Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/6-4zWGnIR-C1798fnpiFbscWIME.roa
File: 6-4zWGnIR-C1798fnpiFbscWIME.roa (raw, json)
Hash identifier: OCyRLE+b/m/XR38UgcQGMiT8oc39s0bet+zMo7PHL9I=
Subject key identifier: EB:EE:33:58:69:C8:47:E0:B5:EF:DF:1F:9E:98:85:6E:C7:16:20:C1
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 019F36E7BA57A0B51FCC0975E2BFDE03F5F7
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/6-4zWGnIR-C1798fnpiFbscWIME.roa
Signing time: Mon 06 Jul 2026 10:09:43 +0000
ROA not before: Mon 06 Jul 2026 10:09:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 270218
IP address blocks: 185.240.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:e7:ba:57:a0:b5:1f:cc:09:75:e2:bf:de:03:f5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Jul 6 10:09:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebee335869c847e0b5efdf1f9e98856ec71620c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:61:eb:41:11:56:bd:b1:43:e9:18:7a:64:bd:
64:58:a9:33:7b:65:1a:c7:7a:36:6a:4d:92:ac:13:
82:08:41:0e:33:95:a0:7b:a2:38:84:a4:17:1e:2e:
11:17:16:3f:6e:4c:65:a1:62:3b:65:ec:ac:55:90:
c2:ab:eb:6f:b0:50:97:3e:f8:73:fb:ee:09:7a:b1:
cd:73:e1:cc:f3:9a:7a:46:02:df:58:ec:46:ba:9e:
d7:5b:a0:56:a2:66:c8:a9:11:fe:23:e4:fd:da:4c:
a1:26:90:17:23:f1:6e:f3:f6:9e:c7:f8:5c:5d:10:
22:50:f1:de:6e:1f:7e:30:34:16:75:98:5e:b4:7d:
82:7a:43:51:eb:19:df:a8:47:3b:5d:b2:73:8a:09:
ec:ca:77:3e:36:b3:54:03:f3:7f:d9:00:08:5e:9c:
7a:8e:8f:72:7e:47:80:12:c0:58:32:bf:09:ad:e9:
df:24:3c:9e:f5:11:d6:58:57:24:f8:8c:c1:9d:f1:
8f:37:cb:19:57:f4:02:d5:44:32:36:c9:61:d6:00:
fb:c6:25:40:10:0c:2a:77:7e:ba:b2:f2:35:f3:43:
e0:b5:6e:38:ce:8a:b3:ab:89:0c:57:cc:ab:31:d5:
d6:17:ff:99:4a:6c:7f:43:c3:95:91:91:b8:31:37:
59:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EE:33:58:69:C8:47:E0:B5:EF:DF:1F:9E:98:85:6E:C7:16:20:C1
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/6-4zWGnIR-C1798fnpiFbscWIME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.167.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:a3:23:d5:82:f4:f4:95:94:7f:cf:bc:86:df:05:2a:58:bf:
51:ce:c9:25:2b:d2:48:ae:2e:5a:8b:af:c0:a8:f8:9b:62:b6:
1d:db:58:4f:c2:38:52:4c:94:b5:b2:d1:72:b2:dc:ed:62:3b:
e7:48:da:96:0c:24:41:01:8e:f2:7f:1c:98:fe:d1:2a:a2:35:
01:a2:d7:f9:15:2c:ec:76:4d:1b:8a:62:32:0f:bd:61:62:e6:
12:0c:91:e9:a4:df:39:16:0d:2b:9b:e8:cd:bb:1c:8e:81:bf:
2f:5c:37:91:a7:62:31:18:db:09:3c:d1:5c:68:98:1d:0e:f2:
aa:a5:31:d4:c9:6b:7b:af:4c:3a:64:a2:de:89:e5:85:eb:79:
28:68:3f:8d:97:da:bb:78:71:cd:69:37:81:de:0b:13:75:6a:
d3:c2:9b:19:03:2e:fb:08:80:f2:51:b4:ea:14:e9:dc:93:ac:
e6:11:81:29:5d:81:8f:8b:05:28:1c:97:d2:0f:89:48:26:ee:
98:aa:9a:5d:87:12:12:08:66:4b:e1:69:7b:c0:15:45:f9:d8:
2e:93:b7:9d:4d:86:a2:75:d3:1b:99:99:39:0e:d9:27:4a:23:
ac:48:e9:4c:2a:43:6c:11:86:f2:23:7c:b2:8e:37:fd:7d:0d:
90:92:da:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8257pXoLUfzAl14r/eA/X3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZTU0OWZkY2VlYjAyOTEyYzhhODc0MWM4MTY4MDZiYmUx
OWM0NDgwHhcNMjYwNzA2MTAwOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmVlMzM1ODY5Yzg0N2UwYjVlZmRmMWY5ZTk4ODU2ZWM3MTYyMGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32HrQRFWvbFD6Rh6ZL1kWKkze2Ua
x3o2ak2SrBOCCEEOM5Wge6I4hKQXHi4RFxY/bkxloWI7ZeysVZDCq+tvsFCXPvhz
++4JerHNc+HM85p6RgLfWOxGup7XW6BWombIqRH+I+T92kyhJpAXI/Fu8/aex/hc
XRAiUPHebh9+MDQWdZhetH2CekNR6xnfqEc7XbJzignsync+NrNUA/N/2QAIXpx6
jo9yfkeAEsBYMr8JrenfJDye9RHWWFck+IzBnfGPN8sZV/QC1UQyNslh1gD7xiVA
EAwqd366svI180PgtW44zoqzq4kMV8yrMdXWF/+ZSmx/Q8OVkZG4MTdZ7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOvuM1hpyEfgte/fH56YhW7HFiDBMB8GA1UdIwQY
MBaAFMDlSf3O6wKRLIqHQcgWgGu+GcRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMt
YWQyZmRhNDc5ODhlLzEvNi00eldHbklSLUMxNzk4Zm5waUZic2NXSU1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMtYWQyZmRhNDc5ODhl
LzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufCnMA0G
CSqGSIb3DQEBCwUAA4IBAQB7oyPVgvT0lZR/z7yG3wUqWL9RzsklK9JIri5ai6/A
qPibYrYd21hPwjhSTJS1stFystztYjvnSNqWDCRBAY7yfxyY/tEqojUBotf5FSzs
dk0bimIyD71hYuYSDJHppN85Fg0rm+jNuxyOgb8vXDeRp2IxGNsJPNFcaJgdDvKq
pTHUyWt7r0w6ZKLeieWF63koaD+Nl9q7eHHNaTeB3gsTdWrTwpsZAy77CIDyUbTq
FOnck6zmEYEpXYGPiwUoHJfSD4lIJu6YqppdhxISCGZL4Wl7wBVF+dguk7edTYai
ddMbmZk5DtknSiOsSOlMKkNsEYbyI3yyjjf9fQ2QktrT
-----END CERTIFICATE-----
Generated at Sat Jul 18 04:01:50 2026 by rpki-client