Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/f23bbd-113d-40fc-be76-194b666eb456/1/TB6AmjrCcDjOma26-EzziML1HQM.roa
File: TB6AmjrCcDjOma26-EzziML1HQM.roa (raw, json)
Hash identifier: 6UMHJAeesLjGOaBB0CVix8TmqtTesC83CO1Nm5pmLBY=
Subject key identifier: 4C:1E:80:9A:3A:C2:70:38:CE:99:AD:BA:F8:4C:F3:88:C2:F5:1D:03
Certificate issuer: /CN=dae28463680c89b1ae5498fa1859e72febb71f62
Certificate serial: 01A067273E95CE657A24403220ED55901D0C
Authority key identifier: DA:E2:84:63:68:0C:89:B1:AE:54:98:FA:18:59:E7:2F:EB:B7:1F:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2uKEY2gMibGuVJj6GFnnL-u3H2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f23bbd-113d-40fc-be76-194b666eb456/1/TB6AmjrCcDjOma26-EzziML1HQM.roa
Signing time: Thu 03 Sep 2026 12:03:40 +0000
ROA not before: Thu 03 Sep 2026 12:03:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213959
IP address blocks: 2001:67c:f54::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/f23bbd-113d-40fc-be76-194b666eb456/1/2uKEY2gMibGuVJj6GFnnL-u3H2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/f23bbd-113d-40fc-be76-194b666eb456/1/2uKEY2gMibGuVJj6GFnnL-u3H2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2uKEY2gMibGuVJj6GFnnL-u3H2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:27:3e:95:ce:65:7a:24:40:32:20:ed:55:90:1d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae28463680c89b1ae5498fa1859e72febb71f62
Validity
Not Before: Sep 3 12:03:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c1e809a3ac27038ce99adbaf84cf388c2f51d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b7:3d:ec:2b:3b:8b:e9:8e:0c:db:f2:84:4f:
3a:2f:cb:74:87:74:36:68:40:e0:37:6e:2e:6a:fe:
b7:0c:a7:13:7b:56:3b:54:30:3a:56:3a:6d:66:07:
a2:25:37:d2:75:71:81:56:52:f8:46:f0:46:7a:8b:
05:ed:ad:1f:c4:08:56:c4:32:1c:76:ae:82:51:17:
ca:5e:13:8b:3c:ed:40:2a:e4:68:9a:7b:45:d4:99:
72:34:c3:45:06:82:59:45:4b:85:43:40:6c:4e:81:
3d:7f:28:63:a1:7d:af:1e:75:c2:a3:e5:bc:6d:a4:
38:ba:c4:75:aa:b5:fb:af:3e:40:59:05:a8:e4:d8:
16:c3:c6:af:97:cc:49:34:1a:a8:18:71:50:b0:70:
90:35:ac:92:34:56:0c:cd:b3:78:64:6c:21:41:30:
0a:68:21:17:96:f9:8a:fd:98:29:2d:c2:9a:f7:ee:
45:e3:b3:b1:34:2a:8c:42:4a:2d:37:b4:b1:31:ee:
56:d1:5f:77:f8:5c:a8:e3:8e:ce:7a:5f:53:31:25:
1e:5e:66:07:4d:4d:77:6c:f0:ed:44:6d:ee:1f:b1:
7f:77:7b:11:49:36:f7:02:65:0f:80:1e:71:7b:89:
e4:bc:ee:d3:3c:0e:ff:dd:38:7b:eb:30:26:02:ca:
f4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1E:80:9A:3A:C2:70:38:CE:99:AD:BA:F8:4C:F3:88:C2:F5:1D:03
X509v3 Authority Key Identifier:
keyid:DA:E2:84:63:68:0C:89:B1:AE:54:98:FA:18:59:E7:2F:EB:B7:1F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2uKEY2gMibGuVJj6GFnnL-u3H2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f23bbd-113d-40fc-be76-194b666eb456/1/TB6AmjrCcDjOma26-EzziML1HQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f23bbd-113d-40fc-be76-194b666eb456/1/2uKEY2gMibGuVJj6GFnnL-u3H2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:f54::/48
Signature Algorithm: sha256WithRSAEncryption
6f:d4:25:85:a3:21:0f:35:dc:36:4a:f3:20:f4:ca:da:b6:32:
08:0a:dd:68:60:19:df:7f:75:64:9b:87:c7:da:66:e9:90:b8:
ca:40:80:1d:34:06:a6:06:d4:cd:7f:53:ea:ce:dd:fc:71:44:
61:a4:ac:27:71:19:ba:3e:ab:bf:9f:d2:4f:cd:8d:b8:9c:64:
b3:b4:56:69:db:a8:78:8d:58:4f:d8:29:b4:32:9a:ac:ca:ae:
7a:60:e3:40:04:ee:58:58:47:2f:99:e9:37:1b:31:68:32:dd:
3b:52:6f:26:db:86:85:2d:59:2f:16:78:37:37:ee:70:f3:5b:
0d:42:d0:f6:db:97:2e:86:d8:dc:30:5f:16:f3:64:e6:c5:53:
00:8b:26:55:24:db:f1:83:f5:36:2b:c8:db:4f:df:76:47:e5:
cd:e9:87:60:a5:d3:ef:bc:a5:ff:65:8f:81:62:ae:91:74:e2:
a8:e8:87:99:09:43:5a:b6:ea:6b:b1:b7:87:c4:c3:1c:41:97:
b3:88:d2:6a:06:32:84:2a:2d:99:b8:57:a2:5d:3b:6a:35:16:
24:19:ee:23:b1:10:07:e7:86:e5:9b:be:e6:81:78:55:76:85:
ef:87:30:f8:a8:b8:d1:6b:5a:16:bb:94:e8:60:aa:40:cb:fe:
85:ea:8a:8c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaBnJz6VzmV6JEAyIO1VkB0MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZTI4NDYzNjgwYzg5YjFhZTU0OThmYTE4NTllNzJmZWJi
NzFmNjIwHhcNMjYwOTAzMTIwMzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzFlODA5YTNhYzI3MDM4Y2U5OWFkYmFmODRjZjM4OGMyZjUxZDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbc97Cs7i+mODNvyhE86L8t0h3Q2
aEDgN24uav63DKcTe1Y7VDA6VjptZgeiJTfSdXGBVlL4RvBGeosF7a0fxAhWxDIc
dq6CURfKXhOLPO1AKuRomntF1JlyNMNFBoJZRUuFQ0BsToE9fyhjoX2vHnXCo+W8
baQ4usR1qrX7rz5AWQWo5NgWw8avl8xJNBqoGHFQsHCQNaySNFYMzbN4ZGwhQTAK
aCEXlvmK/ZgpLcKa9+5F47OxNCqMQkotN7SxMe5W0V93+Fyo447Oel9TMSUeXmYH
TU13bPDtRG3uH7F/d3sRSTb3AmUPgB5xe4nkvO7TPA7/3Th76zAmAsr0xQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEwegJo6wnA4zpmtuvhM84jC9R0DMB8GA1UdIwQY
MBaAFNrihGNoDImxrlSY+hhZ5y/rtx9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnVLRVkyZ01pYkd1VkpqNkdGbm5MLXUzSDJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9mMjNiYmQtMTEzZC00MGZjLWJlNzYt
MTk0YjY2NmViNDU2LzEvVEI2QW1qckNjRGpPbWEyNi1FenppTUwxSFFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9mMjNiYmQtMTEzZC00MGZjLWJlNzYtMTk0YjY2NmViNDU2
LzEvMnVLRVkyZ01pYkd1VkpqNkdGbm5MLXUzSDJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA9U
MA0GCSqGSIb3DQEBCwUAA4IBAQBv1CWFoyEPNdw2SvMg9MratjIICt1oYBnff3Vk
m4fH2mbpkLjKQIAdNAamBtTNf1Pqzt38cURhpKwncRm6Pqu/n9JPzY24nGSztFZp
26h4jVhP2Cm0Mpqsyq56YONABO5YWEcvmek3GzFoMt07Um8m24aFLVkvFng3N+5w
81sNQtD225cuhtjcMF8W82TmxVMAiyZVJNvxg/U2K8jbT992R+XN6YdgpdPvvKX/
ZY+BYq6RdOKo6IeZCUNatuprsbeHxMMcQZeziNJqBjKEKi2ZuFeiXTtqNRYkGe4j
sRAH54blm77mgXhVdoXvhzD4qLjRa1oWu5ToYKpAy/6F6oqM
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:57:14 2026 by rpki-client