Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/6cyiAxJB7EhwTgr7fY69E7riFyU.roa
File: 6cyiAxJB7EhwTgr7fY69E7riFyU.roa (raw, json)
Hash identifier: q8WuMDHjKsBGz21m7fGt8jfXIbgk2IgjtXgxWnYeL78=
Subject key identifier: E9:CC:A2:03:12:41:EC:48:70:4E:0A:FB:7D:8E:BD:13:BA:E2:17:25
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 01A0EBD75B88270B2F03258D00967DB5FB38
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/6cyiAxJB7EhwTgr7fY69E7riFyU.roa
Signing time: Tue 29 Sep 2026 06:25:54 +0000
ROA not before: Tue 29 Sep 2026 06:25:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197666
IP address blocks: 93.89.220.0/24 maxlen: 24
132.243.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:d7:5b:88:27:0b:2f:03:25:8d:00:96:7d:b5:fb:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Sep 29 06:25:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9cca2031241ec48704e0afb7d8ebd13bae21725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:59:b6:5d:a5:73:94:e5:df:1e:bb:b4:9e:be:
bb:8e:84:2f:dc:0f:0b:0f:44:4a:dd:fb:fb:51:66:
1b:3d:37:d3:20:a3:5f:3b:2f:90:bf:a7:c2:20:af:
f0:c6:c9:b4:82:8b:4e:1d:4d:61:cb:c4:58:9c:6c:
87:64:4b:2e:9b:3b:c5:e4:01:0a:ab:da:1b:27:b0:
c2:f5:43:6c:56:66:a7:90:2d:96:41:3e:a9:62:b2:
05:d4:01:ea:91:3f:d8:1e:0f:5c:11:55:79:01:b1:
4b:23:17:a2:70:66:9a:9a:17:6c:fb:37:3e:db:61:
56:34:af:07:ba:71:25:f8:46:63:11:a5:3a:b5:cc:
14:22:a9:4c:4d:cd:9f:b8:b0:43:bc:20:aa:b0:15:
2d:a9:3e:ff:a9:f9:1b:fa:62:07:1d:22:18:64:24:
54:9e:0f:57:98:db:a9:6a:03:b6:cb:e9:89:86:be:
bf:2e:db:75:c5:08:cf:e7:5f:9c:b2:f8:8c:14:72:
5c:bd:db:f1:b3:f8:f6:71:81:e5:70:e7:98:f0:f7:
fe:62:1e:13:0e:d5:ca:cc:b9:b6:2e:78:e1:8c:46:
ea:2b:8b:a9:ab:4c:67:7d:28:01:5d:ee:2e:2b:14:
73:a9:a7:fe:98:ca:2b:b2:d0:fa:da:fa:b6:fe:40:
40:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CC:A2:03:12:41:EC:48:70:4E:0A:FB:7D:8E:BD:13:BA:E2:17:25
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/6cyiAxJB7EhwTgr7fY69E7riFyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.220.0/24
132.243.74.0/24
Signature Algorithm: sha256WithRSAEncryption
14:7e:5c:56:13:5e:50:c6:f8:ba:06:12:a7:5f:e0:fd:65:33:
04:df:40:14:ff:86:5f:3e:b3:6c:71:b3:fe:10:ef:77:e0:14:
9a:85:52:c5:ea:11:97:ed:f3:97:c9:70:d7:5e:f6:90:5e:63:
8a:4a:f2:be:93:9a:a4:e7:35:05:da:c1:0a:23:5e:a0:c7:bd:
e9:91:fb:f7:bc:8b:a5:b7:e6:0b:2c:aa:4f:4b:4e:74:80:42:
a1:28:60:ad:6d:63:3f:82:5d:50:62:7a:23:17:8e:0c:76:ae:
74:db:65:02:50:72:ba:23:80:7c:e5:f8:e6:0c:a8:4f:a0:af:
d1:ea:c2:20:81:65:1c:aa:4d:56:cb:02:73:00:0f:b8:2d:dd:
26:97:e1:0e:f4:ae:21:fa:45:d8:c3:e4:4d:99:90:60:81:df:
74:2c:49:07:8f:f2:aa:b2:d7:ef:8d:31:e0:a9:81:51:37:92:
33:2c:0c:d2:3d:e8:cf:84:da:c9:64:a1:0b:81:6f:a6:ab:65:
6c:c8:fc:61:fb:4c:01:50:f2:3f:f9:e5:eb:15:37:04:ed:cf:
1a:a1:a0:a8:dc:d2:72:4e:c4:55:68:07:88:7a:ad:68:0d:a1:
56:80:cf:cf:11:88:6d:ec:4c:29:8d:2a:2d:42:05:65:16:03:
b2:50:3f:de
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaDr11uIJwsvAyWNAJZ9tfs4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx
OWZiMjAwHhcNMjYwOTI5MDYyNTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWNjYTIwMzEyNDFlYzQ4NzA0ZTBhZmI3ZDhlYmQxM2JhZTIxNzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlm2XaVzlOXfHru0nr67joQv3A8L
D0RK3fv7UWYbPTfTIKNfOy+Qv6fCIK/wxsm0gotOHU1hy8RYnGyHZEsumzvF5AEK
q9obJ7DC9UNsVmankC2WQT6pYrIF1AHqkT/YHg9cEVV5AbFLIxeicGaamhds+zc+
22FWNK8HunEl+EZjEaU6tcwUIqlMTc2fuLBDvCCqsBUtqT7/qfkb+mIHHSIYZCRU
ng9XmNupagO2y+mJhr6/Ltt1xQjP51+csviMFHJcvdvxs/j2cYHlcOeY8Pf+Yh4T
DtXKzLm2LnjhjEbqK4upq0xnfSgBXe4uKxRzqaf+mMorstD62vq2/kBAAwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOnMogMSQexIcE4K+32OvRO64hclMB8GA1UdIwQY
MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt
NDI2OWI1NmJmN2Q0LzEvNmN5aUF4SkI3RWh3VGdyN2ZZNjlFN3JpRnlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0
LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXVncAwQA
hPNKMA0GCSqGSIb3DQEBCwUAA4IBAQAUflxWE15Qxvi6BhKnX+D9ZTME30AU/4Zf
PrNscbP+EO934BSahVLF6hGX7fOXyXDXXvaQXmOKSvK+k5qk5zUF2sEKI16gx73p
kfv3vIult+YLLKpPS050gEKhKGCtbWM/gl1QYnojF44Mdq5022UCUHK6I4B85fjm
DKhPoK/R6sIggWUcqk1WywJzAA+4Ld0ml+EO9K4h+kXYw+RNmZBggd90LEkHj/Kq
stfvjTHgqYFRN5IzLAzSPejPhNrJZKELgW+mq2VsyPxh+0wBUPI/+eXrFTcE7c8a
oaCo3NJyTsRVaAeIeq1oDaFWgM/PEYht7EwpjSotQgVlFgOyUD/e
-----END CERTIFICATE-----
Generated at Thu Oct 1 05:13:59 2026 by rpki-client