Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/6KNhKGGdrXFLjZ1XPyUgJ4yIGIg.roa
File: 6KNhKGGdrXFLjZ1XPyUgJ4yIGIg.roa (raw, json)
Hash identifier: 7mtjseH+PgcRZVG/LL0SgW5XoQ6qCLuG7yQaTmngC74=
Subject key identifier: E8:A3:61:28:61:9D:AD:71:4B:8D:9D:57:3F:25:20:27:8C:88:18:88
Certificate issuer: /CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Certificate serial: 019F38D61B93782DB5B7A0F76E856F94FE70
Authority key identifier: A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/6KNhKGGdrXFLjZ1XPyUgJ4yIGIg.roa
Signing time: Mon 06 Jul 2026 19:09:43 +0000
ROA not before: Mon 06 Jul 2026 19:09:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47630
IP address blocks: 185.174.5.0/24 maxlen: 24
2a0b:7900::/48 maxlen: 48
2a0b:7900:1::/48 maxlen: 48
2a0b:7900:2::/48 maxlen: 48
2a0b:7900:3::/48 maxlen: 48
2a0b:7900:4::/48 maxlen: 48
2a0b:7900:5::/48 maxlen: 48
2a0b:7900:6::/48 maxlen: 48
2a0b:7900:7::/48 maxlen: 48
2a0b:7900:8::/48 maxlen: 48
2a0b:7900:9::/48 maxlen: 48
2a0b:7900:b::/48 maxlen: 48
2a0b:7900:c::/48 maxlen: 48
2a0b:7900:10::/48 maxlen: 48
2a0b:7900:20::/48 maxlen: 48
2a0b:7900:21::/48 maxlen: 48
2a0b:7900:22::/48 maxlen: 48
2a0b:7900:23::/48 maxlen: 48
2a0b:7900:24::/48 maxlen: 48
2a0b:7900:25::/48 maxlen: 48
2a0b:7900:26::/48 maxlen: 48
2a0b:7900:27::/48 maxlen: 48
2a0b:7900:28::/48 maxlen: 48
2a0b:7900:29::/48 maxlen: 48
2a0b:7900:60::/48 maxlen: 48
2a0b:7900:61::/48 maxlen: 48
2a0b:7900:62::/48 maxlen: 48
2a0b:7900:63::/48 maxlen: 48
2a0b:7900:64::/48 maxlen: 48
2a0b:7900:65::/48 maxlen: 48
2a0b:7900:66::/48 maxlen: 48
2a0b:7900:67::/48 maxlen: 48
2a0b:7900:68::/48 maxlen: 48
2a0b:7900:69::/48 maxlen: 48
2a0b:7900:4444::/48 maxlen: 48
2a0b:7900:5555::/48 maxlen: 48
2a0b:7900:6666::/48 maxlen: 48
2a0b:7900:7777::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:d6:1b:93:78:2d:b5:b7:a0:f7:6e:85:6f:94:fe:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Validity
Not Before: Jul 6 19:09:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8a36128619dad714b8d9d573f2520278c881888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:99:2a:0c:7d:05:e8:7c:38:36:d7:17:e8:5b:
41:6c:73:f6:96:e3:53:a3:c2:fe:4d:44:93:1f:1a:
1f:22:cc:07:34:97:e5:47:9a:d8:70:b9:f4:8d:a3:
eb:2a:dc:cc:a2:72:71:7b:8a:ab:f1:41:b3:e3:01:
19:be:e4:05:b6:e2:35:55:20:b4:da:b7:6d:56:b5:
2c:c5:25:1d:13:8e:c7:b6:72:a9:5c:c1:2e:bf:02:
bf:86:61:7c:15:da:ee:4e:c9:a9:3f:b0:81:1b:a5:
60:81:c6:5b:d2:1c:30:65:31:f5:60:a5:2e:f2:e3:
83:3e:38:1e:dc:aa:48:63:d3:b2:86:b4:0d:ea:ee:
b5:7d:8e:bf:d2:a4:3c:7f:bb:45:2f:cd:6d:3d:83:
b4:e7:f3:a1:35:71:8d:73:00:70:25:90:aa:7c:79:
43:71:fc:e7:80:fa:73:21:a3:94:a9:da:28:1b:08:
b8:1d:e1:46:ae:12:79:9f:cd:7e:30:fd:0c:f9:05:
de:b3:db:1a:9a:ff:9d:1d:fd:b0:26:34:07:b6:1f:
6c:ce:43:c2:ee:4f:32:09:58:fd:2f:d5:2b:5e:cb:
8d:66:ec:ea:f9:6c:d7:d0:13:6a:0e:59:bf:bc:1f:
22:2b:d2:b7:4e:e5:a5:2f:af:30:82:50:9c:0c:3b:
9c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A3:61:28:61:9D:AD:71:4B:8D:9D:57:3F:25:20:27:8C:88:18:88
X509v3 Authority Key Identifier:
keyid:A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/6KNhKGGdrXFLjZ1XPyUgJ4yIGIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.5.0/24
IPv6:
2a0b:7900::-2a0b:7900:9:ffff:ffff:ffff:ffff:ffff
2a0b:7900:b::-2a0b:7900:c:ffff:ffff:ffff:ffff:ffff
2a0b:7900:10::/48
2a0b:7900:20::-2a0b:7900:29:ffff:ffff:ffff:ffff:ffff
2a0b:7900:60::-2a0b:7900:69:ffff:ffff:ffff:ffff:ffff
2a0b:7900:4444::/48
2a0b:7900:5555::/48
2a0b:7900:6666::/48
2a0b:7900:7777::/48
Signature Algorithm: sha256WithRSAEncryption
1f:d2:36:df:99:2e:58:76:83:8f:d9:05:19:64:0a:57:a6:3f:
88:18:dd:00:fb:5f:9c:7d:a1:2f:0c:f6:1f:22:57:b1:41:24:
bd:6c:d0:10:f7:74:26:79:43:1a:37:7e:f6:1f:28:35:bc:ff:
b3:8d:05:74:33:85:84:e0:3a:eb:7d:b6:88:f9:af:2b:4f:39:
2a:f0:95:15:be:09:d2:58:9d:15:24:f6:6a:9f:9b:ef:39:3c:
1d:89:60:81:41:0f:18:25:3a:d9:8b:ad:b2:40:74:51:53:32:
89:64:ee:88:47:75:0c:0a:05:8e:c8:81:cf:e8:0c:67:e1:32:
1f:23:5d:20:b5:d4:9a:0d:f7:f4:1b:22:a4:ba:c8:a3:56:86:
db:5f:67:b5:eb:c9:ae:6d:66:ad:06:94:78:65:53:32:19:e0:
e8:5c:fb:d7:49:8e:28:dc:c3:99:16:7d:e6:46:46:4b:2a:08:
06:48:49:37:62:96:a1:58:79:97:68:04:19:a6:86:cf:17:5b:
fe:a8:f6:a8:78:68:4f:8e:dd:89:50:a4:be:f2:4b:cb:c5:89:
33:c0:e4:56:7d:f4:c8:3c:08:12:ca:9b:ab:57:25:95:9a:1b:
16:d7:9b:5a:f1:ff:fe:45:a4:92:f4:74:0a:ba:b3:02:e2:5a:
ab:ed:d4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:41 2026 by rpki-client