Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/6HmT4nE3SdU3Rwazir0_bk_LLgg.roa
File: 6HmT4nE3SdU3Rwazir0_bk_LLgg.roa (raw, json)
Hash identifier: KhdGQo6Q6QhWTWHK8cO7WlwB19r+U07MYqV+ouIdvrs=
Subject key identifier: E8:79:93:E2:71:37:49:D5:37:47:06:B3:8A:BD:3F:6E:4F:CB:2E:08
Certificate issuer: /CN=45589f3aa0f6c2154440076b4651e0940b24d3b3
Certificate serial: 01A1B060620F77681A4668E9D10B9A6037D0
Authority key identifier: 45:58:9F:3A:A0:F6:C2:15:44:40:07:6B:46:51:E0:94:0B:24:D3:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RVifOqD2whVEQAdrRlHglAsk07M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/6HmT4nE3SdU3Rwazir0_bk_LLgg.roa
Signing time: Fri 06 Nov 2026 10:21:08 +0000
ROA not before: Fri 06 Nov 2026 10:21:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 66.111.96.0/23 maxlen: 24
66.111.100.0/22 maxlen: 24
66.111.104.0/22 maxlen: 24
66.111.108.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/RVifOqD2whVEQAdrRlHglAsk07M.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/RVifOqD2whVEQAdrRlHglAsk07M.mft
rsync://rpki.ripe.net/repository/DEFAULT/RVifOqD2whVEQAdrRlHglAsk07M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b0:60:62:0f:77:68:1a:46:68:e9:d1:0b:9a:60:37:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45589f3aa0f6c2154440076b4651e0940b24d3b3
Validity
Not Before: Nov 6 10:21:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e87993e2713749d5374706b38abd3f6e4fcb2e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3c:ac:6a:d2:5c:a6:81:39:96:bc:8c:81:50:
46:57:4c:77:91:f4:8f:e1:b9:ec:e7:00:76:79:0f:
d3:32:97:b4:a3:26:a3:de:35:58:f5:9c:c7:0d:f1:
18:a1:9f:ed:73:f3:6d:61:04:27:11:ac:6c:8f:b9:
44:e1:41:02:2b:be:96:e2:55:8a:19:4b:d8:84:be:
07:e8:29:dd:d3:39:15:61:9b:37:00:05:b6:79:ec:
c0:cb:66:93:05:a9:d6:c3:0b:10:48:9c:85:c8:dd:
e9:67:39:c9:2c:b7:6b:f6:c2:e8:5a:af:00:17:65:
6b:7a:03:38:70:98:91:07:e5:e3:1d:ab:13:2f:68:
8f:3b:ff:68:0c:76:6a:9a:66:2f:6d:8e:28:9e:1e:
11:83:7b:14:6a:31:c8:b1:f9:88:07:fd:b7:e3:b5:
ab:e8:e3:d3:6a:5b:56:e9:f5:95:4d:7a:9b:c6:aa:
46:20:7a:a7:a0:6d:d6:f8:7b:90:50:ff:4d:f5:77:
c6:91:72:28:0f:17:35:e5:cc:1f:a9:1a:ca:79:94:
d2:2d:6f:20:e6:db:00:03:d5:2a:b8:a7:47:b6:09:
5a:51:ed:83:14:57:24:2a:a5:82:32:c3:26:be:f2:
ca:41:e7:0c:be:ec:a9:81:ca:14:39:59:2d:f7:a2:
ba:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:79:93:E2:71:37:49:D5:37:47:06:B3:8A:BD:3F:6E:4F:CB:2E:08
X509v3 Authority Key Identifier:
keyid:45:58:9F:3A:A0:F6:C2:15:44:40:07:6B:46:51:E0:94:0B:24:D3:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVifOqD2whVEQAdrRlHglAsk07M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/6HmT4nE3SdU3Rwazir0_bk_LLgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/RVifOqD2whVEQAdrRlHglAsk07M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.111.96.0/23
66.111.100.0-66.111.109.255
Signature Algorithm: sha256WithRSAEncryption
2d:bc:4d:bf:5c:0d:18:9b:51:9a:fb:32:65:35:ab:91:38:8d:
4c:70:8c:03:13:9a:08:51:02:c2:a3:a6:09:94:96:53:1c:2e:
c1:ef:0a:78:5e:72:fa:9f:cb:b3:d2:89:61:5b:2a:07:8d:1f:
ba:d4:c5:1d:a4:19:17:40:5b:71:37:a2:61:e2:30:aa:d9:28:
77:bd:48:d1:cf:56:40:20:64:2d:25:9f:25:21:85:2a:bb:36:
80:74:db:e3:29:42:ab:7c:55:e6:e5:4b:fe:8a:51:40:3b:44:
2d:6f:8e:fa:6b:9f:87:16:aa:ae:11:12:b7:1f:83:17:38:71:
bf:fe:a0:e7:dd:a1:c7:86:68:ec:f9:d0:69:da:dc:9e:5d:8a:
e3:41:e8:17:14:a8:17:2e:87:15:75:d6:0a:71:6d:7a:d4:6f:
33:1f:a6:36:c3:d0:3c:88:df:8e:f3:0c:ad:72:f3:36:5f:26:
33:70:45:d9:11:ae:68:23:cb:24:52:38:42:80:5d:fe:a7:27:
48:52:c9:f8:31:13:ca:af:5a:83:41:79:5e:e8:cf:32:62:9a:
66:11:13:26:54:4f:58:b4:48:af:f6:03:bc:f6:c3:4b:7a:e4:
b1:b8:83:57:22:5a:0f:23:fb:88:19:84:3b:ab:5e:e8:80:92:
94:ef:e8:a4
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAaGwYGIPd2gaRmjp0QuaYDfQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NTg5ZjNhYTBmNmMyMTU0NDQwMDc2YjQ2NTFlMDk0MGIy
NGQzYjMwHhcNMjYxMTA2MTAyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODc5OTNlMjcxMzc0OWQ1Mzc0NzA2YjM4YWJkM2Y2ZTRmY2IyZTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TysatJcpoE5lryMgVBGV0x3kfSP
4bns5wB2eQ/TMpe0oyaj3jVY9ZzHDfEYoZ/tc/NtYQQnEaxsj7lE4UECK76W4lWK
GUvYhL4H6Cnd0zkVYZs3AAW2eezAy2aTBanWwwsQSJyFyN3pZznJLLdr9sLoWq8A
F2VregM4cJiRB+XjHasTL2iPO/9oDHZqmmYvbY4onh4Rg3sUajHIsfmIB/2347Wr
6OPTaltW6fWVTXqbxqpGIHqnoG3W+HuQUP9N9XfGkXIoDxc15cwfqRrKeZTSLW8g
5tsAA9UquKdHtglaUe2DFFckKqWCMsMmvvLKQecMvuypgcoUOVkt96K6xQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFOh5k+JxN0nVN0cGs4q9P25Pyy4IMB8GA1UdIwQY
MBaAFEVYnzqg9sIVREAHa0ZR4JQLJNOzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlZpZk9xRDJ3aFZFUUFkclJsSGdsQXNrMDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xNzM5ODEtZmY3ZS00YzhmLWIxZjIt
ZTI0NGY2ZmUwYmVjLzEvNkhtVDRuRTNTZFUzUndhemlyMF9ia19MTGdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xNzM5ODEtZmY3ZS00YzhmLWIxZjItZTI0NGY2ZmUwYmVj
LzEvUlZpZk9xRDJ3aFZFUUFkclJsSGdsQXNrMDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBQm9gMAwD
BAJCb2QDBAFCb2wwDQYJKoZIhvcNAQELBQADggEBAC28Tb9cDRibUZr7MmU1q5E4
jUxwjAMTmghRAsKjpgmUllMcLsHvCnhecvqfy7PSiWFbKgeNH7rUxR2kGRdAW3E3
omHiMKrZKHe9SNHPVkAgZC0lnyUhhSq7NoB02+MpQqt8VeblS/6KUUA7RC1vjvpr
n4cWqq4RErcfgxc4cb/+oOfdoceGaOz50Gna3J5diuNB6BcUqBcuhxV11gpxbXrU
bzMfpjbD0DyI347zDK1y8zZfJjNwRdkRrmgjyyRSOEKAXf6nJ0hSyfgxE8qvWoNB
eV7ozzJimmYREyZUT1i0SK/2A7z2w0t65LG4g1ciWg8j+4gZhDurXuiAkpTv6KQ=
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:12:22 2026 by rpki-client