Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/_6NrDgKNFt-wjQEwXn-gKe1aMQQ.roa
File: _6NrDgKNFt-wjQEwXn-gKe1aMQQ.roa (raw, json)
Hash identifier: 7/j31gFLLoFpzBaUYv4CkvmCsZ1A3Xyb0eknOVY9vi4=
Subject key identifier: FF:A3:6B:0E:02:8D:16:DF:B0:8D:01:30:5E:7F:A0:29:ED:5A:31:04
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 01A1211CC3469F8519D0F98786F0681D346D
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/_6NrDgKNFt-wjQEwXn-gKe1aMQQ.roa
Signing time: Fri 09 Oct 2026 14:41:35 +0000
ROA not before: Fri 09 Oct 2026 14:41:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 194.165.27.0/24 maxlen: 24
194.169.48.0/24 maxlen: 24
194.169.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:1c:c3:46:9f:85:19:d0:f9:87:86:f0:68:1d:34:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Oct 9 14:41:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffa36b0e028d16dfb08d01305e7fa029ed5a3104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7a:ad:39:5e:cd:a7:9e:1d:db:1b:74:b4:68:
d3:0d:d0:25:bd:0b:59:e4:83:cf:90:db:6c:60:3f:
c2:04:ba:72:70:13:68:43:9d:16:40:ae:94:87:b8:
59:27:d5:15:b2:f9:2c:0a:44:9c:c4:74:d4:a6:3e:
f0:b0:0c:11:54:b5:03:be:8d:eb:b7:8a:7b:8f:79:
82:2e:05:96:a8:58:dd:de:fd:60:09:c9:68:2a:af:
fd:c3:01:a2:ef:c2:db:e5:ce:10:1a:a4:4c:45:8c:
b0:b2:46:f1:c6:24:aa:6c:b1:f6:0f:55:e5:f7:be:
c6:bf:1f:e1:49:f9:80:f8:fc:eb:39:79:8f:dd:73:
a2:fd:de:2d:b6:d7:93:b9:db:5d:55:df:18:c4:89:
df:e7:02:79:fd:72:fa:41:38:76:fb:11:f4:de:e7:
0d:b7:0e:43:93:38:c5:a5:a0:2a:1f:2f:f8:4b:9c:
47:18:56:3c:eb:35:37:a9:25:04:1b:4a:bc:97:d6:
4d:ad:92:20:4c:77:b5:e6:42:36:d6:8d:70:97:c2:
04:b1:53:ce:87:cd:cb:51:28:98:07:d8:9d:8d:83:
99:7f:ab:08:64:f3:a3:ea:c1:38:ab:1f:c0:f0:9c:
4f:94:8f:00:20:ed:20:ca:fa:c4:3a:f7:75:3c:c9:
9d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A3:6B:0E:02:8D:16:DF:B0:8D:01:30:5E:7F:A0:29:ED:5A:31:04
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/_6NrDgKNFt-wjQEwXn-gKe1aMQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.27.0/24
194.169.48.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:e8:57:1c:53:70:06:0c:19:6c:ae:c7:f1:33:5a:de:cc:11:
6c:c5:72:aa:88:c0:be:1b:f2:6c:3c:f2:bc:23:83:b9:36:8c:
55:3d:35:04:d2:75:01:f9:8c:22:b9:64:83:bb:63:8d:f9:1b:
b8:f6:fa:f6:eb:42:75:a2:07:09:14:6c:8f:f5:cb:d5:68:ef:
db:47:90:30:db:d5:c8:c4:4a:17:85:2f:23:30:97:2a:30:3b:
d8:52:cd:3c:08:a8:f2:d2:01:d8:2e:95:92:51:5c:d0:de:12:
6e:ad:66:10:40:64:3c:10:9e:48:a9:c9:37:63:fe:40:15:b9:
8e:07:59:09:d2:17:ef:8d:25:5b:4b:46:39:e6:85:11:1d:8d:
11:12:bb:63:8b:5d:09:83:cb:ca:2a:63:5f:99:2b:50:14:bf:
bd:6a:00:88:96:bd:17:aa:5c:da:37:16:88:e9:95:f2:6f:c2:
6a:b3:c3:76:ec:05:24:6c:3e:a7:35:91:0a:59:40:cf:6c:b1:
c8:80:00:1f:a2:eb:f9:51:f2:52:7e:45:3d:f8:b9:00:4e:f4:
0d:d1:c8:5d:10:be:e0:6a:da:ab:94:82:2b:d1:7b:f2:c6:4e:
62:98:2d:bb:12:d6:7d:da:60:ce:f3:e7:f4:ff:5f:36:90:9a:
12:5b:cf:9c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaEhHMNGn4UZ0PmHhvBoHTRtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ODI0N2QzZjgxNDcyZGJiYTA2ZGJlYTliZDE5Yzc4NWQx
OGJhYmUwHhcNMjYxMDA5MTQ0MTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmEzNmIwZTAyOGQxNmRmYjA4ZDAxMzA1ZTdmYTAyOWVkNWEzMTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XqtOV7Np54d2xt0tGjTDdAlvQtZ
5IPPkNtsYD/CBLpycBNoQ50WQK6Uh7hZJ9UVsvksCkScxHTUpj7wsAwRVLUDvo3r
t4p7j3mCLgWWqFjd3v1gCcloKq/9wwGi78Lb5c4QGqRMRYywskbxxiSqbLH2D1Xl
977Gvx/hSfmA+PzrOXmP3XOi/d4ttteTudtdVd8YxInf5wJ5/XL6QTh2+xH03ucN
tw5DkzjFpaAqHy/4S5xHGFY86zU3qSUEG0q8l9ZNrZIgTHe15kI21o1wl8IEsVPO
h83LUSiYB9idjYOZf6sIZPOj6sE4qx/A8JxPlI8AIO0gyvrEOvd1PMmdUQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP+jaw4CjRbfsI0BMF5/oCntWjEEMB8GA1UdIwQY
MBaAFNmCR9P4FHLbugbb6pvRnHhdGLq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgt
YTMwMzI2MTU2NjBjLzEvXzZOckRnS05GdC13alFFd1huLWdLZTFhTVFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgtYTMwMzI2MTU2NjBj
LzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwqUbAwQB
wqkwMA0GCSqGSIb3DQEBCwUAA4IBAQBO6FccU3AGDBlsrsfxM1rezBFsxXKqiMC+
G/JsPPK8I4O5NoxVPTUE0nUB+YwiuWSDu2ON+Ru49vr260J1ogcJFGyP9cvVaO/b
R5Aw29XIxEoXhS8jMJcqMDvYUs08CKjy0gHYLpWSUVzQ3hJurWYQQGQ8EJ5Iqck3
Y/5AFbmOB1kJ0hfvjSVbS0Y55oURHY0RErtji10Jg8vKKmNfmStQFL+9agCIlr0X
qlzaNxaI6ZXyb8Jqs8N27AUkbD6nNZEKWUDPbLHIgAAfouv5UfJSfkU9+LkATvQN
0chdEL7gatqrlIIr0Xvyxk5imC27EtZ92mDO8+f0/182kJoSW8+c
-----END CERTIFICATE-----
Generated at Wed Oct 14 20:43:36 2026 by rpki-client