Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/6GzTRnPNHXVRDT3xQFhGRFdIn_Y.roa
File: 6GzTRnPNHXVRDT3xQFhGRFdIn_Y.roa (raw, json)
Hash identifier: k/eqVDu9ctRvfGXfTGZ0Lbt1TvSAAJw3Wqihq5YEZ04=
Subject key identifier: E8:6C:D3:46:73:CD:1D:75:51:0D:3D:F1:40:58:46:44:57:48:9F:F6
Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Certificate serial: 01A039371BB6FB925E666895D93EB0A440E9
Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/6GzTRnPNHXVRDT3xQFhGRFdIn_Y.roa
Signing time: Tue 25 Aug 2026 13:58:27 +0000
ROA not before: Tue 25 Aug 2026 13:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 65.38.102.0/23 maxlen: 32
65.38.104.0/23 maxlen: 32
66.45.17.0/24 maxlen: 32
66.45.18.0/23 maxlen: 32
66.45.38.0/23 maxlen: 32
66.45.61.0/24 maxlen: 32
66.45.63.0/24 maxlen: 32
66.45.114.0/23 maxlen: 32
66.179.36.0/23 maxlen: 32
66.179.88.0/23 maxlen: 32
66.179.99.0/24 maxlen: 32
66.179.106.0/23 maxlen: 32
66.179.161.0/24 maxlen: 32
66.179.169.0/24 maxlen: 32
66.179.174.0/24 maxlen: 24
66.179.204.0/23 maxlen: 32
66.179.207.0/24 maxlen: 32
66.179.213.0/24 maxlen: 32
66.179.247.0/24 maxlen: 32
67.202.232.0/24 maxlen: 32
69.48.213.0/24 maxlen: 32
69.71.220.0/24 maxlen: 32
69.161.128.0/20 maxlen: 32
69.161.144.0/20 maxlen: 32
69.161.144.0/24 maxlen: 24
69.161.145.0/24 maxlen: 24
69.161.146.0/23 maxlen: 32
69.161.146.0/24 maxlen: 32
69.161.147.0/24 maxlen: 32
69.161.148.0/23 maxlen: 23
69.161.150.0/24 maxlen: 24
69.161.151.0/24 maxlen: 24
69.161.152.0/24 maxlen: 24
69.161.153.0/24 maxlen: 24
69.161.154.0/23 maxlen: 23
69.161.156.0/24 maxlen: 24
69.161.157.0/24 maxlen: 24
69.161.158.0/24 maxlen: 32
69.161.159.0/24 maxlen: 24
69.164.84.0/23 maxlen: 32
69.164.87.0/24 maxlen: 32
69.164.88.0/23 maxlen: 32
69.164.96.0/24 maxlen: 32
74.205.245.0/24 maxlen: 32
108.60.0.0/20 maxlen: 32
153.52.192.0/19 maxlen: 32
153.52.198.0/23 maxlen: 23
153.52.200.0/23 maxlen: 23
153.52.202.0/23 maxlen: 23
153.52.204.0/23 maxlen: 23
153.52.206.0/23 maxlen: 23
153.52.208.0/23 maxlen: 23
153.52.210.0/23 maxlen: 23
153.52.212.0/23 maxlen: 23
153.52.214.0/23 maxlen: 32
153.52.216.0/24 maxlen: 32
161.104.68.0/22 maxlen: 32
161.104.72.0/22 maxlen: 22
173.209.230.0/23 maxlen: 32
209.46.56.0/23 maxlen: 32
216.177.153.0/24 maxlen: 32
216.177.154.0/24 maxlen: 32
216.183.118.0/23 maxlen: 32
216.183.126.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:37:1b:b6:fb:92:5e:66:68:95:d9:3e:b0:a4:40:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Validity
Not Before: Aug 25 13:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e86cd34673cd1d75510d3df14058464457489ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ed:91:70:01:e2:70:fc:42:6d:e3:29:be:98:
da:e8:24:b1:c7:e9:f3:fe:d0:c1:07:5b:ec:6d:90:
e2:4c:f1:77:01:92:9b:87:2c:cb:85:67:93:3f:53:
64:a2:42:57:86:9f:18:84:96:c7:07:40:5e:d2:f2:
9f:cb:ee:9d:cf:2b:31:ab:4e:73:a1:fc:a1:f8:60:
f6:8f:ed:14:8a:19:41:81:fe:4c:2a:d3:6b:42:df:
9e:d4:0f:de:a8:48:4b:5b:c4:6c:5b:b6:e3:ed:21:
1b:c4:d3:50:4d:73:9d:df:b4:5c:31:5a:84:be:eb:
62:7c:75:a6:b2:11:14:68:fa:fe:72:96:88:f5:80:
ec:d2:4f:cd:5d:4e:21:0d:45:2b:97:b5:26:23:99:
93:cd:b4:61:09:75:33:4b:8f:22:49:a2:74:d3:af:
89:4f:5b:67:3f:e4:0f:cd:9b:7a:fb:b7:0c:29:8e:
79:4c:49:ee:4a:fe:06:95:18:69:7f:40:52:62:b7:
85:4a:28:e7:f3:1e:d2:6c:89:32:bd:00:e7:2d:c2:
5d:bb:fe:f8:09:a1:e4:89:8f:99:5d:2b:5b:7e:36:
5a:09:db:5c:56:47:79:5c:ad:5d:05:e3:2a:54:d8:
ee:5d:f2:02:fe:9f:0f:17:65:8a:85:c7:38:df:f0:
e2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6C:D3:46:73:CD:1D:75:51:0D:3D:F1:40:58:46:44:57:48:9F:F6
X509v3 Authority Key Identifier:
keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/6GzTRnPNHXVRDT3xQFhGRFdIn_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.38.102.0-65.38.105.255
66.45.17.0-66.45.19.255
66.45.38.0/23
66.45.61.0/24
66.45.63.0/24
66.45.114.0/23
66.179.36.0/23
66.179.88.0/23
66.179.99.0/24
66.179.106.0/23
66.179.161.0/24
66.179.169.0/24
66.179.174.0/24
66.179.204.0/23
66.179.207.0/24
66.179.213.0/24
66.179.247.0/24
67.202.232.0/24
69.48.213.0/24
69.71.220.0/24
69.161.128.0/19
69.164.84.0/23
69.164.87.0-69.164.89.255
69.164.96.0/24
74.205.245.0/24
108.60.0.0/20
153.52.192.0/19
161.104.68.0-161.104.75.255
173.209.230.0/23
209.46.56.0/23
216.177.153.0-216.177.154.255
216.183.118.0/23
216.183.126.0/23
Signature Algorithm: sha256WithRSAEncryption
66:83:f9:7e:31:15:a3:7b:b4:ff:09:0e:26:0b:1e:1f:86:3f:
62:4f:c0:5b:5c:b5:31:dd:6e:dd:5f:97:79:0c:18:9e:c8:3d:
d8:4e:94:e2:a6:c2:51:06:12:12:1e:8d:55:7f:bd:b2:e5:bb:
d4:10:1f:f1:2d:ae:66:66:94:f6:95:a1:46:33:a4:99:8a:53:
67:82:f1:c5:7b:69:1f:91:4f:87:c8:4d:23:f0:f9:3c:84:40:
3f:cc:98:11:d3:5d:e2:e3:0f:16:0f:3d:11:6c:f7:a6:62:40:
d9:db:b8:c4:cd:b9:34:b9:68:a3:78:b4:36:fb:29:44:3c:25:
6c:59:db:92:65:bb:76:ea:d2:b7:6b:9e:f5:b6:dd:9a:8a:fb:
44:30:c1:84:5b:cb:d6:d6:94:7d:67:a9:7a:b5:18:3c:2c:65:
73:6d:ab:e1:df:92:45:4b:34:68:e0:4b:22:37:a0:90:da:b2:
4b:f0:cb:da:5b:2a:b7:f2:10:f4:a1:1b:32:a1:04:a8:06:38:
82:6e:2f:c4:32:d8:14:e0:2a:6c:96:d2:47:9b:d7:f3:90:e0:
08:f3:b0:78:9a:0b:d1:a2:b9:a9:3f:95:8f:97:df:c6:53:0d:
cd:25:58:7d:d9:b3:12:23:d6:d1:90:a3:90:1c:bc:fa:f9:a7:
50:96:b5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 10:27:02 2026 by rpki-client