Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/6YdcLpvAvGqPmORwUs3mXgyru0I.roa
File: 6YdcLpvAvGqPmORwUs3mXgyru0I.roa (raw, json)
Hash identifier: f6+1ag2deIbRbwBvJfki80bdL6WSD0/GZDdKs+5X1zQ=
Subject key identifier: E9:87:5C:2E:9B:C0:BC:6A:8F:98:E4:70:52:CD:E6:5E:0C:AB:BB:42
Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Certificate serial: 01A1DA18B0ED9F478E2FB6102FBE783AA7DC
Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/6YdcLpvAvGqPmORwUs3mXgyru0I.roa
Signing time: Sat 14 Nov 2026 12:46:53 +0000
ROA not before: Sat 14 Nov 2026 12:46:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.205.32.0/24 maxlen: 24
185.205.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:18:b0:ed:9f:47:8e:2f:b6:10:2f:be:78:3a:a7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Validity
Not Before: Nov 14 12:46:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9875c2e9bc0bc6a8f98e47052cde65e0cabbb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0d:11:f6:e9:dd:11:12:91:62:e2:3a:2b:f5:
13:be:da:7e:6d:dd:3b:6d:7b:1e:c2:c5:bc:4f:79:
93:82:9b:ae:27:80:96:18:69:ec:59:8b:ac:22:4f:
f5:5a:6a:00:e4:38:d8:d3:b0:bf:e2:d0:4c:f3:ff:
82:80:27:88:ee:a1:d1:7d:14:8e:e1:de:83:2e:74:
ad:8b:19:39:45:43:72:1f:46:f8:51:a8:88:32:ef:
bb:29:db:08:3f:db:87:77:af:41:bb:a3:91:86:52:
b9:df:ef:1b:3b:93:18:12:1a:53:2e:da:bf:99:50:
36:92:7c:53:1c:a7:fc:7a:46:8e:9c:8b:2f:ea:6f:
03:1d:64:6b:d5:27:db:3b:ba:43:2b:36:23:1c:7f:
ce:ad:0f:39:71:0d:3d:6f:10:c0:34:dc:82:82:53:
98:70:c1:ac:7d:6f:a3:c3:a1:c3:f7:56:60:75:f5:
db:8d:87:c9:10:4e:f1:05:c7:69:ec:bf:75:d5:68:
58:e1:80:20:99:7b:5e:e5:9d:4e:81:6a:e0:be:4f:
d5:6b:57:2c:23:41:8b:ef:43:fa:ae:3d:53:62:f3:
9e:1e:a3:06:b8:0f:16:86:0f:b9:ae:1c:8e:aa:0b:
eb:f3:f4:94:99:97:64:a6:c1:a5:a6:4e:21:02:a0:
b6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:87:5C:2E:9B:C0:BC:6A:8F:98:E4:70:52:CD:E6:5E:0C:AB:BB:42
X509v3 Authority Key Identifier:
keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/6YdcLpvAvGqPmORwUs3mXgyru0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.32.0/24
185.205.35.0/24
Signature Algorithm: sha256WithRSAEncryption
28:cc:dc:df:ef:d8:35:98:6f:25:9e:b2:5f:a8:34:19:3b:e0:
89:7e:c4:ac:ae:ef:35:7a:85:82:cb:6b:d5:3f:37:49:5a:0b:
af:c5:e4:b4:09:9b:23:b2:f4:d7:bd:8b:fc:24:67:15:60:c3:
a1:2d:5e:eb:bb:78:10:78:49:1b:e4:7a:d5:fe:fe:6c:25:53:
13:f5:ed:a6:f7:69:9e:14:bf:b4:61:56:11:d1:a9:07:c7:76:
b6:07:3c:b7:95:29:41:00:41:7e:24:fa:27:42:60:18:35:b7:
20:b1:10:64:f9:2e:ae:86:4c:77:18:92:43:e4:b1:15:3c:43:
7d:06:c2:0d:7f:1a:13:1f:8e:f3:50:0e:b7:95:2b:3d:95:39:
eb:65:8b:d2:81:62:df:0b:27:e1:91:7e:f3:a3:54:8a:70:eb:
80:71:e0:bc:e4:ea:21:86:34:e2:a3:3f:16:c1:48:e3:75:24:
cd:05:75:d3:7d:cd:40:1e:f4:6c:e1:d2:8e:81:3f:8a:dc:ca:
7a:9c:da:e6:78:ed:be:92:05:29:83:9e:73:c5:0d:74:7f:76:
a8:56:59:30:f8:57:60:22:8e:fb:7f:ac:74:70:f8:81:1b:24:
ad:cb:c8:45:a1:53:ea:7c:a6:5c:bb:4c:76:c0:8c:8e:bc:59:
d4:1e:98:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:36:45 2026 by rpki-client