Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/s6pcjXYJ_a8ZOjQqNdW7-wk5Uis.roa
File: s6pcjXYJ_a8ZOjQqNdW7-wk5Uis.roa (raw, json)
Hash identifier: Abd/wjefE7vkaUeWVlpKIIf5AMjQUyEpIzPrbaUaKIY=
Subject key identifier: B3:AA:5C:8D:76:09:FD:AF:19:3A:34:2A:35:D5:BB:FB:09:39:52:2B
Certificate issuer: /CN=0efad7551516f0c4d912da0313c995c9e714e09a
Certificate serial: 019F23682BC2402BE1AECCFEC0D59B381D56
Authority key identifier: 0E:FA:D7:55:15:16:F0:C4:D9:12:DA:03:13:C9:95:C9:E7:14:E0:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvrXVRUW8MTZEtoDE8mVyecU4Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/s6pcjXYJ_a8ZOjQqNdW7-wk5Uis.roa
Signing time: Thu 02 Jul 2026 15:17:37 +0000
ROA not before: Thu 02 Jul 2026 15:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62320
IP address blocks: 89.45.84.0/22 maxlen: 24
185.39.228.0/22 maxlen: 24
2a01:4aa0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/DvrXVRUW8MTZEtoDE8mVyecU4Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/DvrXVRUW8MTZEtoDE8mVyecU4Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvrXVRUW8MTZEtoDE8mVyecU4Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2b:c2:40:2b:e1:ae:cc:fe:c0:d5:9b:38:1d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0efad7551516f0c4d912da0313c995c9e714e09a
Validity
Not Before: Jul 2 15:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3aa5c8d7609fdaf193a342a35d5bbfb0939522b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ec:45:99:72:24:4d:43:05:40:09:6f:f0:3b:
18:89:dd:4d:eb:8e:49:d3:e8:79:65:d6:fc:f8:43:
e5:06:c0:a3:82:b6:f8:dd:0e:50:6e:ac:2c:52:1a:
2c:30:d5:63:26:f1:de:71:bb:53:5b:53:82:2c:ef:
99:fa:c7:9f:c5:1c:1f:d7:c6:09:05:b5:8c:cc:81:
4d:f0:79:1d:e4:75:55:2a:01:2f:ee:58:32:bf:b8:
66:38:8f:3a:8f:04:43:de:9b:79:79:07:2f:7b:c4:
e1:35:01:f2:92:a8:fb:f4:7b:a4:b9:d2:4b:0e:e4:
59:ba:75:18:fb:fb:52:24:08:3d:3f:a7:aa:26:a6:
26:85:4e:a3:53:9d:70:2d:2e:ec:80:b5:ca:b2:f2:
9f:6e:67:2b:ef:f0:2a:0a:6b:90:ff:6a:a2:c9:6b:
c3:43:38:44:11:d8:fb:12:1a:b4:fb:9a:c5:a4:d3:
1c:db:4f:5a:bf:b5:19:3a:03:f7:2a:c1:71:22:5c:
37:23:a9:4a:b5:8d:a7:f2:53:36:ed:99:62:7c:58:
a7:32:a1:ab:e3:a0:48:76:d3:66:24:1e:26:5d:fc:
63:79:54:af:6d:72:8b:77:a5:48:36:11:f5:4e:6f:
a3:41:1e:c8:8d:8a:a9:4e:11:2d:9b:13:75:9b:17:
b8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AA:5C:8D:76:09:FD:AF:19:3A:34:2A:35:D5:BB:FB:09:39:52:2B
X509v3 Authority Key Identifier:
keyid:0E:FA:D7:55:15:16:F0:C4:D9:12:DA:03:13:C9:95:C9:E7:14:E0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvrXVRUW8MTZEtoDE8mVyecU4Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/s6pcjXYJ_a8ZOjQqNdW7-wk5Uis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/DvrXVRUW8MTZEtoDE8mVyecU4Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.84.0/22
185.39.228.0/22
IPv6:
2a01:4aa0::/32
Signature Algorithm: sha256WithRSAEncryption
76:25:90:89:b7:83:50:f7:f5:75:59:4a:fd:26:3a:a9:1c:81:
42:0d:44:de:51:de:68:fb:d2:07:05:4e:57:8f:10:b7:78:93:
78:be:2b:4c:33:05:4c:1f:db:11:82:0d:06:05:63:3a:75:6d:
ba:90:2a:7c:3f:04:e4:9e:9a:95:8d:aa:0e:7b:5e:9f:99:69:
88:1c:d7:87:45:e7:b6:52:4a:c3:33:1a:c8:10:ca:12:b0:52:
92:95:21:65:c6:a6:f0:6f:42:aa:38:ed:49:4d:27:ab:c7:75:
13:cb:06:fe:e9:2a:ab:d7:72:d8:fb:29:e0:7d:a3:d7:0e:91:
cd:ed:01:d0:42:f0:59:07:66:92:15:17:89:59:d4:6d:1b:3a:
bb:ab:d1:85:9b:52:6a:21:9b:5c:c5:22:96:06:e3:78:77:f8:
f6:7f:66:45:d2:71:59:61:31:74:eb:0f:b3:a3:b6:0a:fa:37:
77:74:fc:c3:14:9a:28:c0:91:52:c3:12:e4:f9:57:e1:0a:83:
c4:d7:5b:29:67:e7:83:e4:84:30:96:b2:ba:20:17:7b:c3:83:
73:e7:a5:59:e8:b9:08:26:45:a0:7a:0f:65:0a:26:ae:db:ea:
f5:77:2b:c6:8a:8e:80:fe:7d:17:24:23:73:0c:dc:37:9a:a7:
73:34:8a:02
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ8jaCvCQCvhrsz+wNWbOB1WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZmFkNzU1MTUxNmYwYzRkOTEyZGEwMzEzYzk5NWM5ZTcx
NGUwOWEwHhcNMjYwNzAyMTUxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2FhNWM4ZDc2MDlmZGFmMTkzYTM0MmEzNWQ1YmJmYjA5Mzk1MjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuxFmXIkTUMFQAlv8DsYid1N645J
0+h5Zdb8+EPlBsCjgrb43Q5QbqwsUhosMNVjJvHecbtTW1OCLO+Z+sefxRwf18YJ
BbWMzIFN8Hkd5HVVKgEv7lgyv7hmOI86jwRD3pt5eQcve8ThNQHykqj79HukudJL
DuRZunUY+/tSJAg9P6eqJqYmhU6jU51wLS7sgLXKsvKfbmcr7/AqCmuQ/2qiyWvD
QzhEEdj7Ehq0+5rFpNMc209av7UZOgP3KsFxIlw3I6lKtY2n8lM27ZlifFinMqGr
46BIdtNmJB4mXfxjeVSvbXKLd6VINhH1Tm+jQR7IjYqpThEtmxN1mxe4FQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFLOqXI12Cf2vGTo0KjXVu/sJOVIrMB8GA1UdIwQY
MBaAFA7611UVFvDE2RLaAxPJlcnnFOCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHZyWFZSVVc4TVRaRXRvREU4bVZ5ZWNVNEpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lNDcwNWMtZTZkYS00MjJlLTg1OWMt
M2I2OGE0OWRjMDQyLzEvczZwY2pYWUpfYThaT2pRcU5kVzctd2s1VWlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9lNDcwNWMtZTZkYS00MjJlLTg1OWMtM2I2OGE0OWRjMDQy
LzEvRHZyWFZSVVc4TVRaRXRvREU4bVZ5ZWNVNEpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCWS1UAwQC
uSfkMA0EAgACMAcDBQAqAUqgMA0GCSqGSIb3DQEBCwUAA4IBAQB2JZCJt4NQ9/V1
WUr9JjqpHIFCDUTeUd5o+9IHBU5XjxC3eJN4vitMMwVMH9sRgg0GBWM6dW26kCp8
PwTknpqVjaoOe16fmWmIHNeHRee2UkrDMxrIEMoSsFKSlSFlxqbwb0KqOO1JTSer
x3UTywb+6Sqr13LY+yngfaPXDpHN7QHQQvBZB2aSFReJWdRtGzq7q9GFm1JqIZtc
xSKWBuN4d/j2f2ZF0nFZYTF06w+zo7YK+jd3dPzDFJoowJFSwxLk+VfhCoPE11sp
Z+eD5IQwlrK6IBd7w4Nz56VZ6LkIJkWgeg9lCiau2+r1dyvGio6A/n0XJCNzDNw3
mqdzNIoC
-----END CERTIFICATE-----
Generated at Sun Jul 26 11:24:29 2026 by rpki-client