Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/6rkR-BBPpjGCoeX_YAqv5KrJW6Y.roa
File: 6rkR-BBPpjGCoeX_YAqv5KrJW6Y.roa (raw, json)
Hash identifier: semgquQlEGADPqa3w63dRwF4Un/PAwUCdRww4JGKAZ8=
Subject key identifier: EA:B9:11:F8:10:4F:A6:31:82:A1:E5:FF:60:0A:AF:E4:AA:C9:5B:A6
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 0198F1EAD6AACCAF9082DA18ECA26F57DC0B
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/6rkR-BBPpjGCoeX_YAqv5KrJW6Y.roa
Signing time: Thu 28 Aug 2025 18:22:36 +0000
ROA not before: Thu 28 Aug 2025 18:22:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53107
IP address blocks: 158.173.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f1:ea:d6:aa:cc:af:90:82:da:18:ec:a2:6f:57:dc:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Aug 28 18:22:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eab911f8104fa63182a1e5ff600aafe4aac95ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:06:ab:1d:88:46:d0:c9:c3:ec:61:ed:bd:90:
ce:11:da:d4:43:88:dd:f0:40:26:3a:7d:1f:50:2b:
a7:aa:48:e0:a2:07:10:c0:40:d4:28:02:fe:5f:4c:
5d:78:7b:16:d6:d6:d3:96:c6:73:7f:e8:e9:fb:27:
86:0a:13:8a:54:f3:c0:26:96:09:fe:e8:87:83:a6:
da:19:60:d8:c4:f8:cb:e9:93:0a:57:c5:6b:c1:2d:
e7:3b:50:16:e6:fa:52:d1:81:ec:17:9a:80:1e:06:
d0:8e:f1:fc:42:2d:5d:6f:47:c4:da:44:d6:af:ad:
2e:51:0f:d2:92:bb:94:e3:a7:a4:e4:c5:1e:fb:86:
a9:c0:68:66:77:8d:9f:49:37:66:d1:5c:37:09:73:
92:64:2a:d6:83:43:00:86:93:e3:45:44:2d:b2:cf:
5f:e1:3f:28:93:75:46:30:bc:89:73:c8:7d:4e:a5:
85:6e:3f:e6:be:07:cc:32:89:3a:f8:a9:d8:40:ad:
2e:71:a7:a6:7b:75:cb:a3:6f:56:f0:6b:e5:33:d6:
be:b9:81:a0:05:c6:9e:a2:06:a8:68:26:bd:51:8c:
25:86:08:55:3a:ab:d4:4a:14:f6:30:d4:e2:ef:59:
a2:4e:ca:ce:fe:af:e4:42:fa:fc:29:94:0a:d7:47:
33:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B9:11:F8:10:4F:A6:31:82:A1:E5:FF:60:0A:AF:E4:AA:C9:5B:A6
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/6rkR-BBPpjGCoeX_YAqv5KrJW6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.2.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:b4:95:77:89:3c:0f:50:65:7d:c2:6b:5d:73:eb:94:5a:4f:
c7:cc:73:7e:f1:a5:ab:67:76:53:94:d9:92:bb:46:19:2e:6e:
81:85:38:6a:18:0d:26:e2:dd:18:d9:7b:5a:d7:b6:83:a0:0e:
cb:2d:8a:30:31:a4:8d:b4:9f:a4:8f:2d:8f:7d:f9:cc:e7:e5:
6a:f1:0b:f3:8d:25:47:9f:0a:1b:45:f7:91:4d:c8:76:92:24:
f0:63:da:5d:f3:64:df:79:e2:f0:ab:55:cf:0c:f0:e4:92:48:
de:ba:d5:f1:e8:b4:43:6f:5d:2d:9b:ce:ec:22:48:3f:fa:2d:
60:05:09:dd:94:14:d4:49:75:18:14:dc:6b:54:cb:d0:b9:c8:
1c:26:b1:26:ed:57:1f:b9:28:5b:23:7a:9f:09:5a:49:4d:45:
94:92:c9:b3:6e:83:1c:75:55:48:41:50:09:9b:0f:72:dd:f0:
22:27:fc:ff:95:94:55:5c:5b:16:20:85:67:77:c2:06:02:2c:
5c:d9:b1:5f:bc:60:5e:b9:e0:bd:70:e5:b2:21:08:08:b6:3f:
96:42:c7:d5:2b:2e:f6:e6:8e:59:5d:4e:b0:b5:d3:09:d7:0e:
18:70:c4:b9:8f:65:fe:8f:bb:09:86:c8:91:7a:ef:13:98:9a:
b9:41:4c:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZjx6taqzK+QgtoY7KJvV9wLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNmEyOGI3YzYzZWY2YWIyMTRhNTJjZmE3YzNlNzhkYjlh
NDA4MjMwHhcNMjUwODI4MTgyMjM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWI5MTFmODEwNGZhNjMxODJhMWU1ZmY2MDBhYWZlNGFhYzk1YmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgarHYhG0MnD7GHtvZDOEdrUQ4jd
8EAmOn0fUCunqkjgogcQwEDUKAL+X0xdeHsW1tbTlsZzf+jp+yeGChOKVPPAJpYJ
/uiHg6baGWDYxPjL6ZMKV8VrwS3nO1AW5vpS0YHsF5qAHgbQjvH8Qi1db0fE2kTW
r60uUQ/SkruU46ek5MUe+4apwGhmd42fSTdm0Vw3CXOSZCrWg0MAhpPjRUQtss9f
4T8ok3VGMLyJc8h9TqWFbj/mvgfMMok6+KnYQK0ucaeme3XLo29W8GvlM9a+uYGg
BcaeogaoaCa9UYwlhghVOqvUShT2MNTi71miTsrO/q/kQvr8KZQK10czmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOq5EfgQT6YxgqHl/2AKr+SqyVumMB8GA1UdIwQY
MBaAFGJqKLfGPvarIUpSz6fD5425pAgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUt
ZDJjZDI2YjY5ZGYxLzEvNnJrUi1CQlBwakdDb2VYX1lBcXY1S3JKVzZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUtZDJjZDI2YjY5ZGYx
LzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnq0CMA0G
CSqGSIb3DQEBCwUAA4IBAQAbtJV3iTwPUGV9wmtdc+uUWk/HzHN+8aWrZ3ZTlNmS
u0YZLm6BhThqGA0m4t0Y2Xta17aDoA7LLYowMaSNtJ+kjy2PffnM5+Vq8QvzjSVH
nwobRfeRTch2kiTwY9pd82TfeeLwq1XPDPDkkkjeutXx6LRDb10tm87sIkg/+i1g
BQndlBTUSXUYFNxrVMvQucgcJrEm7VcfuShbI3qfCVpJTUWUksmzboMcdVVIQVAJ
mw9y3fAiJ/z/lZRVXFsWIIVnd8IGAixc2bFfvGBeueC9cOWyIQgItj+WQsfVKy72
5o5ZXU6wtdMJ1w4YcMS5j2X+j7sJhsiReu8TmJq5QUxe
-----END CERTIFICATE-----
Generated at Mon Sep 8 09:43:50 2025 by rpki-client