Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/6L2DF24h5kP__h0ZXcHhhgUtOHE.roa
File: 6L2DF24h5kP__h0ZXcHhhgUtOHE.roa (raw, json)
Hash identifier: k3rPz38ZgJPfjpSFDtarFqrK6I1kr4U/pIOZrMPrf6k=
Subject key identifier: E8:BD:83:17:6E:21:E6:43:FF:FE:1D:19:5D:C1:E1:86:05:2D:38:71
Certificate issuer: /CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Certificate serial: 019B76EAE797D8B9DA71BC5C4EE6453C67D2
Authority key identifier: E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/6L2DF24h5kP__h0ZXcHhhgUtOHE.roa
Signing time: Thu 01 Jan 2026 00:17:44 +0000
ROA not before: Thu 01 Jan 2026 00:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57672
IP address blocks: 192.146.137.0/24 maxlen: 24
2001:67c:26b4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:e7:97:d8:b9:da:71:bc:5c:4e:e6:45:3c:67:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Validity
Not Before: Jan 1 00:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8bd83176e21e643fffe1d195dc1e186052d3871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dc:f5:28:4c:9e:25:77:65:e5:0e:f1:d3:e5:
e3:f8:d0:ec:10:53:d4:46:ca:33:7f:f6:e6:ae:ff:
ef:f5:eb:50:b6:41:6d:e7:ee:5d:94:7d:9f:af:90:
0c:0e:f6:33:98:ec:b2:cb:f9:96:3c:f6:6b:d6:ff:
7b:d9:17:5d:de:29:14:4d:71:10:4e:b0:be:64:e0:
68:e0:0a:12:fe:e9:3c:c3:09:c4:df:66:9f:3a:71:
df:a3:a1:dd:75:9b:98:4a:28:77:74:46:a0:7f:cc:
56:c6:86:a1:e7:58:18:34:18:5d:c3:45:36:1d:49:
8c:7c:4b:06:5c:ad:83:71:80:04:89:c0:98:de:f5:
5c:97:8b:ef:0e:1e:d4:10:9c:9b:5d:b8:ca:48:ff:
d5:61:5c:71:1b:d7:ea:9d:ab:15:1f:c4:56:1b:ba:
cb:e5:87:c9:5f:1e:74:6d:9c:62:3b:c4:ac:ce:a3:
b3:ca:c2:d6:af:c1:be:aa:71:6e:a3:f2:12:fa:f5:
47:fb:66:f6:82:fd:ba:d9:e8:41:83:d8:11:21:9d:
d9:3e:7a:99:7c:f8:9d:eb:0d:a0:a8:fa:04:cc:22:
c9:05:bf:55:a0:c5:13:f8:fb:84:4a:bb:2b:d6:46:
da:42:bd:37:6e:35:60:a0:f8:64:c7:18:12:45:67:
4e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BD:83:17:6E:21:E6:43:FF:FE:1D:19:5D:C1:E1:86:05:2D:38:71
X509v3 Authority Key Identifier:
keyid:E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/6L2DF24h5kP__h0ZXcHhhgUtOHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.146.137.0/24
IPv6:
2001:67c:26b4::/48
Signature Algorithm: sha256WithRSAEncryption
63:f0:20:61:94:eb:c6:9f:ce:ec:0c:7b:9b:83:7f:de:57:28:
2e:f7:cd:26:30:79:90:17:48:d6:9b:9b:a0:2e:52:90:d7:bc:
d4:9f:1d:23:30:19:97:8a:79:87:25:3f:1a:a6:af:84:11:03:
83:30:62:1b:25:e1:16:f4:ed:47:ed:1e:55:df:bf:72:0b:64:
47:c7:9e:17:be:24:46:e5:ab:5d:cb:cc:82:05:ac:d2:a5:1e:
6e:3b:2e:41:0e:fe:ff:36:36:df:61:93:38:bb:b5:f2:44:84:
d8:80:9f:f9:80:03:1e:34:2e:fd:9c:8d:fc:46:42:63:a4:62:
51:22:15:9b:90:7d:10:a7:d6:c8:a3:d5:d0:1d:f4:48:a2:ed:
cb:65:40:30:68:d3:99:29:3b:91:eb:46:7a:6f:a0:5b:5c:90:
7e:26:b5:bc:75:c5:49:c5:9b:1b:ea:d9:d8:03:16:3b:0e:16:
f0:5a:6e:76:fd:5f:9a:b0:7e:ff:a7:c3:44:86:b3:0e:3f:8a:
0f:ff:c9:2f:b9:2b:eb:b5:e1:3d:e5:07:54:bb:ce:7f:8b:bc:
66:4f:fb:c2:b7:05:6b:0d:d9:b2:64:15:56:48:03:88:cd:49:
4b:b5:2a:35:2b:0d:75:ef:b1:72:09:0b:77:5f:69:5c:10:d3:
2c:84:c3:39
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZt26ueX2LnacbxcTuZFPGfSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNWEwNTZjODI0Mjk3MWQxYTkwYjBiZmE5OGIxYjdhOTMw
NTI4ODQwHhcNMjYwMTAxMDAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGJkODMxNzZlMjFlNjQzZmZmZTFkMTk1ZGMxZTE4NjA1MmQzODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29z1KEyeJXdl5Q7x0+Xj+NDsEFPU
Rsozf/bmrv/v9etQtkFt5+5dlH2fr5AMDvYzmOyyy/mWPPZr1v972Rdd3ikUTXEQ
TrC+ZOBo4AoS/uk8wwnE32afOnHfo6HddZuYSih3dEagf8xWxoah51gYNBhdw0U2
HUmMfEsGXK2DcYAEicCY3vVcl4vvDh7UEJybXbjKSP/VYVxxG9fqnasVH8RWG7rL
5YfJXx50bZxiO8SszqOzysLWr8G+qnFuo/IS+vVH+2b2gv262ehBg9gRIZ3ZPnqZ
fPid6w2gqPoEzCLJBb9VoMUT+PuESrsr1kbaQr03bjVgoPhkxxgSRWdOPwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOi9gxduIeZD//4dGV3B4YYFLThxMB8GA1UdIwQY
MBaAFONaBWyCQpcdGpCwv6mLG3qTBSiEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDFvRmJJSkNseDBha0xDX3FZc2JlcE1GS0lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84Y2QzYmEtOWQ3Mi00MzRmLThmODIt
YWFiNGJkOGZjZTlkLzEvNkwyREYyNGg1a1BfX2gwWlhjSGhoZ1V0T0hFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy84Y2QzYmEtOWQ3Mi00MzRmLThmODItYWFiNGJkOGZjZTlk
LzEvNDFvRmJJSkNseDBha0xDX3FZc2JlcE1GS0lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwJKJMA8E
AgACMAkDBwAgAQZ8JrQwDQYJKoZIhvcNAQELBQADggEBAGPwIGGU68afzuwMe5uD
f95XKC73zSYweZAXSNabm6AuUpDXvNSfHSMwGZeKeYclPxqmr4QRA4MwYhsl4Rb0
7UftHlXfv3ILZEfHnhe+JEblq13LzIIFrNKlHm47LkEO/v82Nt9hkzi7tfJEhNiA
n/mAAx40Lv2cjfxGQmOkYlEiFZuQfRCn1sij1dAd9Eii7ctlQDBo05kpO5HrRnpv
oFtckH4mtbx1xUnFmxvq2dgDFjsOFvBabnb9X5qwfv+nw0SGsw4/ig//yS+5K+u1
4T3lB1S7zn+LvGZP+8K3BWsN2bJkFVZIA4jNSUu1KjUrDXXvsXIJC3dfaVwQ0yyE
wzk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:43:12 2026 by rpki-client