Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/6-mxdA35haCza5wqr-_WjfZ3tCg.roa
File: 6-mxdA35haCza5wqr-_WjfZ3tCg.roa (raw, json)
Hash identifier: LC7J7mBfvbJmQilOveYZk9iJy5iEIFFBpW5YRLGd1iM=
Subject key identifier: EB:E9:B1:74:0D:F9:85:A0:B3:6B:9C:2A:AF:EF:D6:8D:F6:77:B4:28
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A0B4586724082A14B7477D6969E932E91F
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/6-mxdA35haCza5wqr-_WjfZ3tCg.roa
Signing time: Fri 18 Sep 2026 11:48:07 +0000
ROA not before: Fri 18 Sep 2026 11:48:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39640
IP address blocks: 167.160.31.0/24 maxlen: 24
178.19.32.0/23 maxlen: 23
185.216.131.0/24 maxlen: 24
201.49.188.0/22 maxlen: 22
206.203.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:58:67:24:08:2a:14:b7:47:7d:69:69:e9:32:e9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Sep 18 11:48:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebe9b1740df985a0b36b9c2aafefd68df677b428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:00:85:96:79:8d:04:1c:23:52:cb:48:4a:
9d:cc:c4:64:53:ab:9d:02:2e:72:a1:be:c4:f4:c0:
bc:3b:73:1f:a1:87:b2:e6:22:dc:06:80:a5:b2:e9:
fb:bb:a9:17:60:0a:01:89:6e:56:5f:38:58:50:30:
e0:86:3e:ac:ae:f4:9b:6c:1b:46:64:96:9c:8c:75:
6a:45:3a:4f:c7:c7:35:50:6a:cf:e9:73:f2:97:6b:
ed:2f:60:64:11:56:53:a7:4c:91:e7:2d:6e:37:25:
dd:5c:b2:7b:7f:75:3d:b1:b1:d4:43:91:fa:55:ac:
5b:c5:56:36:44:91:53:9a:fc:d1:da:f2:32:27:35:
fa:48:72:88:10:b3:c6:d6:b3:40:56:88:8a:9d:38:
32:f7:c0:54:5c:87:09:17:c0:a3:3c:ec:84:0d:19:
c9:d0:47:1c:53:7c:0d:f3:03:df:b8:9d:29:5c:55:
11:6b:1e:5a:a8:cf:dd:2c:b7:5a:a6:8a:5e:fa:9e:
5a:3d:1e:af:95:42:c2:b1:e0:be:77:99:74:62:d6:
bc:d5:b4:bd:b8:a5:cd:d9:be:48:6c:cf:fe:53:67:
be:ad:e3:dc:a2:d1:23:72:35:10:11:2b:57:5c:50:
81:b0:44:0a:0d:25:d9:25:71:dd:1c:76:63:b9:c8:
83:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E9:B1:74:0D:F9:85:A0:B3:6B:9C:2A:AF:EF:D6:8D:F6:77:B4:28
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/6-mxdA35haCza5wqr-_WjfZ3tCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.160.31.0/24
178.19.32.0/23
185.216.131.0/24
201.49.188.0/22
206.203.0.0/18
Signature Algorithm: sha256WithRSAEncryption
36:40:33:fa:77:e1:c0:f4:d5:63:d7:52:28:2b:00:b2:f8:5a:
7f:14:62:9e:e3:05:41:3b:4a:7d:d6:47:a9:de:78:5d:8b:0a:
3e:d9:17:6e:39:95:a3:06:42:d9:61:35:c1:59:90:9d:53:9d:
58:ac:9d:29:f4:4e:51:ba:ab:42:d3:7a:77:b9:84:ff:3a:20:
97:8c:bb:e0:89:fd:6f:0b:f8:91:cb:d8:53:57:6a:d3:44:31:
00:e7:d7:50:6c:46:d3:52:5a:74:e8:74:ac:6e:c1:f1:ed:8f:
f7:e1:26:c8:e5:89:0a:1f:02:47:8b:ca:d9:0c:77:fe:fa:49:
c3:68:0b:39:72:5e:dd:fc:99:c5:64:10:76:88:6b:cd:a8:3b:
3c:39:b9:88:b3:c6:dd:4b:57:73:09:67:90:65:0c:b3:67:78:
85:a9:ae:6c:39:c2:6e:32:9a:7d:6e:c3:43:9b:48:1f:c7:6b:
a4:67:ee:a8:ca:a1:8e:a9:96:8e:2e:8e:ca:36:06:24:ef:03:
d8:43:01:4b:7e:a7:d9:db:e9:b5:4f:1c:c2:7f:98:26:b4:1a:
21:7b:3c:38:c5:bf:1d:c5:aa:6b:6e:76:a1:e2:a4:ba:d5:5b:
75:ab:1c:1b:b6:c9:99:30:d9:a7:6f:c4:61:05:cf:d2:a4:98:
03:b7:75:16
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaC0WGckCCoUt0d9aWnpMukfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjYwOTE4MTE0ODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmU5YjE3NDBkZjk4NWEwYjM2YjljMmFhZmVmZDY4ZGY2NzdiNDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzV4AhZZ5jQQcI1LLSEqdzMRkU6ud
Ai5yob7E9MC8O3MfoYey5iLcBoClsun7u6kXYAoBiW5WXzhYUDDghj6srvSbbBtG
ZJacjHVqRTpPx8c1UGrP6XPyl2vtL2BkEVZTp0yR5y1uNyXdXLJ7f3U9sbHUQ5H6
VaxbxVY2RJFTmvzR2vIyJzX6SHKIELPG1rNAVoiKnTgy98BUXIcJF8CjPOyEDRnJ
0EccU3wN8wPfuJ0pXFURax5aqM/dLLdapope+p5aPR6vlULCseC+d5l0Yta81bS9
uKXN2b5IbM/+U2e+rePcotEjcjUQEStXXFCBsEQKDSXZJXHdHHZjuciDMQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFOvpsXQN+YWgs2ucKq/v1o32d7QoMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvNi1teGRBMzVoYUN6YTV3cXItX1dqZlozdENnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAp6AfAwQB
shMgAwQAudiDAwQCyTG8AwQGzssAMA0GCSqGSIb3DQEBCwUAA4IBAQA2QDP6d+HA
9NVj11IoKwCy+Fp/FGKe4wVBO0p91kep3nhdiwo+2RduOZWjBkLZYTXBWZCdU51Y
rJ0p9E5RuqtC03p3uYT/OiCXjLvgif1vC/iRy9hTV2rTRDEA59dQbEbTUlp06HSs
bsHx7Y/34SbI5YkKHwJHi8rZDHf++knDaAs5cl7d/JnFZBB2iGvNqDs8ObmIs8bd
S1dzCWeQZQyzZ3iFqa5sOcJuMpp9bsNDm0gfx2ukZ+6oyqGOqZaOLo7KNgYk7wPY
QwFLfqfZ2+m1TxzCf5gmtBohezw4xb8dxaprbnah4qS61Vt1qxwbtsmZMNmnb8Rh
Bc/SpJgDt3UW
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:53:41 2026 by rpki-client