Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/a6Mf22KbcVSVo6zfFVmT3svRjsA.roa
File: a6Mf22KbcVSVo6zfFVmT3svRjsA.roa (raw, json)
Hash identifier: PAy1Jv2hRGR0Vi2DoaVy7uOqdlSIsq+J07zQQtyu5Gk=
Subject key identifier: 6B:A3:1F:DB:62:9B:71:54:95:A3:AC:DF:15:59:93:DE:CB:D1:8E:C0
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01A0C8519E621CE42553138CC306D0E13259
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/a6Mf22KbcVSVo6zfFVmT3svRjsA.roa
Signing time: Tue 22 Sep 2026 08:53:07 +0000
ROA not before: Tue 22 Sep 2026 08:53:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 212.224.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:51:9e:62:1c:e4:25:53:13:8c:c3:06:d0:e1:32:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Sep 22 08:53:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ba31fdb629b715495a3acdf155993decbd18ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8b:77:0f:d7:f3:22:8d:2e:cf:5a:b3:4a:b3:
25:6a:e2:6d:40:fb:88:bb:49:80:87:bb:7a:e1:4e:
13:19:26:cf:84:76:6e:f6:2e:f6:f2:50:b9:9e:c5:
79:ce:4b:98:17:e1:eb:19:dc:d7:7a:85:0a:e3:a7:
49:04:47:68:c2:84:f0:d4:8f:c8:ac:2d:64:22:48:
39:ac:51:11:8b:cf:59:41:63:c8:61:a2:7d:2c:27:
f9:ea:b7:ce:5f:87:d1:92:fb:99:be:dd:c8:e3:b2:
32:21:28:24:00:28:2c:5a:a2:c1:69:f6:20:f2:e9:
35:c5:71:04:01:f1:4c:5c:e2:b1:9b:ba:bd:f1:e6:
8c:e1:4c:0d:67:50:3a:df:08:01:5e:15:ed:d6:cc:
9b:38:4b:6c:6f:c2:5c:2d:d7:07:ed:b2:5b:27:43:
97:93:4d:52:8f:3e:88:08:13:10:7c:46:0d:f8:f6:
4f:f5:95:b0:a6:06:82:2e:ca:75:7e:8e:51:40:cb:
0a:f0:b1:5d:cd:2d:cb:2d:09:3d:37:3a:9e:c1:94:
54:9d:53:6d:e7:04:de:53:ea:84:bf:de:d1:41:45:
2c:9c:7f:ab:64:2c:6c:45:6f:62:a0:39:22:95:cb:
ed:74:41:9f:6c:85:ae:a7:3a:a6:7f:56:82:3e:87:
e8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A3:1F:DB:62:9B:71:54:95:A3:AC:DF:15:59:93:DE:CB:D1:8E:C0
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/a6Mf22KbcVSVo6zfFVmT3svRjsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.224.8.0/24
Signature Algorithm: sha256WithRSAEncryption
32:08:3d:f1:88:5b:d6:8c:b2:10:ed:c8:c3:2e:f7:1e:c8:c9:
21:36:c6:d8:1b:e7:6d:87:8a:a0:1d:33:2d:0c:87:9f:94:f1:
83:83:86:8d:4e:34:d4:02:4a:52:4a:ed:c4:8d:5b:43:a6:4b:
f0:ce:77:74:e7:ea:48:9d:d7:c2:45:79:a7:06:d5:27:78:ac:
b1:32:98:a4:a1:cc:3f:5a:50:71:21:89:a6:6a:5d:dc:dc:b8:
65:3a:36:74:e2:4a:fb:66:da:4a:d4:8d:63:e9:ec:db:03:f1:
27:4c:a9:3b:7d:f3:99:d0:b9:7c:26:e2:1c:0a:ce:94:fe:9c:
bd:3d:56:41:f1:24:b3:ed:27:8c:63:95:b4:ae:30:15:7e:3c:
ad:96:fe:29:a1:3f:3a:21:fa:7f:49:8c:95:3b:af:26:43:9f:
13:be:0a:42:5c:9e:46:eb:6b:02:45:4d:fb:63:8e:cd:eb:35:
2f:3b:e8:e9:6c:44:a2:b0:4b:b4:ea:e5:f9:70:bb:e0:1a:1e:
a2:dc:10:5f:1f:ba:0d:60:82:a7:a4:d3:e6:d6:05:8c:56:87:
de:9e:10:8a:b1:2e:c5:b1:1a:bc:ae:47:e0:7f:03:c1:7a:5c:
a1:29:74:f9:d5:4e:c1:26:a1:53:e1:4d:c0:b5:26:c4:60:95:
b9:2c:ca:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDIUZ5iHOQlUxOMwwbQ4TJZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk
MDk5ZGIwHhcNMjYwOTIyMDg1MzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmEzMWZkYjYyOWI3MTU0OTVhM2FjZGYxNTU5OTNkZWNiZDE4ZWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1It3D9fzIo0uz1qzSrMlauJtQPuI
u0mAh7t64U4TGSbPhHZu9i728lC5nsV5zkuYF+HrGdzXeoUK46dJBEdowoTw1I/I
rC1kIkg5rFERi89ZQWPIYaJ9LCf56rfOX4fRkvuZvt3I47IyISgkACgsWqLBafYg
8uk1xXEEAfFMXOKxm7q98eaM4UwNZ1A63wgBXhXt1sybOEtsb8JcLdcH7bJbJ0OX
k01Sjz6ICBMQfEYN+PZP9ZWwpgaCLsp1fo5RQMsK8LFdzS3LLQk9NzqewZRUnVNt
5wTeU+qEv97RQUUsnH+rZCxsRW9ioDkilcvtdEGfbIWupzqmf1aCPofoiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGujH9tim3FUlaOs3xVZk97L0Y7AMB8GA1UdIwQY
MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt
NGYwZThjZTExYTdkLzEvYTZNZjIyS2JjVlNWbzZ6ZkZWbVQzc3ZSanNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk
LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1OAIMA0G
CSqGSIb3DQEBCwUAA4IBAQAyCD3xiFvWjLIQ7cjDLvceyMkhNsbYG+dth4qgHTMt
DIeflPGDg4aNTjTUAkpSSu3EjVtDpkvwznd05+pIndfCRXmnBtUneKyxMpikocw/
WlBxIYmmal3c3LhlOjZ04kr7ZtpK1I1j6ezbA/EnTKk7ffOZ0Ll8JuIcCs6U/py9
PVZB8SSz7SeMY5W0rjAVfjytlv4poT86Ifp/SYyVO68mQ58TvgpCXJ5G62sCRU37
Y47N6zUvO+jpbESisEu06uX5cLvgGh6i3BBfH7oNYIKnpNPm1gWMVofenhCKsS7F
sRq8rkfgfwPBelyhKXT51U7BJqFT4U3AtSbEYJW5LMqQ
-----END CERTIFICATE-----
Generated at Wed Sep 23 00:52:13 2026 by rpki-client