Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/6LT2Fmx2AvdvAyPEavcIF6YNISU.roa
File: 6LT2Fmx2AvdvAyPEavcIF6YNISU.roa (raw, json)
Hash identifier: xQkludjOvnIvi3sBuHQZGgH+sEIqNW8a2/OpVWjIvBU=
Subject key identifier: E8:B4:F6:16:6C:76:02:F7:6F:03:23:C4:6A:F7:08:17:A6:0D:21:25
Certificate issuer: /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial: 01986ED7BD75FC77D2DF8DB9E20B2EAC7C2B
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/6LT2Fmx2AvdvAyPEavcIF6YNISU.roa
Signing time: Sun 03 Aug 2025 07:31:29 +0000
ROA not before: Sun 03 Aug 2025 07:31:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51202
IP address blocks: 82.139.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6e:d7:bd:75:fc:77:d2:df:8d:b9:e2:0b:2e:ac:7c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Validity
Not Before: Aug 3 07:31:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8b4f6166c7602f76f0323c46af70817a60d2125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:38:15:a9:27:19:62:b9:a6:93:8b:1c:c8:c0:
02:c2:84:d6:fe:bd:7a:46:11:8c:5d:06:77:30:3a:
6d:f2:d4:85:ef:c4:c6:c6:66:ca:8f:a8:0f:ab:e9:
09:b6:36:fc:d5:b0:10:78:9e:e6:c7:ca:82:a2:86:
25:eb:ab:3e:8f:6d:c7:72:f0:d9:29:4c:8a:0f:45:
8f:68:9c:3d:40:92:b5:7a:e7:93:65:b6:25:6e:f9:
8c:e0:6f:59:2d:59:5b:ee:3f:38:74:69:8c:dc:22:
ba:95:b4:ae:be:0e:09:60:cd:37:62:85:fc:54:97:
d2:23:8b:7f:9d:8e:85:7b:8b:7c:d1:81:8f:00:d6:
c6:12:49:5d:20:72:f2:4d:2f:39:f9:ec:85:1b:66:
46:da:b5:97:97:78:97:ba:c7:3b:28:95:c8:96:09:
01:d0:1d:53:a7:f3:e9:9e:20:27:ea:f7:28:94:18:
e4:6c:22:6b:8b:1e:06:20:52:c9:12:ed:76:42:de:
37:11:6e:52:0f:bd:fa:fa:c7:9c:99:23:7a:f7:70:
9f:1b:8f:f7:40:3c:db:cf:2e:d2:11:a2:4d:13:ad:
de:e3:2d:f8:b0:1e:e7:52:d8:14:df:c4:65:f7:d5:
39:e8:02:bb:0c:9b:70:2a:d0:ba:fd:6f:5d:3d:c1:
43:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B4:F6:16:6C:76:02:F7:6F:03:23:C4:6A:F7:08:17:A6:0D:21:25
X509v3 Authority Key Identifier:
keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/6LT2Fmx2AvdvAyPEavcIF6YNISU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.224.0/24
Signature Algorithm: sha256WithRSAEncryption
56:56:c4:3c:9b:a0:ec:2f:5d:0a:ee:40:0b:ae:ed:97:67:8a:
9d:e6:3e:96:19:e0:53:c0:6a:46:c3:bd:95:84:12:fc:0a:76:
da:ed:13:96:2d:44:13:68:fc:c1:9c:10:c8:41:65:54:cd:15:
85:2e:3e:58:da:30:52:1f:ac:98:89:25:a9:7d:38:c7:28:cb:
0f:a3:52:65:07:a8:c4:d2:9f:0d:de:d4:29:9a:ff:d0:b8:8e:
07:da:65:c8:85:7e:0e:65:f7:41:9e:d9:bc:12:ca:e2:1d:e1:
10:e8:f9:1e:b8:38:20:29:7e:85:48:9c:d8:6b:e6:da:8e:5e:
7e:9d:e9:ed:07:16:2c:70:ad:9c:a9:c4:2c:1a:7e:3a:ce:b1:
e2:32:7a:ff:ad:95:ce:52:09:8e:22:5b:33:11:cc:0d:09:5b:
3c:c4:a7:e3:04:5f:b1:3c:5d:4e:7f:fe:94:d3:f3:54:8e:15:
ee:8b:0e:bd:c5:6c:2e:bf:52:de:27:30:50:89:77:38:3f:f0:
d6:fc:07:10:b3:65:4e:7c:7b:1d:da:fe:3d:af:65:e3:2e:0a:
5f:80:53:fd:ca:18:93:a4:26:d7:7f:60:22:99:13:14:6b:72:
0a:66:29:b9:30:c1:79:dc:55:80:43:7b:75:3d:09:28:36:6a:
0e:62:02:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZhu1711/HfS34254gsurHwrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYjEyZThkZjNhYmQ1NTU5ZjljZjk2ODBhZjY1ZGQxNjU4
OWRlODYwHhcNMjUwODAzMDczMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGI0ZjYxNjZjNzYwMmY3NmYwMzIzYzQ2YWY3MDgxN2E2MGQyMTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjgVqScZYrmmk4scyMACwoTW/r16
RhGMXQZ3MDpt8tSF78TGxmbKj6gPq+kJtjb81bAQeJ7mx8qCooYl66s+j23HcvDZ
KUyKD0WPaJw9QJK1eueTZbYlbvmM4G9ZLVlb7j84dGmM3CK6lbSuvg4JYM03YoX8
VJfSI4t/nY6Fe4t80YGPANbGEkldIHLyTS85+eyFG2ZG2rWXl3iXusc7KJXIlgkB
0B1Tp/PpniAn6vcolBjkbCJrix4GIFLJEu12Qt43EW5SD736+secmSN693CfG4/3
QDzbzy7SEaJNE63e4y34sB7nUtgU38Rl99U56AK7DJtwKtC6/W9dPcFDFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOi09hZsdgL3bwMjxGr3CBemDSElMB8GA1UdIwQY
MBaAFKKxLo3zq9VVn5z5aAr2XdFlid6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3JFdWpmT3IxVldmblBsb0N2WmQwV1dKM29ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lYzQ0ZWEtZWY0My00YjNhLWE2OWEt
YjRjYjYzN2RhOGMzLzEvNkxUMkZteDJBdmR2QXlQRWF2Y0lGNllOSVNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9lYzQ0ZWEtZWY0My00YjNhLWE2OWEtYjRjYjYzN2RhOGMz
LzEvb3JFdWpmT3IxVldmblBsb0N2WmQwV1dKM29ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUovgMA0G
CSqGSIb3DQEBCwUAA4IBAQBWVsQ8m6DsL10K7kALru2XZ4qd5j6WGeBTwGpGw72V
hBL8Cnba7ROWLUQTaPzBnBDIQWVUzRWFLj5Y2jBSH6yYiSWpfTjHKMsPo1JlB6jE
0p8N3tQpmv/QuI4H2mXIhX4OZfdBntm8EsriHeEQ6PkeuDggKX6FSJzYa+bajl5+
nentBxYscK2cqcQsGn46zrHiMnr/rZXOUgmOIlszEcwNCVs8xKfjBF+xPF1Of/6U
0/NUjhXuiw69xWwuv1LeJzBQiXc4P/DW/AcQs2VOfHsd2v49r2XjLgpfgFP9yhiT
pCbXf2AimRMUa3IKZim5MMF53FWAQ3t1PQkoNmoOYgKV
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:43:11 2025 by rpki-client