Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/1r6bXIGDmDWtd1m4UhQC4lrcrks.roa
File: 1r6bXIGDmDWtd1m4UhQC4lrcrks.roa (raw, json)
Hash identifier: tjUWdsAWvbp8hp0qlvMGR4d39UT7qb+7OYtwOus5140=
Subject key identifier: D6:BE:9B:5C:81:83:98:35:AD:77:59:B8:52:14:02:E2:5A:DC:AE:4B
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019F7FE4D2693B921AB18B761E3744EEDE48
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/1r6bXIGDmDWtd1m4UhQC4lrcrks.roa
Signing time: Mon 20 Jul 2026 14:18:50 +0000
ROA not before: Mon 20 Jul 2026 14:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214957
IP address blocks: 212.80.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:e4:d2:69:3b:92:1a:b1:8b:76:1e:37:44:ee:de:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jul 20 14:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6be9b5c81839835ad7759b8521402e25adcae4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:fd:42:61:94:8f:b5:41:cb:e1:91:18:36:
a3:ca:95:70:bd:37:42:f0:86:a5:41:41:0c:fa:d4:
b5:9c:82:a4:cf:72:3c:cc:50:2c:0e:aa:85:72:0a:
9e:19:e7:16:e1:a4:60:cc:1a:3d:a5:da:33:ae:79:
56:86:9a:85:73:37:0f:0a:1a:83:39:b9:c0:60:dc:
e8:fa:9c:8a:c9:fe:f0:9a:80:a8:72:29:92:6c:5b:
cf:97:d2:3a:16:75:d7:67:5f:9b:09:95:a6:e5:a6:
a8:ea:55:b6:87:bf:fd:0b:f8:c2:da:5e:96:7b:65:
cf:90:39:70:1e:51:eb:0d:0b:79:95:c4:4b:6c:b0:
ae:fe:5b:6e:49:70:d7:d6:e4:10:aa:7a:18:5e:1b:
ea:20:82:75:81:69:96:dd:50:eb:e3:1e:58:fe:04:
e4:d3:5c:e9:68:6c:44:bb:4e:3c:b6:f1:aa:00:a9:
39:76:15:ac:80:f7:95:1f:00:77:4a:e9:fa:de:5c:
ff:fc:6d:93:71:76:cb:ba:83:51:6e:4e:3c:6d:f8:
4f:d2:c7:87:8c:ff:55:eb:04:34:44:ea:ff:22:5a:
ad:47:0d:f8:b5:24:06:cf:05:60:7b:d4:dc:f5:71:
c6:17:a7:a5:4b:3e:8d:a6:bd:37:fc:37:8a:68:33:
3c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BE:9B:5C:81:83:98:35:AD:77:59:B8:52:14:02:E2:5A:DC:AE:4B
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/1r6bXIGDmDWtd1m4UhQC4lrcrks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.80.10.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:89:cd:e0:de:9e:9d:28:11:36:af:6d:25:b9:7f:05:31:5e:
12:85:ca:bf:ae:d2:94:ee:e2:7a:d3:29:58:0a:a8:0b:bf:5c:
6c:e2:ad:73:d9:d4:fa:0b:ce:64:a7:1f:da:c2:cb:00:e6:65:
ee:72:ca:70:dc:8c:cf:ec:10:aa:c6:da:a4:32:ba:4d:bc:10:
79:02:c8:c2:ac:36:4a:95:44:04:e3:4c:ea:94:73:2a:17:e0:
b2:bf:18:32:67:4d:8e:ab:9e:9b:6f:05:a1:7d:a0:95:cf:7a:
af:4c:ed:c5:f4:6e:b4:7a:76:06:57:96:b9:90:1b:16:60:77:
86:76:84:a8:8b:79:14:fb:db:11:74:ee:a4:c1:a3:e9:72:98:
cd:2d:a9:f8:09:af:46:f3:d5:84:94:ac:ad:e0:3f:1f:9b:40:
a9:5f:82:fb:bf:0c:9c:cf:4d:ce:ab:e5:c4:68:e7:9d:97:ef:
47:38:c0:2e:bd:06:0b:a4:de:53:cc:4c:9f:c9:c9:1e:49:7b:
b1:30:a3:6d:11:05:c0:09:08:50:fc:15:19:62:b7:b4:37:c5:
a7:c9:73:d9:90:49:41:66:59:e4:21:e7:44:e7:55:92:81:d9:
a6:f7:60:0c:2f:d9:f3:00:b8:33:07:f8:d4:91:d8:f7:ce:e7:
6b:fc:9e:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9/5NJpO5IasYt2HjdE7t5IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjYwNzIwMTQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmJlOWI1YzgxODM5ODM1YWQ3NzU5Yjg1MjE0MDJlMjVhZGNhZTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtor9QmGUj7VBy+GRGDajypVwvTdC
8IalQUEM+tS1nIKkz3I8zFAsDqqFcgqeGecW4aRgzBo9pdozrnlWhpqFczcPChqD
ObnAYNzo+pyKyf7wmoCocimSbFvPl9I6FnXXZ1+bCZWm5aao6lW2h7/9C/jC2l6W
e2XPkDlwHlHrDQt5lcRLbLCu/ltuSXDX1uQQqnoYXhvqIIJ1gWmW3VDr4x5Y/gTk
01zpaGxEu048tvGqAKk5dhWsgPeVHwB3Sun63lz//G2TcXbLuoNRbk48bfhP0seH
jP9V6wQ0ROr/IlqtRw34tSQGzwVge9Tc9XHGF6elSz6Npr03/DeKaDM8HQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNa+m1yBg5g1rXdZuFIUAuJa3K5LMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvMXI2YlhJR0RtRFd0ZDFtNFVoUUM0bHJjcmtzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1FAKMA0G
CSqGSIb3DQEBCwUAA4IBAQBMic3g3p6dKBE2r20luX8FMV4Shcq/rtKU7uJ60ylY
CqgLv1xs4q1z2dT6C85kpx/awssA5mXucspw3IzP7BCqxtqkMrpNvBB5AsjCrDZK
lUQE40zqlHMqF+CyvxgyZ02Oq56bbwWhfaCVz3qvTO3F9G60enYGV5a5kBsWYHeG
doSoi3kU+9sRdO6kwaPpcpjNLan4Ca9G89WElKyt4D8fm0CpX4L7vwycz03Oq+XE
aOedl+9HOMAuvQYLpN5TzEyfyckeSXuxMKNtEQXACQhQ/BUZYre0N8WnyXPZkElB
ZlnkIedE51WSgdmm92AML9nzALgzB/jUkdj3zudr/J5j
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:56:24 2026 by rpki-client