Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/gFnSYExosWORufIRtLpKLOHGnuw.roa
File: gFnSYExosWORufIRtLpKLOHGnuw.roa (raw, json)
Hash identifier: 3yvPJUqSbLs/JITNOHoGmZnrzFIDl+3H/JB4K+j8KTA=
Subject key identifier: 80:59:D2:60:4C:68:B1:63:91:B9:F2:11:B4:BA:4A:2C:E1:C6:9E:EC
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 01A0B49EE49D49459E895E59CC3EC706D908
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/gFnSYExosWORufIRtLpKLOHGnuw.roa
Signing time: Fri 18 Sep 2026 13:05:07 +0000
ROA not before: Fri 18 Sep 2026 13:05:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197646
IP address blocks: 206.15.50.0/24 maxlen: 24
206.15.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 13:05:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:9e:e4:9d:49:45:9e:89:5e:59:cc:3e:c7:06:d9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Sep 18 13:05:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8059d2604c68b16391b9f211b4ba4a2ce1c69eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5d:02:0c:99:50:55:c3:3a:55:2b:45:36:ba:
16:03:20:47:90:7a:0a:1b:f9:ca:dd:9d:49:03:9a:
df:21:9f:99:a5:68:72:7b:5b:8f:0f:6d:f4:c6:57:
22:e2:39:75:3d:1d:12:c9:dd:b9:aa:78:00:49:08:
fe:a8:66:bf:ca:c0:60:f4:14:92:67:36:43:bc:64:
a9:1d:cd:81:e8:ed:51:be:26:30:19:06:1c:e5:c9:
5e:f8:73:e6:c3:15:3d:1c:cd:cd:0c:c0:2f:09:a4:
14:20:dd:f3:88:fd:a2:b3:43:79:b6:d1:e2:fa:54:
9a:66:eb:c5:46:8f:4a:8e:c8:ba:a1:b1:5c:ea:7b:
6b:6a:ef:76:5e:f1:ec:e1:1d:34:1b:5e:0e:fa:3e:
2c:52:d4:dd:d2:ba:e8:0f:ae:cd:73:9e:1f:13:9c:
61:2f:b1:80:d2:9e:b1:81:81:5d:00:e2:96:5d:cc:
90:51:a7:e4:b4:56:a5:a2:ec:0e:b3:2f:05:a2:d0:
a9:1e:14:a4:2d:5c:ec:90:c6:24:a5:e4:5f:14:89:
2a:f3:38:57:ff:2c:61:57:d2:a5:8f:f9:89:43:1b:
da:9e:41:26:04:3b:88:ac:0f:c2:d5:38:28:0d:a6:
8c:c6:55:72:53:ee:a7:3f:ec:54:7a:6c:c8:8f:05:
18:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:59:D2:60:4C:68:B1:63:91:B9:F2:11:B4:BA:4A:2C:E1:C6:9E:EC
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/gFnSYExosWORufIRtLpKLOHGnuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.15.50.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:94:3e:a9:eb:c2:96:6f:50:cf:ae:ea:06:24:8c:cc:ae:c5:
c6:5e:c6:33:7e:3a:1b:6f:3f:c9:e7:9b:55:2b:54:ae:09:5e:
07:03:7b:dd:52:4a:56:c8:03:b5:96:51:cc:7d:ae:20:b1:7d:
0b:f2:f9:37:f5:f0:94:82:5a:d5:6e:f7:07:c9:aa:7a:6c:f3:
62:20:79:ff:cd:cd:9f:88:c0:46:00:f5:83:82:6a:e0:ca:67:
14:74:74:18:17:57:fd:69:1c:22:b3:d3:84:4d:0b:21:b4:1d:
aa:fa:37:07:10:1e:e4:63:1f:74:4e:4c:68:3a:97:09:38:c6:
87:c8:99:d7:d9:35:2b:e0:59:a3:5f:e4:0d:08:e2:95:c0:fb:
b2:97:da:2c:b2:fa:2b:e7:b9:83:88:8f:7c:59:1c:26:ce:d5:
20:c6:53:7b:fc:f0:ad:2c:fd:ba:3d:7e:3b:dc:5f:ac:ba:ab:
eb:5b:74:c0:a2:36:8c:e1:75:85:9c:6e:db:be:d2:19:c7:41:
c5:f8:24:c0:6f:22:c4:b4:3c:36:67:29:00:82:29:1d:22:7f:
d6:88:2d:a0:d2:9e:9f:a4:9f:a1:6d:16:bc:77:fd:85:d4:e1:
4b:d0:f9:bc:6a:63:e2:e6:b0:bb:a0:04:08:9e:5b:39:65:34:
73:ea:7b:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaC0nuSdSUWeiV5ZzD7HBtkIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz
OGM4ZTEwHhcNMjYwOTE4MTMwNTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDU5ZDI2MDRjNjhiMTYzOTFiOWYyMTFiNGJhNGEyY2UxYzY5ZWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt10CDJlQVcM6VStFNroWAyBHkHoK
G/nK3Z1JA5rfIZ+ZpWhye1uPD230xlci4jl1PR0Syd25qngASQj+qGa/ysBg9BSS
ZzZDvGSpHc2B6O1RviYwGQYc5cle+HPmwxU9HM3NDMAvCaQUIN3ziP2is0N5ttHi
+lSaZuvFRo9Kjsi6obFc6ntrau92XvHs4R00G14O+j4sUtTd0rroD67Nc54fE5xh
L7GA0p6xgYFdAOKWXcyQUafktFalouwOsy8FotCpHhSkLVzskMYkpeRfFIkq8zhX
/yxhV9Klj/mJQxvankEmBDuIrA/C1TgoDaaMxlVyU+6nP+xUemzIjwUYuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIBZ0mBMaLFjkbnyEbS6Sizhxp7sMB8GA1UdIwQY
MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt
MzBjOWRlMjA1YWZjLzEvZ0ZuU1lFeG9zV09SdWZJUnRMcEtMT0hHbnV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj
LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzg8yMA0G
CSqGSIb3DQEBCwUAA4IBAQAelD6p68KWb1DPruoGJIzMrsXGXsYzfjobbz/J55tV
K1SuCV4HA3vdUkpWyAO1llHMfa4gsX0L8vk39fCUglrVbvcHyap6bPNiIHn/zc2f
iMBGAPWDgmrgymcUdHQYF1f9aRwis9OETQshtB2q+jcHEB7kYx90TkxoOpcJOMaH
yJnX2TUr4FmjX+QNCOKVwPuyl9ossvor57mDiI98WRwmztUgxlN7/PCtLP26PX47
3F+suqvrW3TAojaM4XWFnG7bvtIZx0HF+CTAbyLEtDw2ZykAgikdIn/WiC2g0p6f
pJ+hbRa8d/2F1OFL0Pm8amPi5rC7oAQInls5ZTRz6nuJ
-----END CERTIFICATE-----
Generated at Fri Sep 18 20:27:25 2026 by rpki-client