Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/6UmEGJmMMYzYfKakHmTC9ene-9E.roa
File: 6UmEGJmMMYzYfKakHmTC9ene-9E.roa (raw, json)
Hash identifier: KFuLDMAnk0fHAom58f4mLb0hEmJ1sirTUZ5IagHw01c=
Subject key identifier: E9:49:84:18:99:8C:31:8C:D8:7C:A6:A4:1E:64:C2:F5:E9:DE:FB:D1
Certificate issuer: /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial: 01A15AB54F08D64B7990E46F6D6E867D4147
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/6UmEGJmMMYzYfKakHmTC9ene-9E.roa
Signing time: Tue 20 Oct 2026 19:06:34 +0000
ROA not before: Tue 20 Oct 2026 19:06:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54004
IP address blocks: 194.146.133.0/24 maxlen: 24
194.146.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:b5:4f:08:d6:4b:79:90:e4:6f:6d:6e:86:7d:41:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Validity
Not Before: Oct 20 19:06:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9498418998c318cd87ca6a41e64c2f5e9defbd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:06:8d:f9:26:c7:38:35:93:2c:76:60:9d:61:
b3:83:73:26:00:a1:ee:b2:75:c0:72:32:42:3e:96:
4f:d7:4e:0d:ff:83:b0:4a:c4:03:d7:0b:2c:e2:d6:
7e:85:06:8d:8a:5c:43:f2:47:06:f2:0a:50:c2:28:
f1:30:82:47:09:77:75:c0:c1:64:27:62:e0:c2:53:
57:b5:24:d2:d5:bd:8e:b1:b8:e0:96:2f:70:f7:bf:
1d:d4:f9:53:a5:fa:2d:06:b6:f3:33:9d:5b:7c:e3:
be:eb:6d:90:a7:75:d0:ba:26:d2:ff:36:d9:03:ab:
97:e7:1c:4f:dc:3d:ec:0f:b0:47:ff:a9:02:bc:2d:
bb:a4:ba:ef:c3:5a:72:2c:a5:e7:cc:a6:b3:45:3e:
47:7d:92:e0:e1:7e:6e:67:56:c8:82:b3:fb:0d:78:
ae:c6:59:db:e2:33:81:ae:b1:23:3f:3a:af:ea:92:
d1:b2:d9:9d:26:08:83:ec:64:1f:a7:9a:ce:34:a9:
0c:0a:6f:0b:cf:0e:67:16:8d:f4:6f:65:d4:b4:ca:
e2:3a:26:5d:6b:a2:c3:6a:ae:05:2e:46:3a:6f:8e:
04:89:bb:22:59:fa:64:a9:6c:ab:db:fc:b6:7c:04:
94:0a:fb:d5:16:05:5a:c1:82:bd:0f:44:01:0e:57:
64:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:49:84:18:99:8C:31:8C:D8:7C:A6:A4:1E:64:C2:F5:E9:DE:FB:D1
X509v3 Authority Key Identifier:
keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/6UmEGJmMMYzYfKakHmTC9ene-9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.133.0/24
194.146.135.0/24
Signature Algorithm: sha256WithRSAEncryption
88:ce:9d:df:a0:7c:57:9d:60:09:b7:a4:eb:48:a0:f9:fc:2b:
00:99:7a:b8:ab:c3:1b:b6:c8:ea:90:c8:7b:73:df:e2:02:be:
01:cf:e8:d1:d7:f3:fb:8d:88:8d:7d:c3:04:11:b2:58:be:23:
7c:10:9d:62:a8:6c:9e:25:c4:eb:8c:2e:7c:33:1b:bd:2e:72:
ca:5a:3e:67:12:3f:66:02:7d:4b:80:2c:d2:0f:6c:7f:1b:77:
e7:5b:c5:11:24:bc:f2:02:ff:e3:1c:4b:a2:7e:21:e2:7b:df:
04:3c:cb:8c:e7:b2:5b:69:a7:20:cf:51:f4:c5:44:dc:91:23:
9a:32:8d:72:fc:ab:a5:7a:59:87:f3:d3:01:58:07:cb:2e:1f:
8a:11:f3:2c:9f:37:8d:14:fc:f9:85:db:01:73:26:36:03:8d:
e1:1c:82:86:f6:97:0a:0c:e4:09:40:e0:36:69:ee:de:00:e9:
ef:7e:ab:6f:d8:6e:ca:83:64:b5:f3:51:25:60:e1:c9:a2:1f:
48:af:51:4c:43:86:af:5e:a4:f1:34:8e:04:4f:0b:35:99:7e:
d4:ba:a2:8c:f9:3e:bd:04:64:b5:3a:f7:b5:ef:43:36:b5:d1:
2a:a8:75:b6:6e:51:d4:67:3a:95:7c:a8:45:77:a9:e4:3e:a5:
78:6f:e1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:49:42 2026 by rpki-client