Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/c6xBeAXQYhFWByHCepjYrXuczwM.roa
File: c6xBeAXQYhFWByHCepjYrXuczwM.roa (raw, json)
Hash identifier: WDY6hkVvzWPjQmlW06Loatuqw5St1fu2Qz7fRVc3Qm0=
Subject key identifier: 73:AC:41:78:05:D0:62:11:56:07:21:C2:7A:98:D8:AD:7B:9C:CF:03
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01A01A191BBD46439B85D7BE728764BC87E6
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/c6xBeAXQYhFWByHCepjYrXuczwM.roa
Signing time: Wed 19 Aug 2026 12:57:28 +0000
ROA not before: Wed 19 Aug 2026 12:57:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 43.240.150.0/24 maxlen: 24
91.109.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:19:1b:bd:46:43:9b:85:d7:be:72:87:64:bc:87:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Aug 19 12:57:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73ac417805d06211560721c27a98d8ad7b9ccf03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7f:0c:e0:e2:ef:7a:b8:ef:b0:d2:cb:71:ed:
c8:3e:89:c8:3c:c7:ee:48:e0:52:4f:17:8b:40:70:
f2:51:50:39:13:bc:bb:20:16:d2:8e:14:7f:a8:00:
8e:ed:68:3f:a4:b8:73:35:0f:c9:3b:ac:94:21:d3:
77:99:0c:d3:1b:0c:cf:0d:d9:24:1b:fc:c8:f8:f9:
9d:a2:97:c9:10:b5:a7:1a:8c:b6:77:de:dd:4f:3d:
36:41:db:ae:34:5c:6f:92:bc:25:23:9d:b6:f9:1d:
e2:de:f9:a1:15:13:ff:31:8a:e8:c4:34:1b:4a:02:
d2:6a:7d:fb:e4:f3:a8:15:fb:b4:ee:68:f0:ab:cb:
93:8b:bb:5d:57:d3:ac:39:7c:65:94:a7:34:cc:5e:
dc:be:33:aa:83:e0:f4:d4:1d:1f:08:d3:de:8e:5c:
fc:0a:f3:b2:8c:41:71:f2:10:a5:74:ac:49:cd:92:
16:89:72:97:31:2d:38:70:4e:a2:29:b8:25:94:b0:
db:43:91:ae:9a:5e:6d:c7:74:6e:b2:a7:52:8a:51:
b6:0e:de:a6:df:54:d6:53:77:d3:50:2a:50:b5:3f:
8c:8c:4e:e7:73:6b:b3:57:22:88:2c:41:dd:2d:77:
76:4a:16:cd:6a:2d:22:39:55:ff:03:93:1b:c2:e6:
0b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AC:41:78:05:D0:62:11:56:07:21:C2:7A:98:D8:AD:7B:9C:CF:03
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/c6xBeAXQYhFWByHCepjYrXuczwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.150.0/24
91.109.41.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:28:36:db:0b:d7:83:c1:2e:2d:4f:17:7c:f1:1f:8f:4f:64:
32:2a:40:b9:c8:50:72:7c:36:c7:99:de:31:bf:ec:c6:fb:2d:
93:ae:81:b2:7a:57:3f:a8:25:15:f4:47:04:78:73:0d:94:65:
54:2c:48:a3:c5:0f:26:e8:6a:1a:a7:3b:52:9d:48:b3:fe:66:
0c:99:85:c8:a3:cd:4b:cf:54:3c:2d:f6:4b:7b:41:2c:5e:8b:
54:a9:72:bc:7e:6b:f6:5d:c2:5a:15:14:9a:57:24:30:1d:32:
58:00:9f:df:8a:68:c3:ea:5c:62:39:f3:2a:ce:61:ad:2a:7a:
97:00:d8:f0:55:71:24:7d:60:88:46:4a:7b:08:33:44:e9:a2:
10:cb:c9:e4:c4:69:a0:4b:f9:2a:5d:9c:39:57:4c:3d:b5:83:
ba:96:49:46:cc:0c:11:44:1d:9f:0e:ef:35:6d:55:33:6a:5c:
c1:2c:93:5b:a3:1b:b3:71:67:84:34:d0:f1:12:40:8f:a2:1f:
e4:42:90:ee:47:96:db:18:95:41:be:03:03:6e:d2:73:b0:49:
cd:3b:c1:e8:bb:3f:59:8d:70:d1:97:33:09:17:9f:6e:2d:3f:
24:48:3d:01:ea:73:af:06:c8:f2:3e:f8:f6:cb:10:2b:69:5c:
ec:a0:95:e1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaAaGRu9RkObhde+codkvIfmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk
ZjM1NGEwHhcNMjYwODE5MTI1NzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2FjNDE3ODA1ZDA2MjExNTYwNzIxYzI3YTk4ZDhhZDdiOWNjZjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0H8M4OLverjvsNLLce3IPonIPMfu
SOBSTxeLQHDyUVA5E7y7IBbSjhR/qACO7Wg/pLhzNQ/JO6yUIdN3mQzTGwzPDdkk
G/zI+PmdopfJELWnGoy2d97dTz02QduuNFxvkrwlI522+R3i3vmhFRP/MYroxDQb
SgLSan375POoFfu07mjwq8uTi7tdV9OsOXxllKc0zF7cvjOqg+D01B0fCNPejlz8
CvOyjEFx8hCldKxJzZIWiXKXMS04cE6iKbgllLDbQ5Guml5tx3RusqdSilG2Dt6m
31TWU3fTUCpQtT+MjE7nc2uzVyKILEHdLXd2ShbNai0iOVX/A5MbwuYLcQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHOsQXgF0GIRVgchwnqY2K17nM8DMB8GA1UdIwQY
MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt
MjBlMTk3ODBjYjJlLzEvYzZ4QmVBWFFZaEZXQnlIQ2VwallyWHVjendNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl
LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAK/CWAwQA
W20pMA0GCSqGSIb3DQEBCwUAA4IBAQCjKDbbC9eDwS4tTxd88R+PT2QyKkC5yFBy
fDbHmd4xv+zG+y2TroGyelc/qCUV9EcEeHMNlGVULEijxQ8m6GoapztSnUiz/mYM
mYXIo81Lz1Q8LfZLe0EsXotUqXK8fmv2XcJaFRSaVyQwHTJYAJ/fimjD6lxiOfMq
zmGtKnqXANjwVXEkfWCIRkp7CDNE6aIQy8nkxGmgS/kqXZw5V0w9tYO6lklGzAwR
RB2fDu81bVUzalzBLJNboxuzcWeENNDxEkCPoh/kQpDuR5bbGJVBvgMDbtJzsEnN
O8Houz9ZjXDRlzMJF59uLT8kSD0B6nOvBsjyPvj2yxAraVzsoJXh
-----END CERTIFICATE-----
Generated at Wed Aug 26 22:31:32 2026 by rpki-client