Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/s6I1VqNGZQKZt38nBqeIj7vm3i0.roa
File: s6I1VqNGZQKZt38nBqeIj7vm3i0.roa (raw, json)
Hash identifier: 4gblkC2DXk37SYAJWbwkT4JVKcJO9686jL9y7ZV6JHM=
Subject key identifier: B3:A2:35:56:A3:46:65:02:99:B7:7F:27:06:A7:88:8F:BB:E6:DE:2D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019D2A321379919B1D3369367E8D3BA85351
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/s6I1VqNGZQKZt38nBqeIj7vm3i0.roa
Signing time: Thu 26 Mar 2026 12:50:18 +0000
ROA not before: Thu 26 Mar 2026 12:50:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211673
IP address blocks: 62.76.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:32:13:79:91:9b:1d:33:69:36:7e:8d:3b:a8:53:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 26 12:50:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3a23556a346650299b77f2706a7888fbbe6de2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:01:3f:fd:8e:ad:1b:91:4a:f6:83:60:85:cb:
3d:1d:53:d9:1c:ad:71:fb:ae:59:ce:e5:0e:23:ce:
c0:e2:76:ef:e2:aa:10:07:6c:84:4c:ad:78:31:5a:
f6:9d:a5:d0:28:c9:c2:fb:b0:f5:0a:c4:15:9b:6a:
27:17:a4:ed:41:21:7e:26:a2:35:cc:51:44:50:be:
e8:c2:07:25:3c:19:4c:9a:5d:c4:7c:d6:be:51:b6:
ff:1a:b9:94:49:52:a8:45:13:cc:c7:49:0f:dd:88:
4d:7e:31:ab:a6:e1:b5:3d:59:ab:3e:fc:03:92:1c:
d0:7f:de:c1:8f:be:3d:e7:07:da:c1:36:ae:83:58:
ee:fe:00:fd:30:6b:ed:97:ac:7b:92:2f:3c:3b:78:
46:3c:a7:0f:d2:1f:be:b9:6f:11:2e:f1:55:42:f0:
c7:29:28:1c:a4:ec:d4:a9:32:7f:c4:d4:8c:f8:f8:
38:05:02:59:e7:f1:af:b5:a7:ae:bd:15:b7:a3:72:
b1:62:54:26:2a:a5:ee:b4:35:44:2a:1a:2a:01:c4:
63:bc:9d:49:12:cc:63:5c:4c:f6:7f:4f:20:86:20:
46:34:ac:fb:96:94:7f:a5:1f:72:55:6c:59:de:3a:
3e:cb:73:76:47:f2:22:f1:65:b8:9f:8a:42:e2:69:
65:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A2:35:56:A3:46:65:02:99:B7:7F:27:06:A7:88:8F:BB:E6:DE:2D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/s6I1VqNGZQKZt38nBqeIj7vm3i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.229.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:04:09:ba:4f:71:9f:ec:b8:19:a7:ff:c2:9a:74:f5:1c:e3:
34:ad:22:64:72:ed:cc:b9:46:03:ed:e4:3a:f7:35:b0:6b:b7:
04:4f:3a:0d:cd:43:27:77:ed:22:6e:0d:4e:a2:bc:80:e8:54:
3f:0f:b2:f6:10:3a:41:06:33:68:ff:28:31:1a:80:29:46:1a:
09:ab:9d:7b:72:cd:fe:87:38:71:1d:1c:a5:f6:51:79:a0:c4:
b3:60:17:d0:50:ce:b9:b7:19:65:f1:5f:39:88:c1:93:7a:bd:
24:4f:c4:54:9b:bb:da:9d:91:61:7b:66:43:81:d3:c6:63:d3:
e8:27:d0:9e:00:28:86:e5:61:3d:f0:d9:ad:38:6d:f1:91:19:
53:af:65:c5:81:ef:b2:51:59:cc:89:d5:b7:be:ed:63:7b:5f:
a9:e9:89:7c:8a:78:66:11:67:d1:64:45:92:82:3d:8f:8a:76:
6a:f6:9b:f4:18:1a:e8:aa:84:8e:81:21:af:6e:55:33:d7:34:
48:81:df:2c:6d:1e:5d:ae:ee:45:e3:67:d3:2d:82:08:f8:bb:
98:db:25:11:39:11:84:c0:57:b5:2f:0f:4b:54:c9:1b:7d:a8:
a6:50:25:22:04:c6:0a:f5:68:25:8f:2e:6c:c5:d7:fc:79:02:
05:84:a9:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0qMhN5kZsdM2k2fo07qFNRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYwMzI2MTI1MDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2EyMzU1NmEzNDY2NTAyOTliNzdmMjcwNmE3ODg4ZmJiZTZkZTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wE//Y6tG5FK9oNghcs9HVPZHK1x
+65ZzuUOI87A4nbv4qoQB2yETK14MVr2naXQKMnC+7D1CsQVm2onF6TtQSF+JqI1
zFFEUL7owgclPBlMml3EfNa+Ubb/GrmUSVKoRRPMx0kP3YhNfjGrpuG1PVmrPvwD
khzQf97Bj7495wfawTaug1ju/gD9MGvtl6x7ki88O3hGPKcP0h++uW8RLvFVQvDH
KSgcpOzUqTJ/xNSM+Pg4BQJZ5/GvtaeuvRW3o3KxYlQmKqXutDVEKhoqAcRjvJ1J
EsxjXEz2f08ghiBGNKz7lpR/pR9yVWxZ3jo+y3N2R/Ii8WW4n4pC4mllMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLOiNVajRmUCmbd/JwaniI+75t4tMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvczZJMVZxTkdaUUtadDM4bkJxZUlqN3ZtM2kwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkzlMA0G
CSqGSIb3DQEBCwUAA4IBAQA8BAm6T3Gf7LgZp//CmnT1HOM0rSJkcu3MuUYD7eQ6
9zWwa7cETzoNzUMnd+0ibg1OoryA6FQ/D7L2EDpBBjNo/ygxGoApRhoJq517cs3+
hzhxHRyl9lF5oMSzYBfQUM65txll8V85iMGTer0kT8RUm7vanZFhe2ZDgdPGY9Po
J9CeACiG5WE98NmtOG3xkRlTr2XFge+yUVnMidW3vu1je1+p6Yl8inhmEWfRZEWS
gj2PinZq9pv0GBroqoSOgSGvblUz1zRIgd8sbR5dru5F42fTLYII+LuY2yURORGE
wFe1Lw9LVMkbfaimUCUiBMYK9Wgljy5sxdf8eQIFhKkG
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:43:13 2026 by rpki-client