Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/06yG5fVgCiK9jOuxYS9jpXAdyc4.roa
File: 06yG5fVgCiK9jOuxYS9jpXAdyc4.roa (raw, json)
Hash identifier: 4QM6FPTGYBJnakZRs/sCxgHYWuDNRlCaC11hvttvVZc=
Subject key identifier: D3:AC:86:E5:F5:60:0A:22:BD:8C:EB:B1:61:2F:63:A5:70:1D:C9:CE
Certificate issuer: /CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Certificate serial: 019CE2867C33BB64F8F0DB33072EEB967CA9
Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/06yG5fVgCiK9jOuxYS9jpXAdyc4.roa
Signing time: Thu 12 Mar 2026 14:49:50 +0000
ROA not before: Thu 12 Mar 2026 14:49:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49408
IP address blocks: 193.164.82.0/24 maxlen: 24
193.164.84.0/24 maxlen: 24
193.164.85.0/24 maxlen: 24
193.164.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:86:7c:33:bb:64:f8:f0:db:33:07:2e:eb:96:7c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Validity
Not Before: Mar 12 14:49:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3ac86e5f5600a22bd8cebb1612f63a5701dc9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:cd:32:2f:8a:45:d9:78:89:75:77:06:06:
da:ee:e9:97:58:96:75:76:6a:dd:d5:93:63:7b:d7:
5e:53:24:f9:fc:b0:b1:76:27:e7:36:cb:35:1e:ff:
ce:79:1f:86:59:ee:24:17:c0:16:5a:0f:f8:4e:9b:
45:66:e3:a5:d9:a5:84:b6:56:8e:21:68:3f:7c:1d:
ba:0a:a2:c6:ee:31:78:72:96:9a:2f:ef:90:bd:e6:
aa:71:4a:52:be:a8:fc:bf:c6:cf:51:d7:f7:45:c6:
91:d6:8e:d8:a3:40:b5:b5:11:f2:ca:c1:57:6b:6e:
c6:0c:96:27:db:b4:87:1d:2c:23:56:67:90:fd:64:
e5:02:1c:04:be:41:47:9a:55:b6:06:8e:75:50:90:
38:13:f9:02:f7:ae:3d:2c:88:72:47:9c:cd:f9:73:
e1:04:2d:ac:37:73:4b:f6:78:88:6b:29:59:8e:f7:
8d:b9:e0:dc:6b:b5:b8:16:20:e1:dd:15:d9:7e:4a:
70:05:26:df:44:b6:fc:50:81:21:cc:03:23:39:bb:
4e:18:de:a9:73:48:6f:02:eb:5d:f1:d9:00:a1:77:
ef:eb:06:ee:a1:41:f3:ab:8b:19:79:13:06:31:3f:
5e:67:a8:c8:cd:06:43:a3:eb:9c:94:ea:19:2f:f6:
b0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AC:86:E5:F5:60:0A:22:BD:8C:EB:B1:61:2F:63:A5:70:1D:C9:CE
X509v3 Authority Key Identifier:
keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/06yG5fVgCiK9jOuxYS9jpXAdyc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.82.0/24
193.164.84.0/23
193.164.88.0/24
Signature Algorithm: sha256WithRSAEncryption
35:57:8d:33:17:84:6e:f8:a0:20:5d:fe:b4:d6:5b:19:13:d6:
64:17:08:3f:3a:45:23:98:5a:2c:db:9b:c2:51:e3:57:de:fb:
c9:d4:56:3d:17:1b:e2:2b:60:b1:65:62:d1:5c:2d:5c:88:ae:
51:d1:39:96:6c:8b:20:a2:b9:b4:4b:04:ad:13:27:f6:ed:66:
5b:9d:f0:28:15:16:25:5b:94:5a:e1:85:28:7c:c7:86:ff:a7:
f9:d8:78:e7:1c:24:ce:3a:2e:f8:81:bc:27:dd:19:f9:28:63:
69:eb:6b:7a:67:6f:e6:86:d0:31:05:9f:a6:2e:15:f6:3d:94:
55:b8:af:68:2e:e4:8e:22:ea:19:fa:76:b0:fe:6a:43:e2:41:
bd:15:e5:4a:d6:0d:62:17:06:3f:d2:d6:a6:dd:9a:91:40:d6:
c0:6b:c9:21:7b:a3:21:c9:ea:77:4d:97:94:45:ac:06:1c:0c:
87:69:33:3d:1b:83:28:a0:bd:85:b9:da:b1:19:b1:82:10:bf:
a5:d3:b0:09:98:fa:fc:b8:2d:bd:df:8d:e6:9c:66:cd:cb:59:
4e:99:dd:bd:4a:91:cf:f5:18:1d:81:0e:98:48:f2:39:4e:1e:
d6:58:e0:ac:76:01:48:e8:2d:d3:7d:63:6c:f4:6d:58:67:3e:
29:a5:18:1f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZzihnwzu2T48NszBy7rlnypMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNjk4YzFjZGM2NmRjMjg1ZDBmODA3NjI5YzQ2MjYxYTg4
YjJkZTcwHhcNMjYwMzEyMTQ0OTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2FjODZlNWY1NjAwYTIyYmQ4Y2ViYjE2MTJmNjNhNTcwMWRjOWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSnNMi+KRdl4iXV3Bgba7umXWJZ1
dmrd1ZNje9deUyT5/LCxdifnNss1Hv/OeR+GWe4kF8AWWg/4TptFZuOl2aWEtlaO
IWg/fB26CqLG7jF4cpaaL++QveaqcUpSvqj8v8bPUdf3RcaR1o7Yo0C1tRHyysFX
a27GDJYn27SHHSwjVmeQ/WTlAhwEvkFHmlW2Bo51UJA4E/kC9649LIhyR5zN+XPh
BC2sN3NL9niIaylZjveNueDca7W4FiDh3RXZfkpwBSbfRLb8UIEhzAMjObtOGN6p
c0hvAutd8dkAoXfv6wbuoUHzq4sZeRMGMT9eZ6jIzQZDo+uclOoZL/aw0wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNOshuX1YAoivYzrsWEvY6VwHcnOMB8GA1UdIwQY
MBaAFCFpjBzcZtwoXQ+AdinEYmGoiy3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xMWRjNzEtODE3MC00NWI1LThjNWIt
NGQ3MzczMGY3ZDMyLzEvMDZ5RzVmVmdDaUs5ak91eFlTOWpwWEFkeWM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xMWRjNzEtODE3MC00NWI1LThjNWItNGQ3MzczMGY3ZDMy
LzEvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwaRSAwQB
waRUAwQAwaRYMA0GCSqGSIb3DQEBCwUAA4IBAQA1V40zF4Ru+KAgXf601lsZE9Zk
Fwg/OkUjmFos25vCUeNX3vvJ1FY9FxviK2CxZWLRXC1ciK5R0TmWbIsgorm0SwSt
Eyf27WZbnfAoFRYlW5Ra4YUofMeG/6f52HjnHCTOOi74gbwn3Rn5KGNp62t6Z2/m
htAxBZ+mLhX2PZRVuK9oLuSOIuoZ+naw/mpD4kG9FeVK1g1iFwY/0tam3ZqRQNbA
a8khe6Mhyep3TZeURawGHAyHaTM9G4MooL2FudqxGbGCEL+l07AJmPr8uC29343m
nGbNy1lOmd29SpHP9RgdgQ6YSPI5Th7WWOCsdgFI6C3TfWNs9G1YZz4ppRgf
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:42:36 2026 by rpki-client