Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/4Ju3VaQ4C6q0qWM27SQOg0xG0LY.roa
File: 4Ju3VaQ4C6q0qWM27SQOg0xG0LY.roa (raw, json)
Hash identifier: CXJhJHQ7ol0fZjsffI02dL1cMgtuyDC/aOoAbGch63A=
Subject key identifier: E0:9B:B7:55:A4:38:0B:AA:B4:A9:63:36:ED:24:0E:83:4C:46:D0:B6
Certificate issuer: /CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Certificate serial: 019FDB79B438C427BEADBEF0C66E76002528
Authority key identifier: 6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/4Ju3VaQ4C6q0qWM27SQOg0xG0LY.roa
Signing time: Fri 07 Aug 2026 09:06:54 +0000
ROA not before: Fri 07 Aug 2026 09:06:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198193
IP address blocks: 91.216.73.0/24 maxlen: 24
176.101.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:79:b4:38:c4:27:be:ad:be:f0:c6:6e:76:00:25:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Validity
Not Before: Aug 7 09:06:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e09bb755a4380baab4a96336ed240e834c46d0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3c:85:2f:1b:cb:ac:ad:5f:1c:da:79:0a:49:
3d:15:1d:56:1c:b6:99:20:cb:d2:f8:a0:d9:93:9b:
26:b3:37:98:7b:07:ea:c8:58:8a:97:41:17:7a:e6:
e4:ce:35:cb:2c:d2:2c:d6:50:d9:6e:1c:91:d6:f4:
b9:90:bf:aa:c8:ee:cf:79:fd:c6:0e:46:34:d3:c0:
90:db:65:b5:d7:a2:8b:0f:c9:f1:ff:a7:5b:40:22:
d4:91:ec:85:a2:0e:1c:97:1c:ba:b0:44:a6:b5:35:
0e:5f:ae:59:e4:21:ed:14:46:7f:cd:8c:b7:95:63:
5d:65:9b:8b:59:6b:67:1a:8b:fc:41:87:39:45:3c:
06:da:a0:68:e0:0e:6a:f7:c7:10:49:a9:30:cc:dc:
95:1d:d3:3b:e6:69:7d:24:8b:6a:12:96:32:e3:b3:
61:82:6f:ed:e7:9b:91:c7:31:a6:87:48:04:67:f8:
60:ba:a4:01:fa:30:1a:7f:53:83:42:c0:43:22:33:
9d:06:d5:37:53:a6:fc:c8:3f:06:7f:c8:fb:56:e0:
e0:ed:4a:da:ad:4f:18:ed:ba:48:17:d3:35:e6:dd:
b8:24:51:f7:01:3c:a6:ea:84:24:25:42:b3:1c:a6:
aa:63:bf:76:20:d5:4e:69:d7:73:ae:ca:74:ec:fa:
8c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9B:B7:55:A4:38:0B:AA:B4:A9:63:36:ED:24:0E:83:4C:46:D0:B6
X509v3 Authority Key Identifier:
keyid:6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/4Ju3VaQ4C6q0qWM27SQOg0xG0LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.73.0/24
176.101.16.0/20
Signature Algorithm: sha256WithRSAEncryption
64:ff:5d:d7:68:50:51:5a:86:66:ae:0f:3f:79:3b:1e:e0:3a:
c5:1a:d5:00:05:31:03:0c:c1:00:52:e7:49:8c:e8:fa:34:2c:
f6:f8:4f:e4:15:cb:e6:44:bc:28:d7:3e:f5:69:f4:f5:23:16:
71:d8:c0:8e:05:e4:1c:b3:f9:39:d1:d2:d2:23:65:01:7b:11:
3e:a0:82:30:f4:8f:eb:68:26:d4:d0:f9:6a:3a:d2:ba:bb:b7:
34:19:5a:9c:4a:9e:a4:ec:d2:5b:50:df:2c:b0:88:03:cf:33:
36:d2:d2:61:82:1e:38:ef:93:54:ad:71:a0:3f:80:a5:e2:bc:
a8:4c:df:d5:07:4b:cb:4b:14:07:fe:67:ad:54:80:f8:90:ad:
04:0c:73:bb:20:c8:97:69:c7:47:af:d2:f8:1b:af:24:9b:c6:
57:32:60:50:0d:42:1d:3e:51:ee:2e:64:74:3e:91:ca:12:c1:
fd:8e:d3:9a:d3:b8:2f:24:d5:96:4f:67:6f:fa:b4:15:9e:00:
38:e5:35:5b:7e:31:60:aa:57:2c:8c:2a:fa:0f:fb:4a:7d:6b:
30:4c:55:15:b5:19:d6:6c:df:26:50:ec:e2:31:af:ad:d9:bd:
f7:41:66:60:84:97:50:ce:9a:cd:2b:00:40:8e:28:cc:46:7e:
52:4a:ba:e9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/bebQ4xCe+rb7wxm52ACUoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOGVkZGEyZjIxYzg4NWZiZTY3Mjg2MjE4YjgzMThkNmFk
MjM4OTYwHhcNMjYwODA3MDkwNjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDliYjc1NWE0MzgwYmFhYjRhOTYzMzZlZDI0MGU4MzRjNDZkMGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTyFLxvLrK1fHNp5Ckk9FR1WHLaZ
IMvS+KDZk5smszeYewfqyFiKl0EXeubkzjXLLNIs1lDZbhyR1vS5kL+qyO7Pef3G
DkY008CQ22W116KLD8nx/6dbQCLUkeyFog4clxy6sESmtTUOX65Z5CHtFEZ/zYy3
lWNdZZuLWWtnGov8QYc5RTwG2qBo4A5q98cQSakwzNyVHdM75ml9JItqEpYy47Nh
gm/t55uRxzGmh0gEZ/hguqQB+jAaf1ODQsBDIjOdBtU3U6b8yD8Gf8j7VuDg7Ura
rU8Y7bpIF9M15t24JFH3ATym6oQkJUKzHKaqY792INVOaddzrsp07PqMkQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOCbt1WkOAuqtKljNu0kDoNMRtC2MB8GA1UdIwQY
MBaAFGqO3aLyHIhfvmcoYhi4MY1q0jiWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW83ZG92SWNpRi0tWnloaUdMZ3hqV3JTT0pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82ZGI3OTctYTNkMy00MjQxLTkwM2Et
MGM2Njg0MDE5OGQwLzEvNEp1M1ZhUTRDNnEwcVdNMjdTUU9nMHhHMExZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS82ZGI3OTctYTNkMy00MjQxLTkwM2EtMGM2Njg0MDE5OGQw
LzEvYW83ZG92SWNpRi0tWnloaUdMZ3hqV3JTT0pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9hJAwQE
sGUQMA0GCSqGSIb3DQEBCwUAA4IBAQBk/13XaFBRWoZmrg8/eTse4DrFGtUABTED
DMEAUudJjOj6NCz2+E/kFcvmRLwo1z71afT1IxZx2MCOBeQcs/k50dLSI2UBexE+
oIIw9I/raCbU0PlqOtK6u7c0GVqcSp6k7NJbUN8ssIgDzzM20tJhgh4475NUrXGg
P4Cl4ryoTN/VB0vLSxQH/metVID4kK0EDHO7IMiXacdHr9L4G68km8ZXMmBQDUId
PlHuLmR0PpHKEsH9jtOa07gvJNWWT2dv+rQVngA45TVbfjFgqlcsjCr6D/tKfWsw
TFUVtRnWbN8mUOziMa+t2b33QWZghJdQzprNKwBAjijMRn5SSrrp
-----END CERTIFICATE-----
Generated at Sat Aug 15 12:46:28 2026 by rpki-client