Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/h6SMhG3P9zxf_dHX3xoxyNBMGR4.roa
File: h6SMhG3P9zxf_dHX3xoxyNBMGR4.roa (raw, json)
Hash identifier: b0rWEYGwa7xjd8bh0IRkVhSdpTV7x20TYWLjgsw3Vkk=
Subject key identifier: 87:A4:8C:84:6D:CF:F7:3C:5F:FD:D1:D7:DF:1A:31:C8:D0:4C:19:1E
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 01A0FFCA1CE3741B70A58C3078C03A06A383
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/h6SMhG3P9zxf_dHX3xoxyNBMGR4.roa
Signing time: Sat 03 Oct 2026 03:23:50 +0000
ROA not before: Sat 03 Oct 2026 03:23:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61046
IP address blocks: 5.149.250.0/23 maxlen: 23
79.141.170.0/23 maxlen: 23
91.193.16.0/23 maxlen: 23
185.81.112.0/23 maxlen: 23
188.119.148.0/23 maxlen: 23
193.42.37.0/24 maxlen: 24
212.2.38.0/24 maxlen: 24
2a01:8640:1::/48 maxlen: 48
2a01:8640:7::/48 maxlen: 48
2a01:8640:16::/48 maxlen: 48
2a01:8640:20::/48 maxlen: 48
2a01:8640:21::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:ca:1c:e3:74:1b:70:a5:8c:30:78:c0:3a:06:a3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Oct 3 03:23:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87a48c846dcff73c5ffdd1d7df1a31c8d04c191e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:b4:57:55:33:0e:86:03:9a:6c:01:5f:69:
a3:d8:81:6c:6e:50:c8:4f:ac:6e:c2:1d:20:1f:9d:
08:91:52:01:12:57:d9:6b:0c:6d:e4:6d:70:8f:fc:
50:51:8b:f0:31:f2:d9:39:76:a1:cf:ff:70:1c:03:
32:89:2b:cf:e3:eb:1f:65:32:b5:9c:07:6f:95:da:
fe:95:72:69:3b:7f:8e:5c:1c:d7:97:81:cd:24:23:
02:b3:3c:ec:19:9f:49:78:76:87:c6:92:9d:2f:f6:
85:e2:9a:19:d8:ec:0a:68:2e:4e:6b:bd:54:86:a9:
48:5b:09:f4:cd:f0:7f:e6:80:23:c6:a7:46:42:71:
fc:04:8f:d1:23:12:3d:e6:23:69:29:9f:34:ba:95:
e8:1f:0f:28:ae:70:e2:3b:35:32:64:c2:5b:03:70:
cd:f9:c0:f2:ac:d5:75:a7:7a:65:48:9c:e5:b9:78:
b2:fe:d6:33:d5:6a:99:e0:ca:14:32:8e:82:7c:f0:
98:cb:69:9e:2d:75:a1:73:2c:e5:a0:d6:4b:63:6e:
e6:6d:23:2c:de:af:89:21:47:fe:83:fb:ad:6d:8b:
95:78:b3:c3:aa:74:2c:c7:82:f2:e7:b5:90:be:cc:
c5:fc:f0:ea:df:25:ea:41:b6:1d:df:ef:06:a6:6e:
0e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A4:8C:84:6D:CF:F7:3C:5F:FD:D1:D7:DF:1A:31:C8:D0:4C:19:1E
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/h6SMhG3P9zxf_dHX3xoxyNBMGR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.250.0/23
79.141.170.0/23
91.193.16.0/23
185.81.112.0/23
188.119.148.0/23
193.42.37.0/24
212.2.38.0/24
IPv6:
2a01:8640:1::/48
2a01:8640:7::/48
2a01:8640:16::/48
2a01:8640:20::/47
Signature Algorithm: sha256WithRSAEncryption
88:48:da:94:91:c1:f1:dd:2a:5f:77:27:52:ae:de:3d:6a:70:
fe:ba:49:cd:c2:64:e6:38:ab:dd:f4:c5:80:aa:cd:77:27:87:
b6:68:7f:d9:e9:6c:1b:75:20:0a:f1:86:4d:cb:ac:2c:c3:7e:
72:f0:c4:8f:3e:59:2a:ff:3b:72:be:52:66:93:7c:2a:b7:ee:
c2:9b:f5:74:8c:1b:f9:34:82:f9:1f:ca:f6:1a:9c:9a:c3:7b:
0d:9a:e4:d1:b0:65:a9:b6:af:9e:eb:38:7c:ec:44:23:ab:f1:
0c:e6:51:bb:89:e1:95:81:87:15:21:bd:67:cb:71:00:53:e4:
a7:2f:ea:63:9a:a9:f5:d6:63:1e:2b:e2:b6:a0:bd:e3:c5:eb:
39:2a:c8:1b:15:ea:cb:81:10:be:d6:40:17:26:a3:95:27:ca:
3a:22:2e:c5:72:69:f8:0c:32:12:d4:9e:57:66:3c:77:b0:97:
87:3f:21:4b:01:04:e6:ac:e4:bb:b2:6c:2a:d9:cd:42:6f:42:
a2:c8:e4:ae:2b:88:2d:2f:64:e9:35:a1:bc:e0:b7:8e:05:c0:
d2:48:14:37:69:12:47:02:19:57:1e:99:41:e2:6e:63:d9:a5:
4b:19:4f:d2:3b:9f:1f:0c:35:df:52:d3:db:f6:09:00:8a:0d:
be:80:4b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:47:09 2026 by rpki-client