:23:7c:4c:97:67:ad:38:f6:19:c0:d1:
07:3e:b4:09:33:a5:0c:8f:75:8d:09:90:e2:2d:20:01:82:c2:
7c:c1:2a:26:d1:6a:8f:d6:1b:c7:48:fd:09:f2:54:b3:1d:a4:
75:ea:64:d0:47:02:2b:53:47:43:9e:11:ae:4a:e1:7f:71:f5:
31:cd:92:cc:ad:1e:76:ca:6a:b0:ee:bc:66:ea:cd:49:f6:f7:
cd:d0:e5:13:4d:55:a7:1e:0e:83:a2:33:01:0a:b9:d8:43:12:
7d:3a:34:5c:8a:c4:c3:9f:52:bb:d8:c0:ce:72:a2:77:93:dc:
c4:2a:f4:50:68:71:c9:b3:55:26:cc:06:80:33:67:40:d1:75:
37:14:75:25:53:4d:d3:fa:ca:a9:f4:1c:8f:ec:d1:3c:14:76:
51:13:a2:b9:e6:cd:9e:45:63:05:df:85:95:ac:6e:c4:13:00:
8f:a5:6e:95:37:72:00:1a:00:34:97:69:32:7b:46:6f:1f:90:
c2:74:a3:83:5b:54:08:c2:87:74:52:7e:1e:83:86:ad:2c:44:
f8:9a:a7:06:b6:b8:0a:e3:35:ea:5c:7a:d6:a1:73:15:6c:ff:
8a:61:14:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:41:03 2026 by rpki-client