Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/aLIN_Ivl6t0-_yxLs-_sm8ODAaY.roa
File: aLIN_Ivl6t0-_yxLs-_sm8ODAaY.roa (raw, json)
Hash identifier: EB5XZLXbZe8cIE5ruaV3Aim0QvJLKlyaJyoooR5aR3Y=
Subject key identifier: 68:B2:0D:FC:8B:E5:EA:DD:3E:FF:2C:4B:B3:EF:EC:9B:C3:83:01:A6
Certificate issuer: /CN=bd199f36c3b2cbd1c20acd0cbf9053c004e55052
Certificate serial: 019F04752F9E9C9DE352CE250AC0A077F6A0
Authority key identifier: BD:19:9F:36:C3:B2:CB:D1:C2:0A:CD:0C:BF:90:53:C0:04:E5:50:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRmfNsOyy9HCCs0Mv5BTwATlUFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/aLIN_Ivl6t0-_yxLs-_sm8ODAaY.roa
Signing time: Fri 26 Jun 2026 15:03:36 +0000
ROA not before: Fri 26 Jun 2026 15:03:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15830
IP address blocks: 77.111.206.0/24 maxlen: 24
77.111.207.0/24 maxlen: 24
2a0a:d900:3106::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/vRmfNsOyy9HCCs0Mv5BTwATlUFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/vRmfNsOyy9HCCs0Mv5BTwATlUFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRmfNsOyy9HCCs0Mv5BTwATlUFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 15:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:04:75:2f:9e:9c:9d:e3:52:ce:25:0a:c0:a0:77:f6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd199f36c3b2cbd1c20acd0cbf9053c004e55052
Validity
Not Before: Jun 26 15:03:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68b20dfc8be5eadd3eff2c4bb3efec9bc38301a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:f1:65:e5:9b:ae:3d:f1:68:f7:9d:cc:8a:
0f:4b:5c:fa:dc:e6:3c:11:ea:7e:5e:cd:24:62:8b:
5f:7a:05:9f:2b:a7:7d:a4:71:92:89:82:2e:10:59:
2e:12:68:d4:dc:3d:bc:88:24:81:5f:1e:79:0d:88:
b8:91:9e:04:e3:13:35:cc:5d:c3:53:3f:50:74:0f:
ed:df:7f:0a:0c:5b:be:1d:c8:27:e1:8b:62:0f:9a:
ae:b9:49:0b:2f:44:a3:1d:e9:cf:49:77:de:9d:45:
fd:b4:eb:ef:e9:d6:20:d1:3a:75:8d:cb:85:5e:84:
05:89:5b:6e:97:4c:3f:ab:ee:3f:f5:13:04:3a:64:
1f:26:e9:1c:8b:be:6f:34:d0:95:29:db:c3:4e:3f:
03:92:ce:fb:2f:63:87:94:61:9f:1f:84:55:40:cc:
64:fb:0c:35:f4:d3:9c:e7:7f:41:74:87:23:f5:35:
94:46:d6:58:4a:f2:46:28:30:3c:6a:d1:7f:ba:08:
40:09:50:98:f7:1e:9c:c3:1c:b7:98:0f:fd:ce:ef:
6f:11:39:35:45:6e:76:53:9b:3f:60:36:f5:d1:18:
40:7c:74:22:31:91:83:2c:25:87:30:c2:4d:72:2f:
a1:72:cf:3b:ff:f7:5e:61:8b:8b:a6:35:91:77:d1:
57:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B2:0D:FC:8B:E5:EA:DD:3E:FF:2C:4B:B3:EF:EC:9B:C3:83:01:A6
X509v3 Authority Key Identifier:
keyid:BD:19:9F:36:C3:B2:CB:D1:C2:0A:CD:0C:BF:90:53:C0:04:E5:50:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRmfNsOyy9HCCs0Mv5BTwATlUFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/aLIN_Ivl6t0-_yxLs-_sm8ODAaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/vRmfNsOyy9HCCs0Mv5BTwATlUFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.206.0/23
IPv6:
2a0a:d900:3106::/48
Signature Algorithm: sha256WithRSAEncryption
b1:bb:13:66:81:95:96:fa:cb:9c:fb:b7:7a:19:b5:e1:54:6a:
eb:cd:13:e1:25:1c:e1:45:46:d6:21:cf:7e:fb:b8:64:ac:3f:
2b:cf:e3:62:0b:e7:11:62:1b:8f:58:ff:cd:50:ce:51:93:4c:
c9:8c:75:bd:f0:94:88:49:2b:6c:08:d7:8d:b0:46:fa:64:20:
d8:1a:24:6d:55:10:5a:73:88:0a:e4:94:22:7a:22:ff:f6:ad:
44:7d:86:1d:73:cd:6f:f9:b3:04:fd:59:55:fc:e4:66:3e:a8:
e1:32:4a:f5:d2:b4:28:17:88:69:71:6e:e2:35:17:09:b8:02:
86:17:c2:98:37:d9:29:0f:fc:8b:1d:b9:85:60:c6:c5:23:a7:
9d:ef:1a:34:2c:e1:40:ee:13:70:5e:c9:36:2a:7c:52:9d:25:
c8:b1:a0:39:5b:c9:17:4a:63:95:ee:6d:02:ef:9a:4f:d0:1f:
b2:72:a0:4f:fa:86:01:26:da:f2:3a:8c:1c:1a:c3:13:03:53:
f0:5b:86:4e:55:41:d8:dd:a5:8c:48:82:bf:1c:42:ac:a0:25:
1a:24:5a:0c:cb:3a:75:95:e3:5a:37:16:f7:e5:92:a8:49:25:
8d:a4:36:d1:87:04:55:57:f0:3a:ac:07:c7:11:85:c3:d8:3a:
9c:ac:c2:1d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZ8EdS+enJ3jUs4lCsCgd/agMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMTk5ZjM2YzNiMmNiZDFjMjBhY2QwY2JmOTA1M2MwMDRl
NTUwNTIwHhcNMjYwNjI2MTUwMzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGIyMGRmYzhiZTVlYWRkM2VmZjJjNGJiM2VmZWM5YmMzODMwMWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5nxZeWbrj3xaPedzIoPS1z63OY8
Eep+Xs0kYotfegWfK6d9pHGSiYIuEFkuEmjU3D28iCSBXx55DYi4kZ4E4xM1zF3D
Uz9QdA/t338KDFu+Hcgn4YtiD5quuUkLL0SjHenPSXfenUX9tOvv6dYg0Tp1jcuF
XoQFiVtul0w/q+4/9RMEOmQfJukci75vNNCVKdvDTj8Dks77L2OHlGGfH4RVQMxk
+ww19NOc539BdIcj9TWURtZYSvJGKDA8atF/ughACVCY9x6cwxy3mA/9zu9vETk1
RW52U5s/YDb10RhAfHQiMZGDLCWHMMJNci+hcs87//deYYuLpjWRd9FXpQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGiyDfyL5erdPv8sS7Pv7JvDgwGmMB8GA1UdIwQY
MBaAFL0ZnzbDssvRwgrNDL+QU8AE5VBSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlJtZk5zT3l5OUhDQ3MwTXY1QlR3QVRsVUZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi82ZmU4OTMtZTU5Ny00YWQ4LTgxYzIt
NGNlOTQ1YzdmNzI1LzEvYUxJTl9Jdmw2dDAtX3l4THMtX3NtOE9EQWFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi82ZmU4OTMtZTU5Ny00YWQ4LTgxYzItNGNlOTQ1YzdmNzI1
LzEvdlJtZk5zT3l5OUhDQ3MwTXY1QlR3QVRsVUZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBTW/OMA8E
AgACMAkDBwAqCtkAMQYwDQYJKoZIhvcNAQELBQADggEBALG7E2aBlZb6y5z7t3oZ
teFUauvNE+ElHOFFRtYhz377uGSsPyvP42IL5xFiG49Y/81QzlGTTMmMdb3wlIhJ
K2wI142wRvpkINgaJG1VEFpziArklCJ6Iv/2rUR9hh1zzW/5swT9WVX85GY+qOEy
SvXStCgXiGlxbuI1Fwm4AoYXwpg32SkP/IsduYVgxsUjp53vGjQs4UDuE3BeyTYq
fFKdJcixoDlbyRdKY5XubQLvmk/QH7JyoE/6hgEm2vI6jBwawxMDU/Bbhk5VQdjd
pYxIgr8cQqygJRokWgzLOnWV41o3FvflkqhJJY2kNtGHBFVX8DqsB8cRhcPYOpys
wh0=
-----END CERTIFICATE-----
Generated at Sun Jul 5 19:09:03 2026 by rpki-client