Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/Kp93iY_uliKYmU6c9xEtu5f-BQo.roa
File: Kp93iY_uliKYmU6c9xEtu5f-BQo.roa (raw, json)
Hash identifier: C9FegRQ0ESoCCgb0n8QGxupWUeF2kAecgsON99ku+TI=
Subject key identifier: 2A:9F:77:89:8F:EE:96:22:98:99:4E:9C:F7:11:2D:BB:97:FE:05:0A
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 01A0D3CB5A87EC2054168E14D223AD633214
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/Kp93iY_uliKYmU6c9xEtu5f-BQo.roa
Signing time: Thu 24 Sep 2026 14:21:54 +0000
ROA not before: Thu 24 Sep 2026 14:21:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198969
IP address blocks: 206.15.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:cb:5a:87:ec:20:54:16:8e:14:d2:23:ad:63:32:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Sep 24 14:21:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a9f77898fee962298994e9cf7112dbb97fe050a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:87:ed:cb:f7:68:35:9a:6f:ac:69:75:b7:6c:
42:4b:c0:86:36:a4:fc:c7:89:8c:48:2e:e5:45:3b:
24:bd:f6:f4:2e:57:d4:fd:26:70:2f:8f:0b:81:d1:
62:7a:c3:da:48:26:86:aa:93:d1:12:67:37:da:72:
67:a7:56:d7:cb:86:5e:33:0a:d2:c9:de:7a:37:34:
e7:12:2d:33:76:e7:80:e1:dc:37:48:3f:4f:87:84:
d9:9b:37:c2:21:89:15:ab:0a:b3:83:14:5d:0a:f1:
4f:f8:9b:3a:ff:72:7d:1e:29:d4:67:51:80:f1:4c:
80:81:d5:b9:af:71:68:ce:34:af:5a:f9:9f:6d:3d:
27:36:a0:1d:c8:e4:39:a7:04:ec:dd:e6:ba:3b:93:
2b:4c:f9:46:ae:fe:44:3f:3b:3c:61:96:f0:7d:18:
d5:bc:1e:23:ec:84:30:12:eb:df:97:c6:c9:15:b5:
bd:53:25:8a:11:ce:4a:04:c2:29:9b:61:08:aa:bd:
62:0c:5c:f8:8e:b9:35:53:be:fe:01:3a:7c:57:dd:
7b:7f:22:79:c5:f6:1e:c1:1a:f6:3b:27:6f:5c:3f:
2b:72:4d:d8:5a:53:86:24:31:1e:91:07:fd:b1:af:
8f:21:99:fd:0c:91:3a:84:cc:ab:48:11:5d:1e:3f:
21:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9F:77:89:8F:EE:96:22:98:99:4E:9C:F7:11:2D:BB:97:FE:05:0A
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/Kp93iY_uliKYmU6c9xEtu5f-BQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.15.52.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:b9:67:b8:7b:61:5c:6c:bd:c4:a0:98:8d:c1:e0:89:b2:eb:
6c:56:63:12:5b:cc:36:1c:6f:34:33:ab:c2:2a:67:8d:57:40:
35:59:3d:d6:72:2c:b5:90:cc:55:b0:8c:df:a1:c7:bd:8c:a0:
07:c3:30:b4:11:07:2e:d0:b2:b4:19:b9:b7:c6:7c:46:d5:10:
0e:96:33:9e:a0:0e:93:ab:96:f7:24:1b:a8:53:a8:2a:36:f1:
54:92:b6:e7:03:59:b4:c3:da:b3:95:54:27:8d:b8:7f:c5:5b:
49:70:6b:2f:67:93:a0:bd:e8:82:50:e7:19:e1:3d:28:0a:19:
b1:11:9c:e4:14:9f:00:d9:a9:02:0f:1f:7c:9a:05:e1:87:27:
d9:9b:5b:2f:5c:b6:b2:56:d5:c8:bd:59:3e:e5:72:26:ff:7d:
d1:61:16:e6:be:17:11:99:70:1e:d5:97:51:f1:09:aa:02:33:
1e:8a:b8:c8:53:d4:50:45:c5:9d:da:72:9b:17:93:b6:0f:26:
b4:c5:62:62:88:be:bb:aa:be:25:73:fc:8f:80:bd:c5:59:86:
db:78:4a:5e:a0:6c:dc:3e:e9:46:8e:3b:97:75:35:01:a2:f2:
06:c3:03:9e:b9:63:12:e8:b1:54:82:f5:02:d6:07:b6:f4:d0:
2f:68:55:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDTy1qH7CBUFo4U0iOtYzIUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz
OGM4ZTEwHhcNMjYwOTI0MTQyMTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTlmNzc4OThmZWU5NjIyOTg5OTRlOWNmNzExMmRiYjk3ZmUwNTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIfty/doNZpvrGl1t2xCS8CGNqT8
x4mMSC7lRTskvfb0LlfU/SZwL48LgdFiesPaSCaGqpPREmc32nJnp1bXy4ZeMwrS
yd56NzTnEi0zdueA4dw3SD9Ph4TZmzfCIYkVqwqzgxRdCvFP+Js6/3J9HinUZ1GA
8UyAgdW5r3FozjSvWvmfbT0nNqAdyOQ5pwTs3ea6O5MrTPlGrv5EPzs8YZbwfRjV
vB4j7IQwEuvfl8bJFbW9UyWKEc5KBMIpm2EIqr1iDFz4jrk1U77+ATp8V917fyJ5
xfYewRr2OydvXD8rck3YWlOGJDEekQf9sa+PIZn9DJE6hMyrSBFdHj8hEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCqfd4mP7pYimJlOnPcRLbuX/gUKMB8GA1UdIwQY
MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt
MzBjOWRlMjA1YWZjLzEvS3A5M2lZX3VsaUtZbVU2Yzl4RXR1NWYtQlFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj
LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzg80MA0G
CSqGSIb3DQEBCwUAA4IBAQB9uWe4e2FcbL3EoJiNweCJsutsVmMSW8w2HG80M6vC
KmeNV0A1WT3Wciy1kMxVsIzfoce9jKAHwzC0EQcu0LK0Gbm3xnxG1RAOljOeoA6T
q5b3JBuoU6gqNvFUkrbnA1m0w9qzlVQnjbh/xVtJcGsvZ5OgveiCUOcZ4T0oChmx
EZzkFJ8A2akCDx98mgXhhyfZm1svXLayVtXIvVk+5XIm/33RYRbmvhcRmXAe1ZdR
8QmqAjMeirjIU9RQRcWd2nKbF5O2Dya0xWJiiL67qr4lc/yPgL3FWYbbeEpeoGzc
PulGjjuXdTUBovIGwwOeuWMS6LFUgvUC1ge29NAvaFX/
-----END CERTIFICATE-----
Generated at Mon Oct 5 06:57:21 2026 by rpki-client