Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/6_HtVCNf0Z8RR7WQweJmunkcFhQ.roa
File: 6_HtVCNf0Z8RR7WQweJmunkcFhQ.roa (raw, json)
Hash identifier: H//sNvbW8q6Jr+E30OLRetMY0kia9eUAQ2KhFNgiTUs=
Subject key identifier: EB:F1:ED:54:23:5F:D1:9F:11:47:B5:90:C1:E2:66:BA:79:1C:16:14
Certificate issuer: /CN=93e272611139f15d037d7a4be545696cd2853867
Certificate serial: 019F3CD435FDDD894AAB1FFF0F8F0897CE6B
Authority key identifier: 93:E2:72:61:11:39:F1:5D:03:7D:7A:4B:E5:45:69:6C:D2:85:38:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/6_HtVCNf0Z8RR7WQweJmunkcFhQ.roa
Signing time: Tue 07 Jul 2026 13:46:08 +0000
ROA not before: Tue 07 Jul 2026 13:46:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8126
IP address blocks: 209.248.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:d4:35:fd:dd:89:4a:ab:1f:ff:0f:8f:08:97:ce:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e272611139f15d037d7a4be545696cd2853867
Validity
Not Before: Jul 7 13:46:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebf1ed54235fd19f1147b590c1e266ba791c1614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ca:9b:12:96:dd:57:71:f9:9b:20:b5:4d:47:
28:8d:e2:44:95:18:99:cc:e8:e9:a2:21:a1:ca:a4:
86:d4:3b:8e:0c:35:a3:91:ce:bf:2f:95:a4:5b:7d:
fe:cb:8c:8a:35:ac:19:0b:14:7e:60:9d:17:69:59:
42:86:98:ed:93:a6:56:82:84:05:d8:f0:75:72:d7:
30:63:cc:40:4e:37:76:8c:5b:4c:d6:30:7d:64:e8:
b2:8f:7d:dc:a8:c7:f4:12:fc:dd:72:0a:10:14:00:
56:19:f4:77:34:68:c0:00:ce:1f:f6:ab:50:09:23:
9b:e6:d2:88:61:b0:d0:d5:9b:e9:fe:48:48:07:bc:
b6:e7:55:13:57:66:45:0e:ad:4d:67:d0:f5:b2:73:
6e:2f:ea:13:d5:3e:19:a1:a6:53:69:80:46:d4:0e:
82:dc:53:70:d7:75:be:54:ea:db:b7:6a:f5:9e:a2:
e2:dc:ad:10:78:ce:2e:b3:9b:29:c4:0b:c1:89:d1:
2c:fc:d8:fe:d8:16:90:55:fa:da:a3:f3:96:69:1f:
e9:96:e8:02:35:c0:07:93:66:b0:25:27:52:f9:ea:
41:21:4d:c8:65:95:8c:ed:c8:04:0e:78:00:83:7e:
e0:7f:7e:9d:82:bc:aa:57:57:20:78:6d:1a:ac:9c:
cd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F1:ED:54:23:5F:D1:9F:11:47:B5:90:C1:E2:66:BA:79:1C:16:14
X509v3 Authority Key Identifier:
keyid:93:E2:72:61:11:39:F1:5D:03:7D:7A:4B:E5:45:69:6C:D2:85:38:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/6_HtVCNf0Z8RR7WQweJmunkcFhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.248.32.0/19
Signature Algorithm: sha256WithRSAEncryption
68:d5:53:b0:f0:a8:26:17:16:c8:bf:2c:e9:04:7b:1d:2d:bf:
27:86:bf:79:e8:17:ad:2e:59:bf:4e:19:79:26:4d:2b:2c:14:
11:98:28:96:a3:cd:c5:38:e7:b8:a6:4c:a0:68:fa:8d:c2:53:
43:9c:1a:82:86:64:cf:53:5c:bc:83:30:40:2f:da:7b:2f:12:
12:ee:e4:37:cf:d4:7a:81:7d:5c:ba:2c:92:c4:5a:6c:97:b1:
72:02:34:5a:4f:f0:a8:79:d6:78:cd:a0:16:05:c3:39:ae:04:
9b:94:30:b5:ee:9b:17:6e:d7:cb:09:20:4c:8b:16:4c:58:66:
6a:23:08:ab:05:55:b1:61:b0:7a:85:80:b7:11:38:e1:d3:b5:
1a:b3:9a:6f:ec:30:4f:4c:54:a3:88:e8:fd:ee:4b:fa:22:96:
37:4b:d1:e6:dc:5f:73:b8:9a:b8:19:18:a5:e9:c9:5d:f9:53:
64:00:a3:87:bf:85:fe:9d:1c:69:8c:2c:b7:d0:cc:05:af:99:
f3:7b:e7:da:4f:f6:5a:7c:68:0f:cb:c8:d5:dd:75:a8:d6:4f:
9b:f0:1b:35:ab:fb:cf:c8:f3:89:a4:2b:79:9b:3f:be:33:b5:
32:a2:d1:46:0f:0b:aa:d8:78:38:7a:79:3b:18:3a:bc:46:82:
20:83:80:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ881DX93YlKqx//D48Il85rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZTI3MjYxMTEzOWYxNWQwMzdkN2E0YmU1NDU2OTZjZDI4
NTM4NjcwHhcNMjYwNzA3MTM0NjA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmYxZWQ1NDIzNWZkMTlmMTE0N2I1OTBjMWUyNjZiYTc5MWMxNjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sqbEpbdV3H5myC1TUcojeJElRiZ
zOjpoiGhyqSG1DuODDWjkc6/L5WkW33+y4yKNawZCxR+YJ0XaVlChpjtk6ZWgoQF
2PB1ctcwY8xATjd2jFtM1jB9ZOiyj33cqMf0EvzdcgoQFABWGfR3NGjAAM4f9qtQ
CSOb5tKIYbDQ1Zvp/khIB7y251UTV2ZFDq1NZ9D1snNuL+oT1T4ZoaZTaYBG1A6C
3FNw13W+VOrbt2r1nqLi3K0QeM4us5spxAvBidEs/Nj+2BaQVfrao/OWaR/plugC
NcAHk2awJSdS+epBIU3IZZWM7cgEDngAg37gf36dgryqV1cgeG0arJzNSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOvx7VQjX9GfEUe1kMHiZrp5HBYUMB8GA1UdIwQY
MBaAFJPicmEROfFdA316S+VFaWzShThnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1KeVlSRTU4VjBEZlhwTDVVVnBiTktGT0djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9kYjQyYWItNDljYy00MjdkLTg2Y2Et
NDdhMmMyNTBlNWFhLzEvNl9IdFZDTmYwWjhSUjdXUXdlSm11bmtjRmhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9kYjQyYWItNDljYy00MjdkLTg2Y2EtNDdhMmMyNTBlNWFh
LzEvay1KeVlSRTU4VjBEZlhwTDVVVnBiTktGT0djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0fggMA0G
CSqGSIb3DQEBCwUAA4IBAQBo1VOw8KgmFxbIvyzpBHsdLb8nhr956BetLlm/Thl5
Jk0rLBQRmCiWo83FOOe4pkygaPqNwlNDnBqChmTPU1y8gzBAL9p7LxIS7uQ3z9R6
gX1cuiySxFpsl7FyAjRaT/CoedZ4zaAWBcM5rgSblDC17psXbtfLCSBMixZMWGZq
IwirBVWxYbB6hYC3ETjh07Uas5pv7DBPTFSjiOj97kv6IpY3S9Hm3F9zuJq4GRil
6cld+VNkAKOHv4X+nRxpjCy30MwFr5nze+faT/ZafGgPy8jV3XWo1k+b8Bs1q/vP
yPOJpCt5mz++M7UyotFGDwuq2Hg4enk7GDq8RoIgg4CD
-----END CERTIFICATE-----
Generated at Mon Jul 13 13:47:07 2026 by rpki-client