Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/b6xlBvBefTczj_2WSzvVV1Xmh5E.roa
File: b6xlBvBefTczj_2WSzvVV1Xmh5E.roa (raw, json)
Hash identifier: GHcYW5UlL2otAfdfkn/rbj3RPAorCZzzowsEDPXbUG4=
Subject key identifier: 6F:AC:65:06:F0:5E:7D:37:33:8F:FD:96:4B:3B:D5:57:55:E6:87:91
Certificate issuer: /CN=40cc81ff82ced61aef8476ace7a0e818bbae8fc4
Certificate serial: 019D823745AAD4C77C4E9452399A5AB85816
Authority key identifier: 40:CC:81:FF:82:CE:D6:1A:EF:84:76:AC:E7:A0:E8:18:BB:AE:8F:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/b6xlBvBefTczj_2WSzvVV1Xmh5E.roa
Signing time: Sun 12 Apr 2026 15:02:33 +0000
ROA not before: Sun 12 Apr 2026 15:02:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202375
IP address blocks: 93.95.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:82:37:45:aa:d4:c7:7c:4e:94:52:39:9a:5a:b8:58:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cc81ff82ced61aef8476ace7a0e818bbae8fc4
Validity
Not Before: Apr 12 15:02:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fac6506f05e7d37338ffd964b3bd55755e68791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:04:fb:fc:28:39:cc:69:2d:13:11:c5:bb:90:
0b:8f:f8:5b:9e:31:3c:42:c7:b6:c3:07:97:80:b2:
c1:19:89:09:08:60:98:1c:28:a6:45:69:5d:60:2d:
88:82:a7:b5:3d:a7:14:19:11:ab:25:73:09:4e:60:
9c:a1:0f:e5:30:8b:9f:59:1d:81:fb:59:32:ef:2e:
6b:18:e8:96:92:b5:87:39:eb:b7:87:98:91:4c:9e:
51:9f:83:24:cb:8c:97:06:22:e0:2e:3f:31:29:73:
f5:34:a3:50:45:49:ab:aa:40:26:06:df:14:71:cd:
62:67:05:62:97:fb:e4:9c:b8:ff:50:cb:0c:4e:c8:
88:4b:a0:11:c1:b1:54:f8:69:9d:ab:d9:6b:19:00:
c0:d0:ef:74:81:8a:15:4d:3a:0f:ef:38:9e:f1:90:
b2:43:85:82:4b:a6:34:83:71:2d:7e:13:7f:c9:b1:
cb:1c:57:08:3a:39:99:18:a0:c5:90:12:ef:3b:17:
45:fb:e1:87:57:bf:3a:7c:b5:66:00:ef:65:fd:d1:
41:64:36:9a:17:a7:15:28:b2:58:0a:e3:c0:e4:58:
ea:ec:ed:31:ca:1f:a1:1d:ca:60:dd:95:2c:cf:6f:
d3:e6:02:99:90:94:34:2f:d6:ac:34:25:2e:7b:f0:
a2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AC:65:06:F0:5E:7D:37:33:8F:FD:96:4B:3B:D5:57:55:E6:87:91
X509v3 Authority Key Identifier:
keyid:40:CC:81:FF:82:CE:D6:1A:EF:84:76:AC:E7:A0:E8:18:BB:AE:8F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/b6xlBvBefTczj_2WSzvVV1Xmh5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.209.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:2d:3f:0e:45:85:05:ab:17:df:0d:df:7d:3a:52:7d:f9:ae:
76:28:49:ae:9c:68:f1:8a:32:1b:a7:e3:ca:84:3b:33:d7:8a:
df:36:1c:e7:b2:29:a9:86:84:a7:9c:f3:b8:39:d0:e4:5a:4e:
df:be:27:1f:35:b7:85:a7:1d:bf:77:39:b4:29:e1:a8:98:28:
3c:b8:28:c5:1f:a9:d4:8b:ea:65:78:67:1c:7e:f2:1d:ae:86:
ad:a4:5b:82:08:97:1a:ff:50:19:fa:dc:55:81:e0:6d:ed:39:
5e:89:98:84:76:20:4f:f3:e0:1f:e7:6e:0a:20:b6:77:55:ae:
ae:c1:ea:f8:2e:d6:dd:84:04:62:53:62:69:ce:bb:1f:31:85:
d4:a9:b7:3d:f7:e6:13:ce:48:fc:dd:59:e0:93:2e:7a:ee:5d:
55:85:f6:7c:2e:f9:03:e7:3c:64:7d:88:9a:00:d2:c1:a6:48:
27:74:0a:e4:dd:12:08:43:1a:d8:b9:34:70:45:61:97:b5:61:
d7:cb:07:1a:fc:0c:db:e6:a8:a7:24:c3:aa:0c:19:d3:3a:85:
2f:3b:0f:3c:b5:c0:9e:04:cb:8f:2c:19:56:b0:8e:14:4c:ce:
30:b0:80:b8:8d:50:52:99:84:f5:9d:52:c8:80:10:71:f5:dc:
e9:b1:90:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2CN0Wq1Md8TpRSOZpauFgWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwY2M4MWZmODJjZWQ2MWFlZjg0NzZhY2U3YTBlODE4YmJh
ZThmYzQwHhcNMjYwNDEyMTUwMjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmFjNjUwNmYwNWU3ZDM3MzM4ZmZkOTY0YjNiZDU1NzU1ZTY4NzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wT7/Cg5zGktExHFu5ALj/hbnjE8
Qse2wweXgLLBGYkJCGCYHCimRWldYC2Igqe1PacUGRGrJXMJTmCcoQ/lMIufWR2B
+1ky7y5rGOiWkrWHOeu3h5iRTJ5Rn4Mky4yXBiLgLj8xKXP1NKNQRUmrqkAmBt8U
cc1iZwVil/vknLj/UMsMTsiIS6ARwbFU+Gmdq9lrGQDA0O90gYoVTToP7zie8ZCy
Q4WCS6Y0g3EtfhN/ybHLHFcIOjmZGKDFkBLvOxdF++GHV786fLVmAO9l/dFBZDaa
F6cVKLJYCuPA5Fjq7O0xyh+hHcpg3ZUsz2/T5gKZkJQ0L9asNCUue/CiIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG+sZQbwXn03M4/9lks71VdV5oeRMB8GA1UdIwQY
MBaAFEDMgf+CztYa74R2rOeg6Bi7ro/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU15Ql80TE8xaHJ2aEhhczU2RG9HTHV1ajhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84ZTFmNTMtYjY3NC00MGU4LThiYjgt
ZGI1ZDg5ZThhMTdjLzEvYjZ4bEJ2QmVmVGN6al8yV1N6dlZWMVhtaDVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS84ZTFmNTMtYjY3NC00MGU4LThiYjgtZGI1ZDg5ZThhMTdj
LzEvUU15Ql80TE8xaHJ2aEhhczU2RG9HTHV1ajhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXV/RMA0G
CSqGSIb3DQEBCwUAA4IBAQAuLT8ORYUFqxffDd99OlJ9+a52KEmunGjxijIbp+PK
hDsz14rfNhznsimphoSnnPO4OdDkWk7fvicfNbeFpx2/dzm0KeGomCg8uCjFH6nU
i+pleGccfvIdroatpFuCCJca/1AZ+txVgeBt7TleiZiEdiBP8+Af524KILZ3Va6u
wer4LtbdhARiU2JpzrsfMYXUqbc99+YTzkj83Vngky567l1VhfZ8LvkD5zxkfYia
ANLBpkgndArk3RIIQxrYuTRwRWGXtWHXywca/Azb5qinJMOqDBnTOoUvOw88tcCe
BMuPLBlWsI4UTM4wsIC4jVBSmYT1nVLIgBBx9dzpsZDi
-----END CERTIFICATE-----
Generated at Wed May 13 06:58:48 2026 by rpki-client