Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/t6lgkHq_yX1UUQpXP9q-fixqi2U.roa
File: t6lgkHq_yX1UUQpXP9q-fixqi2U.roa (raw, json)
Hash identifier: 9jhzSx3sRpcWk1SmGy5yNN1p0fpW4FrfXA1QrYfjQi8=
Subject key identifier: B7:A9:60:90:7A:BF:C9:7D:54:51:0A:57:3F:DA:BE:7E:2C:6A:8B:65
Certificate issuer: /CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Certificate serial: 01A0FE2C4A7837028EEDC1516C3A79328692
Authority key identifier: E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/t6lgkHq_yX1UUQpXP9q-fixqi2U.roa
Signing time: Fri 02 Oct 2026 19:51:50 +0000
ROA not before: Fri 02 Oct 2026 19:51:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204104
IP address blocks: 92.42.207.0/24 maxlen: 24
2a10:ed40::/48 maxlen: 48
2a10:ed40:1::/48 maxlen: 48
2a10:ed40:2::/48 maxlen: 48
2a10:ed40:4::/48 maxlen: 48
2a10:ed40:5::/48 maxlen: 48
2a10:ed40:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fe:2c:4a:78:37:02:8e:ed:c1:51:6c:3a:79:32:86:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Validity
Not Before: Oct 2 19:51:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7a960907abfc97d54510a573fdabe7e2c6a8b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:73:e6:50:32:4d:01:5f:95:f9:2c:e4:92:d0:
07:9d:07:16:55:93:67:83:16:35:72:75:03:a9:dd:
5e:a9:3d:9e:a1:bf:16:f1:0c:b6:b8:a8:bf:9c:8a:
11:92:d3:c5:28:a3:56:ac:b0:2f:2d:a0:57:c0:91:
c2:a6:8e:fc:70:5e:4f:d2:5f:1d:a1:2f:69:fe:f0:
14:00:11:3d:a4:5d:a6:63:80:9e:75:56:f1:a0:03:
f9:d8:51:83:9e:c9:e3:d2:ef:47:93:68:95:89:c7:
78:9e:ed:04:8a:be:46:46:09:3b:ee:c9:9c:b8:fc:
f6:86:3d:b0:60:0d:f0:67:f0:41:a2:a8:45:1c:2e:
e0:51:c0:8d:5a:a1:97:d4:a0:ba:72:36:7a:62:9c:
10:53:20:49:62:07:9f:fd:ce:24:9e:32:78:f9:d8:
97:35:7e:49:ee:26:0f:bd:82:cc:3a:1e:39:fe:61:
ce:d3:bf:9b:95:6d:b8:8f:9f:2b:ee:ea:12:d6:59:
f2:37:b5:46:3c:6f:0f:dd:75:ca:53:98:6a:09:d9:
c6:aa:8e:97:c4:01:7c:fe:ff:19:1e:c9:68:ae:36:
d7:76:7f:16:72:7b:40:d1:8e:21:1e:7a:5a:fe:ef:
18:ff:0f:24:85:2f:8f:d2:8f:53:d4:c2:60:19:aa:
39:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A9:60:90:7A:BF:C9:7D:54:51:0A:57:3F:DA:BE:7E:2C:6A:8B:65
X509v3 Authority Key Identifier:
keyid:E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/t6lgkHq_yX1UUQpXP9q-fixqi2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.207.0/24
IPv6:
2a10:ed40::-2a10:ed40:2:ffff:ffff:ffff:ffff:ffff
2a10:ed40:4::/47
2a10:ed40:9::/48
Signature Algorithm: sha256WithRSAEncryption
96:18:43:69:1a:3b:2a:a2:54:24:78:dc:c8:e8:ba:72:ee:60:
35:21:18:88:f7:d6:8a:11:bb:1d:bb:8a:f7:85:97:eb:fe:29:
82:7d:ee:8e:61:67:1b:54:23:f6:6d:03:e6:5a:c7:a7:29:f5:
a7:df:ef:73:97:ca:0b:e4:ff:b2:3b:4f:6a:e4:69:6a:ac:f6:
c0:4c:e3:c6:c2:81:ed:08:04:27:ea:58:77:29:5b:4e:28:01:
87:ce:a3:53:73:f4:c5:fd:e0:28:e6:9e:2c:ad:7e:86:e3:80:
b3:82:10:c6:b5:d8:e2:ea:ba:10:4a:9e:6b:d3:11:ca:d1:bb:
50:0f:8b:af:36:f7:04:9c:f4:25:66:26:45:ae:ab:e4:41:1f:
bd:e6:3a:21:e6:54:9a:48:a0:22:f1:7e:2e:76:e2:a0:07:15:
9f:a0:f8:f6:6e:0c:cd:65:9c:c2:e1:56:ba:cc:b3:18:61:d1:
aa:e3:af:65:ad:0c:90:cd:45:9c:6a:3c:bf:31:d6:36:9f:1d:
f6:d9:a9:45:00:ad:dc:4a:ec:78:ac:65:39:40:5c:c8:e1:1c:
75:6a:ff:fe:c2:e8:3d:1c:dd:1e:54:0d:1b:7e:94:31:cb:73:
ea:1b:22:41:d6:66:38:43:98:06:32:a0:f9:4f:51:8e:c4:56:
dd:92:9e:e0
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAaD+LEp4NwKO7cFRbDp5MoaSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MGVjMzE2MzVmNGQ5MWJiMTEzMTJiYTBhMzQ2NWMxOGYy
MzNmNjgwHhcNMjYxMDAyMTk1MTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2E5NjA5MDdhYmZjOTdkNTQ1MTBhNTczZmRhYmU3ZTJjNmE4YjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3PmUDJNAV+V+SzkktAHnQcWVZNn
gxY1cnUDqd1eqT2eob8W8Qy2uKi/nIoRktPFKKNWrLAvLaBXwJHCpo78cF5P0l8d
oS9p/vAUABE9pF2mY4CedVbxoAP52FGDnsnj0u9Hk2iVicd4nu0Eir5GRgk77smc
uPz2hj2wYA3wZ/BBoqhFHC7gUcCNWqGX1KC6cjZ6YpwQUyBJYgef/c4knjJ4+diX
NX5J7iYPvYLMOh45/mHO07+blW24j58r7uoS1lnyN7VGPG8P3XXKU5hqCdnGqo6X
xAF8/v8ZHslorjbXdn8WcntA0Y4hHnpa/u8Y/w8khS+P0o9T1MJgGao5YQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFLepYJB6v8l9VFEKVz/avn4saotlMB8GA1UdIwQY
MBaAFOgOwxY19NkbsRMSugo0ZcGPIz9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkE3REZqWDAyUnV4RXhLNkNqUmx3WThqUDJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8xMzA3MmYtMTc4ZC00ZjBjLTlmZmIt
NGRiZTEwYzNhNzFmLzEvdDZsZ2tIcV95WDFVVVFwWFA5cS1maXhxaTJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8xMzA3MmYtMTc4ZC00ZjBjLTlmZmItNGRiZTEwYzNhNzFm
LzEvNkE3REZqWDAyUnV4RXhLNkNqUmx3WThqUDJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAMBAIAATAGAwQAXCrPMCoE
AgACMCQwEAMFBioQ7UADBwAqEO1AAAIDBwEqEO1AAAQDBwAqEO1AAAkwDQYJKoZI
hvcNAQELBQADggEBAJYYQ2kaOyqiVCR43MjounLuYDUhGIj31ooRux27iveFl+v+
KYJ97o5hZxtUI/ZtA+Zax6cp9aff73OXygvk/7I7T2rkaWqs9sBM48bCge0IBCfq
WHcpW04oAYfOo1Nz9MX94CjmniytfobjgLOCEMa12OLquhBKnmvTEcrRu1APi682
9wSc9CVmJkWuq+RBH73mOiHmVJpIoCLxfi524qAHFZ+g+PZuDM1lnMLhVrrMsxhh
0arjr2WtDJDNRZxqPL8x1jafHfbZqUUArdxK7HisZTlAXMjhHHVq//7C6D0c3R5U
DRt+lDHLc+obIkHWZjhDmAYyoPlPUY7EVt2SnuA=
-----END CERTIFICATE-----
Generated at Mon Oct 26 14:20:44 2026 by rpki-client