Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/m6PbjFFs9wz8BPUxE8SwTOq3MFw.roa
File: m6PbjFFs9wz8BPUxE8SwTOq3MFw.roa (raw, json)
Hash identifier: /mS4b0kizxWZ6Jeies/uIRMo0XfdIZr717g4eRPUQYw=
Subject key identifier: 9B:A3:DB:8C:51:6C:F7:0C:FC:04:F5:31:13:C4:B0:4C:EA:B7:30:5C
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019DBE0EB05BDACE5EC07E083BB780F03958
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/m6PbjFFs9wz8BPUxE8SwTOq3MFw.roa
Signing time: Fri 24 Apr 2026 05:55:26 +0000
ROA not before: Fri 24 Apr 2026 05:55:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401838
IP address blocks: 77.111.117.0/24 maxlen: 24
77.111.123.0/24 maxlen: 24
92.61.106.0/24 maxlen: 24
92.61.109.0/24 maxlen: 24
185.112.241.0/24 maxlen: 24
185.112.242.0/24 maxlen: 24
185.112.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:be:0e:b0:5b:da:ce:5e:c0:7e:08:3b:b7:80:f0:39:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Apr 24 05:55:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ba3db8c516cf70cfc04f53113c4b04ceab7305c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e6:59:06:c1:17:d8:59:87:a3:c5:a6:21:a4:
b1:4b:b1:be:38:67:d5:61:1d:01:05:86:92:73:80:
29:b3:a3:3c:4a:70:cb:85:ae:d5:90:68:cd:09:4d:
c4:1b:87:60:72:e4:d9:5f:1f:67:a8:43:ad:3c:42:
ce:1e:99:f4:87:aa:97:76:10:4e:0b:d2:3d:ee:99:
99:ac:2b:39:c3:7c:19:c6:45:c7:c4:19:fa:06:19:
6b:bf:ed:e0:61:d7:96:27:0e:bb:45:06:0b:f9:75:
45:47:8d:74:20:17:69:5e:6a:00:1b:4d:83:39:90:
5f:ef:e6:98:97:4f:67:95:ed:c4:60:47:40:b8:6b:
7e:56:11:ac:8a:29:78:d5:a2:23:7d:59:fc:d5:4e:
9e:2d:95:f6:04:b5:29:69:aa:9f:c4:61:3b:cd:da:
a6:05:fd:e9:69:26:fd:ea:da:55:19:08:af:35:3b:
61:d0:16:56:9e:ce:cf:92:75:6b:df:9c:29:8b:13:
ef:16:14:a4:a1:c1:c5:87:e6:ec:43:82:bf:44:8f:
db:d3:bd:aa:c8:5b:ab:c7:8a:1e:e1:64:b5:e5:e7:
27:0c:53:83:c4:c8:19:ea:92:da:a2:64:40:d1:2f:
88:81:14:cc:6a:a4:f4:7a:d0:a0:35:7d:79:32:56:
22:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A3:DB:8C:51:6C:F7:0C:FC:04:F5:31:13:C4:B0:4C:EA:B7:30:5C
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/m6PbjFFs9wz8BPUxE8SwTOq3MFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.117.0/24
77.111.123.0/24
92.61.106.0/24
92.61.109.0/24
185.112.241.0-185.112.243.255
Signature Algorithm: sha256WithRSAEncryption
2e:4e:6c:b9:f7:da:a6:6b:37:67:76:40:50:c7:da:62:a4:19:
2e:9b:19:4c:72:fd:22:d3:31:7c:ab:44:0a:c5:e5:9f:ef:7c:
ae:23:b5:c6:06:85:64:9f:fd:e8:1c:fd:5f:07:80:75:a7:80:
4e:13:4f:91:e3:25:39:d1:7b:c8:40:29:53:37:d9:1f:94:2c:
36:ad:df:fb:56:f4:37:bb:9c:34:11:a5:d9:f2:23:f4:08:8e:
c6:a7:e4:12:28:24:13:be:8f:4f:4b:12:a4:6f:4e:29:97:dd:
c8:78:db:33:89:21:f4:d6:38:fb:75:00:64:84:99:3b:d3:96:
74:fc:90:0f:53:fa:97:be:54:bf:fc:ad:4c:cb:59:49:09:0d:
17:32:cf:cd:3c:7c:5d:68:77:c3:f2:ba:4c:c7:9a:cc:3b:21:
04:c4:f2:d8:b4:39:97:ca:9c:2c:ae:2c:a6:4b:ca:51:bb:be:
3d:ea:c2:ca:78:ce:5a:1f:c7:be:81:6a:24:c2:74:fc:d6:8a:
f6:a6:b5:d7:82:ae:17:ba:30:db:bc:a5:15:60:26:8b:58:9f:
1f:5a:d8:68:58:c7:0c:a7:ae:a3:02:f9:53:db:2c:a6:be:2d:
0e:b5:e2:4d:e9:da:63:eb:9e:6e:4f:17:59:c8:dd:07:27:91:
b0:75:13:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:51:06 2026 by rpki-client