Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/6MVX55l_hIwQu334y7EbcTY6QwU.roa
File: 6MVX55l_hIwQu334y7EbcTY6QwU.roa (raw, json)
Hash identifier: Yj17NO8js47/nI9ufgdMnHMcmlHx/2Bx86jsFNorbV0=
Subject key identifier: E8:C5:57:E7:99:7F:84:8C:10:BB:7D:F8:CB:B1:1B:71:36:3A:43:05
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A141C78E5A337748A923740997E9C558DF
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/6MVX55l_hIwQu334y7EbcTY6QwU.roa
Signing time: Thu 15 Oct 2026 22:55:59 +0000
ROA not before: Thu 15 Oct 2026 22:55:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 212.107.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:05:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:c7:8e:5a:33:77:48:a9:23:74:09:97:e9:c5:58:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Oct 15 22:55:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8c557e7997f848c10bb7df8cbb11b71363a4305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:c0:a3:2d:0e:92:6f:67:93:09:2e:aa:f7:
d0:6a:ab:0e:b4:29:80:67:d5:dc:68:d7:6e:77:75:
1b:ed:43:ec:3e:0c:07:1a:23:14:76:6c:f5:56:c7:
6e:88:2b:96:c1:fd:78:9f:32:b3:aa:d2:65:1f:2d:
84:4b:49:d4:db:52:25:4e:68:e6:37:63:ef:e3:2e:
64:ad:85:9c:59:e9:34:ce:1b:94:97:58:94:b3:26:
56:86:00:24:a4:a3:3c:50:b6:4d:f0:f9:e0:0a:29:
53:79:7f:86:4c:3b:b8:71:02:26:e2:05:29:d6:e8:
de:5b:b7:c7:d7:77:51:f4:40:f7:fa:b2:1a:08:5b:
50:de:49:6b:22:2e:89:e0:99:5e:a1:5a:57:da:ca:
11:7d:a2:97:fb:dd:85:5c:3b:6a:df:5f:b2:47:fb:
54:0c:09:d2:57:71:0a:a6:6c:f8:00:4b:19:a4:f8:
76:28:37:71:fb:ce:2c:0e:83:d6:5e:65:1c:d6:20:
14:b1:2a:8b:2a:f4:98:07:e6:74:2c:0e:15:b7:9b:
5c:6d:47:fd:a5:84:30:38:ba:aa:d5:dc:18:2b:b7:
72:3c:8c:03:57:c1:07:33:71:e4:13:5d:f1:c0:9a:
38:92:53:63:93:c2:a8:19:bf:28:26:8f:fe:aa:1d:
01:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C5:57:E7:99:7F:84:8C:10:BB:7D:F8:CB:B1:1B:71:36:3A:43:05
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/6MVX55l_hIwQu334y7EbcTY6QwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.107.27.0/24
Signature Algorithm: sha256WithRSAEncryption
51:0c:0a:c0:b0:a7:90:e0:f1:93:e0:a1:3b:5f:62:28:ad:19:
c5:34:a9:39:b1:3f:47:4f:3e:f2:84:eb:d3:c3:ce:70:e2:6a:
6e:5c:7a:04:52:ef:e3:73:07:8c:80:45:1a:b3:bc:50:54:ff:
b8:5c:ca:9f:32:80:24:eb:c6:b4:3b:34:f6:6d:3c:33:e6:23:
7c:ef:3e:80:eb:3b:93:55:ba:66:54:ea:03:d3:2b:c7:1c:a5:
fc:c2:a9:a5:81:e2:d4:27:6f:e7:31:0e:3a:91:76:34:a4:29:
6f:be:44:cc:7d:98:cc:18:d4:14:53:b6:f6:bc:70:98:5c:33:
03:87:40:34:52:36:03:44:e4:42:ac:ad:d5:12:4c:4a:1a:65:
12:50:9f:d4:cd:a6:f0:5b:39:4d:1c:42:78:5d:f1:0d:ed:f1:
9b:90:eb:e2:f0:2b:62:28:74:4d:e1:e4:45:13:25:35:a0:ec:
fb:4b:a7:f4:28:c5:a6:29:b6:6a:0b:69:58:81:db:c6:08:0b:
fa:0e:74:c4:8a:ec:f3:c8:34:87:80:c4:fb:39:50:f6:c9:4b:
c7:a1:c9:1f:69:23:8f:c2:ac:f9:51:9a:52:ea:ac:15:14:71:
a7:04:b4:7d:20:5c:3c:ff:e5:a4:6c:12:ca:2b:f4:b5:3a:9d:
9b:52:fa:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFBx45aM3dIqSN0CZfpxVjfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjYxMDE1MjI1NTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGM1NTdlNzk5N2Y4NDhjMTBiYjdkZjhjYmIxMWI3MTM2M2E0MzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG3Aoy0Okm9nkwkuqvfQaqsOtCmA
Z9XcaNdud3Ub7UPsPgwHGiMUdmz1VsduiCuWwf14nzKzqtJlHy2ES0nU21IlTmjm
N2Pv4y5krYWcWek0zhuUl1iUsyZWhgAkpKM8ULZN8PngCilTeX+GTDu4cQIm4gUp
1ujeW7fH13dR9ED3+rIaCFtQ3klrIi6J4JleoVpX2soRfaKX+92FXDtq31+yR/tU
DAnSV3EKpmz4AEsZpPh2KDdx+84sDoPWXmUc1iAUsSqLKvSYB+Z0LA4Vt5tcbUf9
pYQwOLqq1dwYK7dyPIwDV8EHM3HkE13xwJo4klNjk8KoGb8oJo/+qh0BEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOjFV+eZf4SMELt9+MuxG3E2OkMFMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvNk1WWDU1bF9oSXdRdTMzNHk3RWJjVFk2UXdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GsbMA0G
CSqGSIb3DQEBCwUAA4IBAQBRDArAsKeQ4PGT4KE7X2IorRnFNKk5sT9HTz7yhOvT
w85w4mpuXHoEUu/jcweMgEUas7xQVP+4XMqfMoAk68a0OzT2bTwz5iN87z6A6zuT
VbpmVOoD0yvHHKX8wqmlgeLUJ2/nMQ46kXY0pClvvkTMfZjMGNQUU7b2vHCYXDMD
h0A0UjYDRORCrK3VEkxKGmUSUJ/UzabwWzlNHEJ4XfEN7fGbkOvi8CtiKHRN4eRF
EyU1oOz7S6f0KMWmKbZqC2lYgdvGCAv6DnTEiuzzyDSHgMT7OVD2yUvHockfaSOP
wqz5UZpS6qwVFHGnBLR9IFw8/+WkbBLKK/S1Op2bUvrT
-----END CERTIFICATE-----
Generated at Tue Oct 20 04:18:26 2026 by rpki-client