Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/6QK5f9HNklK5VgRqbl-LuY_6Prc.roa
File: 6QK5f9HNklK5VgRqbl-LuY_6Prc.roa (raw, json)
Hash identifier: a4Fa35TyP30+bX9tiYxd43tdwR0jS3cAp3rElVquyIo=
Subject key identifier: E9:02:B9:7F:D1:CD:92:52:B9:56:04:6A:6E:5F:8B:B9:8F:FA:3E:B7
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019A2A36C2E09E208ADFC09413915B94B41D
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/6QK5f9HNklK5VgRqbl-LuY_6Prc.roa
Signing time: Tue 28 Oct 2025 09:47:03 +0000
ROA not before: Tue 28 Oct 2025 09:47:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201201
IP address blocks: 213.169.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:36:c2:e0:9e:20:8a:df:c0:94:13:91:5b:94:b4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 28 09:47:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e902b97fd1cd9252b956046a6e5f8bb98ffa3eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:7f:12:f1:58:ff:30:36:df:a5:8f:c8:80:
64:ce:0e:bd:5b:8d:37:c4:c2:9e:dc:bd:ee:79:d0:
e5:97:50:6c:ce:9f:d0:26:66:e4:83:5f:91:e2:65:
14:a8:f8:ec:a6:15:68:f9:f5:55:6b:d9:cb:18:54:
8a:ff:06:02:43:c6:02:de:7a:51:5f:8c:55:3c:ad:
e1:61:f4:9c:8c:c1:11:6b:8b:84:5a:1d:fe:46:a7:
7c:88:94:ae:ce:58:2e:d2:a2:01:df:f4:7b:ab:23:
7c:63:66:f0:64:ae:8d:56:05:91:40:ca:6f:e9:e6:
3d:16:b0:b8:14:02:f3:a6:44:80:fa:08:eb:1d:7a:
24:a1:f3:fe:60:94:67:7a:a0:b3:38:64:69:57:a4:
57:d9:ed:9f:a1:33:ee:3a:71:5f:36:43:95:27:a0:
20:41:5a:ac:b1:57:7d:55:33:05:ee:50:58:08:5a:
20:99:57:c0:f1:0e:c6:28:a1:d9:57:e1:a9:b4:f8:
72:90:db:51:c2:93:f6:3d:00:0d:a3:85:21:5c:8f:
36:ab:45:7e:26:9b:d5:50:db:3e:b6:bc:e1:53:1a:
71:de:30:8c:9a:ff:5e:83:52:5e:f3:a5:fa:25:0f:
fe:72:75:32:c1:46:15:b0:a1:cf:60:c7:30:60:f7:
bc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:02:B9:7F:D1:CD:92:52:B9:56:04:6A:6E:5F:8B:B9:8F:FA:3E:B7
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/6QK5f9HNklK5VgRqbl-LuY_6Prc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.169.219.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e8:8c:ff:8d:d7:7d:da:44:00:a4:43:53:8d:eb:1e:87:fd:
22:43:29:ac:2d:92:33:47:bf:0b:04:da:ed:a7:77:b7:02:bc:
e7:a0:58:8c:3b:2d:ab:ff:e2:fb:b5:18:0a:62:3a:df:d6:80:
1b:fa:ce:f3:b9:1c:79:a3:1c:72:b8:fe:c0:c5:a4:8c:5c:f7:
55:88:db:a0:f0:2b:b1:fd:2d:89:61:49:34:d0:64:ca:ae:17:
39:e7:24:ec:07:00:80:21:ad:da:e7:fc:5b:ba:97:7f:99:9b:
86:f2:84:e8:74:39:fa:d2:7e:d1:93:b0:72:78:3b:e8:f3:a7:
98:0d:4a:e3:5d:81:61:07:24:06:2c:5b:b7:99:34:4d:d6:4a:
51:3f:2c:78:0d:3e:a6:e7:81:ab:70:6b:4a:4e:2b:c4:ca:3c:
00:eb:07:db:82:6d:48:cd:9d:0b:41:a5:74:2b:8a:e8:ba:47:
ad:f1:ca:47:9a:0c:92:a7:c9:cc:4a:b2:f6:b9:90:1a:cd:dd:
90:3b:23:5b:a2:a5:8f:ec:49:82:3b:f1:48:7b:d9:de:51:a5:
e4:66:f7:96:d1:4a:23:57:70:48:1a:8f:76:91:af:8f:11:03:
f5:ca:92:29:97:9b:67:00:5a:35:aa:ad:e4:f8:3a:ea:f7:64:
22:c1:93:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZoqNsLgniCK38CUE5FblLQdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjUxMDI4MDk0NzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTAyYjk3ZmQxY2Q5MjUyYjk1NjA0NmE2ZTVmOGJiOThmZmEzZWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswV/EvFY/zA236WPyIBkzg69W403
xMKe3L3uedDll1Bszp/QJmbkg1+R4mUUqPjsphVo+fVVa9nLGFSK/wYCQ8YC3npR
X4xVPK3hYfScjMERa4uEWh3+Rqd8iJSuzlgu0qIB3/R7qyN8Y2bwZK6NVgWRQMpv
6eY9FrC4FALzpkSA+gjrHXokofP+YJRneqCzOGRpV6RX2e2foTPuOnFfNkOVJ6Ag
QVqssVd9VTMF7lBYCFogmVfA8Q7GKKHZV+GptPhykNtRwpP2PQANo4UhXI82q0V+
JpvVUNs+trzhUxpx3jCMmv9eg1Je86X6JQ/+cnUywUYVsKHPYMcwYPe8CwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOkCuX/RzZJSuVYEam5fi7mP+j63MB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvNlFLNWY5SE5rbEs1VmdScWJsLUx1WV82UHJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1anbMA0G
CSqGSIb3DQEBCwUAA4IBAQBi6Iz/jdd92kQApENTjeseh/0iQymsLZIzR78LBNrt
p3e3ArznoFiMOy2r/+L7tRgKYjrf1oAb+s7zuRx5oxxyuP7AxaSMXPdViNug8Cux
/S2JYUk00GTKrhc55yTsBwCAIa3a5/xbupd/mZuG8oTodDn60n7Rk7ByeDvo86eY
DUrjXYFhByQGLFu3mTRN1kpRPyx4DT6m54GrcGtKTivEyjwA6wfbgm1IzZ0LQaV0
K4rouket8cpHmgySp8nMSrL2uZAazd2QOyNboqWP7EmCO/FIe9neUaXkZveW0Uoj
V3BIGo92ka+PEQP1ypIpl5tnAFo1qq3k+Drq92QiwZPo
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:33:24 2025 by rpki-client