Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/k6VQETQZOzHrAnYg-8owITtZ4q4.roa
File: k6VQETQZOzHrAnYg-8owITtZ4q4.roa (raw, json)
Hash identifier: h5n8mxroA+uhcVy6GfFWrVAaePenEC5EvWalYEfJTNY=
Subject key identifier: 93:A5:50:11:34:19:3B:31:EB:02:76:20:FB:CA:30:21:3B:59:E2:AE
Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial: 019ED640BFC4D9E9690C19AFE84E3C430935
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/k6VQETQZOzHrAnYg-8owITtZ4q4.roa
Signing time: Wed 17 Jun 2026 15:43:48 +0000
ROA not before: Wed 17 Jun 2026 15:43:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199152
IP address blocks: 91.239.23.0/24 maxlen: 24
146.19.84.0/24 maxlen: 24
195.242.147.0/24 maxlen: 24
2a0a:2e80::/32 maxlen: 32
2a0a:2e81::/32 maxlen: 32
2a0a:2e82::/36 maxlen: 36
2a0a:2e83::/36 maxlen: 36
2a0a:2e84::/36 maxlen: 36
2a0a:2e85::/36 maxlen: 36
2a0a:2e86::/32 maxlen: 32
2a0a:2e86:1000::/36 maxlen: 36
2a0a:2e86:2000::/36 maxlen: 36
2a0a:2e86:3000::/36 maxlen: 36
2a0a:2e86:4000::/36 maxlen: 36
2a0a:2e86:5000::/36 maxlen: 36
2a0a:2e86:6000::/36 maxlen: 36
2a0a:2e86:7000::/36 maxlen: 36
2a0a:2e86:8000::/36 maxlen: 36
2a0a:2e86:9000::/36 maxlen: 36
2a0a:2e86:a000::/36 maxlen: 36
2a0a:2e86:b000::/36 maxlen: 36
2a0a:2e87::/32 maxlen: 32
2a11:7e41::/48 maxlen: 48
2a11:7e41:1::/48 maxlen: 48
2a11:7e41:2::/48 maxlen: 48
2a11:7e41:3::/48 maxlen: 48
2a11:7e42::/36 maxlen: 36
2a11:7e43::/36 maxlen: 36
2a11:7e44::/32 maxlen: 32
2a11:7e45::/32 maxlen: 32
2a11:7e47:b001::/48 maxlen: 48
2a11:8480::/32 maxlen: 32
2a11:8482::/36 maxlen: 36
2a11:8483::/36 maxlen: 36
2a11:8484::/32 maxlen: 32
2a11:df41::/32 maxlen: 32
2a11:df42::/36 maxlen: 36
2a11:df43::/36 maxlen: 36
2a11:df44::/32 maxlen: 32
2a11:df45::/32 maxlen: 32
2a11:df46::/32 maxlen: 32
2a11:df47::/32 maxlen: 32
2a12:6700::/32 maxlen: 32
2a12:6703::/36 maxlen: 36
2a12:6704::/36 maxlen: 36
2a12:6705::/32 maxlen: 32
2a12:6706::/32 maxlen: 32
2a12:6707::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 15:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d6:40:bf:c4:d9:e9:69:0c:19:af:e8:4e:3c:43:09:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Validity
Not Before: Jun 17 15:43:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93a5501134193b31eb027620fbca30213b59e2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:82:5c:c4:93:de:47:62:46:da:15:cc:27:5d:
5f:3b:9a:36:ca:34:93:bb:c2:34:b5:97:3e:af:20:
43:a8:ae:99:9f:52:83:5d:5d:6a:02:c0:7a:d0:d8:
68:94:78:55:db:ed:da:24:9a:e6:b4:63:c6:38:a4:
00:1e:83:54:75:76:06:15:dd:3e:19:fb:e9:a8:9c:
63:bd:4c:ec:a2:20:f0:fe:60:f4:20:c8:01:ae:00:
ba:9c:1f:35:40:e3:27:05:6e:fb:7f:ff:9b:bf:87:
56:fe:e2:81:ec:9f:98:83:45:ac:ba:56:37:49:51:
71:1f:22:20:a2:48:cd:6e:9c:77:90:c8:9a:26:4e:
77:a6:35:f6:f0:90:1d:79:6e:a5:f5:9b:3f:33:a1:
2b:50:2f:2e:c3:14:f2:e8:dd:21:f8:eb:4d:65:70:
64:91:33:54:67:5b:04:a7:32:95:c1:3f:8a:4c:0a:
ec:60:0c:c3:22:5e:2a:04:3f:70:ef:85:bc:a3:c4:
1e:74:c1:30:5b:7b:58:a3:cd:2e:2e:0b:87:42:44:
82:61:2e:16:d3:72:51:69:11:d4:82:d8:38:56:96:
7a:e2:3f:c7:93:f7:87:53:e9:2d:d0:c9:9f:99:7e:
55:02:ce:5f:44:a9:ca:34:17:2f:83:fd:20:c4:93:
ba:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A5:50:11:34:19:3B:31:EB:02:76:20:FB:CA:30:21:3B:59:E2:AE
X509v3 Authority Key Identifier:
keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/k6VQETQZOzHrAnYg-8owITtZ4q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.23.0/24
146.19.84.0/24
195.242.147.0/24
IPv6:
2a0a:2e80::-2a0a:2e82:fff:ffff:ffff:ffff:ffff:ffff
2a0a:2e83::/36
2a0a:2e84::/36
2a0a:2e85::/36
2a0a:2e86::/31
2a11:7e41::/46
2a11:7e42::/36
2a11:7e43::/36
2a11:7e44::/31
2a11:7e47:b001::/48
2a11:8480::/32
2a11:8482::/36
2a11:8483::/36
2a11:8484::/32
2a11:df41::-2a11:df42:fff:ffff:ffff:ffff:ffff:ffff
2a11:df43::/36
2a11:df44::/30
2a12:6700::/32
2a12:6703::/36
2a12:6704::/36
2a12:6705::-2a12:6707:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0d:20:ef:25:20:cc:36:ba:ba:1e:c6:60:c6:31:aa:98:27:ab:
21:96:dc:25:fb:e4:6e:f3:46:92:d5:40:1f:f7:b4:6e:4f:22:
e5:a3:e6:e6:8c:b2:e6:92:94:16:2f:63:a3:ae:ef:3b:4c:e7:
c6:82:1b:90:07:5c:28:0b:36:89:d3:3c:f7:a8:f2:9a:90:55:
ad:4e:b9:ff:3f:6e:b7:d7:7b:e1:61:4e:22:63:80:55:09:e5:
b2:22:6b:a9:27:f6:08:48:3b:de:95:9f:2d:60:6c:2e:c9:ed:
a1:1d:72:27:d0:f5:fc:ba:b5:1d:c9:1a:71:a1:f2:af:6f:06:
e3:c3:3f:7e:6e:55:94:44:b4:c3:6e:37:e7:33:8c:85:c1:fb:
72:a0:8a:c0:f2:64:d2:9e:1e:8d:9c:57:3d:ff:27:2c:d9:0b:
10:14:f3:c2:74:f0:c8:a9:73:3c:f4:6d:1d:3e:56:83:49:f5:
4b:66:55:87:4e:0c:b0:2f:7a:e3:be:24:72:fa:66:1e:f8:c7:
40:d5:cd:90:19:95:cb:26:9f:b3:de:e1:b7:de:ce:92:4b:2c:
9e:cd:fc:56:8e:bd:e5:88:5d:01:d9:dd:23:12:bc:dd:51:f3:
0c:f7:bc:75:94:d1:cd:95:97:77:ba:e4:55:9c:35:fa:61:53:
94:00:ef:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 23:41:03 2026 by rpki-client