Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/06qsiTs00oCJ2kROd3qD36mUxjE.roa
File: 06qsiTs00oCJ2kROd3qD36mUxjE.roa (raw, json)
Hash identifier: z4BUL/0kp3HzAZA+43CMRJbHV1qXo2AEN+PYpjUwUcU=
Subject key identifier: D3:AA:AC:89:3B:34:D2:80:89:DA:44:4E:77:7A:83:DF:A9:94:C6:31
Certificate issuer: /CN=d316b921907d8845a50c71210ea3940810f77418
Certificate serial: 019F236948E32A05070485CF9F4244705E28
Authority key identifier: D3:16:B9:21:90:7D:88:45:A5:0C:71:21:0E:A3:94:08:10:F7:74:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xa5IZB9iEWlDHEhDqOUCBD3dBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/06qsiTs00oCJ2kROd3qD36mUxjE.roa
Signing time: Thu 02 Jul 2026 15:18:50 +0000
ROA not before: Thu 02 Jul 2026 15:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201548
IP address blocks: 185.71.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/0xa5IZB9iEWlDHEhDqOUCBD3dBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/0xa5IZB9iEWlDHEhDqOUCBD3dBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0xa5IZB9iEWlDHEhDqOUCBD3dBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:48:e3:2a:05:07:04:85:cf:9f:42:44:70:5e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d316b921907d8845a50c71210ea3940810f77418
Validity
Not Before: Jul 2 15:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3aaac893b34d28089da444e777a83dfa994c631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:86:c4:c4:4b:2d:d5:2e:65:29:1d:e3:1b:
cb:5c:e6:30:1f:79:38:35:98:ff:2c:e1:39:af:cc:
07:23:2c:15:50:3e:35:00:b1:92:64:1b:09:4b:ad:
98:ba:51:d1:4e:7e:c8:74:48:fd:3d:48:5c:55:e0:
95:b6:5d:36:b7:62:8a:0c:3a:45:82:95:91:f4:2b:
ad:a3:62:15:31:94:93:cb:94:a9:ba:81:29:61:1c:
12:b7:e1:cf:06:9b:97:49:c1:8a:59:4e:10:6e:93:
26:0e:c8:05:59:88:9a:af:11:c4:72:ad:fc:b4:52:
6e:5c:64:35:45:8f:c9:fd:b2:18:45:df:22:7e:72:
9e:bc:65:45:61:da:e8:b5:78:b7:82:6e:66:c1:55:
c2:6f:a0:de:6d:bf:f1:3e:e7:01:73:2a:39:a5:a1:
c5:87:d1:42:7e:ea:ae:47:98:e6:26:05:4b:08:b4:
ba:b3:64:21:2b:be:56:d2:d3:20:67:58:72:f4:a7:
8d:b4:71:e6:7e:3c:83:b3:b8:93:3e:56:4b:3f:6e:
b5:94:bb:88:ee:01:19:dc:83:89:fe:0c:2e:92:c5:
b6:02:61:61:0f:b6:6d:d7:1b:26:3c:68:95:5f:53:
c5:ef:7c:88:24:68:68:a9:e0:2c:77:e8:ab:65:23:
10:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AA:AC:89:3B:34:D2:80:89:DA:44:4E:77:7A:83:DF:A9:94:C6:31
X509v3 Authority Key Identifier:
keyid:D3:16:B9:21:90:7D:88:45:A5:0C:71:21:0E:A3:94:08:10:F7:74:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xa5IZB9iEWlDHEhDqOUCBD3dBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/06qsiTs00oCJ2kROd3qD36mUxjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/0xa5IZB9iEWlDHEhDqOUCBD3dBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.40.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:e4:14:22:b8:cc:89:54:f2:ab:8e:31:1c:fa:67:1d:e9:c5:
11:fc:44:4e:89:90:17:8f:22:a9:c5:fb:f2:fb:8c:9b:97:27:
59:75:ac:11:7f:6b:bc:30:60:fc:ba:88:a9:be:bc:15:a4:a9:
50:6a:f9:27:da:6a:4f:67:11:70:d3:c9:55:90:10:18:76:1f:
ae:3b:07:80:6f:8a:4e:93:97:f2:f9:df:ff:09:66:95:ce:bd:
37:99:14:e5:71:9a:f1:a4:af:c6:41:14:4a:d6:aa:6c:38:69:
5e:cf:77:66:68:a2:d9:49:67:92:7a:5f:c9:54:39:ff:08:1b:
42:21:4d:e7:67:dd:32:f7:54:e1:15:82:f8:25:d6:d4:5a:ec:
f3:00:e3:3c:f5:27:d2:91:b8:4d:18:18:ec:e0:0d:81:0c:91:
34:ad:ac:b5:7a:c0:ea:05:2d:49:81:96:7b:b5:c7:67:25:81:
5a:1d:22:4b:19:0d:e8:db:b2:ca:f4:63:6b:65:f4:8a:3a:95:
81:5f:37:9e:62:bd:7b:36:10:a7:99:7d:0f:5b:c3:c2:d2:02:
0b:3a:be:26:f6:e3:43:67:25:d1:ee:17:c4:8e:e2:74:db:c3:
76:f2:df:f1:db:c3:65:82:09:32:fa:52:61:6f:2e:64:20:99:
b3:d4:e4:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaUjjKgUHBIXPn0JEcF4oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMTZiOTIxOTA3ZDg4NDVhNTBjNzEyMTBlYTM5NDA4MTBm
Nzc0MTgwHhcNMjYwNzAyMTUxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2FhYWM4OTNiMzRkMjgwODlkYTQ0NGU3NzdhODNkZmE5OTRjNjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqaGxMRLLdUuZSkd4xvLXOYwH3k4
NZj/LOE5r8wHIywVUD41ALGSZBsJS62YulHRTn7IdEj9PUhcVeCVtl02t2KKDDpF
gpWR9Cuto2IVMZSTy5SpuoEpYRwSt+HPBpuXScGKWU4QbpMmDsgFWYiarxHEcq38
tFJuXGQ1RY/J/bIYRd8ifnKevGVFYdrotXi3gm5mwVXCb6Debb/xPucBcyo5paHF
h9FCfuquR5jmJgVLCLS6s2QhK75W0tMgZ1hy9KeNtHHmfjyDs7iTPlZLP261lLuI
7gEZ3IOJ/gwuksW2AmFhD7Zt1xsmPGiVX1PF73yIJGhoqeAsd+irZSMQJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNOqrIk7NNKAidpETnd6g9+plMYxMB8GA1UdIwQY
MBaAFNMWuSGQfYhFpQxxIQ6jlAgQ93QYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHhhNUlaQjlpRVdsREhFaERxT1VDQkQzZEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lYWE0ZDAtOGQxZC00Y2MxLThiMjIt
NDUwMzk1ZmI4OGZhLzEvMDZxc2lUczAwb0NKMmtST2QzcUQzNm1VeGpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lYWE0ZDAtOGQxZC00Y2MxLThiMjItNDUwMzk1ZmI4OGZh
LzEvMHhhNUlaQjlpRVdsREhFaERxT1VDQkQzZEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUcoMA0G
CSqGSIb3DQEBCwUAA4IBAQA75BQiuMyJVPKrjjEc+mcd6cUR/EROiZAXjyKpxfvy
+4yblydZdawRf2u8MGD8uoipvrwVpKlQavkn2mpPZxFw08lVkBAYdh+uOweAb4pO
k5fy+d//CWaVzr03mRTlcZrxpK/GQRRK1qpsOGlez3dmaKLZSWeSel/JVDn/CBtC
IU3nZ90y91ThFYL4JdbUWuzzAOM89SfSkbhNGBjs4A2BDJE0ray1esDqBS1JgZZ7
tcdnJYFaHSJLGQ3o27LK9GNrZfSKOpWBXzeeYr17NhCnmX0PW8PC0gILOr4m9uND
ZyXR7hfEjuJ028N28t/x28Nlggky+lJhby5kIJmz1OTr
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:26:58 2026 by rpki-client