Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ps6AFS_HTwFAv73WOrrGkMEpW_s.roa
File: ps6AFS_HTwFAv73WOrrGkMEpW_s.roa (raw, json)
Hash identifier: a4Uty23kswVGG26OmZLGFbxaKBDWVlzF+6jEsZBt5ZE=
Subject key identifier: A6:CE:80:15:2F:C7:4F:01:40:BF:BD:D6:3A:BA:C6:90:C1:29:5B:FB
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A18D0063577991927DE4FADC3E1791155A
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ps6AFS_HTwFAv73WOrrGkMEpW_s.roa
Signing time: Fri 30 Oct 2026 13:29:35 +0000
ROA not before: Fri 30 Oct 2026 13:29:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 134.49.65.0/24 maxlen: 24
147.90.202.0/24 maxlen: 24
149.245.125.0/24 maxlen: 24
158.173.240.0/24 maxlen: 24
170.62.239.0/24 maxlen: 24
170.62.244.0/24 maxlen: 24
170.62.245.0/24 maxlen: 24
173.209.0.0/24 maxlen: 24
193.142.58.0/24 maxlen: 24
212.32.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:00:63:57:79:91:92:7d:e4:fa:dc:3e:17:91:15:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 30 13:29:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6ce80152fc74f0140bfbdd63abac690c1295bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:19:8f:44:e1:f1:aa:19:de:62:75:f9:b0:3c:
1c:cf:58:91:b1:a7:14:81:15:58:c0:60:a9:59:b8:
22:3d:3d:b5:9f:31:3f:3d:a0:a6:08:99:b4:f2:5c:
fa:92:e5:db:d4:6d:2c:e7:f6:3f:a3:ac:b5:3e:d3:
3f:71:31:a2:77:9b:23:ae:d8:8e:ed:8c:8e:16:e5:
9f:65:0a:98:55:b2:0c:b7:0b:33:52:41:9b:d5:3f:
f4:2f:f7:38:99:50:61:50:41:55:e4:fe:f3:29:f4:
9d:1b:df:95:61:c8:4c:3b:ba:5a:37:17:eb:18:3f:
60:07:9a:99:76:ba:72:f4:a1:d3:4d:01:58:32:6a:
16:b1:a5:1f:6f:a9:39:8e:66:68:ef:62:2f:41:06:
6d:93:0c:34:ae:d7:ad:57:5a:29:b1:25:6c:f4:d5:
a1:a7:9c:a8:86:d1:96:6d:72:28:1c:f8:34:0a:c2:
9b:5f:5a:27:d3:c4:16:27:53:82:bd:cc:cf:c5:8c:
9f:f6:0a:a3:4b:83:01:1f:ba:24:5f:8e:1a:08:ee:
f9:27:01:fe:10:49:55:c7:7b:99:eb:35:f9:96:5e:
98:ed:3e:1e:bc:a7:b2:ab:39:ea:4c:61:56:7d:03:
1a:d7:43:d8:c7:ea:f3:6a:78:e5:db:fb:61:08:55:
bf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CE:80:15:2F:C7:4F:01:40:BF:BD:D6:3A:BA:C6:90:C1:29:5B:FB
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/ps6AFS_HTwFAv73WOrrGkMEpW_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.49.65.0/24
147.90.202.0/24
149.245.125.0/24
158.173.240.0/24
170.62.239.0/24
170.62.244.0/23
173.209.0.0/24
193.142.58.0/24
212.32.50.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:4d:da:8a:63:47:3c:db:28:92:b2:d0:77:12:99:7c:87:e9:
83:d9:b2:ac:bc:6a:f9:20:38:c9:ae:f9:d0:46:f9:ce:6d:d9:
cd:c0:4b:45:2b:b6:e1:c8:ea:9e:f6:21:df:5a:f2:32:82:3f:
b7:9b:7d:59:15:7e:27:53:c8:53:d1:c2:37:53:5b:ca:f8:b2:
c2:a6:92:7c:11:17:ac:66:7c:de:4b:93:82:1f:81:8b:b6:86:
88:aa:c4:b2:de:cf:c7:10:31:a0:be:ed:06:a4:46:4e:f3:b7:
1a:dd:84:d7:d3:77:af:b2:7a:64:eb:e6:76:d1:07:69:8c:06:
46:84:ef:71:f1:b6:58:93:13:54:ca:0a:6f:3e:ee:1a:bf:66:
94:10:c8:5e:2e:e7:e3:f7:03:b8:fc:9f:e5:1c:58:c2:e4:ff:
2b:06:2a:e4:6e:b6:e9:58:8d:be:d2:40:85:5d:51:ba:f2:f5:
a6:2c:4b:06:78:d1:cc:a6:5f:e0:da:9a:ab:cb:aa:bc:4d:b0:
30:66:08:d4:ab:11:af:ba:c8:80:c4:8d:b2:6b:99:66:5d:8c:
b7:4b:6c:3f:72:25:d1:14:6c:99:2d:2c:e5:6b:ec:c7:c2:be:
be:e7:67:c2:f6:d9:65:8f:7c:83:5d:63:b2:53:ce:1c:5e:48:
fa:ce:3d:31
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAaGNAGNXeZGSfeT63D4XkRVaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjYxMDMwMTMyOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmNlODAxNTJmYzc0ZjAxNDBiZmJkZDYzYWJhYzY5MGMxMjk1YmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xmPROHxqhneYnX5sDwcz1iRsacU
gRVYwGCpWbgiPT21nzE/PaCmCJm08lz6kuXb1G0s5/Y/o6y1PtM/cTGid5sjrtiO
7YyOFuWfZQqYVbIMtwszUkGb1T/0L/c4mVBhUEFV5P7zKfSdG9+VYchMO7paNxfr
GD9gB5qZdrpy9KHTTQFYMmoWsaUfb6k5jmZo72IvQQZtkww0rtetV1opsSVs9NWh
p5yohtGWbXIoHPg0CsKbX1on08QWJ1OCvczPxYyf9gqjS4MBH7okX44aCO75JwH+
EElVx3uZ6zX5ll6Y7T4evKeyqznqTGFWfQMa10PYx+rzanjl2/thCFW/7QIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFKbOgBUvx08BQL+91jq6xpDBKVv7MB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvcHM2QUZTX0hUd0ZBdjczV09yckdrTUVwV19zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAhjFBAwQA
k1rKAwQAlfV9AwQAnq3wAwQAqj7vAwQBqj70AwQArdEAAwQAwY46AwQA1CAyMA0G
CSqGSIb3DQEBCwUAA4IBAQAPTdqKY0c82yiSstB3Epl8h+mD2bKsvGr5IDjJrvnQ
RvnObdnNwEtFK7bhyOqe9iHfWvIygj+3m31ZFX4nU8hT0cI3U1vK+LLCppJ8ERes
ZnzeS5OCH4GLtoaIqsSy3s/HEDGgvu0GpEZO87ca3YTX03evsnpk6+Z20QdpjAZG
hO9x8bZYkxNUygpvPu4av2aUEMheLufj9wO4/J/lHFjC5P8rBirkbrbpWI2+0kCF
XVG68vWmLEsGeNHMpl/g2pqry6q8TbAwZgjUqxGvusiAxI2ya5lmXYy3S2w/ciXR
FGyZLSzla+zHwr6+52fC9tllj3yDXWOyU84cXkj6zj0x
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:35:46 2026 by rpki-client