Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/6VaHOeY6AcBLw-YDB_VDzRdCFec.roa
File: 6VaHOeY6AcBLw-YDB_VDzRdCFec.roa (raw, json)
Hash identifier: EDZ8ZDlRf0UI+t71ebVA+hoZLE/+Ioh5PJyv02H05wY=
Subject key identifier: E9:56:87:39:E6:3A:01:C0:4B:C3:E6:03:07:F5:43:CD:17:42:15:E7
Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial: 019FD1D0E2F7002B3323896721AC0369CAC6
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/6VaHOeY6AcBLw-YDB_VDzRdCFec.roa
Signing time: Wed 05 Aug 2026 12:05:55 +0000
ROA not before: Wed 05 Aug 2026 12:05:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21245
IP address blocks: 31.3.0.0/24 maxlen: 24
31.3.1.0/24 maxlen: 24
31.3.2.0/24 maxlen: 24
31.3.3.0/24 maxlen: 24
31.3.4.0/24 maxlen: 24
31.3.5.0/24 maxlen: 24
31.3.6.0/24 maxlen: 24
31.3.7.0/24 maxlen: 24
80.91.216.0/24 maxlen: 24
91.208.32.0/24 maxlen: 24
103.199.232.0/24 maxlen: 24
103.199.233.0/24 maxlen: 24
103.199.234.0/24 maxlen: 24
103.199.235.0/24 maxlen: 24
146.19.176.0/24 maxlen: 24
185.21.180.0/24 maxlen: 24
185.21.181.0/24 maxlen: 24
185.21.182.0/24 maxlen: 24
185.21.183.0/24 maxlen: 24
185.22.160.0/24 maxlen: 24
185.22.161.0/24 maxlen: 24
185.22.162.0/24 maxlen: 24
185.22.163.0/24 maxlen: 24
185.87.172.0/24 maxlen: 24
185.87.173.0/24 maxlen: 24
185.87.174.0/24 maxlen: 24
185.87.175.0/24 maxlen: 24
185.155.102.0/24 maxlen: 24
185.201.196.0/24 maxlen: 24
185.201.197.0/24 maxlen: 24
185.201.198.0/24 maxlen: 24
185.201.199.0/24 maxlen: 24
185.230.16.0/24 maxlen: 24
185.230.17.0/24 maxlen: 24
185.230.19.0/24 maxlen: 24
185.235.10.0/24 maxlen: 24
185.241.63.0/24 maxlen: 24
193.47.0.0/24 maxlen: 24
2a03:3f00::/48 maxlen: 48
2a03:3f00:1::/48 maxlen: 48
2a03:3f00:2::/48 maxlen: 48
2a03:3f00:3::/48 maxlen: 48
2a03:3f00:4::/48 maxlen: 48
2a03:3f00:5::/48 maxlen: 48
2a03:3f00:6::/48 maxlen: 48
2a03:3f00:7::/48 maxlen: 48
2a03:3f00:10::/48 maxlen: 48
2a03:3f00:17::/48 maxlen: 48
2a03:3f00:19::/48 maxlen: 48
2a03:3f00:31::/48 maxlen: 48
2a03:3f00:cc::/48 maxlen: 48
2a03:3f00:d8::/48 maxlen: 48
2a03:3f00:160::/48 maxlen: 48
2a03:3f00:161::/48 maxlen: 48
2a03:3f00:162::/48 maxlen: 48
2a03:3f00:163::/48 maxlen: 48
2a03:3f00:172::/48 maxlen: 48
2a03:3f00:174::/48 maxlen: 48
2a03:3f00:175::/48 maxlen: 48
2a03:3f00:180::/48 maxlen: 48
2a03:3f00:181::/48 maxlen: 48
2a03:3f00:182::/48 maxlen: 48
2a03:3f00:183::/48 maxlen: 48
2a03:3f00:3e7::/48 maxlen: 48
2a03:3f00:3e8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:d0:e2:f7:00:2b:33:23:89:67:21:ac:03:69:ca:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Validity
Not Before: Aug 5 12:05:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9568739e63a01c04bc3e60307f543cd174215e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e6:c5:0d:3e:a2:1d:b0:61:92:dd:46:ae:ad:
1e:c6:05:45:58:32:68:c3:9e:8e:3e:db:4f:8c:7b:
94:c1:c4:87:63:7e:ef:b1:8a:9d:18:cc:54:af:04:
b4:1b:c1:5c:8c:07:fc:f3:f9:f3:8f:1e:4e:38:46:
4a:58:cc:ed:10:4c:df:79:c7:79:17:1a:c3:18:2a:
41:0a:74:03:8b:a9:7f:4c:d3:39:06:3e:5e:71:f1:
ff:8f:4f:56:20:d6:0d:77:e9:90:0f:d2:d7:26:85:
63:5c:28:27:68:8f:97:82:69:b2:f3:2a:8c:55:41:
5f:d8:69:63:09:79:b5:4e:a2:cb:31:bf:2e:de:9f:
05:9a:fd:dc:e8:47:67:81:19:b9:aa:b5:83:57:68:
e0:e1:25:61:1c:ab:65:bd:3e:e5:55:26:59:09:8c:
d4:7e:8d:de:9e:00:d7:5e:63:04:d6:ad:40:84:be:
a4:74:14:cd:8b:e8:81:70:24:27:69:7c:8f:4a:eb:
6a:9e:eb:84:ef:1b:78:b8:ad:33:8b:b7:8f:27:e6:
df:d5:d9:1f:7b:6d:42:73:98:a4:97:9d:1a:70:e3:
80:39:9f:9d:7a:28:13:ab:91:ae:7d:a3:ac:5e:ec:
04:bd:e4:bb:ef:2e:71:17:96:c3:a1:1f:f1:84:d6:
b6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:56:87:39:E6:3A:01:C0:4B:C3:E6:03:07:F5:43:CD:17:42:15:E7
X509v3 Authority Key Identifier:
keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/6VaHOeY6AcBLw-YDB_VDzRdCFec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.0.0/21
80.91.216.0/24
91.208.32.0/24
103.199.232.0/22
146.19.176.0/24
185.21.180.0/22
185.22.160.0/22
185.87.172.0/22
185.155.102.0/24
185.201.196.0/22
185.230.16.0/23
185.230.19.0/24
185.235.10.0/24
185.241.63.0/24
193.47.0.0/24
IPv6:
2a03:3f00::/45
2a03:3f00:10::/48
2a03:3f00:17::/48
2a03:3f00:19::/48
2a03:3f00:31::/48
2a03:3f00:cc::/48
2a03:3f00:d8::/48
2a03:3f00:160::/46
2a03:3f00:172::/48
2a03:3f00:174::/47
2a03:3f00:180::/46
2a03:3f00:3e7::-2a03:3f00:3e8:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7c:fc:a1:c2:f2:6a:77:56:57:8d:07:d5:aa:61:2f:a6:72:31:
74:02:d6:7a:69:fb:4f:a8:3c:e8:9d:f7:8e:aa:2f:5b:0e:07:
c9:86:85:d2:0b:11:f3:66:33:06:97:65:b8:76:d4:2f:22:bc:
79:19:e3:dc:22:2c:76:4a:11:4b:46:35:24:c4:4e:d8:e8:7e:
c7:24:d7:55:8f:4e:90:1b:d8:40:98:e4:82:f6:30:6a:f7:01:
57:36:6c:4b:0b:aa:4a:98:56:59:05:e4:cb:7b:20:ae:ac:fe:
55:0a:81:84:37:c1:dd:e8:45:32:88:44:3c:ea:e3:e1:1a:1c:
19:86:23:79:14:6f:a5:85:5e:63:ea:48:41:d6:59:54:69:db:
c8:b1:f6:d8:25:64:1e:ad:0f:01:da:2d:6e:32:0c:08:03:1c:
bd:4a:1a:77:4f:db:e2:fc:9c:ad:a8:11:2c:2f:58:9b:63:6b:
25:4f:ba:60:53:97:b1:99:43:8c:78:89:f7:35:14:67:13:4c:
21:24:43:9b:6d:6a:4b:0c:6c:77:02:19:01:ad:9f:25:33:c0:
3a:d8:5f:bd:e6:08:e8:8c:ad:46:fe:23:91:3e:81:17:4b:bd:
5e:fb:cd:39:b5:0c:01:1b:2a:f8:9b:2a:9f:a8:46:5c:86:c2:
42:50:29:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:34:58 2026 by rpki-client