Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/223713-49fe-4878-bb07-0c5444d45bda/1/22Shnf8BtH-_hM4Id3EvF9IL0v8.roa
File: 22Shnf8BtH-_hM4Id3EvF9IL0v8.roa (raw, json)
Hash identifier: pxud13G9JfSxQkDxmBa1Zs3fl77Lz5+Fbc8x4Q0jx+Y=
Subject key identifier: DB:64:A1:9D:FF:01:B4:7F:BF:84:CE:08:77:71:2F:17:D2:0B:D2:FF
Certificate issuer: /CN=a6c6ca0ab1c163cdc5e07b0c9f3aeab89b160b0b
Certificate serial: 01A0E6B6EE29E0B1655B0076FE240D990EAC
Authority key identifier: A6:C6:CA:0A:B1:C1:63:CD:C5:E0:7B:0C:9F:3A:EA:B8:9B:16:0B:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psbKCrHBY83F4HsMnzrquJsWCws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/223713-49fe-4878-bb07-0c5444d45bda/1/22Shnf8BtH-_hM4Id3EvF9IL0v8.roa
Signing time: Mon 28 Sep 2026 06:32:23 +0000
ROA not before: Mon 28 Sep 2026 06:32:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15694
IP address blocks: 194.61.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/223713-49fe-4878-bb07-0c5444d45bda/1/psbKCrHBY83F4HsMnzrquJsWCws.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/223713-49fe-4878-bb07-0c5444d45bda/1/psbKCrHBY83F4HsMnzrquJsWCws.mft
rsync://rpki.ripe.net/repository/DEFAULT/psbKCrHBY83F4HsMnzrquJsWCws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:b6:ee:29:e0:b1:65:5b:00:76:fe:24:0d:99:0e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c6ca0ab1c163cdc5e07b0c9f3aeab89b160b0b
Validity
Not Before: Sep 28 06:32:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db64a19dff01b47fbf84ce0877712f17d20bd2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c5:14:e3:9b:bf:46:e9:75:76:c9:a4:ef:08:
e6:9a:0d:95:fa:1a:c6:f6:0b:69:19:8c:2d:85:1f:
1a:04:ad:c6:24:90:db:bf:14:35:0d:14:0e:15:32:
d4:70:34:f4:dd:9c:1e:20:0d:44:81:5d:d7:e2:a5:
34:02:01:71:39:5b:28:ae:fe:3e:17:89:80:08:1a:
ec:d2:8a:4e:aa:19:32:5a:bd:8d:b1:a2:a6:41:e6:
14:76:c5:40:00:57:dd:14:f3:b0:e1:3e:4e:d7:e6:
4f:48:87:c9:b3:10:b0:9e:a5:e2:9e:71:08:f4:f8:
c4:0a:7f:69:ae:da:61:9b:a6:30:a0:f3:6c:03:ad:
ed:ad:18:36:ea:6b:24:5a:90:b5:26:f9:7f:5a:84:
ac:36:a8:35:d5:79:13:b8:46:e5:e1:17:17:71:e2:
f8:50:aa:b2:c2:c0:05:2a:85:89:64:23:02:08:18:
0d:68:89:8e:13:4f:76:76:d6:d8:8c:66:bd:81:aa:
1f:4e:2a:27:e1:d8:ef:7b:2c:b5:a8:c9:5f:f5:b6:
85:0a:1d:37:75:36:71:f5:5e:20:8f:30:df:31:76:
ab:6e:08:77:58:dc:85:b0:13:dd:cf:d5:d6:2c:85:
6a:b6:2e:a9:74:1e:e3:1d:90:df:13:81:b8:92:0f:
ba:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:64:A1:9D:FF:01:B4:7F:BF:84:CE:08:77:71:2F:17:D2:0B:D2:FF
X509v3 Authority Key Identifier:
keyid:A6:C6:CA:0A:B1:C1:63:CD:C5:E0:7B:0C:9F:3A:EA:B8:9B:16:0B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psbKCrHBY83F4HsMnzrquJsWCws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/223713-49fe-4878-bb07-0c5444d45bda/1/22Shnf8BtH-_hM4Id3EvF9IL0v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/223713-49fe-4878-bb07-0c5444d45bda/1/psbKCrHBY83F4HsMnzrquJsWCws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.66.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:b4:db:d6:1f:c8:85:c3:a8:44:48:9b:23:fc:59:c4:52:d2:
93:fc:ca:fd:2e:f5:d3:92:0a:4c:10:cc:5a:13:8e:22:43:ac:
19:8f:1c:df:45:9e:1b:38:47:61:bf:e7:e5:f6:87:ca:7d:20:
ee:4b:35:c5:c4:a0:a8:fe:28:5a:e8:97:d2:f7:d4:2a:9d:d2:
69:8c:f8:55:7f:5c:41:9d:b8:ee:44:9d:e2:27:09:b2:c7:c3:
4f:ea:3c:e4:91:77:d7:4b:ad:79:34:bb:a1:40:bb:b0:40:33:
76:e8:a3:db:60:73:51:36:7f:50:1b:e3:9d:72:d3:91:db:a6:
cd:5f:b0:35:28:da:34:d5:88:f7:99:a1:80:68:f7:8e:6c:9f:
44:26:c7:07:35:15:f3:89:3e:c5:56:86:db:1b:b2:c3:4c:8d:
e5:0d:f5:02:61:3c:a4:aa:da:ce:bf:ee:62:31:b5:31:3b:1f:
b9:80:6a:64:e2:8f:87:48:df:c9:8a:71:7e:b1:04:8d:32:59:
91:27:3e:85:bc:b2:54:e4:c9:e6:c3:9c:a8:b5:82:bd:92:1c:
3b:6c:09:f0:04:f4:0d:c9:18:1f:9e:90:bf:9a:d7:07:ce:1e:
91:38:38:a7:dc:ff:5a:64:a9:10:44:77:77:78:d5:75:0f:50:
10:6b:15:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDmtu4p4LFlWwB2/iQNmQ6sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YzZjYTBhYjFjMTYzY2RjNWUwN2IwYzlmM2FlYWI4OWIx
NjBiMGIwHhcNMjYwOTI4MDYzMjIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjY0YTE5ZGZmMDFiNDdmYmY4NGNlMDg3NzcxMmYxN2QyMGJkMmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsUU45u/Rul1dsmk7wjmmg2V+hrG
9gtpGYwthR8aBK3GJJDbvxQ1DRQOFTLUcDT03ZweIA1EgV3X4qU0AgFxOVsorv4+
F4mACBrs0opOqhkyWr2NsaKmQeYUdsVAAFfdFPOw4T5O1+ZPSIfJsxCwnqXinnEI
9PjECn9prtphm6YwoPNsA63trRg26mskWpC1Jvl/WoSsNqg11XkTuEbl4RcXceL4
UKqywsAFKoWJZCMCCBgNaImOE092dtbYjGa9gaofTion4djveyy1qMlf9baFCh03
dTZx9V4gjzDfMXarbgh3WNyFsBPdz9XWLIVqti6pdB7jHZDfE4G4kg+6WwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNtkoZ3/AbR/v4TOCHdxLxfSC9L/MB8GA1UdIwQY
MBaAFKbGygqxwWPNxeB7DJ866ribFgsLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHNiS0NySEJZODNGNEhzTW56cnF1SnNXQ3dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yMjM3MTMtNDlmZS00ODc4LWJiMDct
MGM1NDQ0ZDQ1YmRhLzEvMjJTaG5mOEJ0SC1faE00SWQzRXZGOUlMMHY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8yMjM3MTMtNDlmZS00ODc4LWJiMDctMGM1NDQ0ZDQ1YmRh
LzEvcHNiS0NySEJZODNGNEhzTW56cnF1SnNXQ3dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj1CMA0G
CSqGSIb3DQEBCwUAA4IBAQButNvWH8iFw6hESJsj/FnEUtKT/Mr9LvXTkgpMEMxa
E44iQ6wZjxzfRZ4bOEdhv+fl9ofKfSDuSzXFxKCo/iha6JfS99QqndJpjPhVf1xB
nbjuRJ3iJwmyx8NP6jzkkXfXS615NLuhQLuwQDN26KPbYHNRNn9QG+OdctOR26bN
X7A1KNo01Yj3maGAaPeObJ9EJscHNRXziT7FVobbG7LDTI3lDfUCYTykqtrOv+5i
MbUxOx+5gGpk4o+HSN/JinF+sQSNMlmRJz6FvLJU5Mnmw5yotYK9khw7bAnwBPQN
yRgfnpC/mtcHzh6RODin3P9aZKkQRHd3eNV1D1AQaxVs
-----END CERTIFICATE-----
Generated at Wed Oct 28 06:14:50 2026 by rpki-client