Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/P6gPAgT2vGTBjQtNkd5JHxpncRY.roa
File: P6gPAgT2vGTBjQtNkd5JHxpncRY.roa (raw, json)
Hash identifier: IiqUk+2CTmIM6azv9gp2g2vke7H3lC3GAwQ9rS3/c2w=
Subject key identifier: 3F:A8:0F:02:04:F6:BC:64:C1:8D:0B:4D:91:DE:49:1F:1A:67:71:16
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A188C983CF011724B26288ABF8EEEF776C
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/P6gPAgT2vGTBjQtNkd5JHxpncRY.roa
Signing time: Thu 29 Oct 2026 17:51:10 +0000
ROA not before: Thu 29 Oct 2026 17:51:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57494
IP address blocks: 186.243.218.0/24 maxlen: 32
186.243.219.0/24 maxlen: 32
186.243.223.0/24 maxlen: 32
186.246.14.0/24 maxlen: 24
186.246.27.0/24 maxlen: 32
186.246.28.0/24 maxlen: 32
186.246.29.0/24 maxlen: 24
186.246.30.0/24 maxlen: 24
186.246.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:c9:83:cf:01:17:24:b2:62:88:ab:f8:ee:ef:77:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Oct 29 17:51:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3fa80f0204f6bc64c18d0b4d91de491f1a677116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e8:42:2e:6e:ab:bb:16:69:cf:8d:ab:bf:b9:
f4:97:9f:57:8e:4b:89:3b:14:ee:a8:81:34:6f:43:
ec:7c:70:6e:31:13:9d:a7:16:5f:af:d7:e4:b7:ef:
90:ca:63:18:7a:20:2e:68:5e:83:41:26:38:ea:37:
ff:10:69:45:78:5d:a2:94:cf:08:e2:bc:82:4e:74:
73:8c:83:78:a0:40:be:d1:22:d3:4c:8a:11:e8:31:
11:98:38:ca:48:e4:23:07:09:e2:54:a5:b2:d6:eb:
65:d1:ae:4e:1d:f2:d0:59:cc:84:af:9e:9f:a9:7a:
47:5c:3d:f3:08:02:fa:93:e3:4e:b9:72:05:a4:31:
07:f8:10:9e:63:70:45:db:5f:59:4e:32:55:1c:cc:
08:cb:f9:ba:8a:3f:0d:31:53:69:d3:59:6d:ff:ed:
96:37:44:37:a0:82:45:13:40:e9:bf:06:a4:ae:d0:
42:03:e1:27:2b:aa:78:80:f9:8a:a1:61:d8:4e:95:
28:18:18:3b:1d:02:9d:7b:03:ca:e1:d0:0e:c5:59:
c0:d0:87:0d:9f:9e:da:07:c4:2b:29:e8:af:fc:34:
17:91:38:6b:ce:59:3b:96:dc:18:f4:59:8b:70:95:
af:19:3c:a0:fa:d8:2e:88:79:bf:23:9c:b1:f3:68:
cd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A8:0F:02:04:F6:BC:64:C1:8D:0B:4D:91:DE:49:1F:1A:67:71:16
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/P6gPAgT2vGTBjQtNkd5JHxpncRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.243.218.0/23
186.243.223.0/24
186.246.14.0/24
186.246.27.0-186.246.31.255
Signature Algorithm: sha256WithRSAEncryption
0c:07:75:60:54:b1:2d:33:e6:de:de:87:77:1b:94:2a:77:54:
7d:91:a7:ac:5f:a3:cb:0e:07:96:5e:86:e7:8f:3e:82:2e:61:
1a:26:cf:9e:b8:fa:e1:12:74:6e:f1:ae:25:76:f0:8a:4c:64:
5f:44:4a:15:3a:2b:c8:38:08:18:da:d1:be:81:b7:4f:34:ad:
65:62:3f:2f:95:8c:c0:24:98:d1:a5:43:1e:0d:78:de:70:34:
6a:cd:fe:ab:1a:6a:9c:a4:e6:9f:56:b7:b3:84:13:d9:8d:b4:
c4:99:85:59:73:58:ff:56:a5:57:bc:88:a3:2f:47:c9:1d:e9:
de:99:e1:42:0c:97:97:1a:a6:8b:ef:96:e6:e0:04:6c:cc:9e:
78:41:c8:2d:7f:86:fc:1c:47:2a:cc:68:9d:95:9a:52:e9:33:
1e:4a:5e:69:0b:d3:64:30:27:68:9d:97:64:0e:99:f2:62:2b:
21:c4:cd:98:c1:fc:de:cd:2c:ae:df:63:09:63:a7:dc:1a:66:
b6:33:4e:b6:98:1a:9c:d7:e9:25:f0:ee:49:96:e6:02:a8:64:
13:db:91:cc:72:60:94:24:6b:2b:49:1f:17:e8:ac:9f:2f:33:
59:78:4b:e8:08:8a:8a:c1:fe:49:1a:c9:80:a2:ee:9e:b2:21:
dd:5a:1d:40
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAaGIyYPPARcksmKIq/ju73dsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjYxMDI5MTc1MTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmE4MGYwMjA0ZjZiYzY0YzE4ZDBiNGQ5MWRlNDkxZjFhNjc3MTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyehCLm6ruxZpz42rv7n0l59XjkuJ
OxTuqIE0b0PsfHBuMROdpxZfr9fkt++QymMYeiAuaF6DQSY46jf/EGlFeF2ilM8I
4ryCTnRzjIN4oEC+0SLTTIoR6DERmDjKSOQjBwniVKWy1utl0a5OHfLQWcyEr56f
qXpHXD3zCAL6k+NOuXIFpDEH+BCeY3BF219ZTjJVHMwIy/m6ij8NMVNp01lt/+2W
N0Q3oIJFE0DpvwakrtBCA+EnK6p4gPmKoWHYTpUoGBg7HQKdewPK4dAOxVnA0IcN
n57aB8QrKeiv/DQXkThrzlk7ltwY9FmLcJWvGTyg+tguiHm/I5yx82jNfwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFD+oDwIE9rxkwY0LTZHeSR8aZ3EWMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvUDZnUEFnVDJ2R1RCalF0TmtkNUpIeHBuY1JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBuvPaAwQA
uvPfAwQAuvYOMAwDBAC69hsDBAW69gAwDQYJKoZIhvcNAQELBQADggEBAAwHdWBU
sS0z5t7eh3cblCp3VH2Rp6xfo8sOB5ZehuePPoIuYRomz564+uESdG7xriV28IpM
ZF9EShU6K8g4CBja0b6Bt080rWViPy+VjMAkmNGlQx4NeN5wNGrN/qsaapyk5p9W
t7OEE9mNtMSZhVlzWP9WpVe8iKMvR8kd6d6Z4UIMl5capovvlubgBGzMnnhByC1/
hvwcRyrMaJ2VmlLpMx5KXmkL02QwJ2idl2QOmfJiKyHEzZjB/N7NLK7fYwljp9wa
ZrYzTraYGpzX6SXw7kmW5gKoZBPbkcxyYJQkaytJHxforJ8vM1l4S+gIiorB/kka
yYCi7p6yId1aHUA=
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:32:08 2026 by rpki-client