Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/6-RO6lEKyV8p6BduvZDc_r5dKqU.roa
File: 6-RO6lEKyV8p6BduvZDc_r5dKqU.roa (raw, json)
Hash identifier: 5BfN3RVMV58Wdxlxlajwm60etXfqDYmsQCcNJxtegF0=
Subject key identifier: EB:E4:4E:EA:51:0A:C9:5F:29:E8:17:6E:BD:90:DC:FE:BE:5D:2A:A5
Certificate issuer: /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Certificate serial: 01A0C2F62838D2B3C0744F67AF559F53271F
Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/6-RO6lEKyV8p6BduvZDc_r5dKqU.roa
Signing time: Mon 21 Sep 2026 07:55:07 +0000
ROA not before: Mon 21 Sep 2026 07:55:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206774
IP address blocks: 46.252.1.0/24 maxlen: 24
46.252.3.0/24 maxlen: 24
46.252.4.0/24 maxlen: 24
46.252.5.0/24 maxlen: 24
46.252.8.0/24 maxlen: 24
46.252.9.0/24 maxlen: 24
46.252.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:f6:28:38:d2:b3:c0:74:4f:67:af:55:9f:53:27:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Validity
Not Before: Sep 21 07:55:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebe44eea510ac95f29e8176ebd90dcfebe5d2aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1c:58:57:00:da:08:13:2d:07:ba:a9:20:8a:
bb:21:02:8c:e9:25:4c:1e:7b:96:3c:40:c0:d1:80:
eb:f1:43:3b:ba:57:9b:e5:29:90:99:e2:3f:c5:cd:
ee:d6:d2:78:55:0f:08:3f:b6:f4:e6:50:1b:48:7e:
37:16:73:70:c3:ae:a9:6f:c9:a6:dc:ef:d4:b3:81:
75:20:17:ef:78:03:e0:44:6e:c6:f7:e4:57:17:8e:
12:95:2f:19:8f:84:df:f9:83:78:83:90:91:fd:cc:
be:f2:8f:0e:63:6b:97:e6:05:77:45:47:97:9c:15:
18:7b:fc:4c:0c:fc:7c:24:34:02:70:73:5a:28:73:
f7:33:ad:03:a6:4c:93:b3:68:64:02:d4:76:5a:05:
df:aa:ae:2b:3a:ed:bb:1b:b0:cb:c4:40:e0:0f:05:
83:0e:40:5d:25:3d:7d:5f:32:f3:21:39:45:6c:bf:
37:cb:84:7d:3e:c1:3a:8f:a5:13:ee:2d:b4:a1:07:
b7:5a:41:c3:27:a1:e2:69:2d:82:bc:c3:f4:4c:f9:
84:00:07:4b:bd:07:dc:d0:14:3a:1d:19:10:46:ba:
ce:67:00:5a:d2:e3:ae:ac:53:bd:e7:77:94:f8:20:
b1:ee:36:3a:2b:f4:cc:d3:93:5e:76:16:c7:6b:17:
9b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E4:4E:EA:51:0A:C9:5F:29:E8:17:6E:BD:90:DC:FE:BE:5D:2A:A5
X509v3 Authority Key Identifier:
keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/6-RO6lEKyV8p6BduvZDc_r5dKqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.252.1.0/24
46.252.3.0-46.252.5.255
46.252.8.0-46.252.10.255
Signature Algorithm: sha256WithRSAEncryption
d7:cb:6c:83:dc:de:37:38:3f:dd:83:c9:c3:fb:b7:bc:eb:74:
23:aa:ab:03:80:4f:81:6f:29:28:68:3e:27:af:38:5e:01:78:
20:98:a6:0a:48:2b:35:7e:32:d0:5e:ff:a9:7c:01:77:10:2b:
0d:b2:e2:73:39:d3:bb:3d:26:9d:91:3e:7c:b1:3f:f5:19:d1:
bf:f5:54:db:29:ce:9f:98:6e:04:fa:c7:3c:2c:ee:a6:81:8e:
1e:40:7f:00:c5:e2:95:0f:4c:f6:22:fa:49:4d:3e:a8:f6:62:
9d:01:9b:34:b8:6d:c3:c7:dd:62:37:0e:4c:77:a5:b9:f2:75:
6a:2b:d8:c1:34:4e:9b:53:da:ee:57:46:7a:39:fa:08:9c:3f:
66:27:a1:f7:b5:e9:ae:e4:eb:1e:95:bc:27:e6:6b:2a:9d:cc:
1f:c6:01:d7:8a:50:04:7f:88:e9:a2:e2:5f:9a:b7:8d:c4:fa:
45:7e:18:c5:b7:71:c7:2f:03:5c:6b:c6:42:a0:74:24:7e:ee:
84:12:43:60:f2:89:8f:0d:3d:b3:73:32:eb:55:2d:10:87:11:
94:e5:66:f4:80:77:21:23:ad:28:cc:19:75:ce:1c:e3:fd:b2:
2d:b6:c0:25:51:e3:03:db:5c:da:c9:17:78:ca:27:f2:14:c6:
de:4c:39:e7
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDC9ig40rPAdE9nr1WfUycfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4Mjg0ZjE4Y2Q0NDYwNGJkZDZkMDhmNGQ4NzhkYzYxNDU2
YzQwZmQwHhcNMjYwOTIxMDc1NTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmU0NGVlYTUxMGFjOTVmMjllODE3NmViZDkwZGNmZWJlNWQyYWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RxYVwDaCBMtB7qpIIq7IQKM6SVM
HnuWPEDA0YDr8UM7uleb5SmQmeI/xc3u1tJ4VQ8IP7b05lAbSH43FnNww66pb8mm
3O/Us4F1IBfveAPgRG7G9+RXF44SlS8Zj4Tf+YN4g5CR/cy+8o8OY2uX5gV3RUeX
nBUYe/xMDPx8JDQCcHNaKHP3M60DpkyTs2hkAtR2WgXfqq4rOu27G7DLxEDgDwWD
DkBdJT19XzLzITlFbL83y4R9PsE6j6UT7i20oQe3WkHDJ6HiaS2CvMP0TPmEAAdL
vQfc0BQ6HRkQRrrOZwBa0uOurFO953eU+CCx7jY6K/TM05NedhbHaxeb4QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOvkTupRCslfKegXbr2Q3P6+XSqlMB8GA1UdIwQY
MBaAFNgoTxjNRGBL3W0I9Nh43GFFbED9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkNoUEdNMUVZRXZkYlFqMDJIamNZVVZzUVAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yNjUyY2QtN2VjZi00OWU4LWE0Zjgt
Yzc4NjkxMjg1ODJjLzEvNi1STzZsRUt5VjhwNkJkdXZaRGNfcjVkS3FVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8yNjUyY2QtN2VjZi00OWU4LWE0ZjgtYzc4NjkxMjg1ODJj
LzEvMkNoUEdNMUVZRXZkYlFqMDJIamNZVVZzUVAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQALvwBMAwD
BAAu/AMDBAEu/AQwDAMEAy78CAMEAC78CjANBgkqhkiG9w0BAQsFAAOCAQEA18ts
g9zeNzg/3YPJw/u3vOt0I6qrA4BPgW8pKGg+J684XgF4IJimCkgrNX4y0F7/qXwB
dxArDbLicznTuz0mnZE+fLE/9RnRv/VU2ynOn5huBPrHPCzupoGOHkB/AMXilQ9M
9iL6SU0+qPZinQGbNLhtw8fdYjcOTHelufJ1aivYwTROm1Pa7ldGejn6CJw/Zieh
97XpruTrHpW8J+ZrKp3MH8YB14pQBH+I6aLiX5q3jcT6RX4Yxbdxxy8DXGvGQqB0
JH7uhBJDYPKJjw09s3My61UtEIcRlOVm9IB3ISOtKMwZdc4c4/2yLbbAJVHjA9tc
2skXeMon8hTG3kw55w==
-----END CERTIFICATE-----
Generated at Wed Sep 23 14:45:53 2026 by rpki-client