Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/6AjSknNBPYzUePStYn9MQvrmI1M.roa
File: 6AjSknNBPYzUePStYn9MQvrmI1M.roa (raw, json)
Hash identifier: ADf3UuOOLELpKownvjE0DOwT2mKXZSIP0VRCvJyoRxQ=
Subject key identifier: E8:08:D2:92:73:41:3D:8C:D4:78:F4:AD:62:7F:4C:42:FA:E6:23:53
Certificate issuer: /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial: 01A1A668A49D21255FE421670AB0F555D23B
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/6AjSknNBPYzUePStYn9MQvrmI1M.roa
Signing time: Wed 04 Nov 2026 11:53:58 +0000
ROA not before: Wed 04 Nov 2026 11:53:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30860
IP address blocks: 31.42.184.0/23 maxlen: 23
31.42.186.0/24 maxlen: 24
31.42.187.0/24 maxlen: 24
45.11.56.0/24 maxlen: 24
45.11.57.0/24 maxlen: 24
45.11.58.0/24 maxlen: 24
45.11.59.0/24 maxlen: 24
45.12.0.0/22 maxlen: 24
45.12.1.0/24 maxlen: 24
45.12.2.0/24 maxlen: 24
45.12.3.0/24 maxlen: 24
45.134.172.0/22 maxlen: 24
45.134.173.0/24 maxlen: 24
62.182.80.0/23 maxlen: 23
62.182.82.0/23 maxlen: 23
62.182.84.0/24 maxlen: 24
62.182.85.0/24 maxlen: 24
62.182.86.0/24 maxlen: 24
62.182.87.0/24 maxlen: 24
82.158.197.0/24 maxlen: 24
85.137.49.0/24 maxlen: 24
85.137.57.0/24 maxlen: 24
91.208.115.0/24 maxlen: 24
95.214.232.0/24 maxlen: 24
95.214.233.0/24 maxlen: 24
95.214.234.0/23 maxlen: 23
152.89.60.0/24 maxlen: 24
152.89.61.0/24 maxlen: 24
152.89.62.0/24 maxlen: 24
152.89.63.0/24 maxlen: 24
176.97.112.0/20 maxlen: 24
176.97.114.0/24 maxlen: 24
176.97.124.0/24 maxlen: 24
176.119.24.0/24 maxlen: 24
176.119.25.0/24 maxlen: 24
176.119.26.0/23 maxlen: 23
176.119.26.0/24 maxlen: 24
176.119.27.0/24 maxlen: 24
176.119.28.0/24 maxlen: 24
176.119.29.0/24 maxlen: 24
176.119.30.0/24 maxlen: 24
176.119.31.0/24 maxlen: 24
185.66.88.0/23 maxlen: 23
185.66.90.0/24 maxlen: 24
185.66.91.0/24 maxlen: 24
185.254.196.0/23 maxlen: 23
185.254.198.0/24 maxlen: 24
185.254.199.0/24 maxlen: 24
193.23.181.0/24 maxlen: 24
194.42.204.0/22 maxlen: 24
194.42.205.0/24 maxlen: 24
195.66.210.0/24 maxlen: 24
195.66.214.0/23 maxlen: 24
2a09:2dc0::/29 maxlen: 29
2a09:2dc1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:68:a4:9d:21:25:5f:e4:21:67:0a:b0:f5:55:d2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Validity
Not Before: Nov 4 11:53:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e808d29273413d8cd478f4ad627f4c42fae62353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ae:21:a6:1b:4f:58:15:cb:e5:5d:88:cc:e4:
64:ad:a9:5e:35:d0:ac:d7:70:3a:ef:af:2f:79:64:
ae:26:1e:88:b7:10:16:f7:5c:46:fd:d7:84:42:19:
28:c9:7e:b6:92:e5:c5:ab:b9:a4:0b:c6:f8:09:b9:
81:9b:e4:35:d3:6d:56:50:7c:b6:b6:b2:50:1f:f5:
5e:82:fb:0a:93:ff:88:90:26:60:11:96:85:07:72:
ce:bd:7f:e7:c5:a5:fa:a8:db:c6:06:32:9f:aa:4f:
2b:e5:02:6a:ba:f3:07:6b:89:f1:a6:99:48:f5:71:
61:f5:03:a5:fc:98:9b:34:d6:2b:f5:15:1f:e7:f9:
e3:2c:e5:85:70:b7:37:57:11:e8:26:e8:e0:52:84:
f1:c4:ca:b6:2b:ae:45:63:2d:0a:6c:a4:58:03:b9:
c9:9b:f6:78:79:27:4e:d9:f8:51:9c:5d:e4:2b:0f:
ae:f2:46:15:ad:f4:2f:7e:95:d3:b8:f7:30:48:cb:
51:39:bb:03:aa:64:94:39:93:3a:52:b0:e6:a1:1d:
2d:fa:e9:e9:ce:04:5a:60:38:73:03:a1:24:fc:68:
d5:8b:0b:01:db:e0:b7:6a:f9:b5:47:ea:33:41:8d:
e4:99:af:bb:7f:c6:2c:6c:a6:07:d4:1a:b6:3c:ca:
d7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:08:D2:92:73:41:3D:8C:D4:78:F4:AD:62:7F:4C:42:FA:E6:23:53
X509v3 Authority Key Identifier:
keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/6AjSknNBPYzUePStYn9MQvrmI1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.184.0/22
45.11.56.0/22
45.12.0.0/22
45.134.172.0/22
62.182.80.0/21
82.158.197.0/24
85.137.49.0/24
85.137.57.0/24
91.208.115.0/24
95.214.232.0/22
152.89.60.0/22
176.97.112.0/20
176.119.24.0/21
185.66.88.0/22
185.254.196.0/22
193.23.181.0/24
194.42.204.0/22
195.66.210.0/24
195.66.214.0/23
IPv6:
2a09:2dc0::/29
Signature Algorithm: sha256WithRSAEncryption
9b:12:e5:de:ba:82:d2:d6:2c:d9:57:f4:5a:29:28:40:ce:d2:
c7:a9:b1:09:f4:90:e7:b6:a9:6e:0f:41:a5:20:dc:67:4e:cb:
66:5d:07:8b:3d:8f:db:c3:fd:a0:9e:67:38:6c:31:08:e1:66:
eb:32:56:e9:d9:cb:0e:b4:37:37:4d:48:15:12:9d:a2:7d:ec:
95:65:bf:dd:9f:a2:a1:b8:30:b4:8d:97:75:96:57:ee:91:a9:
f8:07:70:57:fb:d7:70:1a:e3:cc:be:d9:94:57:5a:a7:41:50:
84:74:9e:fe:5d:18:a9:5d:2d:be:f7:bf:c1:fb:0a:aa:5d:af:
88:6d:55:1e:98:cc:76:39:b7:4c:d6:b7:52:f9:a6:3c:bd:aa:
8b:76:e7:bd:6e:b2:25:ac:43:64:49:10:f7:bf:69:02:c7:cb:
ed:b5:4d:c9:99:7f:a9:a5:e9:5f:0e:31:d7:b2:80:1c:b6:6d:
20:5a:54:ad:54:f3:21:9c:ef:5c:d1:76:af:8f:7c:63:1f:b1:
bc:c0:6a:e4:96:03:31:ec:1e:86:99:74:bf:22:74:34:93:c5:
38:f7:e3:da:eb:a8:95:81:72:7c:a2:ae:d7:78:80:01:a7:4a:
1b:e7:7a:31:39:68:73:9c:0a:fe:2e:c1:f2:15:b4:3b:0a:96:
16:c4:2d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:12:15 2026 by rpki-client