Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/6nafakW_FoiGF0x1s1VoLFJqiuw.roa
File: 6nafakW_FoiGF0x1s1VoLFJqiuw.roa (raw, json)
Hash identifier: tSlSVShZ1Ws+SLODMKOJpPu4G+R5CcazLAH7YNSqZ2c=
Subject key identifier: EA:76:9F:6A:45:BF:16:88:86:17:4C:75:B3:55:68:2C:52:6A:8A:EC
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 019CF6A05A8B44D70D76248AC5EC1559DF0A
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/6nafakW_FoiGF0x1s1VoLFJqiuw.roa
Signing time: Mon 16 Mar 2026 12:30:29 +0000
ROA not before: Mon 16 Mar 2026 12:30:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213821
IP address blocks: 193.203.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:a0:5a:8b:44:d7:0d:76:24:8a:c5:ec:15:59:df:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Mar 16 12:30:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea769f6a45bf168886174c75b355682c526a8aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:94:3b:f5:44:0c:4a:c5:fe:d7:d9:fd:9f:
d9:69:2b:27:61:43:79:45:12:1f:6f:04:d7:ed:12:
2e:9a:c1:1b:d2:51:c6:97:e6:49:ce:cc:2f:77:91:
59:c8:7d:60:27:e6:b2:aa:3c:7e:9a:82:c8:42:88:
08:b7:f8:b0:2e:08:88:e5:f8:0f:7b:89:05:64:bb:
30:1e:bc:38:e5:6a:f0:ab:69:ed:e7:cf:90:ea:da:
34:b3:38:7b:b1:34:10:5f:9a:30:a4:a9:bf:8a:cd:
e3:3a:fc:a7:68:6c:3c:d3:39:24:18:35:e6:17:df:
7b:c8:7c:0c:57:5c:35:c8:8f:bd:01:8d:f7:91:b3:
d7:79:e4:57:c3:f5:40:64:f7:8d:da:97:b9:82:9e:
75:4c:33:ec:aa:4d:0b:4a:d2:c0:f8:3a:96:2c:c2:
a5:3d:eb:6a:40:1c:70:1b:45:48:43:35:74:28:0f:
a3:e1:8d:3a:c1:0a:ba:f3:0e:a4:94:bc:86:06:08:
99:18:4e:16:64:f6:52:70:97:54:0d:a0:1d:30:37:
1d:2a:5b:b4:aa:e9:13:c1:f3:69:6c:0b:1e:27:bb:
50:e4:99:21:08:fa:4a:ce:70:ed:bf:f9:e5:cd:6f:
54:4e:48:b2:e7:ee:a1:2d:f6:b9:41:8c:24:03:55:
de:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:76:9F:6A:45:BF:16:88:86:17:4C:75:B3:55:68:2C:52:6A:8A:EC
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/6nafakW_FoiGF0x1s1VoLFJqiuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.11.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:8d:73:7b:fb:1e:c8:a3:ce:e4:72:41:c7:f0:5f:7a:1a:e4:
d0:03:37:8b:bd:43:83:ac:7c:83:bc:09:78:37:95:57:60:26:
14:df:ef:21:37:5a:4c:35:27:c3:3a:45:44:a6:34:d1:9e:61:
1a:cc:c4:4c:05:a9:5e:95:a1:9b:31:6e:58:ca:eb:02:75:d1:
a1:29:53:6c:4d:c1:58:54:4d:38:e5:ba:9b:e6:57:0a:2b:22:
78:01:c4:0b:f2:73:70:c8:1a:c1:bc:16:b6:26:50:97:57:5d:
2e:d7:56:9b:45:58:33:ef:2b:96:25:c3:27:a9:e9:48:fc:b8:
09:63:d0:ef:f1:fc:18:36:3b:fe:fc:0e:f8:47:a6:5a:e8:ec:
b1:db:1c:ac:8b:ca:4a:17:27:ee:f9:70:d8:f2:af:74:81:d4:
c2:f4:54:fc:a3:b5:be:1d:22:23:68:dc:35:f5:33:cb:64:00:
d7:08:3d:c6:89:38:1f:3d:ff:15:51:b1:ab:52:d1:9b:77:66:
fb:d2:8d:81:ef:e2:a5:e8:3f:1d:28:cf:99:35:66:13:e4:d5:
d2:fc:5d:8b:68:ac:24:34:cb:a6:a6:6b:18:05:46:b3:28:91:
ad:0a:7d:e0:f4:72:0a:a5:42:39:8e:19:97:6c:74:82:59:8f:
25:44:e8:9c
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZz2oFqLRNcNdiSKxewVWd8KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3
Y2Q0MjMwHhcNMjYwMzE2MTIzMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTc2OWY2YTQ1YmYxNjg4ODYxNzRjNzViMzU1NjgyYzUyNmE4YWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnKUO/VEDErF/tfZ/Z/ZaSsnYUN5
RRIfbwTX7RIumsEb0lHGl+ZJzswvd5FZyH1gJ+ayqjx+moLIQogIt/iwLgiI5fgP
e4kFZLswHrw45Wrwq2nt58+Q6to0szh7sTQQX5owpKm/is3jOvynaGw80zkkGDXm
F997yHwMV1w1yI+9AY33kbPXeeRXw/VAZPeN2pe5gp51TDPsqk0LStLA+DqWLMKl
PetqQBxwG0VIQzV0KA+j4Y06wQq68w6klLyGBgiZGE4WZPZScJdUDaAdMDcdKlu0
qukTwfNpbAseJ7tQ5JkhCPpKznDtv/nlzW9UTkiy5+6hLfa5QYwkA1Xe3QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFOp2n2pFvxaIhhdMdbNVaCxSaorsMB8GA1UdIwQY
MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli
LWExYjdjZWVmYTE2Yy8xLzZuYWZha1dfRm9pR0YweDFzMVZvTEZKcWl1dy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjliLWExYjdjZWVmYTE2
Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBywsw
DQYJKoZIhvcNAQELBQADggEBAG2Nc3v7HsijzuRyQcfwX3oa5NADN4u9Q4OsfIO8
CXg3lVdgJhTf7yE3Wkw1J8M6RUSmNNGeYRrMxEwFqV6VoZsxbljK6wJ10aEpU2xN
wVhUTTjlupvmVworIngBxAvyc3DIGsG8FrYmUJdXXS7XVptFWDPvK5Ylwyep6Uj8
uAlj0O/x/Bg2O/78DvhHplro7LHbHKyLykoXJ+75cNjyr3SB1ML0VPyjtb4dIiNo
3DX1M8tkANcIPcaJOB89/xVRsatS0Zt3ZvvSjYHv4qXoPx0oz5k1ZhPk1dL8XYto
rCQ0y6amaxgFRrMoka0KfeD0cgqlQjmOGZdsdIJZjyVE6Jw=
-----END CERTIFICATE-----
Generated at Sat Mar 21 17:16:05 2026 by rpki-client