Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/6NBg1-7xGbYHlPC56A6S8nT4oNQ.roa
File: 6NBg1-7xGbYHlPC56A6S8nT4oNQ.roa (raw, json)
Hash identifier: j2L42vdBQbRReK+YQNWWtw4Bs3Zes4Tm7+MAnJQWLyw=
Subject key identifier: E8:D0:60:D7:EE:F1:19:B6:07:94:F0:B9:E8:0E:92:F2:74:F8:A0:D4
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A1583525E346240B69921EE28AFA1CE002
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/6NBg1-7xGbYHlPC56A6S8nT4oNQ.roa
Signing time: Tue 20 Oct 2026 07:27:20 +0000
ROA not before: Tue 20 Oct 2026 07:27:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402306
IP address blocks: 85.232.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:35:25:e3:46:24:0b:69:92:1e:e2:8a:fa:1c:e0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Oct 20 07:27:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8d060d7eef119b60794f0b9e80e92f274f8a0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:df:e4:9d:bf:36:f5:1b:4f:7c:03:35:9f:7d:
2a:42:97:8a:21:2e:4a:f4:97:c4:2f:f9:4e:e7:76:
fa:96:d0:40:06:6d:da:a1:f1:c2:92:96:dd:84:0a:
e0:91:36:2d:37:fd:c7:ed:21:1c:41:7f:95:7c:3c:
f7:d7:b2:4f:81:93:ee:2e:60:3b:ef:95:f7:0b:f3:
35:ea:3e:24:aa:24:fc:93:a1:4d:d9:3e:23:11:a0:
2f:ba:84:ba:38:ab:2a:15:e1:08:fe:2e:ae:2e:28:
81:f5:5a:8a:e1:08:99:0c:d4:87:a4:04:ce:0f:f7:
f1:b0:8d:b4:69:82:b0:1c:3b:6c:9d:b3:06:43:8f:
ef:21:81:5e:bd:da:73:51:d1:ab:52:a0:23:21:ff:
fb:0e:b9:5f:6b:35:a4:67:2c:f8:59:9d:3a:58:66:
19:79:d7:f2:4b:cf:f6:b3:85:29:43:72:e0:30:cd:
18:d1:91:40:6c:d6:81:4d:e8:d9:30:08:e9:48:c5:
ff:31:ec:8e:2a:20:f2:c9:ed:33:6d:10:41:4b:87:
76:d0:47:f7:c5:96:f2:a3:92:14:07:61:b1:36:85:
3b:2b:d8:44:2f:31:5c:bf:69:69:ea:52:45:e5:8d:
aa:ef:c5:45:5a:49:60:03:de:a7:6d:ff:48:90:91:
fb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D0:60:D7:EE:F1:19:B6:07:94:F0:B9:E8:0E:92:F2:74:F8:A0:D4
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/6NBg1-7xGbYHlPC56A6S8nT4oNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.191.0/24
Signature Algorithm: sha256WithRSAEncryption
80:4c:b0:ff:9f:b4:0f:c6:55:95:c2:f1:c7:28:2c:de:9f:c6:
31:1e:49:c7:c5:4e:2a:29:0d:3d:6c:38:d2:5e:de:4d:78:06:
35:7a:3d:1e:23:e7:45:09:f7:f7:5b:c2:cf:0e:f3:93:d0:0a:
66:cc:4c:72:26:49:19:e8:36:68:2b:40:6b:0a:66:72:0c:19:
d2:40:fa:13:95:f6:12:9d:ef:25:e7:41:cd:99:55:28:8f:2d:
a4:b3:18:75:cd:6f:2d:41:48:e5:06:53:fe:d7:2d:cc:a0:e0:
d9:3f:02:85:92:e7:d1:62:96:d2:b8:34:d7:83:3c:d1:68:17:
ed:f2:0e:ae:7a:5e:b5:07:d6:2d:a5:e9:73:c4:70:c9:82:e7:
b6:96:70:14:4c:6c:5c:1b:4f:bf:73:e7:e1:f1:5e:ba:68:54:
09:a8:e7:2e:94:10:08:06:38:61:3f:fb:59:34:26:cc:41:bb:
d8:de:e0:d8:86:2f:82:08:02:95:c6:6a:de:07:d1:75:1f:74:
50:75:8c:c5:36:33:4b:07:06:b7:18:2e:30:d9:73:91:72:49:
ef:8b:fa:c3:f1:06:e5:73:8a:f1:8d:83:5e:39:63:53:04:f7:
3b:ff:c4:ac:77:e9:14:ce:83:98:f3:7e:c2:67:e9:5b:66:70:
cb:d2:d8:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFYNSXjRiQLaZIe4or6HOACMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNWUwMjMwYmU3OTllNDQ4MjljODcyMGNhMzgzNDcwNDU0
OTRlMjAwHhcNMjYxMDIwMDcyNzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGQwNjBkN2VlZjExOWI2MDc5NGYwYjllODBlOTJmMjc0ZjhhMGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9/knb829RtPfAM1n30qQpeKIS5K
9JfEL/lO53b6ltBABm3aofHCkpbdhArgkTYtN/3H7SEcQX+VfDz317JPgZPuLmA7
75X3C/M16j4kqiT8k6FN2T4jEaAvuoS6OKsqFeEI/i6uLiiB9VqK4QiZDNSHpATO
D/fxsI20aYKwHDtsnbMGQ4/vIYFevdpzUdGrUqAjIf/7DrlfazWkZyz4WZ06WGYZ
edfyS8/2s4UpQ3LgMM0Y0ZFAbNaBTejZMAjpSMX/MeyOKiDyye0zbRBBS4d20Ef3
xZbyo5IUB2GxNoU7K9hELzFcv2lp6lJF5Y2q78VFWklgA96nbf9IkJH7rQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOjQYNfu8Rm2B5TwuegOkvJ0+KDUMB8GA1UdIwQY
MBaAFG9eAjC+eZ5EgpyHIMo4NHBFSU4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGIt
YmE3YzdkODE5MGNhLzEvNk5CZzEtN3hHYllIbFBDNTZBNlM4blQ0b05RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGItYmE3YzdkODE5MGNh
LzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVei/MA0G
CSqGSIb3DQEBCwUAA4IBAQCATLD/n7QPxlWVwvHHKCzen8YxHknHxU4qKQ09bDjS
Xt5NeAY1ej0eI+dFCff3W8LPDvOT0ApmzExyJkkZ6DZoK0BrCmZyDBnSQPoTlfYS
ne8l50HNmVUojy2ksxh1zW8tQUjlBlP+1y3MoODZPwKFkufRYpbSuDTXgzzRaBft
8g6uel61B9YtpelzxHDJgue2lnAUTGxcG0+/c+fh8V66aFQJqOculBAIBjhhP/tZ
NCbMQbvY3uDYhi+CCAKVxmreB9F1H3RQdYzFNjNLBwa3GC4w2XORcknvi/rD8Qbl
c4rxjYNeOWNTBPc7/8Ssd+kUzoOY837CZ+lbZnDL0tgB
-----END CERTIFICATE-----
Generated at Thu Nov 5 02:42:44 2026 by rpki-client