Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/6S6VH_4xu88lT362tqHywTMo1V4.roa
File: 6S6VH_4xu88lT362tqHywTMo1V4.roa (raw, json)
Hash identifier: r+/MUaPzWcX/fm4Btgu3AsrSItwgso8rcrd3ve5oHWA=
Subject key identifier: E9:2E:95:1F:FE:31:BB:CF:25:4F:7E:B6:B6:A1:F2:C1:33:28:D5:5E
Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial: 0199C3204CE81963D9CBDE8E4C4DDDDE67F5
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/6S6VH_4xu88lT362tqHywTMo1V4.roa
Signing time: Wed 08 Oct 2025 09:21:37 +0000
ROA not before: Wed 08 Oct 2025 09:21:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2860
IP address blocks: 62.169.64.0/18 maxlen: 18
78.130.0.0/17 maxlen: 17
79.168.0.0/15 maxlen: 15
79.168.0.0/18 maxlen: 18
79.168.64.0/18 maxlen: 18
79.168.128.0/18 maxlen: 18
79.168.192.0/18 maxlen: 18
79.169.0.0/18 maxlen: 18
79.169.64.0/18 maxlen: 18
79.169.128.0/18 maxlen: 18
79.169.192.0/18 maxlen: 18
80.243.80.0/20 maxlen: 20
81.84.0.0/16 maxlen: 16
81.84.0.0/18 maxlen: 18
81.84.64.0/18 maxlen: 18
81.84.128.0/18 maxlen: 18
81.84.192.0/18 maxlen: 18
83.132.0.0/16 maxlen: 16
83.132.0.0/18 maxlen: 18
83.132.64.0/18 maxlen: 18
83.132.128.0/18 maxlen: 18
83.132.192.0/18 maxlen: 18
83.144.128.0/18 maxlen: 18
85.138.0.0/15 maxlen: 15
85.138.0.0/18 maxlen: 18
85.138.64.0/18 maxlen: 18
85.138.128.0/18 maxlen: 18
85.138.192.0/18 maxlen: 18
85.139.0.0/18 maxlen: 18
85.139.64.0/18 maxlen: 18
85.139.128.0/18 maxlen: 18
85.139.192.0/18 maxlen: 18
87.196.0.0/16 maxlen: 16
87.196.0.0/18 maxlen: 18
87.196.64.0/19 maxlen: 19
88.157.0.0/18 maxlen: 18
88.157.134.0/24 maxlen: 24
88.157.230.0/24 maxlen: 24
88.157.231.0/24 maxlen: 24
88.210.64.0/18 maxlen: 18
89.152.0.0/14 maxlen: 14
89.152.0.0/18 maxlen: 18
89.152.64.0/18 maxlen: 18
89.152.128.0/18 maxlen: 18
89.152.192.0/18 maxlen: 18
89.153.0.0/18 maxlen: 18
89.153.64.0/18 maxlen: 18
89.153.128.0/18 maxlen: 18
89.153.192.0/18 maxlen: 18
89.154.0.0/18 maxlen: 18
89.154.64.0/18 maxlen: 18
89.154.128.0/18 maxlen: 18
89.154.192.0/18 maxlen: 18
89.155.0.0/18 maxlen: 18
89.155.64.0/18 maxlen: 18
89.155.128.0/18 maxlen: 18
89.155.192.0/18 maxlen: 18
89.180.0.0/15 maxlen: 15
89.180.0.0/16 maxlen: 16
89.180.128.0/18 maxlen: 18
89.181.0.0/16 maxlen: 16
89.181.128.0/18 maxlen: 18
89.181.192.0/18 maxlen: 18
93.102.0.0/16 maxlen: 16
93.102.0.0/18 maxlen: 18
93.102.64.0/18 maxlen: 18
94.132.0.0/15 maxlen: 15
94.132.0.0/18 maxlen: 18
94.132.64.0/18 maxlen: 18
94.132.128.0/18 maxlen: 18
94.132.192.0/18 maxlen: 18
94.133.0.0/18 maxlen: 18
94.133.64.0/18 maxlen: 18
94.133.128.0/18 maxlen: 18
94.133.192.0/18 maxlen: 18
95.92.0.0/14 maxlen: 14
95.92.0.0/18 maxlen: 18
95.92.64.0/18 maxlen: 18
95.92.128.0/18 maxlen: 18
95.92.192.0/18 maxlen: 18
95.93.0.0/18 maxlen: 18
95.93.64.0/18 maxlen: 18
95.93.128.0/18 maxlen: 18
95.93.192.0/18 maxlen: 18
95.94.0.0/18 maxlen: 18
95.94.64.0/18 maxlen: 18
95.94.128.0/18 maxlen: 18
95.94.192.0/18 maxlen: 18
95.95.0.0/18 maxlen: 18
95.95.64.0/18 maxlen: 18
95.95.128.0/18 maxlen: 18
95.95.192.0/18 maxlen: 18
109.48.0.0/14 maxlen: 14
109.48.0.0/18 maxlen: 18
109.48.64.0/18 maxlen: 18
109.48.128.0/18 maxlen: 18
109.48.192.0/18 maxlen: 18
109.49.0.0/18 maxlen: 18
109.49.64.0/18 maxlen: 18
109.49.128.0/18 maxlen: 18
109.49.192.0/18 maxlen: 18
109.50.64.0/18 maxlen: 18
109.50.128.0/18 maxlen: 18
109.50.192.0/18 maxlen: 18
109.51.0.0/18 maxlen: 18
109.51.64.0/18 maxlen: 18
109.51.128.0/18 maxlen: 18
109.51.192.0/18 maxlen: 18
185.224.164.0/22 maxlen: 22
212.113.160.0/19 maxlen: 19
213.22.0.0/16 maxlen: 16
213.22.0.0/18 maxlen: 18
213.22.64.0/18 maxlen: 18
213.22.128.0/18 maxlen: 18
213.22.192.0/18 maxlen: 18
217.70.64.0/20 maxlen: 20
2001:1588::/29 maxlen: 29
2a01:8::/29 maxlen: 29
2a01:8:8011::/48 maxlen: 48
2a01:10::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:20:4c:e8:19:63:d9:cb:de:8e:4c:4d:dd:de:67:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
Validity
Not Before: Oct 8 09:21:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e92e951ffe31bbcf254f7eb6b6a1f2c13328d55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:83:9a:8d:9a:5e:7d:40:48:8e:ed:c8:5b:94:
35:81:fd:6a:62:58:e3:f6:05:93:52:44:ea:f2:92:
db:1c:c3:f3:75:fd:46:79:20:00:9c:10:37:4a:66:
5c:04:41:b6:74:15:e6:66:2a:49:f7:ab:85:a9:74:
8f:e5:75:c0:43:d1:cf:d8:85:1c:c6:10:de:23:13:
8f:61:5b:8c:56:1a:76:14:f1:87:a9:90:cc:d6:f0:
f0:0f:49:35:1e:dc:4d:61:64:64:01:a7:b6:0f:e3:
df:30:5b:24:8d:88:e0:61:7d:8c:3f:96:1e:ed:41:
a6:d1:c2:db:1b:6b:1c:cc:1b:6c:db:81:f6:ba:f7:
da:c7:68:6c:ca:12:07:3f:cf:ab:b5:2a:b8:b9:5c:
65:78:ff:57:10:28:cc:5e:16:f1:14:be:71:6b:a6:
5a:07:30:7a:f8:11:d5:71:62:b8:f3:83:c4:c9:05:
78:f4:54:43:f7:82:c0:5e:5b:b8:bd:14:3d:14:3c:
f2:f5:5b:4f:ec:fe:b1:c0:94:52:43:09:84:63:07:
78:81:7d:a7:e7:50:69:04:c4:13:a9:24:d4:bb:3c:
01:02:6e:dd:c4:ec:c4:cb:c9:7f:74:68:38:4c:c2:
7f:11:73:11:df:72:d7:6c:15:49:22:35:c0:c6:a6:
e8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2E:95:1F:FE:31:BB:CF:25:4F:7E:B6:B6:A1:F2:C1:33:28:D5:5E
X509v3 Authority Key Identifier:
keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/6S6VH_4xu88lT362tqHywTMo1V4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.64.0/18
78.130.0.0/17
79.168.0.0/15
80.243.80.0/20
81.84.0.0/16
83.132.0.0/16
83.144.128.0/18
85.138.0.0/15
87.196.0.0/16
88.157.0.0/18
88.157.134.0/24
88.157.230.0/23
88.210.64.0/18
89.152.0.0/14
89.180.0.0/15
93.102.0.0/16
94.132.0.0/15
95.92.0.0/14
109.48.0.0/14
185.224.164.0/22
212.113.160.0/19
213.22.0.0/16
217.70.64.0/20
IPv6:
2001:1588::/29
2a01:8::-2a01:17:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8a:6f:84:08:23:1a:56:97:42:29:b3:5f:b0:06:39:bf:c1:72:
38:5e:b5:5a:cc:40:c3:0d:1a:a2:28:6e:be:78:8c:8e:80:1e:
71:64:df:7a:65:28:a5:fa:70:a5:73:0e:ff:04:f3:5a:fd:06:
71:f4:ae:3e:14:56:4e:18:82:62:d1:50:b8:16:db:f3:65:0b:
db:0b:c1:77:32:00:87:8d:bc:73:47:54:3d:4d:50:c0:27:4e:
9d:e9:0e:2e:7f:56:64:98:f9:c3:14:e6:8d:31:52:fd:83:52:
8e:d6:17:e8:8a:ff:0d:d3:95:5a:01:ab:7d:2f:bf:bf:29:1f:
8a:49:db:4e:e3:f8:17:78:df:4a:74:2c:2e:d1:ba:57:26:ef:
e3:4b:44:23:f7:5b:69:29:5e:4a:db:dc:35:ec:b4:e7:d1:81:
e1:8f:6d:81:d7:8f:17:5d:72:7c:63:a5:90:16:22:54:a1:69:
31:d4:52:01:2a:27:a2:8e:7b:a6:c0:03:d3:27:97:5a:3e:9a:
a1:40:0f:02:3f:8d:99:cf:b1:e3:15:47:10:f1:0a:db:b5:db:
4f:8b:c9:01:86:04:de:6e:76:63:ea:59:f6:22:d9:d3:06:a3:
33:28:e1:8c:8d:43:37:a8:9a:e5:f2:8b:15:f4:b1:75:82:11:
cd:fd:5b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:15 2025 by rpki-client