Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/hr6KKW3gkx0Rqd2xi4SSwYOvYAo.roa
File: hr6KKW3gkx0Rqd2xi4SSwYOvYAo.roa (raw, json)
Hash identifier: AW1B3GU+CHp2dLnlTMaUnh9So+6olkFuGvAvVFpBybo=
Subject key identifier: 86:BE:8A:29:6D:E0:93:1D:11:A9:DD:B1:8B:84:92:C1:83:AF:60:0A
Certificate issuer: /CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Certificate serial: 019F23684194C6A16370CD25AF03C7D9F16C
Authority key identifier: 6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/hr6KKW3gkx0Rqd2xi4SSwYOvYAo.roa
Signing time: Thu 02 Jul 2026 15:17:42 +0000
ROA not before: Thu 02 Jul 2026 15:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 86.110.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Jul 2026 03:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:41:94:c6:a1:63:70:cd:25:af:03:c7:d9:f1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Validity
Not Before: Jul 2 15:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86be8a296de0931d11a9ddb18b8492c183af600a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:80:5e:a2:b3:da:c5:9c:b4:16:b0:af:2d:93:
3f:f4:25:53:60:de:e7:04:d6:e5:c7:73:a7:e8:50:
ec:8b:ae:15:a9:7a:ac:31:b3:cb:e2:c1:7f:3f:81:
de:7f:9d:0c:29:9f:80:28:55:80:5d:8c:91:94:b4:
e9:f4:5e:ae:1f:29:0a:98:01:c5:db:c8:9f:4c:66:
60:9f:d2:1a:61:3b:b8:c1:e6:02:75:4a:c3:6d:94:
a9:0e:ac:ba:fc:69:b4:a1:47:22:b9:1a:21:49:48:
bd:09:05:02:87:c6:76:b7:3c:25:8f:4a:c6:0a:4e:
8e:6b:51:69:c5:bd:4a:8a:93:bc:04:43:83:3e:b3:
7e:a2:9a:4d:a8:d2:f8:88:59:83:7b:59:c1:a0:10:
7c:20:cd:2b:fa:1b:c5:22:f7:1a:ff:7b:9d:f9:1f:
7c:30:e7:eb:91:68:b9:02:b1:44:f1:98:42:30:6f:
5a:81:51:f8:5e:1b:8f:30:ae:b1:07:19:58:aa:3f:
0e:1e:62:a0:7b:bb:a4:b4:63:8d:91:64:4b:81:de:
d9:fa:20:f7:91:25:b3:4b:a5:b5:29:45:e2:2f:a7:
99:61:17:38:e7:2c:2a:c2:3d:db:86:08:b1:fc:9f:
b9:32:62:50:2a:4f:a6:4f:e3:3d:82:70:67:d5:12:
d8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BE:8A:29:6D:E0:93:1D:11:A9:DD:B1:8B:84:92:C1:83:AF:60:0A
X509v3 Authority Key Identifier:
keyid:6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/hr6KKW3gkx0Rqd2xi4SSwYOvYAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.57.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:84:9c:74:b3:96:a1:4c:af:01:20:0f:98:b2:59:8f:74:ea:
50:ca:f0:2d:a0:9c:72:6d:18:e6:0d:83:0f:c8:e8:33:ea:9c:
bb:80:d2:8a:24:00:20:3f:76:87:2f:f7:cf:96:c1:d3:be:6f:
55:cc:69:7d:5d:1f:fc:7a:2e:d4:5a:ed:58:46:0f:83:8e:df:
e0:29:63:c8:06:61:77:a2:9c:64:a2:96:ea:77:9b:29:c8:9d:
1c:25:41:24:89:3c:0d:60:3d:86:ba:20:c6:71:58:0e:12:7a:
71:23:d8:fa:87:ad:3a:15:f1:21:9c:f0:15:e2:52:fe:ab:2b:
fa:2e:83:61:c8:c3:b7:37:8f:3e:c8:e8:56:7a:73:c0:a7:97:
bd:c2:ba:7b:11:01:94:ee:97:26:51:52:bc:40:8b:70:ab:95:
fb:6a:29:8d:f9:54:06:c3:23:02:9e:4c:dd:b6:f6:32:60:89:
68:4b:6c:f2:f2:2b:68:56:2d:7d:51:b8:0c:14:fe:4c:68:98:
57:67:cf:85:5f:04:33:d0:68:f5:e9:05:61:d8:15:5a:24:73:
50:89:77:0d:0a:af:09:7d:c0:94:1b:38:35:b4:2f:01:3d:05:
0e:f1:fe:b0:4e:80:c3:21:16:dc:19:90:5b:2f:56:2a:e8:c4:
49:d5:7c:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaEGUxqFjcM0lrwPH2fFsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMGUxNmNjMmE4YjkxY2I0ODNmNDUxZTgxM2I2NzhhZTk3
NTgyYjAwHhcNMjYwNzAyMTUxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmJlOGEyOTZkZTA5MzFkMTFhOWRkYjE4Yjg0OTJjMTgzYWY2MDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYBeorPaxZy0FrCvLZM/9CVTYN7n
BNblx3On6FDsi64VqXqsMbPL4sF/P4Hef50MKZ+AKFWAXYyRlLTp9F6uHykKmAHF
28ifTGZgn9IaYTu4weYCdUrDbZSpDqy6/Gm0oUciuRohSUi9CQUCh8Z2tzwlj0rG
Ck6Oa1Fpxb1KipO8BEODPrN+oppNqNL4iFmDe1nBoBB8IM0r+hvFIvca/3ud+R98
MOfrkWi5ArFE8ZhCMG9agVH4XhuPMK6xBxlYqj8OHmKge7uktGONkWRLgd7Z+iD3
kSWzS6W1KUXiL6eZYRc45ywqwj3bhgix/J+5MmJQKk+mT+M9gnBn1RLYHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIa+iilt4JMdEandsYuEksGDr2AKMB8GA1UdIwQY
MBaAFGoOFswqi5HLSD9FHoE7Z4rpdYKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWc0V3pDcUxrY3RJUDBVZWdUdG5pdWwxZ3JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt
ZDFhNzc3MmRiMDc2LzEvaHI2S0tXM2dreDBScWQyeGk0U1N3WU92WUFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2
LzEvYWc0V3pDcUxrY3RJUDBVZWdUdG5pdWwxZ3JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm45MA0G
CSqGSIb3DQEBCwUAA4IBAQCbhJx0s5ahTK8BIA+YslmPdOpQyvAtoJxybRjmDYMP
yOgz6py7gNKKJAAgP3aHL/fPlsHTvm9VzGl9XR/8ei7UWu1YRg+Djt/gKWPIBmF3
opxkopbqd5spyJ0cJUEkiTwNYD2GuiDGcVgOEnpxI9j6h606FfEhnPAV4lL+qyv6
LoNhyMO3N48+yOhWenPAp5e9wrp7EQGU7pcmUVK8QItwq5X7aimN+VQGwyMCnkzd
tvYyYIloS2zy8itoVi19UbgMFP5MaJhXZ8+FXwQz0Gj16QVh2BVaJHNQiXcNCq8J
fcCUGzg1tC8BPQUO8f6wToDDIRbcGZBbL1Yq6MRJ1Xwz
-----END CERTIFICATE-----
Generated at Sat Jul 4 09:19:57 2026 by rpki-client