Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/6CxZro-eevneCF6C-uhBhwFJdV8.roa
File: 6CxZro-eevneCF6C-uhBhwFJdV8.roa (raw, json)
Hash identifier: +cSRsic9So2p+WgzYKEuCQ8c+WbynfkIR2MSy+Rcb0M=
Subject key identifier: E8:2C:59:AE:8F:9E:7A:F9:DE:08:5E:82:FA:E8:41:87:01:49:75:5F
Certificate issuer: /CN=2450ca4aab2a3f8abc6c973aa7c0fa13f2571081
Certificate serial: 019962058EF9D1E15E639201357D5D1DF977
Authority key identifier: 24:50:CA:4A:AB:2A:3F:8A:BC:6C:97:3A:A7:C0:FA:13:F2:57:10:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/6CxZro-eevneCF6C-uhBhwFJdV8.roa
Signing time: Fri 19 Sep 2025 12:49:15 +0000
ROA not before: Fri 19 Sep 2025 12:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216058
IP address blocks: 2.56.204.0/22 maxlen: 24
2.56.207.0/24 maxlen: 24
91.195.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Sep 2025 00:54:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:62:05:8e:f9:d1:e1:5e:63:92:01:35:7d:5d:1d:f9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2450ca4aab2a3f8abc6c973aa7c0fa13f2571081
Validity
Not Before: Sep 19 12:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e82c59ae8f9e7af9de085e82fae841870149755f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:63:fd:97:90:31:30:69:e6:5a:26:b1:e9:5d:
ea:fc:2b:33:e0:73:4f:9d:e8:ea:53:73:8a:e9:65:
70:36:d7:28:5e:94:70:6a:50:8f:75:9e:5a:6f:5c:
46:72:58:df:a0:92:10:22:0b:5c:80:95:ef:a4:41:
98:67:92:ec:16:db:d8:b2:f7:6a:6d:bf:54:9c:97:
4e:17:3c:ba:32:93:a6:a3:dc:60:d8:27:65:7e:f2:
98:f6:52:c3:be:c9:d9:ff:d8:c5:a9:c2:f9:60:59:
62:18:af:5f:14:ef:cf:8b:9c:bb:15:6e:79:3a:eb:
da:7f:0a:c5:6f:6a:1a:89:fb:31:02:7d:c8:27:96:
75:61:97:36:87:42:ea:91:30:5a:12:1e:2f:41:df:
8d:5c:d1:ce:cb:95:2b:66:7f:1c:3b:b2:35:a5:a5:
99:79:da:69:b3:dd:89:42:18:e3:53:66:2d:b8:3d:
f0:0e:fa:c7:7c:59:85:07:9f:aa:d7:29:37:81:b9:
89:23:a7:2f:c9:f2:56:ac:52:2c:95:c2:6e:57:7c:
7a:32:e4:2b:08:35:b7:a4:21:10:be:40:02:6a:3b:
a2:c1:10:2d:48:a4:4c:8b:f9:bc:88:48:85:8e:57:
7f:62:58:3e:b3:25:3b:5a:ff:55:80:44:5a:7a:98:
1e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2C:59:AE:8F:9E:7A:F9:DE:08:5E:82:FA:E8:41:87:01:49:75:5F
X509v3 Authority Key Identifier:
keyid:24:50:CA:4A:AB:2A:3F:8A:BC:6C:97:3A:A7:C0:FA:13:F2:57:10:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/6CxZro-eevneCF6C-uhBhwFJdV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.204.0/22
91.195.254.0/24
Signature Algorithm: sha256WithRSAEncryption
41:08:6f:7c:71:ef:01:28:cb:c7:a9:c5:c1:8c:fd:68:f7:ff:
ca:32:ae:a1:92:fb:03:ca:5a:cc:46:d7:fc:88:8c:d5:00:c6:
aa:97:dc:30:ef:3c:40:96:8b:de:ed:cb:dc:14:69:d1:66:0c:
b7:ef:4c:df:46:10:4e:ce:23:04:31:59:3d:15:3d:25:d4:56:
30:de:8d:49:83:32:d2:6e:c5:0d:1d:80:34:9e:14:6f:99:c3:
4b:55:0d:83:33:6c:fd:13:d9:dc:5b:2e:ba:7a:8d:bb:d5:fb:
87:d6:86:b0:97:31:49:61:fd:3a:f9:e7:c2:e5:3f:6a:59:ee:
95:68:91:de:c0:6c:35:9e:40:53:c0:90:90:1c:0c:b0:58:53:
df:96:59:4c:ec:8e:fd:1e:5d:91:5d:29:e6:92:9a:cd:d6:db:
98:5f:73:ef:2d:5e:36:3b:91:95:63:a2:55:a1:4b:49:41:23:
6d:06:6e:9b:a0:bf:b7:98:2c:d6:77:b4:41:5b:48:4e:31:35:
f9:7d:14:dd:88:1d:de:36:af:e5:f1:b8:81:c5:99:3d:53:a9:
58:e5:15:51:92:b5:06:c8:d1:af:6c:2c:60:01:b1:89:7c:1f:
62:17:92:63:da:f3:54:ad:05:64:a0:13:9b:7c:46:4e:61:0f:
76:89:74:30
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZliBY750eFeY5IBNX1dHfl3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTBjYTRhYWIyYTNmOGFiYzZjOTczYWE3YzBmYTEzZjI1
NzEwODEwHhcNMjUwOTE5MTI0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODJjNTlhZThmOWU3YWY5ZGUwODVlODJmYWU4NDE4NzAxNDk3NTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmP9l5AxMGnmWiax6V3q/Csz4HNP
nejqU3OK6WVwNtcoXpRwalCPdZ5ab1xGcljfoJIQIgtcgJXvpEGYZ5LsFtvYsvdq
bb9UnJdOFzy6MpOmo9xg2CdlfvKY9lLDvsnZ/9jFqcL5YFliGK9fFO/Pi5y7FW55
OuvafwrFb2oaifsxAn3IJ5Z1YZc2h0LqkTBaEh4vQd+NXNHOy5UrZn8cO7I1paWZ
edpps92JQhjjU2YtuD3wDvrHfFmFB5+q1yk3gbmJI6cvyfJWrFIslcJuV3x6MuQr
CDW3pCEQvkACajuiwRAtSKRMi/m8iEiFjld/Ylg+syU7Wv9VgERaepgepQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOgsWa6Pnnr53ghegvroQYcBSXVfMB8GA1UdIwQY
MBaAFCRQykqrKj+KvGyXOqfA+hPyVxCBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZES1Nxc3FQNHE4YkpjNnA4RDZFX0pYRUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yMTljNmYtZTMwZi00YTllLWFjYzAt
ZTBkNTc2ZDU1NzdhLzEvNkN4WnJvLWVldm5lQ0Y2Qy11aEJod0ZKZFY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yMTljNmYtZTMwZi00YTllLWFjYzAtZTBkNTc2ZDU1Nzdh
LzEvSkZES1Nxc3FQNHE4YkpjNnA4RDZFX0pYRUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCAjjMAwQA
W8P+MA0GCSqGSIb3DQEBCwUAA4IBAQBBCG98ce8BKMvHqcXBjP1o9//KMq6hkvsD
ylrMRtf8iIzVAMaql9ww7zxAlove7cvcFGnRZgy370zfRhBOziMEMVk9FT0l1FYw
3o1JgzLSbsUNHYA0nhRvmcNLVQ2DM2z9E9ncWy66eo271fuH1oawlzFJYf06+efC
5T9qWe6VaJHewGw1nkBTwJCQHAywWFPflllM7I79Hl2RXSnmkprN1tuYX3PvLV42
O5GVY6JVoUtJQSNtBm6boL+3mCzWd7RBW0hOMTX5fRTdiB3eNq/l8biBxZk9U6lY
5RVRkrUGyNGvbCxgAbGJfB9iF5Jj2vNUrQVkoBObfEZOYQ92iXQw
-----END CERTIFICATE-----
Generated at Sat Sep 20 09:06:05 2025 by rpki-client