Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/c-6Hu0Q6KVByexb7ai3zy809xac.roa
File: c-6Hu0Q6KVByexb7ai3zy809xac.roa (raw, json)
Hash identifier: veDFchcM2SNVuwzCbLkM0CwAD1EuPwvwRgb+dufQVR4=
Subject key identifier: 73:EE:87:BB:44:3A:29:50:72:7B:16:FB:6A:2D:F3:CB:CD:3D:C5:A7
Certificate issuer: /CN=865b07c289df6bc9c762db4329ba0ce3c529fecb
Certificate serial: 01A0A32E2C4A9FB1C987ED4C545B31C7FFC1
Authority key identifier: 86:5B:07:C2:89:DF:6B:C9:C7:62:DB:43:29:BA:0C:E3:C5:29:FE:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hlsHwonfa8nHYttDKboM48Up_ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/c-6Hu0Q6KVByexb7ai3zy809xac.roa
Signing time: Tue 15 Sep 2026 03:48:27 +0000
ROA not before: Tue 15 Sep 2026 03:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49592
IP address blocks: 92.42.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/hlsHwonfa8nHYttDKboM48Up_ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a3:2e:2c:4a:9f:b1:c9:87:ed:4c:54:5b:31:c7:ff:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865b07c289df6bc9c762db4329ba0ce3c529fecb
Validity
Not Before: Sep 15 03:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73ee87bb443a2950727b16fb6a2df3cbcd3dc5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bd:92:cd:82:ba:9e:16:58:52:2d:09:63:c9:
30:d7:ad:24:be:5f:89:45:e9:dc:36:2c:41:30:7b:
13:6e:cc:f4:80:25:51:dd:90:62:27:3f:41:c6:0c:
25:9b:4d:d1:fe:2f:a1:ec:e2:5a:71:76:d2:36:c8:
13:bb:dd:88:70:dc:5d:eb:83:4e:1b:a5:84:42:82:
04:05:1c:0c:9f:da:50:5b:90:66:29:3c:8a:f8:c8:
97:b4:8c:58:ed:d4:db:8b:b9:d4:14:72:74:64:a9:
e6:d8:a5:c7:fa:37:06:1b:d9:61:0f:c5:51:55:3a:
d5:42:1d:35:36:b0:63:b8:b4:3e:f6:66:7e:fa:8c:
37:a9:ac:4c:fc:82:5e:45:f8:14:0d:3d:f3:86:c3:
be:92:40:9e:57:25:95:2f:dc:36:e4:9e:2c:fa:3b:
af:90:09:a8:09:2a:5b:fb:14:83:6e:17:41:7d:b0:
d8:7d:71:52:50:08:29:31:53:a4:e5:69:76:e6:97:
08:e8:00:12:c0:a9:15:6e:c4:ea:af:75:b5:09:7a:
d3:f5:ef:f9:7f:ba:49:e1:47:33:8b:fc:b1:53:a0:
cb:04:2e:e5:3b:af:f7:ad:95:86:fe:fa:74:e1:7d:
0a:ee:a9:2e:a7:99:9b:50:47:7a:49:2f:c5:d9:3e:
0d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EE:87:BB:44:3A:29:50:72:7B:16:FB:6A:2D:F3:CB:CD:3D:C5:A7
X509v3 Authority Key Identifier:
keyid:86:5B:07:C2:89:DF:6B:C9:C7:62:DB:43:29:BA:0C:E3:C5:29:FE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlsHwonfa8nHYttDKboM48Up_ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/c-6Hu0Q6KVByexb7ai3zy809xac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.201.0/24
Signature Algorithm: sha256WithRSAEncryption
40:53:4d:fe:4c:ab:3c:71:f4:de:3e:e8:c4:17:fb:df:eb:42:
a0:18:c1:84:03:73:1c:e4:fb:31:f7:09:96:71:02:68:8a:e2:
ab:96:01:8b:a7:fa:bf:d7:9a:3e:16:8f:8f:bd:37:cf:22:f7:
89:7b:ff:62:4e:d0:ac:af:db:21:b6:b5:97:0b:ae:eb:47:cc:
68:76:cd:3f:f3:0d:cc:17:1a:f3:d7:11:6b:34:f5:a6:39:58:
4c:62:6f:6b:c1:25:d8:1e:9e:41:02:b9:a8:c0:c8:2a:64:e0:
f8:3e:d6:4b:ea:23:5a:15:23:13:dc:05:86:6e:7a:43:6c:24:
10:05:61:0c:56:2f:89:5f:0c:db:21:0d:87:ac:97:b4:b0:96:
d0:c9:34:a8:a2:c5:b5:f5:35:3e:a8:09:77:ad:9d:17:af:eb:
53:d1:14:ad:fe:66:58:c8:ad:be:d9:9f:7b:16:d1:56:bf:80:
f1:9d:08:2b:e2:8c:79:41:de:94:b5:38:da:84:34:fb:49:68:
a2:87:64:b4:cc:5c:05:d9:2a:ff:d4:d3:0d:da:4c:b3:75:3d:
93:5c:6e:d7:15:3c:4f:3c:dd:ab:6a:d2:43:95:3a:79:6f:12:
4c:a6:2c:da:6b:68:6a:56:b1:64:94:15:33:41:26:6d:15:6a:
99:40:a4:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCjLixKn7HJh+1MVFsxx//BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NWIwN2MyODlkZjZiYzljNzYyZGI0MzI5YmEwY2UzYzUy
OWZlY2IwHhcNMjYwOTE1MDM0ODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2VlODdiYjQ0M2EyOTUwNzI3YjE2ZmI2YTJkZjNjYmNkM2RjNWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3b2SzYK6nhZYUi0JY8kw160kvl+J
RencNixBMHsTbsz0gCVR3ZBiJz9Bxgwlm03R/i+h7OJacXbSNsgTu92IcNxd64NO
G6WEQoIEBRwMn9pQW5BmKTyK+MiXtIxY7dTbi7nUFHJ0ZKnm2KXH+jcGG9lhD8VR
VTrVQh01NrBjuLQ+9mZ++ow3qaxM/IJeRfgUDT3zhsO+kkCeVyWVL9w25J4s+juv
kAmoCSpb+xSDbhdBfbDYfXFSUAgpMVOk5Wl25pcI6AASwKkVbsTqr3W1CXrT9e/5
f7pJ4Uczi/yxU6DLBC7lO6/3rZWG/vp04X0K7qkup5mbUEd6SS/F2T4NZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHPuh7tEOilQcnsW+2ot88vNPcWnMB8GA1UdIwQY
MBaAFIZbB8KJ32vJx2LbQym6DOPFKf7LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGxzSHdvbmZhOG5IWXR0REtib000OFVwX3NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80ZDFhYjYtNDY1Yi00Mjc2LWJjNGEt
MmFmYTMwM2U0OTVkLzEvYy02SHUwUTZLVkJ5ZXhiN2FpM3p5ODA5eGFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi80ZDFhYjYtNDY1Yi00Mjc2LWJjNGEtMmFmYTMwM2U0OTVk
LzEvaGxzSHdvbmZhOG5IWXR0REtib000OFVwX3NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXCrJMA0G
CSqGSIb3DQEBCwUAA4IBAQBAU03+TKs8cfTePujEF/vf60KgGMGEA3Mc5Psx9wmW
cQJoiuKrlgGLp/q/15o+Fo+PvTfPIveJe/9iTtCsr9shtrWXC67rR8xods0/8w3M
Fxrz1xFrNPWmOVhMYm9rwSXYHp5BArmowMgqZOD4PtZL6iNaFSMT3AWGbnpDbCQQ
BWEMVi+JXwzbIQ2HrJe0sJbQyTSoosW19TU+qAl3rZ0Xr+tT0RSt/mZYyK2+2Z97
FtFWv4DxnQgr4ox5Qd6UtTjahDT7SWiih2S0zFwF2Sr/1NMN2kyzdT2TXG7XFTxP
PN2ratJDlTp5bxJMpizaa2hqVrFklBUzQSZtFWqZQKQG
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:50:07 2026 by rpki-client