Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/E6wT0b-k1u6FR3wlv4qrEUuXVus.roa
File: E6wT0b-k1u6FR3wlv4qrEUuXVus.roa (raw, json)
Hash identifier: QZbCRhopOeDIiKUt1DVyRJURDTW9xWZnCSsr7ayZmWw=
Subject key identifier: 13:AC:13:D1:BF:A4:D6:EE:85:47:7C:25:BF:8A:AB:11:4B:97:56:EB
Certificate issuer: /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Certificate serial: 019E644B4D272B5DA24480A4219AACBFFA70
Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/E6wT0b-k1u6FR3wlv4qrEUuXVus.roa
Signing time: Tue 26 May 2026 12:38:36 +0000
ROA not before: Tue 26 May 2026 12:38:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49581
IP address blocks: 80.75.212.0/24 maxlen: 24
80.91.223.0/24 maxlen: 24
91.212.121.0/24 maxlen: 24
146.19.191.0/24 maxlen: 24
176.97.210.0/24 maxlen: 24
185.91.127.0/24 maxlen: 24
193.111.248.0/24 maxlen: 24
193.111.249.0/24 maxlen: 24
193.111.250.0/24 maxlen: 24
193.141.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 May 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:64:4b:4d:27:2b:5d:a2:44:80:a4:21:9a:ac:bf:fa:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Validity
Not Before: May 26 12:38:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13ac13d1bfa4d6ee85477c25bf8aab114b9756eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f0:a8:a2:fe:d7:91:00:29:01:30:c0:70:35:
e7:1a:2f:94:cd:83:b2:af:ed:1e:e0:d6:75:00:92:
42:75:e5:d3:3f:c7:c8:d6:af:b4:41:da:2e:81:61:
d3:87:b1:e4:0c:5e:b9:90:c4:90:bb:64:c2:db:0b:
a1:56:b9:8f:eb:e5:45:2d:42:80:e7:e0:b5:31:05:
0f:2b:18:2f:7b:9b:25:8e:e7:4e:78:36:58:90:d1:
c4:dd:36:5c:b3:63:41:d6:90:3d:cd:c3:ee:0e:68:
c1:ee:a9:9c:3e:d3:ad:3e:0f:48:07:40:9c:25:aa:
f9:d7:5d:de:6c:00:dc:3d:be:c1:db:46:ad:68:d1:
d1:58:95:7c:41:97:57:7d:9f:b2:bd:21:75:c3:1b:
80:b2:bd:d2:da:d0:0d:42:21:18:de:10:93:ad:81:
3c:84:dd:55:a7:6e:6a:b4:5e:83:ce:92:36:04:d2:
aa:ca:3e:20:d6:9a:3c:6e:c4:b7:74:9e:e3:8a:a9:
1c:94:ff:0f:e9:6a:ea:dd:2e:68:fc:25:cd:47:42:
94:4b:0b:ba:e5:63:15:6a:b9:6d:3e:71:76:9d:7b:
9f:0b:8f:52:33:13:c6:c5:25:42:3a:4c:ef:22:08:
32:8d:05:80:9a:46:47:54:74:97:a5:23:42:4a:ac:
e7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AC:13:D1:BF:A4:D6:EE:85:47:7C:25:BF:8A:AB:11:4B:97:56:EB
X509v3 Authority Key Identifier:
keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/E6wT0b-k1u6FR3wlv4qrEUuXVus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.212.0/24
80.91.223.0/24
91.212.121.0/24
146.19.191.0/24
176.97.210.0/24
185.91.127.0/24
193.111.248.0-193.111.250.255
193.141.60.0/24
Signature Algorithm: sha256WithRSAEncryption
62:12:ad:8c:cd:e5:47:63:73:cf:04:64:0d:4d:7b:51:01:4a:
95:7a:27:11:5b:6d:aa:a3:69:84:56:00:44:5d:d0:b9:5e:56:
a1:b0:01:8a:d3:c6:a4:f1:33:e6:43:f4:f3:58:47:c4:d6:5d:
81:1a:33:28:78:79:d8:c9:7d:ba:e8:fa:6b:7d:7f:00:f3:8e:
bc:2f:16:af:82:7f:f7:aa:d3:77:ce:ab:95:a0:0d:07:16:bc:
10:d5:95:93:e2:40:94:f9:9b:80:68:07:96:8b:ac:29:26:40:
57:74:b0:79:70:bd:a3:b5:88:db:62:1f:53:9c:b0:2c:95:02:
ef:60:e1:0c:26:5f:30:d5:a4:89:1a:99:73:a3:e8:cf:ff:2b:
b2:33:91:5d:00:e6:bb:e0:eb:db:f3:90:06:23:34:ea:5b:b6:
00:aa:eb:88:f3:76:16:29:b2:ad:a9:4c:b3:65:41:5d:b2:14:
b2:d1:0f:89:74:3b:06:e7:0f:cc:9f:7e:3a:54:58:f0:a4:e4:
38:8c:ac:52:8f:24:1d:f4:3c:87:01:f2:a9:f1:95:9c:51:4d:
70:88:37:a1:d2:a1:35:9c:6e:47:1a:de:62:65:be:8e:e9:22:
42:c4:50:9c:2a:e9:df:bc:b5:0f:6b:1c:60:0e:35:17:34:04:
c8:6d:eb:9c
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZ5kS00nK12iRICkIZqsv/pwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MWM3YjU2MDdjNTM2NjU3ZmQ1NzQ4ZjZmNjViMjRhYzEy
ZWIxN2QwHhcNMjYwNTI2MTIzODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2FjMTNkMWJmYTRkNmVlODU0NzdjMjViZjhhYWIxMTRiOTc1NmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/Coov7XkQApATDAcDXnGi+UzYOy
r+0e4NZ1AJJCdeXTP8fI1q+0QdougWHTh7HkDF65kMSQu2TC2wuhVrmP6+VFLUKA
5+C1MQUPKxgve5sljudOeDZYkNHE3TZcs2NB1pA9zcPuDmjB7qmcPtOtPg9IB0Cc
Jar5113ebADcPb7B20ataNHRWJV8QZdXfZ+yvSF1wxuAsr3S2tANQiEY3hCTrYE8
hN1Vp25qtF6DzpI2BNKqyj4g1po8bsS3dJ7jiqkclP8P6Wrq3S5o/CXNR0KUSwu6
5WMVarltPnF2nXufC49SMxPGxSVCOkzvIggyjQWAmkZHVHSXpSNCSqznmwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFBOsE9G/pNbuhUd8Jb+KqxFLl1brMB8GA1UdIwQY
MBaAFDUce1YHxTZlf9V0j29lskrBLrF9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJ4N1ZnZkZObVZfMVhTUGIyV3lTc0V1c1gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jMWZmMjEtNWFjMi00ZTUwLTkzNmMt
NjUxNzA3YzkxZmQzLzEvRTZ3VDBiLWsxdTZGUjN3bHY0cXJFVXVYVnVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9jMWZmMjEtNWFjMi00ZTUwLTkzNmMtNjUxNzA3YzkxZmQz
LzEvTlJ4N1ZnZkZObVZfMVhTUGIyV3lTc0V1c1gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAUEvUAwQA
UFvfAwQAW9R5AwQAkhO/AwQAsGHSAwQAuVt/MAwDBAPBb/gDBADBb/oDBADBjTww
DQYJKoZIhvcNAQELBQADggEBAGISrYzN5Udjc88EZA1Ne1EBSpV6JxFbbaqjaYRW
AERd0LleVqGwAYrTxqTxM+ZD9PNYR8TWXYEaMyh4edjJfbro+mt9fwDzjrwvFq+C
f/eq03fOq5WgDQcWvBDVlZPiQJT5m4BoB5aLrCkmQFd0sHlwvaO1iNtiH1OcsCyV
Au9g4QwmXzDVpIkamXOj6M//K7IzkV0A5rvg69vzkAYjNOpbtgCq64jzdhYpsq2p
TLNlQV2yFLLRD4l0OwbnD8yffjpUWPCk5DiMrFKPJB30PIcB8qnxlZxRTXCIN6HS
oTWcbkca3mJlvo7pIkLEUJwq6d+8tQ9rHGAONRc0BMht65w=
-----END CERTIFICATE-----
Generated at Thu May 28 10:57:56 2026 by rpki-client