Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/6DknhXRMmWwk8an-W3o77qoUFZ0.roa
File: 6DknhXRMmWwk8an-W3o77qoUFZ0.roa (raw, json)
Hash identifier: A411sMGCpxf+MILpBK8VyggjVHx5ELsPnFwL7AqAOyw=
Subject key identifier: E8:39:27:85:74:4C:99:6C:24:F1:A9:FE:5B:7A:3B:EE:AA:14:15:9D
Certificate issuer: /CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Certificate serial: 019F2368997B74618F7445187F12C2242C79
Authority key identifier: D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/6DknhXRMmWwk8an-W3o77qoUFZ0.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200649
IP address blocks: 62.228.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:99:7b:74:61:8f:74:45:18:7f:12:c2:24:2c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8392785744c996c24f1a9fe5b7a3beeaa14159d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ae:f9:6a:86:e3:05:18:b4:61:2e:d8:cc:8c:
c2:8b:37:ac:fb:ad:21:f7:99:87:8f:98:98:41:32:
1d:5b:1d:92:3a:ed:59:e6:4e:1d:99:7e:f4:05:17:
aa:09:b7:27:3b:6a:d5:39:e4:30:b5:62:2e:70:6f:
00:88:32:cc:69:35:d3:6b:66:5a:f0:79:14:02:75:
58:4b:e5:dd:51:93:bc:79:7a:cb:2a:2f:80:c8:28:
ad:b5:83:b8:8d:51:f9:41:90:57:01:4f:f7:9a:a3:
d2:bc:0e:75:92:82:cb:81:fc:9b:96:be:09:cb:8e:
b1:ce:2a:7c:b1:2f:be:3e:fb:90:04:49:ca:ec:b8:
ec:3c:7b:57:98:c8:72:05:b1:16:e1:0a:82:34:51:
d5:72:9c:5c:80:a4:29:de:8d:8e:05:06:76:90:8f:
ad:2e:b4:bc:d8:3f:4c:0d:a0:0b:a2:f2:c9:e3:6b:
1e:ca:38:ab:80:2c:4e:c3:8c:f1:16:0d:50:c9:3d:
64:64:b1:06:d7:e5:ab:83:52:7c:45:cb:88:22:27:
45:53:a7:f8:46:ed:dd:37:84:71:97:7c:b8:de:d7:
04:50:ac:bd:ac:88:88:e7:64:fa:d5:73:41:29:15:
fd:38:8c:65:78:3d:2d:3c:a2:a9:cf:c2:f6:f0:3f:
4e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:39:27:85:74:4C:99:6C:24:F1:A9:FE:5B:7A:3B:EE:AA:14:15:9D
X509v3 Authority Key Identifier:
keyid:D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/6DknhXRMmWwk8an-W3o77qoUFZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.243.0/24
Signature Algorithm: sha256WithRSAEncryption
21:02:a4:6b:2e:f3:1f:b4:df:9d:00:e5:30:40:27:dc:c5:b8:
9f:2f:46:87:af:37:bd:b2:c8:c6:f3:ae:01:dd:ec:18:1d:78:
35:03:4b:95:77:7a:59:c1:88:1a:c9:07:ea:28:a5:a5:c7:45:
9e:ec:f5:50:1b:29:f1:3d:e4:ce:cb:02:8d:c3:0f:18:7f:2f:
cd:a9:fa:d4:20:76:2a:79:f2:ef:3d:9a:ac:e3:7c:15:eb:7f:
95:6c:52:1a:57:77:09:41:fb:51:5b:4a:22:e1:39:6f:a1:94:
7c:89:25:d7:4d:80:0a:09:34:1d:b2:bd:f6:f6:4d:9f:75:9a:
48:b4:3e:a6:e9:52:c6:94:99:3a:7a:6d:dd:1a:80:47:50:e9:
14:98:ca:08:0f:45:96:b1:55:85:f5:fe:12:cb:17:1d:3c:24:
31:a5:a5:76:f8:b9:1d:2d:a2:8b:d6:27:c9:67:be:65:21:55:
f5:d5:41:1b:5f:d2:b7:3b:ae:ab:dd:01:b9:10:7d:5f:53:97:
b7:4c:32:10:5b:d8:81:e4:d8:0f:5b:a7:95:10:db:36:44:8d:
87:cc:49:3c:31:3c:fc:1f:b7:f9:43:59:a3:39:31:8d:31:35:
e4:12:d5:dd:a5:ca:66:24:40:31:d2:5a:03:68:c8:67:22:32:
c0:4a:f4:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaJl7dGGPdEUYfxLCJCx5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NmU0Nzk0YWZjM2EyYmEyNWQyNTJhODU3MzQ3ZWQ0ZWVh
ZTZiNDAwHhcNMjYwNzAyMTUxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODM5Mjc4NTc0NGM5OTZjMjRmMWE5ZmU1YjdhM2JlZWFhMTQxNTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja75aobjBRi0YS7YzIzCizes+60h
95mHj5iYQTIdWx2SOu1Z5k4dmX70BReqCbcnO2rVOeQwtWIucG8AiDLMaTXTa2Za
8HkUAnVYS+XdUZO8eXrLKi+AyCittYO4jVH5QZBXAU/3mqPSvA51koLLgfyblr4J
y46xzip8sS++PvuQBEnK7LjsPHtXmMhyBbEW4QqCNFHVcpxcgKQp3o2OBQZ2kI+t
LrS82D9MDaALovLJ42seyjirgCxOw4zxFg1QyT1kZLEG1+Wrg1J8RcuIIidFU6f4
Ru3dN4Rxl3y43tcEUKy9rIiI52T61XNBKRX9OIxleD0tPKKpz8L28D9O5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOg5J4V0TJlsJPGp/lt6O+6qFBWdMB8GA1UdIwQY
MBaAFNZuR5Svw6K6JdJSqFc0ftTurmtAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW01SGxLX0Rvcm9sMGxLb1Z6Ui0xTzZ1YTBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt
YjBmNGI5YzM3ZTQ5LzEvNkRrbmhYUk1tV3drOGFuLVczbzc3cW9VRlowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5
LzEvMW01SGxLX0Rvcm9sMGxLb1Z6Ui0xTzZ1YTBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPuTzMA0G
CSqGSIb3DQEBCwUAA4IBAQAhAqRrLvMftN+dAOUwQCfcxbifL0aHrze9ssjG864B
3ewYHXg1A0uVd3pZwYgayQfqKKWlx0We7PVQGynxPeTOywKNww8Yfy/NqfrUIHYq
efLvPZqs43wV63+VbFIaV3cJQftRW0oi4TlvoZR8iSXXTYAKCTQdsr329k2fdZpI
tD6m6VLGlJk6em3dGoBHUOkUmMoID0WWsVWF9f4SyxcdPCQxpaV2+LkdLaKL1ifJ
Z75lIVX11UEbX9K3O66r3QG5EH1fU5e3TDIQW9iB5NgPW6eVENs2RI2HzEk8MTz8
H7f5Q1mjOTGNMTXkEtXdpcpmJEAx0loDaMhnIjLASvSI
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:59:15 2026 by rpki-client