Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/6ngVMVc2FXiEDl4jcFT0Gu6T2fQ.roa
File: 6ngVMVc2FXiEDl4jcFT0Gu6T2fQ.roa (raw, json)
Hash identifier: D2bj/ymMxNFNEkwrkoOOlOYrO+6yoTdzDegHJdUEyRk=
Subject key identifier: EA:78:15:31:57:36:15:78:84:0E:5E:23:70:54:F4:1A:EE:93:D9:F4
Certificate issuer: /CN=1d6caf8d0e94051e65a4449967d3ee69928f695d
Certificate serial: 019F2368739655FF296AD271A410E062F3DC
Authority key identifier: 1D:6C:AF:8D:0E:94:05:1E:65:A4:44:99:67:D3:EE:69:92:8F:69:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWyvjQ6UBR5lpESZZ9PuaZKPaV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/6ngVMVc2FXiEDl4jcFT0Gu6T2fQ.roa
Signing time: Thu 02 Jul 2026 15:17:55 +0000
ROA not before: Thu 02 Jul 2026 15:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205160
IP address blocks: 185.237.167.0/24 maxlen: 24
2a11:9940::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/HWyvjQ6UBR5lpESZZ9PuaZKPaV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/HWyvjQ6UBR5lpESZZ9PuaZKPaV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWyvjQ6UBR5lpESZZ9PuaZKPaV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:73:96:55:ff:29:6a:d2:71:a4:10:e0:62:f3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d6caf8d0e94051e65a4449967d3ee69928f695d
Validity
Not Before: Jul 2 15:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea78153157361578840e5e237054f41aee93d9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e8:f4:d3:4f:5b:b0:7c:4b:06:ee:46:bd:9d:
b7:9d:ca:c6:1e:3a:59:32:62:08:76:61:12:49:7d:
99:32:ed:2d:e6:b1:f7:d3:54:59:b1:91:8b:12:06:
d2:85:a4:1b:06:96:43:10:41:5c:f6:60:8d:15:c7:
76:45:6b:ce:8b:9c:fc:ff:68:1c:7d:d2:a8:b9:b5:
d7:3e:59:75:09:17:96:0c:63:eb:17:9b:38:d1:53:
e2:9a:c6:a6:d7:b7:50:68:e2:53:10:ad:97:b8:a8:
c6:5d:43:1d:5b:2c:f7:db:97:61:0f:62:5d:ff:59:
07:12:4e:c6:b7:69:1c:fa:54:c4:86:fe:dd:13:3f:
c3:7b:dd:f3:81:2f:64:c5:da:53:47:72:53:ee:93:
e9:93:02:61:0c:28:9e:fe:c6:9a:84:0c:29:da:b1:
42:90:04:5e:58:08:1c:9f:23:e8:3d:35:5c:3e:41:
09:19:c0:15:ee:b2:e8:74:87:c9:86:0e:23:3c:7d:
38:4f:2f:3c:67:c7:e9:1f:6f:0b:b8:3a:97:f9:41:
e6:58:53:81:f7:bb:94:95:f4:a6:3e:5b:e5:0c:09:
f6:89:2c:4c:75:b3:6f:44:25:4a:8b:e2:75:15:c5:
cc:4b:76:cc:0f:0d:7f:29:cf:31:68:65:17:b7:3c:
de:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:78:15:31:57:36:15:78:84:0E:5E:23:70:54:F4:1A:EE:93:D9:F4
X509v3 Authority Key Identifier:
keyid:1D:6C:AF:8D:0E:94:05:1E:65:A4:44:99:67:D3:EE:69:92:8F:69:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWyvjQ6UBR5lpESZZ9PuaZKPaV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/6ngVMVc2FXiEDl4jcFT0Gu6T2fQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/HWyvjQ6UBR5lpESZZ9PuaZKPaV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.167.0/24
IPv6:
2a11:9940::/32
Signature Algorithm: sha256WithRSAEncryption
44:d5:17:0c:2a:a8:dd:19:ce:d4:ed:71:92:bc:63:b4:b8:c9:
aa:f9:8d:ad:89:0b:3c:cf:a1:59:4f:14:a0:54:f2:d2:24:d7:
ff:af:18:bd:b5:f9:ec:6e:04:b1:d4:ae:cb:82:6b:9d:0b:c9:
c0:47:4a:30:43:28:e8:1a:b6:c4:a4:d7:f1:4b:97:a6:69:f5:
29:d4:5a:72:8b:df:67:bc:29:f7:74:ed:24:d8:02:a2:4b:93:
b7:f9:e7:f0:39:98:65:19:7f:04:f7:99:d8:b7:c5:ed:2b:07:
23:d8:c2:e6:12:08:26:58:6d:76:2a:f5:f9:59:ef:26:f1:59:
27:cb:20:ef:31:73:70:1d:e8:8f:1e:08:db:49:85:ba:e1:b3:
e8:3b:18:2b:c3:5e:b7:73:91:13:2a:6d:01:38:0e:cf:6b:fa:
6a:2c:dc:be:fc:60:92:4e:b8:6e:bd:18:a1:2a:81:34:44:f7:
08:03:bf:83:da:38:7b:9a:6e:42:e8:ce:2f:be:0d:76:4e:84:
f3:bd:3d:94:a3:9b:aa:7c:b5:e2:02:fd:80:7b:4c:18:a4:cb:
51:2c:b7:50:08:fa:58:04:b5:cc:ab:20:34:42:30:52:f5:a9:
0b:0c:fd:20:69:c7:f5:f3:92:80:df:5f:d6:bb:b4:d6:88:3b:
a8:66:95:08
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaHOWVf8patJxpBDgYvPcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNmNhZjhkMGU5NDA1MWU2NWE0NDQ5OTY3ZDNlZTY5OTI4
ZjY5NWQwHhcNMjYwNzAyMTUxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTc4MTUzMTU3MzYxNTc4ODQwZTVlMjM3MDU0ZjQxYWVlOTNkOWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Oj0009bsHxLBu5GvZ23ncrGHjpZ
MmIIdmESSX2ZMu0t5rH301RZsZGLEgbShaQbBpZDEEFc9mCNFcd2RWvOi5z8/2gc
fdKoubXXPll1CReWDGPrF5s40VPimsam17dQaOJTEK2XuKjGXUMdWyz325dhD2Jd
/1kHEk7Gt2kc+lTEhv7dEz/De93zgS9kxdpTR3JT7pPpkwJhDCie/saahAwp2rFC
kAReWAgcnyPoPTVcPkEJGcAV7rLodIfJhg4jPH04Ty88Z8fpH28LuDqX+UHmWFOB
97uUlfSmPlvlDAn2iSxMdbNvRCVKi+J1FcXMS3bMDw1/Kc8xaGUXtzze9QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOp4FTFXNhV4hA5eI3BU9Bruk9n0MB8GA1UdIwQY
MBaAFB1sr40OlAUeZaREmWfT7mmSj2ldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFd5dmpRNlVCUjVscEVTWlo5UHVhWktQYVYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yOWNiMmUtNDY4MC00YTM2LWIwYTUt
OTg1MTgyMDAxZTkyLzEvNm5nVk1WYzJGWGlFRGw0amNGVDBHdTZUMmZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8yOWNiMmUtNDY4MC00YTM2LWIwYTUtOTg1MTgyMDAxZTky
LzEvSFd5dmpRNlVCUjVscEVTWlo5UHVhWktQYVYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAue2nMA0E
AgACMAcDBQAqEZlAMA0GCSqGSIb3DQEBCwUAA4IBAQBE1RcMKqjdGc7U7XGSvGO0
uMmq+Y2tiQs8z6FZTxSgVPLSJNf/rxi9tfnsbgSx1K7LgmudC8nAR0owQyjoGrbE
pNfxS5emafUp1Fpyi99nvCn3dO0k2AKiS5O3+efwOZhlGX8E95nYt8XtKwcj2MLm
EggmWG12KvX5We8m8VknyyDvMXNwHeiPHgjbSYW64bPoOxgrw163c5ETKm0BOA7P
a/pqLNy+/GCSTrhuvRihKoE0RPcIA7+D2jh7mm5C6M4vvg12ToTzvT2Uo5uqfLXi
Av2Ae0wYpMtRLLdQCPpYBLXMqyA0QjBS9akLDP0gacf185KA31/Wu7TWiDuoZpUI
-----END CERTIFICATE-----
Generated at Thu Oct 22 17:47:06 2026 by rpki-client