Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/6dULbh9H71iqjnarDHMNluSVnYE.roa
File: 6dULbh9H71iqjnarDHMNluSVnYE.roa (raw, json)
Hash identifier: 1/w2BCsDh2izbOH96sZtfZnAXNLAMLdGJAxrMWHXVZY=
Subject key identifier: E9:D5:0B:6E:1F:47:EF:58:AA:8E:76:AB:0C:73:0D:96:E4:95:9D:81
Certificate issuer: /CN=4166c06ff49e0534809e234005baa5cca7e146a8
Certificate serial: 01A08AF1A5E38BE5C07198FFA5DDAED163EE
Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/6dULbh9H71iqjnarDHMNluSVnYE.roa
Signing time: Thu 10 Sep 2026 10:51:27 +0000
ROA not before: Thu 10 Sep 2026 10:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197421
IP address blocks: 87.236.149.0/24 maxlen: 24
91.217.133.0/24 maxlen: 24
171.33.160.0/22 maxlen: 24
171.33.160.0/24 maxlen: 24
171.33.161.0/24 maxlen: 24
171.33.162.0/24 maxlen: 24
171.33.163.0/24 maxlen: 24
185.239.177.0/24 maxlen: 24
195.69.228.0/24 maxlen: 24
195.69.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 15:53:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:f1:a5:e3:8b:e5:c0:71:98:ff:a5:dd:ae:d1:63:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8
Validity
Not Before: Sep 10 10:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9d50b6e1f47ef58aa8e76ab0c730d96e4959d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:78:f6:d9:89:8a:28:ac:41:dc:13:72:ad:e0:
cc:80:7f:19:43:4c:fe:5d:91:b3:ba:96:47:40:62:
cc:05:a8:13:30:0d:64:2b:24:88:ab:f4:17:f3:86:
a7:16:74:22:6f:94:ae:16:82:81:fb:2a:45:c9:ce:
f3:93:e3:13:b6:e5:33:94:86:16:9b:25:9d:88:11:
ca:90:e0:7b:b2:2e:88:83:0b:99:31:9a:c7:26:c1:
64:7e:84:9a:e2:20:24:50:79:d5:85:58:d0:c8:69:
ee:a2:3c:a2:7f:f1:2e:38:62:04:b6:c0:9a:35:71:
d9:48:d9:a8:ed:ec:df:5f:a7:dc:d8:c1:eb:fa:78:
71:01:10:35:18:e5:d6:b7:83:d7:3f:24:6d:fa:ae:
15:47:3f:e0:e3:35:89:54:14:d0:47:8a:98:91:ba:
d2:23:95:a1:98:a9:99:8b:68:25:14:4f:b8:48:2f:
3f:1a:a1:56:46:a8:e8:74:85:6f:f6:7f:02:aa:15:
c3:28:13:4e:e1:ce:9d:4c:02:7f:58:36:d0:c0:3d:
c3:25:c7:a2:8b:84:a4:60:f0:57:37:14:d1:63:ca:
d0:a1:d5:e3:62:43:2f:96:e4:7f:12:6c:15:cf:68:
dd:94:27:7c:0a:7e:ee:21:6b:46:b6:a1:d6:eb:19:
69:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D5:0B:6E:1F:47:EF:58:AA:8E:76:AB:0C:73:0D:96:E4:95:9D:81
X509v3 Authority Key Identifier:
keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/6dULbh9H71iqjnarDHMNluSVnYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.149.0/24
91.217.133.0/24
171.33.160.0/22
185.239.177.0/24
195.69.228.0/24
195.69.230.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ed:4a:a4:0c:21:2c:07:38:d0:f9:1b:0d:48:57:f5:02:47:
3d:96:1c:53:7b:1c:d7:e4:b5:41:13:86:df:f1:83:87:96:2f:
50:12:f4:0a:2b:d6:99:97:a1:df:dc:ff:08:f3:b7:1b:bb:4a:
6a:35:98:a1:14:65:4b:62:9c:06:b2:4b:9e:04:7e:36:5a:59:
f3:5e:e9:c0:65:4f:bf:55:0f:27:31:04:1f:9d:81:30:2a:b1:
c9:61:82:89:29:71:bd:d5:7f:46:7c:4c:5c:53:f2:44:60:79:
4a:ef:f6:0b:7c:30:78:af:a0:cf:b7:df:95:49:6a:32:c1:1d:
13:24:1b:64:1b:e0:56:f8:f6:7b:f0:dd:cd:f7:8c:2c:ce:75:
4b:c0:c6:5a:f9:40:bf:25:be:d8:f7:d0:18:99:7e:3a:9b:97:
44:eb:25:dc:1f:3c:c3:3a:72:47:f6:12:e5:8d:2c:f8:e0:8d:
15:78:38:07:b0:c7:13:a2:62:86:68:09:c0:2d:55:ab:7f:e3:
c4:a8:12:50:23:48:6f:3e:60:8d:67:24:96:3f:09:93:87:64:
a4:5f:92:00:19:c6:93:a3:be:60:10:b0:57:3d:83:4c:18:79:
e5:64:9a:03:84:e8:5d:3f:b2:cb:b9:7a:0e:11:5f:a3:85:0a:
df:f0:85:64
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAaCK8aXji+XAcZj/pd2u0WPuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNjZjMDZmZjQ5ZTA1MzQ4MDllMjM0MDA1YmFhNWNjYTdl
MTQ2YTgwHhcNMjYwOTEwMTA1MTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWQ1MGI2ZTFmNDdlZjU4YWE4ZTc2YWIwYzczMGQ5NmU0OTU5ZDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnj22YmKKKxB3BNyreDMgH8ZQ0z+
XZGzupZHQGLMBagTMA1kKySIq/QX84anFnQib5SuFoKB+ypFyc7zk+MTtuUzlIYW
myWdiBHKkOB7si6IgwuZMZrHJsFkfoSa4iAkUHnVhVjQyGnuojyif/EuOGIEtsCa
NXHZSNmo7ezfX6fc2MHr+nhxARA1GOXWt4PXPyRt+q4VRz/g4zWJVBTQR4qYkbrS
I5WhmKmZi2glFE+4SC8/GqFWRqjodIVv9n8CqhXDKBNO4c6dTAJ/WDbQwD3DJcei
i4SkYPBXNxTRY8rQodXjYkMvluR/EmwVz2jdlCd8Cn7uIWtGtqHW6xlpkQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFOnVC24fR+9Yqo52qwxzDZbklZ2BMB8GA1UdIwQY
MBaAFEFmwG/0ngU0gJ4jQAW6pcyn4UaoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUt
ODgyNmU4NzdkMTQzLzEvNmRVTGJoOUg3MWlxam5hckRITU5sdVNWbllFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUtODgyNmU4NzdkMTQz
LzEvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAV+yVAwQA
W9mFAwQCqyGgAwQAue+xAwQAw0XkAwQAw0XmMA0GCSqGSIb3DQEBCwUAA4IBAQBy
7UqkDCEsBzjQ+RsNSFf1Akc9lhxTexzX5LVBE4bf8YOHli9QEvQKK9aZl6Hf3P8I
87cbu0pqNZihFGVLYpwGskueBH42WlnzXunAZU+/VQ8nMQQfnYEwKrHJYYKJKXG9
1X9GfExcU/JEYHlK7/YLfDB4r6DPt9+VSWoywR0TJBtkG+BW+PZ78N3N94wsznVL
wMZa+UC/Jb7Y99AYmX46m5dE6yXcHzzDOnJH9hLljSz44I0VeDgHsMcTomKGaAnA
LVWrf+PEqBJQI0hvPmCNZySWPwmTh2SkX5IAGcaTo75gELBXPYNMGHnlZJoDhOhd
P7LLuXoOEV+jhQrf8IVk
-----END CERTIFICATE-----
Generated at Sat Sep 19 23:33:14 2026 by rpki-client