Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/6g11HCWih6xhf9SlvMLJyhLpoE0.roa
File: 6g11HCWih6xhf9SlvMLJyhLpoE0.roa (raw, json)
Hash identifier: FIcTMSvlxxnAdPTeSGaqwR2LwE13J2mTc4piMqjBVTU=
Subject key identifier: EA:0D:75:1C:25:A2:87:AC:61:7F:D4:A5:BC:C2:C9:CA:12:E9:A0:4D
Certificate issuer: /CN=15ba66bc0fc3b26badd72fb5bb8387b6dbc33f77
Certificate serial: 01A038A1DF53FDCFD03BE8F8E8F59C6A6949
Authority key identifier: 15:BA:66:BC:0F:C3:B2:6B:AD:D7:2F:B5:BB:83:87:B6:DB:C3:3F:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/6g11HCWih6xhf9SlvMLJyhLpoE0.roa
Signing time: Tue 25 Aug 2026 11:15:27 +0000
ROA not before: Tue 25 Aug 2026 11:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31424
IP address blocks: 185.246.200.0/24 maxlen: 24
2a0d:8d80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:a1:df:53:fd:cf:d0:3b:e8:f8:e8:f5:9c:6a:69:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ba66bc0fc3b26badd72fb5bb8387b6dbc33f77
Validity
Not Before: Aug 25 11:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea0d751c25a287ac617fd4a5bcc2c9ca12e9a04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f5:21:97:87:dd:52:c4:f5:58:b1:df:4c:c8:
15:06:d2:78:fa:8b:b3:ff:18:d6:dd:da:50:53:58:
8f:43:a1:28:41:ea:3d:1a:e8:d7:93:60:4d:ae:9e:
9b:20:dd:76:f9:2f:68:24:da:ce:6e:39:0f:e6:2a:
06:47:c7:96:6b:48:6e:33:78:4d:0a:a4:a9:55:14:
73:71:b8:fd:b7:3f:38:e9:d5:34:1c:45:88:fa:52:
74:93:10:1c:f2:6c:35:40:3b:03:04:f2:b0:44:78:
4c:98:4a:9c:ec:e7:82:c9:7f:df:5b:e2:18:33:35:
3c:0f:ca:fd:71:6e:06:bd:e2:e3:c0:9e:f4:3d:20:
c5:63:f1:40:52:a7:2b:b0:49:66:45:4f:a4:64:e2:
dc:0b:f8:ba:9f:47:70:56:58:7d:e0:51:f7:be:f4:
15:6d:58:bf:27:f7:0e:07:d2:e0:58:fa:4d:28:df:
d8:26:72:95:f0:22:0e:b1:d6:9c:a1:3c:16:75:95:
a4:56:c5:e3:b1:cc:15:74:b5:41:8a:34:59:35:b1:
41:4c:8b:5d:6e:a7:d3:5d:d9:e2:d3:77:fd:86:d1:
f4:4c:97:fc:b2:53:c3:c1:a3:c2:f7:f5:45:58:2a:
44:6a:42:a6:fa:e4:72:44:8d:a4:69:da:85:bf:2b:
b4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0D:75:1C:25:A2:87:AC:61:7F:D4:A5:BC:C2:C9:CA:12:E9:A0:4D
X509v3 Authority Key Identifier:
keyid:15:BA:66:BC:0F:C3:B2:6B:AD:D7:2F:B5:BB:83:87:B6:DB:C3:3F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/6g11HCWih6xhf9SlvMLJyhLpoE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.200.0/24
IPv6:
2a0d:8d80::/32
Signature Algorithm: sha256WithRSAEncryption
11:a1:49:07:06:57:13:3d:de:95:e8:85:ad:79:ae:ff:fa:5e:
8d:7e:8d:7b:b6:b3:8f:dc:44:82:d0:88:1e:67:c1:4e:17:01:
83:91:54:b8:34:19:43:7f:0b:5c:d6:ea:26:2b:57:46:5c:b6:
a8:cf:2b:dd:80:a3:dc:ab:d8:4d:74:78:e6:34:6e:3f:12:30:
64:8f:d8:3b:ab:c0:0e:10:70:2c:45:e9:77:41:d8:56:1a:72:
56:69:43:e3:b4:bf:d2:fe:7d:99:69:75:4f:0a:7e:0e:cb:9b:
97:fe:db:7e:5a:09:c4:aa:98:85:f2:ff:7e:72:89:52:aa:14:
26:96:17:6a:a3:03:2e:78:b9:09:b7:b7:7a:20:e7:45:dc:0a:
92:4f:89:83:01:5c:03:0a:23:68:d3:63:84:9f:3f:53:0e:cb:
c4:39:d1:10:e5:68:0c:98:c7:8f:ba:77:4b:2c:b6:50:72:53:
d8:3c:a8:a8:73:2f:ec:d2:de:78:b9:56:71:0a:22:a2:0c:3c:
90:d2:47:da:c2:06:a4:f6:f7:a5:a7:49:43:86:ae:54:f1:24:
2a:97:8d:a1:e5:56:cc:0a:59:d6:3f:62:14:38:63:fe:6f:a7:
90:b3:6a:09:3d:9c:6f:d6:18:18:d6:5a:cf:de:5d:51:91:8d:
20:de:f5:f4
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaA4od9T/c/QO+j46PWcamlJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YmE2NmJjMGZjM2IyNmJhZGQ3MmZiNWJiODM4N2I2ZGJj
MzNmNzcwHhcNMjYwODI1MTExNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTBkNzUxYzI1YTI4N2FjNjE3ZmQ0YTViY2MyYzljYTEyZTlhMDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvUhl4fdUsT1WLHfTMgVBtJ4+ouz
/xjW3dpQU1iPQ6EoQeo9GujXk2BNrp6bIN12+S9oJNrObjkP5ioGR8eWa0huM3hN
CqSpVRRzcbj9tz846dU0HEWI+lJ0kxAc8mw1QDsDBPKwRHhMmEqc7OeCyX/fW+IY
MzU8D8r9cW4GveLjwJ70PSDFY/FAUqcrsElmRU+kZOLcC/i6n0dwVlh94FH3vvQV
bVi/J/cOB9LgWPpNKN/YJnKV8CIOsdacoTwWdZWkVsXjscwVdLVBijRZNbFBTItd
bqfTXdni03f9htH0TJf8slPDwaPC9/VFWCpEakKm+uRyRI2kadqFvyu0QwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOoNdRwlooesYX/UpbzCycoS6aBNMB8GA1UdIwQY
MBaAFBW6ZrwPw7JrrdcvtbuDh7bbwz93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmJwbXZBX0RzbXV0MXktMXU0T0h0dHZEUDNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yZTI2N2UtODk0OS00MzE4LTgzMzMt
YzE3ODRkZmQ2Zjc5LzEvNmcxMUhDV2loNnhoZjlTbHZNTEp5aExwb0UwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yZTI2N2UtODk0OS00MzE4LTgzMzMtYzE3ODRkZmQ2Zjc5
LzEvRmJwbXZBX0RzbXV0MXktMXU0T0h0dHZEUDNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAufbIMA0E
AgACMAcDBQAqDY2AMA0GCSqGSIb3DQEBCwUAA4IBAQARoUkHBlcTPd6V6IWtea7/
+l6Nfo17trOP3ESC0IgeZ8FOFwGDkVS4NBlDfwtc1uomK1dGXLaozyvdgKPcq9hN
dHjmNG4/EjBkj9g7q8AOEHAsRel3QdhWGnJWaUPjtL/S/n2ZaXVPCn4Oy5uX/tt+
WgnEqpiF8v9+colSqhQmlhdqowMueLkJt7d6IOdF3AqST4mDAVwDCiNo02OEnz9T
DsvEOdEQ5WgMmMePundLLLZQclPYPKiocy/s0t54uVZxCiKiDDyQ0kfawgak9vel
p0lDhq5U8SQql42h5VbMClnWP2IUOGP+b6eQs2oJPZxv1hgY1lrP3l1RkY0g3vX0
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:15 2026 by rpki-client