Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/6KeP-P2YiDRBc8Akhy6ituIKntI.roa
File: 6KeP-P2YiDRBc8Akhy6ituIKntI.roa (raw, json)
Hash identifier: QPV9vkggM21uC76MAD8nuqdtIbxQKxxWYl0nwXgymo4=
Subject key identifier: E8:A7:8F:F8:FD:98:88:34:41:73:C0:24:87:2E:A2:B6:E2:0A:9E:D2
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 01A0D327788EB4F5C854263AA2B6FE1787C3
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/6KeP-P2YiDRBc8Akhy6ituIKntI.roa
Signing time: Thu 24 Sep 2026 11:22:54 +0000
ROA not before: Thu 24 Sep 2026 11:22:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 85.237.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:27:78:8e:b4:f5:c8:54:26:3a:a2:b6:fe:17:87:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Sep 24 11:22:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8a78ff8fd9888344173c024872ea2b6e20a9ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c5:13:7a:ed:56:aa:ee:4d:4c:22:b8:55:d4:
3e:8d:de:c5:df:ac:c3:99:05:68:74:7c:3f:a8:c1:
62:01:5a:ec:23:83:46:61:75:6b:52:61:a2:b9:df:
4e:ae:b0:70:ba:6a:58:88:8d:e9:0a:f6:7b:8f:45:
3f:9e:18:2c:79:a0:10:79:6c:ed:7a:8c:27:c4:f9:
2f:fb:cc:0e:fc:23:66:1c:e0:73:c2:86:28:16:40:
fc:04:6a:51:7e:06:91:a9:17:9f:e3:52:7d:ab:f5:
d7:88:4e:94:13:3d:74:fb:6c:8c:52:b2:f7:71:52:
03:26:d5:bb:85:01:75:a9:93:d0:5c:b0:50:5c:ca:
0c:30:d2:ba:48:80:2a:b3:37:b4:78:76:71:98:f7:
34:bb:33:c0:4a:a9:df:7a:ce:65:7f:58:f0:fc:0a:
92:83:65:39:e3:68:78:23:88:5f:ef:13:6f:1e:28:
54:57:49:02:36:7b:38:64:3a:b0:7a:40:ea:8c:af:
fd:5f:1e:0b:55:5f:ae:cf:de:0d:e2:8f:71:2a:fc:
d2:b8:f8:65:aa:d4:bd:18:4b:9c:86:24:8f:b1:7e:
3f:1d:d8:73:28:bd:ca:bf:d3:9d:a5:ea:0a:6e:92:
ae:cb:59:a6:2e:31:51:f3:94:1b:20:f4:1e:10:04:
3d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A7:8F:F8:FD:98:88:34:41:73:C0:24:87:2E:A2:B6:E2:0A:9E:D2
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/6KeP-P2YiDRBc8Akhy6ituIKntI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.92.0/22
Signature Algorithm: sha256WithRSAEncryption
97:21:41:26:7d:35:f5:d5:0d:6d:0d:db:95:5f:b9:8f:d2:01:
2b:6b:d2:8c:b6:70:b9:e9:a5:8b:05:2c:e2:a5:5c:8d:94:5a:
98:b9:c8:c6:92:ff:99:a8:7d:32:53:2b:62:69:14:fd:ef:98:
3f:13:90:5b:c1:38:3f:1b:62:f7:9e:8f:bb:71:6a:79:bb:f0:
74:1a:0a:a8:47:e9:2a:9b:29:a8:9a:ad:f0:69:8b:e4:b7:7f:
d2:fe:e9:3c:7f:6f:5f:5f:52:63:43:63:03:3a:00:1b:5e:b5:
b2:13:9d:9c:e7:0b:79:c5:a4:b3:74:d4:bc:3e:b6:76:42:be:
09:4a:7c:ad:d3:5d:98:c2:c6:cf:d8:4b:85:68:7e:f7:d6:c4:
c7:b5:f7:8a:92:c8:21:c2:24:b8:04:ae:53:08:da:de:66:06:
54:45:93:79:f8:e2:d4:08:28:7f:2f:0d:05:5f:a8:82:e4:48:
8e:9b:8e:b9:dd:f7:4e:86:7f:45:9c:d0:ef:fe:73:6e:d4:19:
d2:39:26:ca:fb:a0:b5:d9:45:b5:df:d4:9b:ed:1a:b3:1d:83:
48:1c:e1:5f:87:80:ad:e9:0d:70:0c:26:e4:60:a9:61:c7:76:
43:f9:62:f4:86:9e:05:a4:7e:13:19:4a:d7:e8:45:dd:43:f3:
ea:86:ad:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDTJ3iOtPXIVCY6orb+F4fDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj
YzE5NDEwHhcNMjYwOTI0MTEyMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGE3OGZmOGZkOTg4ODM0NDE3M2MwMjQ4NzJlYTJiNmUyMGE5ZWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsUTeu1Wqu5NTCK4VdQ+jd7F36zD
mQVodHw/qMFiAVrsI4NGYXVrUmGiud9OrrBwumpYiI3pCvZ7j0U/nhgseaAQeWzt
eownxPkv+8wO/CNmHOBzwoYoFkD8BGpRfgaRqRef41J9q/XXiE6UEz10+2yMUrL3
cVIDJtW7hQF1qZPQXLBQXMoMMNK6SIAqsze0eHZxmPc0uzPASqnfes5lf1jw/AqS
g2U542h4I4hf7xNvHihUV0kCNns4ZDqwekDqjK/9Xx4LVV+uz94N4o9xKvzSuPhl
qtS9GEuchiSPsX4/HdhzKL3Kv9OdpeoKbpKuy1mmLjFR85QbIPQeEAQ9kwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOinj/j9mIg0QXPAJIcuorbiCp7SMB8GA1UdIwQY
MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt
NmZlNGQ4ZmVkMTYwLzEvNktlUC1QMllpRFJCYzhBa2h5Nml0dUlLbnRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw
LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVe1cMA0G
CSqGSIb3DQEBCwUAA4IBAQCXIUEmfTX11Q1tDduVX7mP0gEra9KMtnC56aWLBSzi
pVyNlFqYucjGkv+ZqH0yUytiaRT975g/E5BbwTg/G2L3no+7cWp5u/B0GgqoR+kq
mymomq3waYvkt3/S/uk8f29fX1JjQ2MDOgAbXrWyE52c5wt5xaSzdNS8PrZ2Qr4J
Snyt012YwsbP2EuFaH731sTHtfeKksghwiS4BK5TCNreZgZURZN5+OLUCCh/Lw0F
X6iC5EiOm4653fdOhn9FnNDv/nNu1BnSOSbK+6C12UW139Sb7RqzHYNIHOFfh4Ct
6Q1wDCbkYKlhx3ZD+WL0hp4FpH4TGUrX6EXdQ/Pqhq2B
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:26:27 2026 by rpki-client