Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/H6M_InTSfVSn-OrNGGPHtf16a84.roa
File: H6M_InTSfVSn-OrNGGPHtf16a84.roa (raw, json)
Hash identifier: 67LBTnOipV4/GHI9IH+2paCeB2Zya21UUa/eX3d6cWc=
Subject key identifier: 1F:A3:3F:22:74:D2:7D:54:A7:F8:EA:CD:18:63:C7:B5:FD:7A:6B:CE
Certificate issuer: /CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Certificate serial: 01A0E24CBAA4C7CC1C7B74AC0D2B837C9817
Authority key identifier: 19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/H6M_InTSfVSn-OrNGGPHtf16a84.roa
Signing time: Sun 27 Sep 2026 09:57:54 +0000
ROA not before: Sun 27 Sep 2026 09:57:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402857
IP address blocks: 185.133.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:4c:ba:a4:c7:cc:1c:7b:74:ac:0d:2b:83:7c:98:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b390b62d09950d500cd6bbbd78d0390560ec42
Validity
Not Before: Sep 27 09:57:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1fa33f2274d27d54a7f8eacd1863c7b5fd7a6bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1d:a7:67:38:b3:f1:06:42:88:51:85:2b:f6:
a3:24:96:d9:3a:50:c6:7f:67:08:03:48:a8:c3:07:
c9:c1:8f:e1:3d:de:69:7e:03:19:65:6e:5c:76:67:
60:cd:ee:a1:7c:55:68:b1:ca:9e:96:81:43:2a:fd:
7b:f7:65:62:0f:cf:6d:2a:7a:a9:5a:98:64:d1:e7:
08:fa:cc:fa:5a:68:dc:ac:19:27:41:49:3e:4d:d1:
b6:0a:21:c5:e9:c6:0e:87:28:81:74:d7:7d:a8:0a:
0b:0b:f3:11:83:e1:eb:ad:d8:2b:be:f4:09:cc:a2:
51:44:52:ca:35:4b:f3:4a:db:87:7b:61:5c:13:5f:
31:2f:7b:ea:81:89:2a:e7:2e:36:ee:f3:99:2e:97:
e5:83:c7:8e:8f:80:42:1f:6f:f3:73:cd:b2:64:7f:
9c:e3:be:0c:87:8b:da:2d:05:13:4d:c8:27:42:25:
31:c3:17:74:fe:28:e2:7d:06:6f:d6:46:9f:59:39:
49:8a:eb:3a:79:40:5d:05:b6:d7:b2:9b:50:84:c3:
13:8d:35:88:cd:01:1d:d3:bc:a5:53:2f:8e:c9:05:
55:f4:53:e5:3e:15:49:c3:bf:67:88:0e:24:1f:4e:
ca:65:75:89:16:2b:a3:58:b3:87:27:0b:d4:00:71:
6a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A3:3F:22:74:D2:7D:54:A7:F8:EA:CD:18:63:C7:B5:FD:7A:6B:CE
X509v3 Authority Key Identifier:
keyid:19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/H6M_InTSfVSn-OrNGGPHtf16a84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.243.0/24
Signature Algorithm: sha256WithRSAEncryption
55:f2:1b:63:96:dc:60:a7:a4:d4:61:cf:b3:d1:cf:df:1a:08:
0a:ad:8c:1f:ff:48:00:71:e1:38:0f:6c:3e:2a:23:78:23:72:
4d:3a:3f:c7:ba:8e:60:a7:d8:f9:55:c8:ba:49:a6:27:3f:e8:
3a:3a:f1:0e:d9:b3:d9:ec:c9:73:66:c4:1b:48:3a:3c:04:ed:
7d:36:3f:54:4a:6c:55:38:0d:ae:a8:fc:af:ff:07:80:2e:c2:
e4:88:97:36:72:4b:58:fc:7a:27:e0:c4:d1:dc:23:fb:8a:53:
59:87:4d:9b:8b:d2:65:0f:da:7c:c0:97:a6:c7:c6:77:4b:10:
05:d8:8a:a6:4b:7e:39:ac:10:c9:b8:b5:0c:b7:09:17:77:0e:
35:ba:e2:3f:fd:59:b8:0b:68:3c:20:46:34:62:13:dd:8f:37:
01:39:dd:66:dc:0c:7f:4b:49:1a:09:e2:da:d7:3e:0f:90:d4:
85:ee:ea:54:40:79:72:d2:72:f8:91:f3:ce:38:f2:fb:c1:28:
19:fc:7d:8d:b7:fc:08:f1:8e:77:03:40:05:01:e6:3e:ab:d6:
9c:f4:83:b2:9f:f5:cc:d2:84:ca:1b:eb:41:3a:fd:b6:bd:bc:
78:d9:30:0b:9b:df:76:c1:0b:e6:dc:22:84:c0:fd:5f:9c:27:
7d:ab:53:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDiTLqkx8wce3SsDSuDfJgXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YjM5MGI2MmQwOTk1MGQ1MDBjZDZiYmJkNzhkMDM5MDU2
MGVjNDIwHhcNMjYwOTI3MDk1NzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmEzM2YyMjc0ZDI3ZDU0YTdmOGVhY2QxODYzYzdiNWZkN2E2YmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB2nZziz8QZCiFGFK/ajJJbZOlDG
f2cIA0iowwfJwY/hPd5pfgMZZW5cdmdgze6hfFVoscqeloFDKv1792ViD89tKnqp
Wphk0ecI+sz6WmjcrBknQUk+TdG2CiHF6cYOhyiBdNd9qAoLC/MRg+HrrdgrvvQJ
zKJRRFLKNUvzStuHe2FcE18xL3vqgYkq5y427vOZLpflg8eOj4BCH2/zc82yZH+c
474Mh4vaLQUTTcgnQiUxwxd0/ijifQZv1kafWTlJius6eUBdBbbXsptQhMMTjTWI
zQEd07ylUy+OyQVV9FPlPhVJw79niA4kH07KZXWJFiujWLOHJwvUAHFqjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB+jPyJ00n1Up/jqzRhjx7X9emvOMB8GA1UdIwQY
MBaAFBmzkLYtCZUNUAzWu7140DkFYOxCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2JPUXRpMEpsUTFRRE5hN3ZYalFPUVZnN0VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iMzE1ODYtMzU2Ni00N2IwLTk1Y2Mt
MTQ0ZDc0NzNlYTU5LzEvSDZNX0luVFNmVlNuLU9yTkdHUEh0ZjE2YTg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9iMzE1ODYtMzU2Ni00N2IwLTk1Y2MtMTQ0ZDc0NzNlYTU5
LzEvR2JPUXRpMEpsUTFRRE5hN3ZYalFPUVZnN0VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYXzMA0G
CSqGSIb3DQEBCwUAA4IBAQBV8htjltxgp6TUYc+z0c/fGggKrYwf/0gAceE4D2w+
KiN4I3JNOj/Huo5gp9j5Vci6SaYnP+g6OvEO2bPZ7MlzZsQbSDo8BO19Nj9USmxV
OA2uqPyv/weALsLkiJc2cktY/Hon4MTR3CP7ilNZh02bi9JlD9p8wJemx8Z3SxAF
2IqmS345rBDJuLUMtwkXdw41uuI//Vm4C2g8IEY0YhPdjzcBOd1m3Ax/S0kaCeLa
1z4PkNSF7upUQHly0nL4kfPOOPL7wSgZ/H2Nt/wI8Y53A0AFAeY+q9ac9IOyn/XM
0oTKG+tBOv22vbx42TALm992wQvm3CKEwP1fnCd9q1MC
-----END CERTIFICATE-----
Generated at Wed Oct 7 21:14:32 2026 by rpki-client