Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/6R3hYH4nng5n1ghJI5Wsn7rgU70.roa
File: 6R3hYH4nng5n1ghJI5Wsn7rgU70.roa (raw, json)
Hash identifier: tKmCA2VGu6pMRqdgLGwiEGxhCkj7+kJ1MpdL9zoZeLg=
Subject key identifier: E9:1D:E1:60:7E:27:9E:0E:67:D6:08:49:23:95:AC:9F:BA:E0:53:BD
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 019D005752FB2D1E4003FF980F8A3806EBA5
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/6R3hYH4nng5n1ghJI5Wsn7rgU70.roa
Signing time: Wed 18 Mar 2026 09:46:55 +0000
ROA not before: Wed 18 Mar 2026 09:46:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48635
IP address blocks: 83.98.177.0/24 maxlen: 24
89.18.168.0/24 maxlen: 24
213.189.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:57:52:fb:2d:1e:40:03:ff:98:0f:8a:38:06:eb:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: Mar 18 09:46:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e91de1607e279e0e67d608492395ac9fbae053bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:74:5b:3a:2c:8b:3f:29:28:e4:03:b1:17:
c9:41:a7:b1:b3:00:c3:ae:6a:e5:8c:6e:59:2e:ba:
09:08:73:3c:e6:70:c5:1d:55:cf:b8:30:b0:af:98:
b7:05:ba:b6:b1:37:79:d9:a2:c5:a0:4f:2f:9c:d4:
5a:dd:a8:16:8a:1c:91:3d:06:8b:55:32:85:ca:ce:
fe:e7:83:6d:2e:08:2b:0e:38:92:4e:11:6c:79:84:
dc:c6:3c:b8:52:6e:1d:ca:81:e3:7a:34:2f:20:6e:
58:97:f7:8a:8e:c2:f9:51:01:c5:57:e6:ae:4b:b9:
d7:6d:a9:8f:5f:0f:37:d3:66:14:b6:33:05:bb:c2:
47:fe:d6:07:b3:be:40:35:26:c5:8a:0a:e7:52:3d:
31:4a:af:dc:c0:b5:57:fa:49:5a:b3:2e:21:01:ee:
ea:5a:94:50:16:ce:f2:27:17:71:8d:ca:e8:de:12:
25:c6:b6:69:dc:14:96:f5:bb:01:c9:7b:3a:d5:03:
68:fe:ee:fb:63:31:db:c7:41:3a:a9:fe:10:b5:1a:
55:1e:83:8d:22:f1:a3:e2:bb:d5:4d:aa:cf:bf:07:
6a:73:14:7b:dc:dc:40:b2:3b:a4:f7:08:35:4a:8f:
2d:70:db:b2:73:11:51:f4:b6:b3:31:48:2a:63:8e:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1D:E1:60:7E:27:9E:0E:67:D6:08:49:23:95:AC:9F:BA:E0:53:BD
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/6R3hYH4nng5n1ghJI5Wsn7rgU70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.177.0/24
89.18.168.0/24
213.189.29.0/24
Signature Algorithm: sha256WithRSAEncryption
17:fa:d8:a1:15:50:5c:90:7d:b4:20:8f:86:7f:a5:39:08:2d:
28:e1:b1:4b:3f:24:e4:0e:f8:a4:9d:25:70:f1:17:ba:fa:9b:
e6:e4:22:1b:5c:1c:67:51:3e:6f:ff:2f:37:ac:e2:f6:43:a6:
c2:2d:5d:77:64:89:3d:c1:18:d7:05:ca:a6:1b:e7:d4:7f:15:
25:85:1c:5e:8d:5e:d6:c2:21:d0:74:0f:23:a0:fd:ef:72:d5:
d2:a7:17:2e:3b:52:bb:89:91:5d:ad:9a:2f:dd:1a:73:05:87:
47:b1:c1:27:9d:94:e7:b5:55:28:c6:d6:63:49:c9:ff:c1:b2:
a1:3a:fd:28:6a:6a:df:6b:d5:09:f5:62:57:bc:95:38:a0:ae:
df:a2:40:e7:02:36:7e:33:7d:6b:c2:9d:dd:27:80:d1:d4:02:
8d:23:6e:b5:95:a2:2a:c4:3c:22:3e:0b:90:3e:fc:34:cc:25:
52:d9:67:1a:08:14:bb:40:77:52:a4:07:5f:76:59:22:f2:69:
88:ba:d2:aa:d1:79:5d:e8:f3:e9:b5:0d:67:92:95:42:0b:02:
1b:4e:3d:63:36:3d:0a:23:b6:03:07:b2:24:2b:13:12:cb:92:
a9:7e:b5:3d:20:bf:44:82:59:77:a4:33:fc:17:6b:fe:e9:f2:
8c:9a:d2:1e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ0AV1L7LR5AA/+YD4o4BuulMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNjI2ZmZkODAwZWFmYTMzNmJkZjM0MzE0MWYwM2Y3YzM5
M2MzNjQwHhcNMjYwMzE4MDk0NjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTFkZTE2MDdlMjc5ZTBlNjdkNjA4NDkyMzk1YWM5ZmJhZTA1M2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIB0Wzosiz8pKOQDsRfJQaexswDD
rmrljG5ZLroJCHM85nDFHVXPuDCwr5i3Bbq2sTd52aLFoE8vnNRa3agWihyRPQaL
VTKFys7+54NtLggrDjiSThFseYTcxjy4Um4dyoHjejQvIG5Yl/eKjsL5UQHFV+au
S7nXbamPXw8302YUtjMFu8JH/tYHs75ANSbFigrnUj0xSq/cwLVX+klasy4hAe7q
WpRQFs7yJxdxjcro3hIlxrZp3BSW9bsByXs61QNo/u77YzHbx0E6qf4QtRpVHoON
IvGj4rvVTarPvwdqcxR73NxAsjuk9wg1So8tcNuycxFR9LazMUgqY46LtQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOkd4WB+J54OZ9YISSOVrJ+64FO9MB8GA1UdIwQY
MBaAFAFib/2ADq+jNr3zQxQfA/fDk8NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODct
MWY0YmVhMjNlNGM3LzEvNlIzaFlING5uZzVuMWdoSkk1V3NuN3JnVTcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODctMWY0YmVhMjNlNGM3
LzEvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAU2KxAwQA
WRKoAwQA1b0dMA0GCSqGSIb3DQEBCwUAA4IBAQAX+tihFVBckH20II+Gf6U5CC0o
4bFLPyTkDviknSVw8Re6+pvm5CIbXBxnUT5v/y83rOL2Q6bCLV13ZIk9wRjXBcqm
G+fUfxUlhRxejV7WwiHQdA8joP3vctXSpxcuO1K7iZFdrZov3RpzBYdHscEnnZTn
tVUoxtZjScn/wbKhOv0oamrfa9UJ9WJXvJU4oK7fokDnAjZ+M31rwp3dJ4DR1AKN
I261laIqxDwiPguQPvw0zCVS2WcaCBS7QHdSpAdfdlki8mmIutKq0Xld6PPptQ1n
kpVCCwIbTj1jNj0KI7YDB7IkKxMSy5KpfrU9IL9Egll3pDP8F2v+6fKMmtIe
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:33:54 2026 by rpki-client