Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/6Q-XUbD5MgOyjgoOmVRJIjrTr7w.roa
File: 6Q-XUbD5MgOyjgoOmVRJIjrTr7w.roa (raw, json)
Hash identifier: O0/6hTUPh/pNhMmPBODmIvQuruNGiAl8r721VcN/XzQ=
Subject key identifier: E9:0F:97:51:B0:F9:32:03:B2:8E:0A:0E:99:54:49:22:3A:D3:AF:BC
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 019D910E81688C19B04293103072C974BC19
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/6Q-XUbD5MgOyjgoOmVRJIjrTr7w.roa
Signing time: Wed 15 Apr 2026 12:12:20 +0000
ROA not before: Wed 15 Apr 2026 12:12:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 158.173.34.0/24 maxlen: 24
158.173.42.0/24 maxlen: 24
158.173.43.0/24 maxlen: 24
158.173.65.0/24 maxlen: 24
158.173.66.0/24 maxlen: 24
158.173.106.0/24 maxlen: 24
158.173.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:91:0e:81:68:8c:19:b0:42:93:10:30:72:c9:74:bc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Apr 15 12:12:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e90f9751b0f93203b28e0a0e995449223ad3afbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:3d:c5:7f:34:08:8c:5b:65:27:39:67:35:
6e:49:eb:6a:b2:fb:6c:fd:79:56:1e:41:7c:35:84:
03:60:47:d4:fb:6c:c8:35:2f:05:86:f6:7d:92:57:
46:59:7f:af:99:df:b8:b2:30:da:6f:c9:4d:f9:4b:
9b:5a:e6:a7:ea:ca:e6:41:40:a4:a3:d6:d1:cf:8f:
f2:93:d6:6f:85:5a:13:af:b3:c9:00:bf:05:d3:38:
5d:fc:6e:4d:33:ae:46:31:12:6d:7c:a8:5a:6b:c7:
71:0b:97:29:16:5f:3f:04:26:f3:8d:4a:b8:e6:5a:
a4:d3:49:ea:48:ff:b2:fa:a8:4f:52:98:18:90:44:
3a:a3:f6:f8:02:be:79:99:e9:c8:31:5a:eb:c8:1d:
ec:6e:2e:bb:cc:b0:c9:27:71:f3:bc:78:40:13:c2:
57:74:b3:a7:4b:61:db:ad:ca:78:53:83:6d:85:67:
fa:dd:1c:0b:17:90:c5:eb:22:f2:d2:17:48:03:97:
53:f6:00:86:30:49:48:6a:10:da:fa:fa:00:6e:df:
cc:94:05:73:ae:9a:98:f3:ca:36:a8:d2:09:2f:e9:
50:20:b0:46:e8:66:cd:39:19:b8:da:a3:c2:49:2f:
c0:7e:0f:30:7b:9f:87:53:be:9d:d5:60:7f:db:fe:
f9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0F:97:51:B0:F9:32:03:B2:8E:0A:0E:99:54:49:22:3A:D3:AF:BC
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/6Q-XUbD5MgOyjgoOmVRJIjrTr7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.34.0/24
158.173.42.0/23
158.173.65.0-158.173.66.255
158.173.106.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:05:85:cf:99:43:7d:aa:7a:c8:2b:38:43:0e:3f:bc:2f:a0:
ef:d2:f4:98:0a:01:a7:5b:39:1a:7f:4c:70:92:f5:b2:b1:b4:
76:90:aa:14:81:87:fc:23:8f:5e:e5:52:67:12:8b:3a:4e:c9:
10:b5:13:ed:2b:12:0b:61:00:6c:cb:13:da:44:af:d8:e0:5a:
d1:06:34:15:14:5b:06:f0:e6:b5:ba:54:4d:c6:97:28:3c:59:
af:e9:0c:b2:4b:0b:ef:67:08:c9:f3:ea:10:cd:64:35:e9:2e:
50:d1:14:46:78:33:24:0a:dd:c5:7d:24:b4:dc:8b:c2:62:cb:
18:d3:73:2d:51:cb:10:38:95:88:c1:42:04:a4:42:0e:95:a9:
5f:57:e2:bb:01:ae:90:0d:e5:7f:24:7a:0c:3f:20:1b:1e:ea:
14:8e:cb:38:8e:a0:76:a3:f0:d2:ea:f7:a8:96:ea:f0:6a:88:
77:9d:56:5a:df:ee:31:9f:f0:64:51:f3:f1:99:bc:e7:5a:54:
73:6d:ae:42:3b:86:41:5b:a2:ba:84:ca:42:e2:91:8a:73:9a:
09:7c:ed:3a:57:2b:a9:9b:8e:0a:88:2e:6e:ae:b1:4f:a2:df:
e1:97:43:bf:d6:9c:2a:f7:ee:53:1c:9a:61:d3:c9:14:19:e8:
cc:e2:4f:6f
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZ2RDoFojBmwQpMQMHLJdLwZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNmEyOGI3YzYzZWY2YWIyMTRhNTJjZmE3YzNlNzhkYjlh
NDA4MjMwHhcNMjYwNDE1MTIxMjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTBmOTc1MWIwZjkzMjAzYjI4ZTBhMGU5OTU0NDkyMjNhZDNhZmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqE9xX80CIxbZSc5ZzVuSetqsvts
/XlWHkF8NYQDYEfU+2zINS8FhvZ9kldGWX+vmd+4sjDab8lN+UubWuan6srmQUCk
o9bRz4/yk9ZvhVoTr7PJAL8F0zhd/G5NM65GMRJtfKhaa8dxC5cpFl8/BCbzjUq4
5lqk00nqSP+y+qhPUpgYkEQ6o/b4Ar55menIMVrryB3sbi67zLDJJ3HzvHhAE8JX
dLOnS2Hbrcp4U4NthWf63RwLF5DF6yLy0hdIA5dT9gCGMElIahDa+voAbt/MlAVz
rpqY88o2qNIJL+lQILBG6GbNORm42qPCSS/Afg8we5+HU76d1WB/2/75ZQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFOkPl1Gw+TIDso4KDplUSSI606+8MB8GA1UdIwQY
MBaAFGJqKLfGPvarIUpSz6fD5425pAgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUt
ZDJjZDI2YjY5ZGYxLzEvNlEtWFViRDVNZ095amdvT21WUkpJanJUcjd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUtZDJjZDI2YjY5ZGYx
LzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAnq0iAwQB
nq0qMAwDBACerUEDBACerUIDBAGerWowDQYJKoZIhvcNAQELBQADggEBAB8Fhc+Z
Q32qesgrOEMOP7wvoO/S9JgKAadbORp/THCS9bKxtHaQqhSBh/wjj17lUmcSizpO
yRC1E+0rEgthAGzLE9pEr9jgWtEGNBUUWwbw5rW6VE3Glyg8Wa/pDLJLC+9nCMnz
6hDNZDXpLlDRFEZ4MyQK3cV9JLTci8JiyxjTcy1RyxA4lYjBQgSkQg6VqV9X4rsB
rpAN5X8kegw/IBse6hSOyziOoHaj8NLq96iW6vBqiHedVlrf7jGf8GRR8/GZvOda
VHNtrkI7hkFborqEykLikYpzmgl87TpXK6mbjgqILm6usU+i3+GXQ7/WnCr37lMc
mmHTyRQZ6MziT28=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:31 2026 by rpki-client