Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/6CRDymwFt79mzvWnLpOF6bfqp_k.roa
File: 6CRDymwFt79mzvWnLpOF6bfqp_k.roa (raw, json)
Hash identifier: huEM2FNwHHsVHVv7H74bhAuZJD9zQfLotNqyWe2iUkw=
Subject key identifier: E8:24:43:CA:6C:05:B7:BF:66:CE:F5:A7:2E:93:85:E9:B7:EA:A7:F9
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A1439CD721E7B3978401D73BA5F61B47E3
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/6CRDymwFt79mzvWnLpOF6bfqp_k.roa
Signing time: Fri 16 Oct 2026 07:28:34 +0000
ROA not before: Fri 16 Oct 2026 07:28:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212249
IP address blocks: 93.190.15.0/24 maxlen: 24
160.20.110.0/24 maxlen: 24
160.20.111.0/24 maxlen: 24
185.85.189.0/24 maxlen: 24
185.85.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 11:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:9c:d7:21:e7:b3:97:84:01:d7:3b:a5:f6:1b:47:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Oct 16 07:28:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e82443ca6c05b7bf66cef5a72e9385e9b7eaa7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:08:e9:b4:7e:54:ef:08:3c:be:87:20:8b:22:
65:bf:38:a2:f0:6e:c9:e9:3b:63:bd:0e:44:66:37:
ae:0b:7a:0f:dc:f5:0b:94:de:88:54:21:a6:e9:25:
e7:93:e7:d4:3b:11:b3:ec:ba:e4:3e:39:89:c4:22:
7a:2a:c2:f7:df:51:a9:42:32:c4:24:0d:53:5e:97:
ce:9a:56:d6:ff:89:2f:06:2d:f0:68:af:e3:00:25:
27:d9:0d:92:6e:4a:1a:7a:8d:7b:e7:60:cb:66:41:
e4:b8:31:7d:0b:61:71:40:97:81:f8:0f:3d:10:cc:
4e:49:a0:7c:cc:41:18:da:01:5f:90:51:13:1b:5f:
14:a4:b1:bf:cf:50:9d:51:d7:5e:85:a7:d5:55:08:
9e:97:38:6d:fd:bd:c4:39:2f:9a:b1:c4:df:ec:8a:
4f:e5:61:d0:d3:f7:f7:31:a1:e7:89:bb:74:85:02:
b1:e1:c4:66:12:55:b1:09:0e:32:03:6f:f6:b3:32:
6e:61:01:67:d4:08:9d:8f:06:17:e5:f1:75:be:7f:
2a:13:1c:88:83:c1:bc:3f:bc:7d:51:51:68:70:48:
33:81:09:29:98:b0:8e:b7:0a:b6:2e:7c:d2:e8:4c:
a6:49:53:42:f2:a3:a6:32:e9:4f:87:d9:13:9d:e1:
f3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:24:43:CA:6C:05:B7:BF:66:CE:F5:A7:2E:93:85:E9:B7:EA:A7:F9
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/6CRDymwFt79mzvWnLpOF6bfqp_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.15.0/24
160.20.110.0/23
185.85.189.0/24
185.85.236.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:c4:53:ed:6c:a3:f2:87:fe:8b:39:4b:67:4f:aa:89:05:02:
c1:ba:69:8b:f4:77:bb:57:c1:02:d9:e1:90:41:05:79:f3:be:
55:2f:6e:4c:a0:49:32:80:02:ce:ac:ad:52:0f:f3:9d:e7:0f:
c8:1c:b5:a7:e5:60:8f:01:ac:57:b9:82:ff:57:11:95:62:35:
82:0d:29:d5:ef:21:09:cc:6d:d8:14:da:83:c3:06:c0:46:51:
c7:b5:5a:bb:76:6e:05:6a:6b:12:b4:11:c3:65:08:12:c9:b8:
14:77:97:7f:d8:06:da:06:80:6a:35:c4:9e:51:e3:12:49:70:
07:51:f7:df:6e:e3:98:cd:4e:40:a4:03:01:8d:b5:31:49:da:
24:13:b6:59:f7:4a:76:4e:fe:7e:66:df:63:cc:77:b4:2a:8b:
b9:7b:ea:bc:84:34:45:70:fc:88:7c:98:b8:61:8c:ff:10:8d:
02:4a:da:4f:7a:96:30:ef:6d:50:13:7b:26:10:c1:1f:90:e6:
43:23:32:22:93:c1:b2:ef:84:d9:ce:c9:3d:00:fc:b1:12:33:
68:d3:45:dd:26:6d:59:e5:2c:51:07:8d:e2:7a:bf:d0:e1:8f:
af:81:1f:54:18:ba:5e:48:68:0b:93:9c:36:86:d1:18:8c:06:
29:60:d4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:47:01 2026 by rpki-client