Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/byHphyk01mdNjp2bMED6WM0LMRo.roa
File: byHphyk01mdNjp2bMED6WM0LMRo.roa (raw, json)
Hash identifier: 5AdII6huOVn6Q8B/7VERsabLU+aXCUupzT68yyrMRfg=
Subject key identifier: 6F:21:E9:87:29:34:D6:67:4D:8E:9D:9B:30:40:FA:58:CD:0B:31:1A
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 019EBAB6A2B9216D7598A7C0DB3551599521
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/byHphyk01mdNjp2bMED6WM0LMRo.roa
Signing time: Fri 12 Jun 2026 07:23:11 +0000
ROA not before: Fri 12 Jun 2026 07:23:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213705
IP address blocks: 153.51.160.0/22 maxlen: 22
153.51.169.0/24 maxlen: 24
153.51.171.0/24 maxlen: 24
153.51.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:b6:a2:b9:21:6d:75:98:a7:c0:db:35:51:59:95:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Jun 12 07:23:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f21e9872934d6674d8e9d9b3040fa58cd0b311a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:99:28:fa:45:6c:43:cb:89:d8:e8:29:e7:a9:
fa:7c:96:f0:8e:1b:1d:61:3b:4f:d7:16:07:85:6d:
8d:bc:bd:45:bf:72:eb:6f:79:9b:c2:68:7e:21:82:
c5:82:56:d6:bd:d3:4a:fa:6d:75:e4:7a:1d:f7:2b:
7d:b7:ea:c1:75:da:50:69:dd:a2:e7:57:0e:43:fc:
c1:53:04:e2:51:38:0e:b0:5d:b1:8c:b5:29:19:13:
67:30:94:c9:02:28:62:9f:b1:97:e5:e3:09:24:b9:
28:ad:24:20:6f:ca:0e:2f:f9:d3:1a:eb:34:a9:af:
0f:36:4a:10:1d:dc:86:e0:7b:70:98:ce:46:d1:06:
d5:5f:a7:a7:50:b6:7d:e4:88:02:50:24:17:ca:5e:
07:dc:86:71:c8:09:81:1f:46:e0:51:30:0c:f2:7b:
8f:c5:ba:d2:5a:ba:dc:de:83:7a:9c:f7:2f:0c:92:
46:f7:32:c1:53:02:eb:ad:0f:85:26:c7:d7:56:05:
e8:36:6e:ef:43:93:8c:f3:ab:5b:26:17:2a:76:ce:
07:4a:b6:04:88:87:4e:67:bb:df:ee:9e:da:4a:7a:
2e:c4:bb:92:b9:c5:be:5b:44:72:9a:82:b9:38:8a:
58:e5:21:64:2a:f5:7b:ba:94:85:ff:4a:b3:cd:bd:
10:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:21:E9:87:29:34:D6:67:4D:8E:9D:9B:30:40:FA:58:CD:0B:31:1A
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/byHphyk01mdNjp2bMED6WM0LMRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.51.160.0/22
153.51.169.0/24
153.51.171.0/24
153.51.191.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ae:b0:b3:9b:71:10:9d:ae:1b:d5:de:f7:eb:37:ea:02:b1:
31:98:cf:ab:7b:63:a7:cc:9a:62:db:ae:42:80:e9:ae:4d:bf:
fd:8c:30:c2:73:69:8e:05:50:3a:ed:39:a9:d0:1a:1d:28:fb:
38:00:e4:d7:8a:28:d3:0a:1e:23:2e:c6:92:80:a5:ce:a6:4b:
87:da:16:6b:df:00:e1:1e:d1:06:7d:13:79:93:b0:9b:e3:cf:
78:c6:f6:14:04:b6:2c:4e:dc:51:de:4b:65:9e:22:ae:9c:e6:
e0:42:10:4f:37:51:db:25:9a:e9:be:3b:d5:bc:dc:9e:25:83:
5c:68:94:4a:f2:e3:4b:66:ae:6c:c8:4d:d0:23:c2:7e:36:71:
ef:dd:e9:be:10:23:e9:c8:06:00:d5:07:3a:0a:a9:42:36:1a:
49:ae:1c:37:2a:16:a6:b8:dc:00:27:30:20:6d:1d:38:87:ea:
f3:96:33:73:84:ff:48:ec:a1:d1:e0:29:32:c5:e9:94:c2:97:
7a:a0:09:69:ed:99:fd:e7:e3:37:e5:93:7c:8b:30:1d:73:0d:
b2:f9:60:98:bc:66:8a:ea:36:e3:0e:3c:7d:35:87:4c:2a:b3:
9a:55:19:5f:59:12:65:3b:8a:ff:3b:f1:85:2d:b5:a7:f3:07:
a9:a2:e6:c5
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ66tqK5IW11mKfA2zVRWZUhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz
OGM4ZTEwHhcNMjYwNjEyMDcyMzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjIxZTk4NzI5MzRkNjY3NGQ4ZTlkOWIzMDQwZmE1OGNkMGIzMTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pko+kVsQ8uJ2Ogp56n6fJbwjhsd
YTtP1xYHhW2NvL1Fv3Lrb3mbwmh+IYLFglbWvdNK+m115Hod9yt9t+rBddpQad2i
51cOQ/zBUwTiUTgOsF2xjLUpGRNnMJTJAihin7GX5eMJJLkorSQgb8oOL/nTGus0
qa8PNkoQHdyG4HtwmM5G0QbVX6enULZ95IgCUCQXyl4H3IZxyAmBH0bgUTAM8nuP
xbrSWrrc3oN6nPcvDJJG9zLBUwLrrQ+FJsfXVgXoNm7vQ5OM86tbJhcqds4HSrYE
iIdOZ7vf7p7aSnouxLuSucW+W0RymoK5OIpY5SFkKvV7upSF/0qzzb0QRwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFG8h6YcpNNZnTY6dmzBA+ljNCzEaMB8GA1UdIwQY
MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt
MzBjOWRlMjA1YWZjLzEvYnlIcGh5azAxbWROanAyYk1FRDZXTTBMTVJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj
LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCmTOgAwQA
mTOpAwQAmTOrAwQAmTO/MA0GCSqGSIb3DQEBCwUAA4IBAQAYrrCzm3EQna4b1d73
6zfqArExmM+re2OnzJpi265CgOmuTb/9jDDCc2mOBVA67Tmp0BodKPs4AOTXiijT
Ch4jLsaSgKXOpkuH2hZr3wDhHtEGfRN5k7Cb4894xvYUBLYsTtxR3ktlniKunObg
QhBPN1HbJZrpvjvVvNyeJYNcaJRK8uNLZq5syE3QI8J+NnHv3em+ECPpyAYA1Qc6
CqlCNhpJrhw3KhamuNwAJzAgbR04h+rzljNzhP9I7KHR4CkyxemUwpd6oAlp7Zn9
5+M35ZN8izAdcw2y+WCYvGaK6jbjDjx9NYdMKrOaVRlfWRJlO4r/O/GFLbWn8wep
oubF
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:28:21 2026 by rpki-client