Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/6B6G2JKfebeDFN1P175OJ6aWis8.roa
File: 6B6G2JKfebeDFN1P175OJ6aWis8.roa (raw, json)
Hash identifier: swWXMAtzWWgazaHMQDxgqtKidJX8kJHeuQhoAietQl4=
Subject key identifier: E8:1E:86:D8:92:9F:79:B7:83:14:DD:4F:D7:BE:4E:27:A6:96:8A:CF
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 01A138CB51AD17E99A1B13BC8ABD7775EE7A
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/6B6G2JKfebeDFN1P175OJ6aWis8.roa
Signing time: Wed 14 Oct 2026 05:03:31 +0000
ROA not before: Wed 14 Oct 2026 05:03:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 46.20.108.0/24 maxlen: 24
46.20.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:cb:51:ad:17:e9:9a:1b:13:bc:8a:bd:77:75:ee:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Oct 14 05:03:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e81e86d8929f79b78314dd4fd7be4e27a6968acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a2:d7:b0:6e:fa:e0:c6:26:84:58:89:d0:a8:
3b:16:3f:f6:c3:76:4a:1e:e8:9e:6a:3d:b6:f5:a6:
f2:11:c6:b8:6b:2f:e5:3b:86:33:08:e6:8d:9a:f8:
99:09:e2:99:1d:ad:db:ed:5d:5a:7f:b8:ab:d1:76:
b0:d3:c9:a1:b2:b7:04:34:b3:4c:14:b4:9b:8b:01:
a3:02:22:3b:bb:bc:b4:59:3b:e0:67:40:db:f3:3c:
99:c2:f4:24:58:f9:2a:1b:98:0c:cf:49:63:63:16:
83:83:b9:89:1a:de:d9:aa:f0:78:40:e6:66:4d:e9:
24:99:35:70:2f:a4:6b:93:19:50:e8:13:a3:47:6a:
a9:37:07:37:4d:75:20:95:43:a1:d4:20:21:94:58:
f5:f5:e0:4d:b7:1a:f9:42:d3:be:6b:9b:71:7b:90:
33:64:e4:d4:a0:01:8b:3b:87:e7:93:30:66:2f:21:
4a:7f:31:e3:4b:12:4a:23:a0:2a:32:d1:92:6d:d1:
2a:a2:8f:3a:60:41:6b:2d:1e:2c:eb:fc:e7:72:d6:
89:c7:0e:1e:6b:89:f7:fb:e6:1f:b0:d8:c2:35:2e:
db:c5:24:59:c8:68:79:7a:37:df:76:c8:c1:4d:7b:
9a:e1:4c:33:3d:09:ae:86:e4:e4:48:07:ec:d0:ee:
a1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1E:86:D8:92:9F:79:B7:83:14:DD:4F:D7:BE:4E:27:A6:96:8A:CF
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/6B6G2JKfebeDFN1P175OJ6aWis8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.108.0/24
46.20.111.0/24
Signature Algorithm: sha256WithRSAEncryption
19:a4:87:15:6a:59:cf:10:99:85:dd:35:fe:7f:71:87:6b:cd:
67:ba:27:82:d0:59:bb:27:ba:4b:4c:0f:91:55:bc:4e:e4:2b:
a8:9c:0f:2c:84:0f:63:12:eb:35:de:25:d4:77:48:9e:9c:c9:
f2:e6:ad:02:41:11:ad:ca:09:20:11:c7:2a:ee:45:69:bf:5e:
ef:a1:51:da:12:43:d9:dd:ab:e3:c3:93:5a:72:28:91:1e:cd:
40:b7:34:11:39:60:08:9c:14:6b:ea:0c:78:51:01:61:94:4c:
7c:a8:34:e7:df:45:16:08:7a:8a:27:43:14:d9:1d:72:27:c0:
c6:d4:b0:aa:3f:4c:8f:cc:94:c2:5e:b8:b1:4f:31:9b:53:08:
a8:32:b2:2d:e8:b3:22:84:67:be:30:d2:0b:42:49:37:99:f5:
32:d1:b5:bf:d9:62:db:8c:d9:8e:39:cb:d8:1a:dc:40:76:28:
3a:39:3b:5f:db:72:17:d1:ee:d8:cd:eb:aa:68:48:fd:a2:e9:
29:95:dc:43:d1:54:a5:31:fc:4d:0a:0f:aa:e9:17:9b:f1:61:
97:8e:28:19:3a:ad:45:b4:81:ac:55:0c:4f:2b:df:14:90:88:
fb:a4:bb:dd:be:40:75:b1:61:9b:bd:e9:c6:8b:3f:8b:c8:a3:
00:d6:3e:80
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaE4y1GtF+maGxO8ir13de56MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx
ZTllNjUwHhcNMjYxMDE0MDUwMzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODFlODZkODkyOWY3OWI3ODMxNGRkNGZkN2JlNGUyN2E2OTY4YWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaLXsG764MYmhFiJ0Kg7Fj/2w3ZK
Huieaj229abyEca4ay/lO4YzCOaNmviZCeKZHa3b7V1af7ir0Xaw08mhsrcENLNM
FLSbiwGjAiI7u7y0WTvgZ0Db8zyZwvQkWPkqG5gMz0ljYxaDg7mJGt7ZqvB4QOZm
TekkmTVwL6RrkxlQ6BOjR2qpNwc3TXUglUOh1CAhlFj19eBNtxr5QtO+a5txe5Az
ZOTUoAGLO4fnkzBmLyFKfzHjSxJKI6AqMtGSbdEqoo86YEFrLR4s6/znctaJxw4e
a4n3++YfsNjCNS7bxSRZyGh5ejffdsjBTXua4UwzPQmuhuTkSAfs0O6hnQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOgehtiSn3m3gxTdT9e+TiemlorPMB8GA1UdIwQY
MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct
MzU1MDgwNDE2NTJkLzEvNkI2RzJKS2ZlYmVERk4xUDE3NU9KNmFXaXM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk
LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALhRsAwQA
LhRvMA0GCSqGSIb3DQEBCwUAA4IBAQAZpIcValnPEJmF3TX+f3GHa81nuieC0Fm7
J7pLTA+RVbxO5CuonA8shA9jEus13iXUd0ienMny5q0CQRGtygkgEccq7kVpv17v
oVHaEkPZ3avjw5NaciiRHs1AtzQROWAInBRr6gx4UQFhlEx8qDTn30UWCHqKJ0MU
2R1yJ8DG1LCqP0yPzJTCXrixTzGbUwioMrIt6LMihGe+MNILQkk3mfUy0bW/2WLb
jNmOOcvYGtxAdig6OTtf23IX0e7YzeuqaEj9oukpldxD0VSlMfxNCg+q6Reb8WGX
jigZOq1FtIGsVQxPK98UkIj7pLvdvkB1sWGbvenGiz+LyKMA1j6A
-----END CERTIFICATE-----
Generated at Thu Oct 15 02:09:02 2026 by rpki-client