Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/6q90Ylcr_bTouVL-1y_wxNRsyCw.roa
File: 6q90Ylcr_bTouVL-1y_wxNRsyCw.roa (raw, json)
Hash identifier: mNmL0Z1TdYTnC1LviNwI9MUlQwclOYrlF6P0bTcPytQ=
Subject key identifier: EA:AF:74:62:57:2B:FD:B4:E8:B9:52:FE:D7:2F:F0:C4:D4:6C:C8:2C
Certificate issuer: /CN=884b5e16490b9a68d09fbcb45574350000149afa
Certificate serial: 01A020E8434656636D2EA2ECB0C37BA88C6E
Authority key identifier: 88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/6q90Ylcr_bTouVL-1y_wxNRsyCw.roa
Signing time: Thu 20 Aug 2026 20:41:27 +0000
ROA not before: Thu 20 Aug 2026 20:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201188
IP address blocks: 45.151.184.0/22 maxlen: 22
45.151.184.0/24 maxlen: 24
45.151.185.0/24 maxlen: 24
45.151.186.0/24 maxlen: 24
45.151.187.0/24 maxlen: 24
2a0f:3500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:e8:43:46:56:63:6d:2e:a2:ec:b0:c3:7b:a8:8c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884b5e16490b9a68d09fbcb45574350000149afa
Validity
Not Before: Aug 20 20:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eaaf7462572bfdb4e8b952fed72ff0c4d46cc82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:14:86:59:1e:f9:3a:c4:4a:c0:ae:a8:41:1c:
59:43:17:2f:53:f1:33:51:19:0b:22:75:0e:3d:1b:
23:05:97:4d:a9:27:05:25:d0:e0:46:46:4e:ba:0c:
75:be:aa:79:68:2f:dc:db:ee:4f:5b:41:71:5c:ad:
d5:9f:ef:35:41:7d:3b:64:a7:17:54:4f:40:75:a5:
04:46:e1:93:0d:05:11:01:5b:9e:38:a0:09:c9:1b:
4a:bc:64:2b:d3:96:fc:d5:19:1c:73:4f:84:f2:a7:
7d:1c:8c:55:c4:47:d6:0f:2e:e4:d4:fa:87:0c:92:
84:3d:10:ab:c6:76:e8:95:ba:88:1c:7d:41:70:39:
8b:89:e0:1b:ae:0d:61:80:14:ec:18:01:3c:44:4b:
2f:fd:d6:1a:2f:da:0f:f1:77:ce:5c:ef:b2:ea:bd:
d5:f3:91:3e:c1:90:12:1a:6e:83:d2:5d:f3:de:10:
54:60:46:0c:f2:02:43:ff:4c:66:6a:c6:79:cc:5b:
e6:9c:9d:f6:50:03:09:eb:ac:0d:50:21:4b:2e:6f:
b0:99:2d:aa:0b:99:12:ee:52:c2:51:c6:e6:18:70:
59:5b:ff:df:cb:c5:bb:58:81:ca:19:74:bf:2b:46:
98:cd:b2:57:55:73:3b:97:b2:a1:b3:a1:80:f1:c4:
23:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AF:74:62:57:2B:FD:B4:E8:B9:52:FE:D7:2F:F0:C4:D4:6C:C8:2C
X509v3 Authority Key Identifier:
keyid:88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/6q90Ylcr_bTouVL-1y_wxNRsyCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.184.0/22
IPv6:
2a0f:3500::/29
Signature Algorithm: sha256WithRSAEncryption
37:68:6d:4a:e6:4c:97:76:9c:fe:ee:fc:e4:62:ac:3b:4a:cb:
2b:be:52:df:54:79:45:89:1f:de:ee:d7:5f:c7:c8:7b:8c:46:
1e:39:0a:6d:e4:eb:77:df:2a:92:86:bc:cb:68:d4:e4:43:fb:
f7:1d:4d:20:f4:5c:a7:a2:30:af:9c:ec:aa:60:ff:d0:ac:e2:
f0:42:6c:53:4b:ed:de:80:99:56:a3:5e:f9:9e:6e:25:b7:fc:
2b:31:10:a0:e1:86:17:22:25:d8:d9:53:17:d9:0a:a5:bf:b2:
ec:33:58:7b:7d:03:16:55:27:5a:72:62:b5:9c:e2:41:2a:7a:
f6:2b:7a:c5:43:cd:cd:fa:a4:d4:83:43:2e:6a:03:65:80:5e:
f9:12:06:4d:fb:14:1e:83:c5:ef:f8:37:a2:eb:70:bb:90:84:
45:1f:fb:1e:b1:92:df:cb:b9:be:cb:22:4a:43:cb:82:7c:f4:
8c:af:f6:c5:28:7f:09:b1:ae:5a:a0:11:db:82:3c:f3:13:3e:
6b:0c:54:ff:da:fe:04:d4:b0:62:1f:be:5a:d1:f0:4e:79:be:
9d:37:98:51:27:5f:22:02:6d:70:76:bb:d6:4b:35:85:4f:4b:
f3:d8:2a:3f:33:59:8d:b2:78:3f:18:27:6e:cb:d6:d0:5b:a1:
9b:56:bb:38
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaAg6ENGVmNtLqLssMN7qIxuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NGI1ZTE2NDkwYjlhNjhkMDlmYmNiNDU1NzQzNTAwMDAx
NDlhZmEwHhcNMjYwODIwMjA0MTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWFmNzQ2MjU3MmJmZGI0ZThiOTUyZmVkNzJmZjBjNGQ0NmNjODJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRSGWR75OsRKwK6oQRxZQxcvU/Ez
URkLInUOPRsjBZdNqScFJdDgRkZOugx1vqp5aC/c2+5PW0FxXK3Vn+81QX07ZKcX
VE9AdaUERuGTDQURAVueOKAJyRtKvGQr05b81Rkcc0+E8qd9HIxVxEfWDy7k1PqH
DJKEPRCrxnbolbqIHH1BcDmLieAbrg1hgBTsGAE8REsv/dYaL9oP8XfOXO+y6r3V
85E+wZASGm6D0l3z3hBUYEYM8gJD/0xmasZ5zFvmnJ32UAMJ66wNUCFLLm+wmS2q
C5kS7lLCUcbmGHBZW//fy8W7WIHKGXS/K0aYzbJXVXM7l7Khs6GA8cQj0QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOqvdGJXK/206LlS/tcv8MTUbMgsMB8GA1UdIwQY
MBaAFIhLXhZJC5po0J+8tFV0NQAAFJr6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUV0ZUZra0xtbWpRbjd5MFZYUTFBQUFVbXZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wN2I3ZjctYzQxZC00OTE3LWI5Nzgt
ZWYyZDUzYjVhMzRkLzEvNnE5MFlsY3JfYlRvdVZMLTF5X3d4TlJzeUN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8wN2I3ZjctYzQxZC00OTE3LWI5NzgtZWYyZDUzYjVhMzRk
LzEvaUV0ZUZra0xtbWpRbjd5MFZYUTFBQUFVbXZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZe4MA0E
AgACMAcDBQMqDzUAMA0GCSqGSIb3DQEBCwUAA4IBAQA3aG1K5kyXdpz+7vzkYqw7
SssrvlLfVHlFiR/e7tdfx8h7jEYeOQpt5Ot33yqShrzLaNTkQ/v3HU0g9FynojCv
nOyqYP/QrOLwQmxTS+3egJlWo175nm4lt/wrMRCg4YYXIiXY2VMX2Qqlv7LsM1h7
fQMWVSdacmK1nOJBKnr2K3rFQ83N+qTUg0MuagNlgF75EgZN+xQeg8Xv+Dei63C7
kIRFH/sesZLfy7m+yyJKQ8uCfPSMr/bFKH8Jsa5aoBHbgjzzEz5rDFT/2v4E1LBi
H75a0fBOeb6dN5hRJ18iAm1wdrvWSzWFT0vz2Co/M1mNsng/GCduy9bQW6GbVrs4
-----END CERTIFICATE-----
Generated at Sun Sep 13 15:26:11 2026 by rpki-client