Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/TL6-YQoL6bM9YzZkFooupL9SKZc.roa
File: TL6-YQoL6bM9YzZkFooupL9SKZc.roa (raw, json)
Hash identifier: fDKbKxnCCglM7bDeEH0JDX6y2HKlL0aR2oegXj3HyjY=
Subject key identifier: 4C:BE:BE:61:0A:0B:E9:B3:3D:63:36:64:16:8A:2E:A4:BF:52:29:97
Certificate issuer: /CN=a4f8436003d37602026b65531755ca8fcd31bed2
Certificate serial: 019DDD345ADC5C5F4062540830D550B34F1F
Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/TL6-YQoL6bM9YzZkFooupL9SKZc.roa
Signing time: Thu 30 Apr 2026 07:04:49 +0000
ROA not before: Thu 30 Apr 2026 07:04:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6797
IP address blocks: 46.32.156.0/22 maxlen: 22
62.12.32.0/20 maxlen: 20
62.12.48.0/21 maxlen: 21
87.104.192.0/19 maxlen: 19
87.104.233.0/24 maxlen: 24
87.104.234.0/23 maxlen: 23
87.104.236.0/22 maxlen: 22
91.198.227.0/24 maxlen: 24
195.93.182.0/23 maxlen: 23
2a02:189::/32 maxlen: 32
2a02:18f::/32 maxlen: 32
2a02:460::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:34:5a:dc:5c:5f:40:62:54:08:30:d5:50:b3:4f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2
Validity
Not Before: Apr 30 07:04:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4cbebe610a0be9b33d633664168a2ea4bf522997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0b:8c:3d:89:25:9a:7e:5c:f6:75:61:82:5b:
f1:36:fe:c0:d7:97:e6:a1:ca:4f:89:ce:c0:66:6d:
9c:06:a7:d7:69:e3:b1:a3:56:e8:3c:2d:0d:49:db:
35:08:19:77:c2:3c:e0:ea:b4:97:51:bc:69:d4:e9:
d6:b0:1e:eb:19:c8:30:f0:d5:41:27:60:6e:1a:9a:
ee:e4:bd:cc:1f:1f:92:75:70:5e:fd:ee:a4:6f:09:
59:06:ac:4f:3d:59:33:8f:ed:92:a9:66:a3:62:8c:
e7:68:8d:42:c9:b4:b3:e4:4e:33:94:39:12:16:37:
64:1b:cf:d3:06:a1:6d:25:73:23:5f:8e:6f:8c:e9:
f0:3f:55:7a:d5:bd:92:98:2c:3e:16:62:f9:12:f3:
73:56:39:06:8c:87:c2:5c:51:f0:b5:58:47:02:55:
50:59:d0:7d:3f:d2:32:8d:98:88:d1:4c:d0:a3:af:
99:32:03:f8:15:f2:3b:ad:66:c8:b1:87:4f:b0:2b:
f1:b1:64:66:15:43:1b:38:cd:e2:20:df:3c:f9:19:
16:98:47:eb:49:47:b0:4c:da:fc:a6:d6:a2:42:f3:
17:99:9a:3e:b4:e0:40:3c:63:b3:13:f4:26:a7:04:
33:e2:9b:08:2b:62:f7:d8:b3:90:33:6e:1c:97:34:
60:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BE:BE:61:0A:0B:E9:B3:3D:63:36:64:16:8A:2E:A4:BF:52:29:97
X509v3 Authority Key Identifier:
keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/TL6-YQoL6bM9YzZkFooupL9SKZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.156.0/22
62.12.32.0-62.12.55.255
87.104.192.0/19
87.104.233.0-87.104.239.255
91.198.227.0/24
195.93.182.0/23
IPv6:
2a02:189::/32
2a02:18f::/32
2a02:460::/32
Signature Algorithm: sha256WithRSAEncryption
05:c3:a7:a4:99:84:d2:52:a8:7f:0c:60:25:e4:90:6e:86:10:
7b:6b:6f:a2:ff:6a:df:fb:f1:e9:26:74:7b:02:02:b9:ba:58:
d0:15:f6:a1:a4:8b:8a:15:a9:bc:09:dc:a3:98:0b:fa:10:9d:
c1:b4:73:43:99:95:6c:ac:55:52:a2:72:a9:27:01:c7:df:34:
f1:a1:90:47:3b:93:98:ba:c4:12:4d:c9:25:01:43:26:f3:8d:
05:b1:b6:4c:e8:ca:ce:b4:8f:32:fa:8b:8c:b1:e1:05:de:79:
fa:13:dc:b7:09:15:2b:3c:59:85:30:d8:71:ad:70:9e:4a:8b:
cd:ae:d2:5d:53:0d:d7:df:b3:89:44:65:d1:6c:3d:32:b9:49:
dd:bb:7b:3f:b0:45:4b:a1:1b:8b:cb:31:3a:61:cc:d2:26:40:
7d:39:1d:20:d6:09:37:c1:31:15:9c:a1:80:77:9c:a4:46:3d:
b0:7f:e9:88:2e:63:bf:be:4a:c3:85:b3:a8:24:8e:c2:61:44:
4a:6c:b2:94:b2:3c:42:58:67:52:4b:4c:3a:e2:4c:8b:31:c1:
b1:7d:34:f1:3f:37:1c:ee:24:96:e4:ef:a4:03:c8:30:e4:3f:
75:a8:a9:26:e4:6f:31:82:a4:c7:10:b1:8c:b3:ad:cf:11:9a:
48:79:fa:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:57:59 2026 by rpki-client