Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6Y4X7VeP1c1NNe-SKhG9CchNS5s.roa
File: 6Y4X7VeP1c1NNe-SKhG9CchNS5s.roa (raw, json)
Hash identifier: GG/r94UYbHhv85QnEUnlnrhKqn3g5A+YcSfVVdHyvP8=
Subject key identifier: E9:8E:17:ED:57:8F:D5:CD:4D:35:EF:92:2A:11:BD:09:C8:4D:4B:9B
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 01A13F496E4038E36DDE01C98E3FAEC01C63
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6Y4X7VeP1c1NNe-SKhG9CchNS5s.roa
Signing time: Thu 15 Oct 2026 11:18:59 +0000
ROA not before: Thu 15 Oct 2026 11:18:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219048
IP address blocks: 5.56.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:49:6e:40:38:e3:6d:de:01:c9:8e:3f:ae:c0:1c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Oct 15 11:18:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e98e17ed578fd5cd4d35ef922a11bd09c84d4b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:e4:c9:01:b1:a4:cb:d5:09:95:7b:1a:ca:
41:cf:f0:e0:13:61:7e:a0:c7:94:03:7f:99:a5:ce:
e7:54:10:12:d4:85:b5:0e:a0:54:62:e5:90:1f:fd:
15:af:00:10:8f:e0:2c:68:b9:db:9b:c5:cf:17:de:
d4:56:41:0c:8d:26:f7:7e:c3:f5:0f:d7:f0:d2:df:
01:39:94:05:de:7f:40:76:3d:c2:26:22:43:f5:55:
a9:15:94:fe:ff:86:27:79:f9:2b:4a:a2:c5:c9:25:
bd:ce:71:99:d2:4f:4f:ed:c6:8d:c1:e2:c8:c6:f6:
1d:de:ab:da:7f:e8:75:bb:c0:f4:7e:e6:61:cd:93:
a6:3e:26:c6:42:ea:90:35:2b:d4:47:4b:8e:10:97:
9d:fa:97:22:54:b3:f3:d1:83:3d:a2:80:57:11:2f:
84:b2:5f:13:ab:52:83:1d:65:8a:e5:34:19:c9:3c:
26:bb:94:7b:df:3f:d2:ae:c9:37:65:8f:0c:9a:c8:
bc:4d:86:94:1b:fa:31:c4:93:b6:0a:e6:09:e0:1b:
61:88:6b:38:1a:58:e4:a2:69:41:d9:4d:75:6d:ab:
a8:96:6a:52:8d:7a:7c:3f:17:26:8d:91:f1:03:c6:
f3:af:bf:02:83:a3:4e:35:7d:83:fe:07:fa:dc:94:
1b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8E:17:ED:57:8F:D5:CD:4D:35:EF:92:2A:11:BD:09:C8:4D:4B:9B
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6Y4X7VeP1c1NNe-SKhG9CchNS5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.29.0/24
Signature Algorithm: sha256WithRSAEncryption
45:29:1d:84:b3:ce:7f:32:f8:df:2d:96:5c:d2:ca:a6:b1:a8:
e8:99:17:72:2d:c7:13:b1:9d:1f:ab:d9:e5:38:30:8f:6c:24:
99:e2:88:a1:17:e9:8c:56:64:92:aa:ee:30:fe:7c:99:d8:2c:
49:92:8b:a9:3a:5b:f3:db:7c:42:c4:35:8c:f8:03:fb:0c:f9:
ba:6b:5a:92:15:32:73:07:56:ae:77:84:69:c6:06:42:98:c7:
d6:29:ce:9f:4f:f0:68:a7:64:94:97:e1:dc:5e:e9:6a:35:a7:
03:0f:65:3d:75:d1:da:1b:28:47:d3:8f:34:74:95:8d:d6:bd:
60:a9:b3:f4:78:ae:64:d1:5a:b3:54:48:94:41:48:30:bf:46:
22:38:cf:9a:85:6d:6c:16:9e:11:06:d8:9e:64:76:b6:7a:f3:
85:78:cc:bf:c7:a9:78:4f:25:90:d6:33:03:67:e7:28:f2:53:
72:1c:31:dd:9e:c8:75:97:dc:21:80:bc:4d:22:b1:61:99:3d:
a6:07:bd:21:a2:74:a3:1e:69:c1:8b:0c:79:97:2a:b2:67:59:
f0:40:a2:e8:54:7b:ce:6d:7e:24:3a:07:90:b4:18:fa:26:90:
2d:30:f5:88:a3:93:21:ee:2d:1f:54:02:0f:b6:2b:35:cd:72:
7c:ff:e2:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaE/SW5AOONt3gHJjj+uwBxjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1
ZTNmOTgwHhcNMjYxMDE1MTExODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOThlMTdlZDU3OGZkNWNkNGQzNWVmOTIyYTExYmQwOWM4NGQ0YjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIXkyQGxpMvVCZV7GspBz/DgE2F+
oMeUA3+Zpc7nVBAS1IW1DqBUYuWQH/0VrwAQj+AsaLnbm8XPF97UVkEMjSb3fsP1
D9fw0t8BOZQF3n9Adj3CJiJD9VWpFZT+/4YnefkrSqLFySW9znGZ0k9P7caNweLI
xvYd3qvaf+h1u8D0fuZhzZOmPibGQuqQNSvUR0uOEJed+pciVLPz0YM9ooBXES+E
sl8Tq1KDHWWK5TQZyTwmu5R73z/Srsk3ZY8Mmsi8TYaUG/oxxJO2CuYJ4BthiGs4
GljkomlB2U11bauolmpSjXp8PxcmjZHxA8bzr78Cg6NONX2D/gf63JQbyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOmOF+1Xj9XNTTXvkioRvQnITUubMB8GA1UdIwQY
MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt
OWNkNjYyYmM4MzIwLzEvNlk0WDdWZVAxYzFOTmUtU0toRzlDY2hOUzVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw
LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABTgdMA0G
CSqGSIb3DQEBCwUAA4IBAQBFKR2Es85/MvjfLZZc0sqmsajomRdyLccTsZ0fq9nl
ODCPbCSZ4oihF+mMVmSSqu4w/nyZ2CxJkoupOlvz23xCxDWM+AP7DPm6a1qSFTJz
B1aud4RpxgZCmMfWKc6fT/Bop2SUl+HcXulqNacDD2U9ddHaGyhH0480dJWN1r1g
qbP0eK5k0VqzVEiUQUgwv0YiOM+ahW1sFp4RBtieZHa2evOFeMy/x6l4TyWQ1jMD
Z+co8lNyHDHdnsh1l9whgLxNIrFhmT2mB70honSjHmnBiwx5lyqyZ1nwQKLoVHvO
bX4kOgeQtBj6JpAtMPWIo5Mh7i0fVAIPtis1zXJ8/+Kt
-----END CERTIFICATE-----
Generated at Thu Nov 5 06:11:32 2026 by rpki-client