Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/YWHo5t3qsIV-YcDPscKKaGXwOUc.roa
File: YWHo5t3qsIV-YcDPscKKaGXwOUc.roa (raw, json)
Hash identifier: YeuDjYz0EVdQJ8wfjT9BwS3wsUZ7Dt0FpurFin5hsZY=
Subject key identifier: 61:61:E8:E6:DD:EA:B0:85:7E:61:C0:CF:B1:C2:8A:68:65:F0:39:47
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 01A17DA45B4CB37442EF66418BED64F7A060
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/YWHo5t3qsIV-YcDPscKKaGXwOUc.roa
Signing time: Tue 27 Oct 2026 13:54:45 +0000
ROA not before: Tue 27 Oct 2026 13:54:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 206.15.50.0/24 maxlen: 24
206.15.51.0/24 maxlen: 24
206.15.52.0/24 maxlen: 24
206.15.54.0/24 maxlen: 24
206.15.55.0/24 maxlen: 24
206.15.56.0/24 maxlen: 24
206.15.57.0/24 maxlen: 24
206.15.58.0/24 maxlen: 24
206.15.59.0/24 maxlen: 24
206.15.60.0/24 maxlen: 24
206.15.61.0/24 maxlen: 24
206.15.62.0/24 maxlen: 24
206.15.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:a4:5b:4c:b3:74:42:ef:66:41:8b:ed:64:f7:a0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Oct 27 13:54:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6161e8e6ddeab0857e61c0cfb1c28a6865f03947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:72:20:c7:b2:cb:43:ce:fd:16:48:69:0d:30:
9e:d9:7d:91:6e:54:3d:d5:bc:9b:dd:c0:70:a3:46:
08:d0:d3:af:2b:c4:ea:a1:4b:4d:50:4e:1e:e3:39:
0b:39:bb:28:7a:21:68:60:10:69:3b:d7:0a:ac:d2:
09:fb:75:c5:1f:c3:89:f8:28:3c:a7:56:ca:94:ac:
23:f2:34:2f:db:54:43:a9:83:fb:2d:b6:d0:7e:cc:
53:44:04:57:7f:d7:1c:ac:c3:49:15:bf:83:07:89:
17:9c:94:e7:6f:7f:f3:13:ba:ea:91:15:b6:5a:cf:
18:56:ba:8e:9e:84:be:87:52:e6:00:fd:83:4b:bf:
f4:a7:fd:28:97:2e:40:11:c8:05:d1:2c:1e:e2:f9:
14:ac:ea:92:4a:cb:36:25:b1:7a:5c:88:0c:08:d2:
c6:33:22:fe:58:e7:48:59:5b:1f:dc:0a:f1:60:f6:
9a:f7:ce:3d:f6:4b:c0:35:74:a2:51:1b:de:0d:30:
b4:cb:91:f3:f8:85:20:eb:89:19:0c:79:30:e6:72:
68:e0:db:16:c1:91:ac:c5:3c:85:d9:93:96:7b:5b:
9b:ef:6c:33:53:9b:1a:03:8a:70:39:49:5d:a7:2f:
45:e4:63:30:2d:6a:07:e0:09:e2:bb:70:21:5a:cd:
64:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:61:E8:E6:DD:EA:B0:85:7E:61:C0:CF:B1:C2:8A:68:65:F0:39:47
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/YWHo5t3qsIV-YcDPscKKaGXwOUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.15.50.0-206.15.52.255
206.15.54.0-206.15.63.255
Signature Algorithm: sha256WithRSAEncryption
70:16:6e:6f:ef:d5:c9:ab:07:1a:46:31:b8:2a:c7:e8:1f:31:
cc:cc:80:69:5f:e3:6a:ee:53:3f:70:ab:c8:71:f9:b0:26:cb:
3e:ba:a2:20:4b:5b:1e:ff:6b:9a:69:8a:64:02:d3:31:91:4f:
73:a6:3e:82:24:dd:19:6f:44:e4:8d:5a:53:1b:23:89:b7:57:
3f:03:24:56:67:a3:f7:84:c4:b4:7e:eb:98:1f:30:64:09:42:
8b:1f:33:83:dc:b9:85:18:f1:6e:13:3a:07:7c:2e:bd:31:d5:
55:65:59:89:f6:16:1b:5f:c1:69:25:fd:04:86:b1:0c:9e:a0:
92:17:d4:c7:ea:de:26:e7:14:c1:7e:da:0d:a3:6c:61:54:f2:
a2:4c:20:88:b6:25:51:20:1c:21:54:61:4c:b6:2c:c0:d7:08:
37:4f:55:68:12:d3:ae:f8:82:e4:ab:a0:26:36:4a:13:5a:2b:
19:19:a6:1c:e9:7b:6f:50:44:de:15:70:b3:47:5d:a3:b6:fe:
16:b5:a7:9f:3b:42:8c:88:07:55:c9:6c:5d:18:09:c7:38:a2:
43:72:a6:8f:45:cc:f8:82:79:2e:29:79:ab:56:38:f9:1e:77:
8f:14:c6:93:90:42:d8:4a:a9:60:1d:53:06:0e:90:da:cc:f4:
de:42:54:3c
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAaF9pFtMs3RC72ZBi+1k96BgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz
OGM4ZTEwHhcNMjYxMDI3MTM1NDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTYxZThlNmRkZWFiMDg1N2U2MWMwY2ZiMWMyOGE2ODY1ZjAzOTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3Igx7LLQ879FkhpDTCe2X2RblQ9
1byb3cBwo0YI0NOvK8TqoUtNUE4e4zkLObsoeiFoYBBpO9cKrNIJ+3XFH8OJ+Cg8
p1bKlKwj8jQv21RDqYP7LbbQfsxTRARXf9ccrMNJFb+DB4kXnJTnb3/zE7rqkRW2
Ws8YVrqOnoS+h1LmAP2DS7/0p/0oly5AEcgF0Swe4vkUrOqSSss2JbF6XIgMCNLG
MyL+WOdIWVsf3ArxYPaa98499kvANXSiURveDTC0y5Hz+IUg64kZDHkw5nJo4NsW
wZGsxTyF2ZOWe1ub72wzU5saA4pwOUldpy9F5GMwLWoH4Aniu3AhWs1kVQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFGFh6Obd6rCFfmHAz7HCimhl8DlHMB8GA1UdIwQY
MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt
MzBjOWRlMjA1YWZjLzEvWVdIbzV0M3FzSVYtWWNEUHNjS0thR1h3T1VjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj
LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAHODzID
BADODzQwDAMEAc4PNgMEBs4PADANBgkqhkiG9w0BAQsFAAOCAQEAcBZub+/VyasH
GkYxuCrH6B8xzMyAaV/jau5TP3CryHH5sCbLPrqiIEtbHv9rmmmKZALTMZFPc6Y+
giTdGW9E5I1aUxsjibdXPwMkVmej94TEtH7rmB8wZAlCix8zg9y5hRjxbhM6B3wu
vTHVVWVZifYWG1/BaSX9BIaxDJ6gkhfUx+reJucUwX7aDaNsYVTyokwgiLYlUSAc
IVRhTLYswNcIN09VaBLTrviC5KugJjZKE1orGRmmHOl7b1BE3hVws0ddo7b+FrWn
nztCjIgHVclsXRgJxziiQ3Kmj0XM+IJ5Lil5q1Y4+R53jxTGk5BC2EqpYB1TBg6Q
2sz03kJUPA==
-----END CERTIFICATE-----
Generated at Thu Nov 5 06:13:04 2026 by rpki-client