Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/6Q0h1IFVjAP2s57S3xJZ0Bx-aac.roa
File: 6Q0h1IFVjAP2s57S3xJZ0Bx-aac.roa (raw, json)
Hash identifier: ZvSV8hzbl99f87CMpyXVOR2Av2PmKYSQfBrb7QQp5hs=
Subject key identifier: E9:0D:21:D4:81:55:8C:03:F6:B3:9E:D2:DF:12:59:D0:1C:7E:69:A7
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019D780A657694BB620FC835A93EC8350FE9
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/6Q0h1IFVjAP2s57S3xJZ0Bx-aac.roa
Signing time: Fri 10 Apr 2026 15:37:20 +0000
ROA not before: Fri 10 Apr 2026 15:37:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48430
IP address blocks: 45.155.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:78:0a:65:76:94:bb:62:0f:c8:35:a9:3e:c8:35:0f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Apr 10 15:37:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e90d21d481558c03f6b39ed2df1259d01c7e69a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fd:44:e8:b8:85:b7:fc:f2:d2:67:27:03:a2:
31:ad:af:44:c8:9f:42:42:9b:83:ae:05:25:9f:30:
83:d2:09:5a:3a:b9:f1:20:b3:54:95:fd:5a:19:de:
f6:4f:1d:7c:88:8b:a9:eb:e4:e5:34:a2:02:44:9a:
d4:da:d0:d8:83:59:99:38:6c:1b:5c:41:68:b4:6f:
b7:cc:36:2e:e8:ef:36:67:05:1a:8a:4d:79:35:1a:
66:3d:a7:54:14:5c:51:83:8f:04:d2:3a:dc:40:9d:
99:68:7c:75:b8:c8:f4:5a:ec:c4:09:53:04:78:e2:
fb:5c:17:ea:f3:80:03:4a:38:9f:36:10:a0:ad:c6:
d3:4a:2a:93:b6:18:e8:9d:40:ba:58:65:4a:fa:6b:
2a:33:a3:de:5c:2c:86:3c:1f:55:10:68:09:9a:8f:
33:37:db:6c:34:22:80:5a:3e:0f:c2:5a:c3:fb:42:
2d:d0:06:d7:b6:90:65:20:ef:4d:1e:a2:b1:96:75:
20:d1:24:2b:05:6a:7a:9a:d7:58:4c:ee:c0:94:83:
45:6a:be:dd:52:31:be:3c:dd:e8:c7:f5:ed:e0:94:
92:74:1c:99:bd:7b:56:5b:1c:89:61:82:59:28:3a:
5a:ad:f7:37:d2:e7:11:2d:f3:88:10:f5:d4:3b:f6:
66:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0D:21:D4:81:55:8C:03:F6:B3:9E:D2:DF:12:59:D0:1C:7E:69:A7
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/6Q0h1IFVjAP2s57S3xJZ0Bx-aac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.52.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:7b:8f:79:d1:ed:79:94:c7:9b:53:f4:0c:e8:32:89:3d:c4:
ee:72:d8:61:9b:4f:ff:32:f6:fd:94:b8:5f:a4:66:8f:f8:55:
30:7f:1b:16:cf:15:cf:c2:ec:71:ef:d0:78:bd:5a:ac:f1:fa:
36:7b:fd:f3:e9:33:76:e1:2d:7a:32:97:d4:91:12:34:7b:95:
9a:d6:2f:02:bf:2e:5d:30:f7:a1:97:3b:3c:55:64:d6:21:2a:
84:da:bf:4f:86:1f:b1:67:d2:a9:03:da:a1:d5:71:a2:2e:22:
ac:a2:48:54:16:ae:33:e4:9d:17:ea:83:a5:fb:b0:85:e9:5d:
02:94:bf:26:86:c4:e0:6c:bb:41:c4:53:23:1b:79:21:8a:b1:
97:a4:28:63:93:c2:de:c3:c9:07:be:00:8f:a1:93:e7:51:d7:
44:a1:ba:f7:ce:fc:44:c9:96:a1:4a:a4:40:e2:4b:c4:57:1f:
96:4b:42:32:53:9d:ee:2b:9c:29:2e:96:d4:11:0d:8f:78:8a:
67:20:5f:dc:2c:2d:89:6b:ed:89:2d:dd:a7:55:db:29:1b:d0:
39:29:a0:4e:ca:6f:cd:e7:f7:fc:a4:d3:c5:2d:02:7d:1a:84:
4b:7f:6e:9c:44:b0:3d:9c:b4:84:9d:74:b6:f9:e3:43:06:4f:
61:8a:08:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ14CmV2lLtiD8g1qT7INQ/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjYwNDEwMTUzNzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTBkMjFkNDgxNTU4YzAzZjZiMzllZDJkZjEyNTlkMDFjN2U2OWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf1E6LiFt/zy0mcnA6Ixra9EyJ9C
QpuDrgUlnzCD0glaOrnxILNUlf1aGd72Tx18iIup6+TlNKICRJrU2tDYg1mZOGwb
XEFotG+3zDYu6O82ZwUaik15NRpmPadUFFxRg48E0jrcQJ2ZaHx1uMj0WuzECVME
eOL7XBfq84ADSjifNhCgrcbTSiqTthjonUC6WGVK+msqM6PeXCyGPB9VEGgJmo8z
N9tsNCKAWj4PwlrD+0It0AbXtpBlIO9NHqKxlnUg0SQrBWp6mtdYTO7AlINFar7d
UjG+PN3ox/Xt4JSSdByZvXtWWxyJYYJZKDparfc30ucRLfOIEPXUO/ZmIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOkNIdSBVYwD9rOe0t8SWdAcfmmnMB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvNlEwaDFJRlZqQVAyczU3UzN4SlowQngtYWFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZs0MA0G
CSqGSIb3DQEBCwUAA4IBAQBee4950e15lMebU/QM6DKJPcTucthhm0//Mvb9lLhf
pGaP+FUwfxsWzxXPwuxx79B4vVqs8fo2e/3z6TN24S16MpfUkRI0e5Wa1i8Cvy5d
MPehlzs8VWTWISqE2r9Phh+xZ9KpA9qh1XGiLiKsokhUFq4z5J0X6oOl+7CF6V0C
lL8mhsTgbLtBxFMjG3khirGXpChjk8Lew8kHvgCPoZPnUddEobr3zvxEyZahSqRA
4kvEVx+WS0IyU53uK5wpLpbUEQ2PeIpnIF/cLC2Ja+2JLd2nVdspG9A5KaBOym/N
5/f8pNPFLQJ9GoRLf26cRLA9nLSEnXS2+eNDBk9highr
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:02:23 2026 by rpki-client