Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/df724e-4263-4acc-a49e-7d5b8f65c990/1/6FS5ref_Azg6x29R9pA-rI8bPyA.roa
File: 6FS5ref_Azg6x29R9pA-rI8bPyA.roa (raw, json)
Hash identifier: FJ2BfyhZ+bsU7dipF9ZXYLdCxuUIDXPQAwOwB+u9kO0=
Subject key identifier: E8:54:B9:AD:E7:FF:03:38:3A:C7:6F:51:F6:90:3E:AC:8F:1B:3F:20
Certificate issuer: /CN=f4ee04d7fe84814278018d280fc1c77b0f69840c
Certificate serial: 019F5F45884A639DCB53FC6E977F38C3C031
Authority key identifier: F4:EE:04:D7:FE:84:81:42:78:01:8D:28:0F:C1:C7:7B:0F:69:84:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O4E1_6EgUJ4AY0oD8HHew9phAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/df724e-4263-4acc-a49e-7d5b8f65c990/1/6FS5ref_Azg6x29R9pA-rI8bPyA.roa
Signing time: Tue 14 Jul 2026 06:17:00 +0000
ROA not before: Tue 14 Jul 2026 06:17:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208509
IP address blocks: 111.88.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/df724e-4263-4acc-a49e-7d5b8f65c990/1/9O4E1_6EgUJ4AY0oD8HHew9phAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/df724e-4263-4acc-a49e-7d5b8f65c990/1/9O4E1_6EgUJ4AY0oD8HHew9phAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9O4E1_6EgUJ4AY0oD8HHew9phAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:45:88:4a:63:9d:cb:53:fc:6e:97:7f:38:c3:c0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ee04d7fe84814278018d280fc1c77b0f69840c
Validity
Not Before: Jul 14 06:17:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e854b9ade7ff03383ac76f51f6903eac8f1b3f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:64:31:0a:1f:43:5a:03:7a:20:59:a5:20:a5:
ce:28:97:d9:9d:c5:66:e0:7b:1b:a2:bc:91:95:e5:
40:57:f4:63:af:25:fb:a1:cb:d4:8b:1e:6a:19:76:
db:06:d6:9d:e0:98:be:10:fa:fb:cc:aa:65:b3:9c:
14:9a:88:4e:8f:83:d0:32:3d:fe:a4:16:26:3f:d6:
c8:d0:17:a3:d2:90:61:08:c9:71:6b:1c:69:d9:5e:
c0:39:9f:8f:73:95:f7:65:58:2a:ff:20:d9:aa:98:
ed:43:12:8f:41:d1:8d:b3:4f:89:8d:33:f5:1a:f2:
c5:2d:d2:80:c0:e7:d0:79:61:df:e1:8a:40:64:35:
26:3d:9f:92:48:aa:ff:fc:c7:6a:0e:39:49:66:cb:
44:36:15:20:52:6a:ff:cc:56:7c:ce:9d:fd:ff:22:
94:9f:a4:36:b1:6a:a7:8d:4e:da:72:f1:e8:91:3d:
12:b1:98:2b:09:47:0a:90:13:53:63:d1:16:6b:1a:
34:4f:42:ea:9b:d4:64:85:44:a9:e8:b2:5e:2b:ea:
ac:2d:ed:5f:5e:4b:66:ec:79:17:01:62:1c:28:73:
c3:56:05:89:87:29:14:9a:aa:0b:eb:2b:27:d0:d7:
09:60:b0:a0:4e:b2:e0:5e:36:25:76:f4:b8:86:81:
19:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:54:B9:AD:E7:FF:03:38:3A:C7:6F:51:F6:90:3E:AC:8F:1B:3F:20
X509v3 Authority Key Identifier:
keyid:F4:EE:04:D7:FE:84:81:42:78:01:8D:28:0F:C1:C7:7B:0F:69:84:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O4E1_6EgUJ4AY0oD8HHew9phAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/df724e-4263-4acc-a49e-7d5b8f65c990/1/6FS5ref_Azg6x29R9pA-rI8bPyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/df724e-4263-4acc-a49e-7d5b8f65c990/1/9O4E1_6EgUJ4AY0oD8HHew9phAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.88.78.0/24
Signature Algorithm: sha256WithRSAEncryption
37:e8:ae:f9:88:94:cf:10:01:f4:6e:08:d2:7e:0f:61:32:5a:
6a:4f:30:86:2d:5a:fb:7f:09:0f:e6:81:0d:d9:b1:00:a3:83:
52:b6:2f:c3:36:e8:c8:a7:7b:c8:8a:87:9c:cb:43:42:3f:8a:
bc:9b:db:02:22:c2:13:91:bd:9d:51:03:96:f0:88:89:07:1b:
f0:9f:ac:81:8c:51:5c:05:85:03:54:69:e1:1b:cf:c2:4f:64:
0d:af:d8:8b:e9:b8:2c:b4:aa:8c:6b:0f:21:92:60:c9:c7:6a:
ed:19:9d:20:5f:00:c4:55:57:65:d5:c4:25:38:35:e8:f5:f2:
73:f6:57:2a:57:a5:eb:22:aa:7b:82:63:28:e3:76:07:13:89:
df:ed:c3:5a:8a:e0:73:70:16:b9:32:54:62:26:7c:23:3c:01:
b1:b8:6f:6b:48:b1:7d:c2:c6:71:6c:4e:e8:13:bf:14:bc:30:
bd:4c:ae:24:2b:e7:ca:1f:2e:b9:74:b8:26:b4:8e:bd:7b:d6:
72:6e:b3:9f:d3:2b:a7:4b:d3:08:92:bf:fd:ea:17:5c:ec:1b:
07:a1:80:de:c0:51:73:73:e0:da:64:af:d0:3d:b2:c8:18:53:
5f:6e:66:82:85:63:4c:3e:cd:70:aa:e8:36:c2:81:a3:54:10:
69:9a:af:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9fRYhKY53LU/xul384w8AxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZWUwNGQ3ZmU4NDgxNDI3ODAxOGQyODBmYzFjNzdiMGY2
OTg0MGMwHhcNMjYwNzE0MDYxNzAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODU0YjlhZGU3ZmYwMzM4M2FjNzZmNTFmNjkwM2VhYzhmMWIzZjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mQxCh9DWgN6IFmlIKXOKJfZncVm
4HsboryRleVAV/RjryX7ocvUix5qGXbbBtad4Ji+EPr7zKpls5wUmohOj4PQMj3+
pBYmP9bI0Bej0pBhCMlxaxxp2V7AOZ+Pc5X3ZVgq/yDZqpjtQxKPQdGNs0+JjTP1
GvLFLdKAwOfQeWHf4YpAZDUmPZ+SSKr//MdqDjlJZstENhUgUmr/zFZ8zp39/yKU
n6Q2sWqnjU7acvHokT0SsZgrCUcKkBNTY9EWaxo0T0Lqm9RkhUSp6LJeK+qsLe1f
Xktm7HkXAWIcKHPDVgWJhykUmqoL6ysn0NcJYLCgTrLgXjYldvS4hoEZtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOhUua3n/wM4OsdvUfaQPqyPGz8gMB8GA1UdIwQY
MBaAFPTuBNf+hIFCeAGNKA/Bx3sPaYQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU80RTFfNkVnVUo0QVkwb0Q4SEhldzlwaEF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kZjcyNGUtNDI2My00YWNjLWE0OWUt
N2Q1YjhmNjVjOTkwLzEvNkZTNXJlZl9Bemc2eDI5UjlwQS1ySThiUHlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kZjcyNGUtNDI2My00YWNjLWE0OWUtN2Q1YjhmNjVjOTkw
LzEvOU80RTFfNkVnVUo0QVkwb0Q4SEhldzlwaEF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAb1hOMA0G
CSqGSIb3DQEBCwUAA4IBAQA36K75iJTPEAH0bgjSfg9hMlpqTzCGLVr7fwkP5oEN
2bEAo4NSti/DNujIp3vIioecy0NCP4q8m9sCIsITkb2dUQOW8IiJBxvwn6yBjFFc
BYUDVGnhG8/CT2QNr9iL6bgstKqMaw8hkmDJx2rtGZ0gXwDEVVdl1cQlODXo9fJz
9lcqV6XrIqp7gmMo43YHE4nf7cNaiuBzcBa5MlRiJnwjPAGxuG9rSLF9wsZxbE7o
E78UvDC9TK4kK+fKHy65dLgmtI69e9ZybrOf0yunS9MIkr/96hdc7BsHoYDewFFz
c+DaZK/QPbLIGFNfbmaChWNMPs1wqug2woGjVBBpmq89
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:06:32 2026 by rpki-client