Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/6IS6zpz9J3wR5ioVdSq99ZyEjm8.roa
File: 6IS6zpz9J3wR5ioVdSq99ZyEjm8.roa (raw, json)
Hash identifier: GvmOoL/Lxvhf9PpVrtUQk/HCLw7PVAKn06BXaC2/KLY=
Subject key identifier: E8:84:BA:CE:9C:FD:27:7C:11:E6:2A:15:75:2A:BD:F5:9C:84:8E:6F
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01A024BDB611033A544E94B8C037F8D1F1B5
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/6IS6zpz9J3wR5ioVdSq99ZyEjm8.roa
Signing time: Fri 21 Aug 2026 14:33:27 +0000
ROA not before: Fri 21 Aug 2026 14:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 80.246.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:bd:b6:11:03:3a:54:4e:94:b8:c0:37:f8:d1:f1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Aug 21 14:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e884bace9cfd277c11e62a15752abdf59c848e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:46:cb:4b:22:27:b5:62:be:c6:68:95:15:eb:
e5:2d:51:18:d6:e0:e3:ee:4d:4c:f0:9b:e4:e8:ce:
32:9a:90:3d:f0:fa:83:00:b4:1f:63:08:9e:20:b7:
ee:ed:b5:7a:0e:7b:b0:39:4a:8b:7e:4c:ca:46:4a:
2a:85:84:57:e9:da:8b:fa:93:2a:3e:a5:8c:39:53:
b0:0e:c3:a9:b2:38:9c:92:97:f7:59:d6:7a:64:40:
68:f4:e5:83:9b:6b:e7:cf:33:b7:a4:5a:a6:db:90:
aa:f8:ec:8c:3a:3f:95:a5:6e:81:a5:57:ca:f8:b3:
1d:ee:7e:1c:cd:31:13:35:6f:9a:7b:a6:eb:1e:d6:
9f:be:ba:01:2f:37:ce:4d:f2:73:be:21:a5:89:68:
eb:58:81:e2:6d:3c:be:9f:b9:09:ed:3f:40:5b:c2:
63:bf:a7:3b:3f:9d:3d:1b:00:5c:d6:fc:eb:fd:de:
55:37:b9:1f:08:05:9b:b5:b3:98:b2:96:3e:56:ca:
15:85:99:bd:ea:0d:02:ec:36:68:91:a3:58:c6:f5:
6a:34:1a:26:6e:32:e3:76:6a:0a:d8:ac:05:4c:26:
5a:ff:ec:81:06:68:ea:fa:5b:6f:b1:9e:96:bb:96:
11:d1:f7:59:56:e9:0f:fc:a1:d0:3f:d6:05:30:de:
51:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:84:BA:CE:9C:FD:27:7C:11:E6:2A:15:75:2A:BD:F5:9C:84:8E:6F
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/6IS6zpz9J3wR5ioVdSq99ZyEjm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.229.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:26:f2:d0:3d:63:db:a5:73:bc:a7:5e:b2:33:f9:93:29:ba:
35:d8:99:3e:f0:9e:4f:9e:33:ac:1d:d7:00:d0:e0:4c:f6:3f:
32:50:eb:b2:1d:15:99:2b:24:39:04:69:73:1e:c8:97:2f:3a:
52:51:12:1b:f8:34:1f:80:f0:18:f2:61:be:15:55:50:7d:e7:
6d:bc:2c:58:47:90:00:ed:1b:a7:40:66:8e:aa:fc:94:85:a6:
b4:31:b7:71:f1:8b:18:da:4b:7f:6d:cc:9a:f3:b5:98:79:26:
f4:e9:40:8c:28:2c:b3:2a:d2:99:32:b6:68:66:a8:6e:98:89:
b1:87:e7:43:41:eb:dc:86:bf:97:d7:95:6f:d7:15:08:01:0a:
e7:cf:8c:00:cd:53:24:69:8c:03:f0:38:bb:19:eb:c7:06:d5:
39:97:82:1e:bf:df:88:50:b3:2a:cf:78:c6:7c:73:76:44:14:
0a:d2:13:34:78:98:9d:8d:f2:d5:4e:83:1e:92:c9:6f:78:52:
cf:f3:b5:af:8e:76:8d:99:ed:2e:68:02:d9:20:51:52:6b:ff:
f7:bc:02:41:27:30:16:e1:98:df:83:b2:39:af:95:c5:5a:90:
67:a1:02:da:ae:4f:8a:1e:7c:8c:82:da:18:c2:3e:78:81:32:
c7:45:21:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAkvbYRAzpUTpS4wDf40fG1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjYwODIxMTQzMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODg0YmFjZTljZmQyNzdjMTFlNjJhMTU3NTJhYmRmNTljODQ4ZTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUbLSyIntWK+xmiVFevlLVEY1uDj
7k1M8Jvk6M4ympA98PqDALQfYwieILfu7bV6DnuwOUqLfkzKRkoqhYRX6dqL+pMq
PqWMOVOwDsOpsjickpf3WdZ6ZEBo9OWDm2vnzzO3pFqm25Cq+OyMOj+VpW6BpVfK
+LMd7n4czTETNW+ae6brHtafvroBLzfOTfJzviGliWjrWIHibTy+n7kJ7T9AW8Jj
v6c7P509GwBc1vzr/d5VN7kfCAWbtbOYspY+VsoVhZm96g0C7DZokaNYxvVqNBom
bjLjdmoK2KwFTCZa/+yBBmjq+ltvsZ6Wu5YR0fdZVukP/KHQP9YFMN5REwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOiEus6c/Sd8EeYqFXUqvfWchI5vMB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvNklTNnpwejlKM3dSNWlvVmRTcTk5WnlFam04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPblMA0G
CSqGSIb3DQEBCwUAA4IBAQCKJvLQPWPbpXO8p16yM/mTKbo12Jk+8J5PnjOsHdcA
0OBM9j8yUOuyHRWZKyQ5BGlzHsiXLzpSURIb+DQfgPAY8mG+FVVQfedtvCxYR5AA
7RunQGaOqvyUhaa0Mbdx8YsY2kt/bcya87WYeSb06UCMKCyzKtKZMrZoZqhumImx
h+dDQevchr+X15Vv1xUIAQrnz4wAzVMkaYwD8Di7GevHBtU5l4Iev9+IULMqz3jG
fHN2RBQK0hM0eJidjfLVToMekslveFLP87WvjnaNme0uaALZIFFSa//3vAJBJzAW
4Zjfg7I5r5XFWpBnoQLark+KHnyMgtoYwj54gTLHRSGj
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:53:09 2026 by rpki-client