Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/6I1o-00bO0yBVFa-RHo0a1YDfi8.roa
File: 6I1o-00bO0yBVFa-RHo0a1YDfi8.roa (raw, json)
Hash identifier: mz0AXniVXIbiRiAVTj0vPHPAoOXky6H5Br9F/kVQhHQ=
Subject key identifier: E8:8D:68:FB:4D:1B:3B:4C:81:54:56:BE:44:7A:34:6B:56:03:7E:2F
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019A0B37E2647EF032A1B0D8E03EE6D38602
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/6I1o-00bO0yBVFa-RHo0a1YDfi8.roa
Signing time: Wed 22 Oct 2025 09:20:03 +0000
ROA not before: Wed 22 Oct 2025 09:20:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25184
IP address blocks: 46.38.139.0/24 maxlen: 24
46.38.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:37:e2:64:7e:f0:32:a1:b0:d8:e0:3e:e6:d3:86:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Oct 22 09:20:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e88d68fb4d1b3b4c815456be447a346b56037e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8b:fc:f8:a9:37:97:d9:09:a8:f8:9f:78:b9:
57:f5:1d:00:67:11:a5:af:f8:15:df:15:88:2f:1e:
95:e2:46:9d:00:54:a8:3e:c2:0a:67:97:c4:6c:6b:
4f:d1:dd:4b:23:78:ce:c5:2b:b8:df:6c:46:5a:d4:
d5:14:ca:4f:13:38:1f:c6:a8:9f:e7:f9:31:db:44:
04:2b:33:c6:bf:c5:a4:94:69:93:8d:8f:dd:20:26:
69:6f:77:91:80:31:06:74:f9:f0:95:23:f8:6f:2e:
f1:79:2a:f8:0e:67:7d:4b:99:3c:61:73:d4:5d:3b:
7c:0a:8d:b9:10:ed:67:a4:be:b0:57:d3:6f:ab:b0:
b3:0f:c8:02:e2:82:74:fd:aa:5b:35:82:57:4a:29:
d4:5e:ce:32:b3:85:66:bd:c3:3e:37:f7:54:8b:32:
f2:ab:da:2a:c5:1a:49:f2:99:3b:a2:66:4d:92:9c:
40:89:c2:fb:00:6a:be:cd:9c:b7:28:aa:a6:78:7c:
0f:ed:69:4d:49:21:66:a6:ed:4a:23:07:71:c3:d5:
05:32:da:68:93:e1:85:8b:b1:58:4b:9e:f1:f0:b4:
ca:ae:6a:b9:4f:be:8f:0c:76:a5:0d:64:51:c0:62:
13:8e:71:c1:c0:f4:68:cf:7f:f9:6e:b2:9b:75:1f:
51:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8D:68:FB:4D:1B:3B:4C:81:54:56:BE:44:7A:34:6B:56:03:7E:2F
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/6I1o-00bO0yBVFa-RHo0a1YDfi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.139.0/24
46.38.144.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:61:64:a5:f4:27:f0:92:70:b7:e1:14:6a:dd:8f:d6:61:84:
ac:a0:de:07:51:c7:cc:ff:3d:5c:c0:44:b5:c7:82:7c:8e:a2:
a6:ae:17:bf:d4:74:7d:5d:5a:2b:3c:16:e3:5f:33:3f:2b:18:
37:4e:4f:8f:20:81:cf:d1:1a:82:de:cb:9b:a3:36:ee:4f:55:
68:42:c8:89:c7:42:1a:0b:d1:42:40:27:ce:58:97:9d:e2:1d:
79:6f:3c:6b:57:57:91:3e:64:8f:66:d9:fd:3e:b8:76:da:55:
24:36:61:50:e5:ee:a9:53:c1:8f:6a:b2:7b:29:23:42:80:ad:
e2:55:c4:a6:4e:64:3c:40:73:94:b4:d6:a4:fa:82:8b:ba:f2:
95:9b:b8:94:c6:a0:bf:4f:0e:ee:d9:1f:e7:27:36:6c:9b:79:
4d:e9:0d:02:32:1d:ee:3e:3e:66:4e:f3:db:0f:d2:66:dd:cd:
44:2b:81:d8:9d:78:a1:45:62:ad:19:a9:fa:a5:65:f8:8e:9a:
e4:52:eb:b3:c9:90:f8:9a:3e:e4:06:4f:fb:31:e0:a3:2c:f9:
82:f3:77:60:ec:fa:36:d2:5a:c2:72:a0:7f:a9:80:43:87:b6:
48:f3:51:07:46:c5:47:9f:7f:ce:6d:04:c0:f4:42:a7:96:9c:
80:4f:22:2c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZoLN+JkfvAyobDY4D7m04YCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjUxMDIyMDkyMDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODhkNjhmYjRkMWIzYjRjODE1NDU2YmU0NDdhMzQ2YjU2MDM3ZTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIv8+Kk3l9kJqPifeLlX9R0AZxGl
r/gV3xWILx6V4kadAFSoPsIKZ5fEbGtP0d1LI3jOxSu432xGWtTVFMpPEzgfxqif
5/kx20QEKzPGv8WklGmTjY/dICZpb3eRgDEGdPnwlSP4by7xeSr4Dmd9S5k8YXPU
XTt8Co25EO1npL6wV9Nvq7CzD8gC4oJ0/apbNYJXSinUXs4ys4VmvcM+N/dUizLy
q9oqxRpJ8pk7omZNkpxAicL7AGq+zZy3KKqmeHwP7WlNSSFmpu1KIwdxw9UFMtpo
k+GFi7FYS57x8LTKrmq5T76PDHalDWRRwGITjnHBwPRoz3/5brKbdR9RhwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOiNaPtNGztMgVRWvkR6NGtWA34vMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvNkkxby0wMGJPMHlCVkZhLVJIbzBhMVlEZmk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALiaLAwQA
LiaQMA0GCSqGSIb3DQEBCwUAA4IBAQBfYWSl9CfwknC34RRq3Y/WYYSsoN4HUcfM
/z1cwES1x4J8jqKmrhe/1HR9XVorPBbjXzM/Kxg3Tk+PIIHP0RqC3subozbuT1Vo
QsiJx0IaC9FCQCfOWJed4h15bzxrV1eRPmSPZtn9Prh22lUkNmFQ5e6pU8GParJ7
KSNCgK3iVcSmTmQ8QHOUtNak+oKLuvKVm7iUxqC/Tw7u2R/nJzZsm3lN6Q0CMh3u
Pj5mTvPbD9Jm3c1EK4HYnXihRWKtGan6pWX4jprkUuuzyZD4mj7kBk/7MeCjLPmC
83dg7Po20lrCcqB/qYBDh7ZI81EHRsVHn3/ObQTA9EKnlpyATyIs
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:03:43 2025 by rpki-client