Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/i6SynJRpY1xPjMfl53y_r2J27NQ.roa
File: i6SynJRpY1xPjMfl53y_r2J27NQ.roa (raw, json)
Hash identifier: +c1zBUNSR32/STEE9RtvTutYJSXXSvtvSDw8jf0Tu4c=
Subject key identifier: 8B:A4:B2:9C:94:69:63:5C:4F:8C:C7:E5:E7:7C:BF:AF:62:76:EC:D4
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0A63CF657AE73A3CB5C235F804C171AF3
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/i6SynJRpY1xPjMfl53y_r2J27NQ.roa
Signing time: Tue 15 Sep 2026 18:03:28 +0000
ROA not before: Tue 15 Sep 2026 18:03:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213840
IP address blocks: 195.72.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a6:3c:f6:57:ae:73:a3:cb:5c:23:5f:80:4c:17:1a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 15 18:03:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ba4b29c9469635c4f8cc7e5e77cbfaf6276ecd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:91:48:0e:5b:23:74:24:7c:86:9e:71:9b:b2:
d8:c0:39:57:49:a5:93:dd:d8:8b:81:f3:e6:9d:8c:
37:bd:74:75:82:52:d4:8d:1f:49:64:2a:e7:3e:19:
d0:34:22:c1:b4:ed:15:e1:ba:24:cf:d7:60:a5:59:
37:06:9b:b9:5f:e6:ee:ef:22:69:09:61:3f:bb:14:
7a:72:33:73:cb:2f:7f:27:f0:6e:e9:2d:da:4d:ba:
37:2c:a1:3c:50:f2:c3:c5:18:88:e8:da:a7:96:74:
e8:e1:5b:db:5a:7c:5b:79:9f:32:aa:9d:62:75:25:
4d:cb:97:af:dc:3c:7b:f0:03:c3:16:aa:73:4d:51:
a0:a1:cd:0f:38:69:e2:81:8e:69:8b:97:6b:69:ec:
dc:48:b0:52:43:21:92:7d:42:73:08:44:26:e2:0c:
8b:9b:6f:2e:e8:13:e2:7b:47:0c:21:73:1f:2d:36:
30:62:eb:2a:96:2f:ec:16:01:14:b3:33:ac:58:bc:
8f:1e:1d:e8:27:94:92:ca:a3:d7:bd:45:73:55:0d:
e1:03:da:07:ff:62:17:29:ad:6c:6a:16:67:93:76:
a6:ed:51:ea:2c:12:9a:e9:fb:14:83:14:65:dd:9d:
54:95:34:7a:cc:a5:89:76:33:1a:c8:44:a6:fa:19:
b9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A4:B2:9C:94:69:63:5C:4F:8C:C7:E5:E7:7C:BF:AF:62:76:EC:D4
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/i6SynJRpY1xPjMfl53y_r2J27NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.72.184.0/21
Signature Algorithm: sha256WithRSAEncryption
d5:52:74:68:dd:7c:b0:aa:02:e8:91:76:ca:f0:58:f2:1d:6c:
62:2f:08:ae:9e:d2:15:18:45:25:ee:97:d2:0a:ca:74:c9:32:
4a:48:63:df:27:f7:8e:3b:24:96:9b:a8:f6:76:02:55:96:38:
ec:81:05:74:f1:0c:a9:9c:85:46:ec:51:1a:10:db:20:60:96:
83:44:50:fa:b1:19:2c:58:af:94:77:af:ff:60:2d:5e:dc:fe:
b7:51:ae:b7:32:8f:6c:68:1b:fc:ad:d0:a5:b5:3c:cd:c9:e3:
25:ae:6a:e3:90:2a:12:86:72:c9:ed:e1:e1:f4:1c:87:4f:54:
e2:74:ec:29:69:b1:8d:99:1e:3a:28:76:8a:98:0d:c7:a1:5e:
1f:e0:f4:31:6c:94:86:51:d7:ad:f6:47:24:d4:52:d1:bf:3c:
26:2a:cb:c4:d2:06:7e:7d:21:ff:c9:8e:8e:d5:6b:b1:83:1d:
22:85:0e:40:4f:cd:20:dc:51:6f:ee:9e:14:30:33:74:34:32:
05:13:9f:5b:9c:31:71:e2:e5:6f:21:e2:0b:25:f1:ee:62:99:
e2:74:30:eb:07:e8:3b:96:87:20:e0:ee:7e:08:cb:cc:0d:53:
b0:96:11:6b:e8:de:08:de:cc:6d:dd:33:58:01:f4:e4:d9:f1:
8d:55:8a:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCmPPZXrnOjy1wjX4BMFxrzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwOTE1MTgwMzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YmE0YjI5Yzk0Njk2MzVjNGY4Y2M3ZTVlNzdjYmZhZjYyNzZlY2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZFIDlsjdCR8hp5xm7LYwDlXSaWT
3diLgfPmnYw3vXR1glLUjR9JZCrnPhnQNCLBtO0V4bokz9dgpVk3Bpu5X+bu7yJp
CWE/uxR6cjNzyy9/J/Bu6S3aTbo3LKE8UPLDxRiI6NqnlnTo4VvbWnxbeZ8yqp1i
dSVNy5ev3Dx78APDFqpzTVGgoc0POGnigY5pi5draezcSLBSQyGSfUJzCEQm4gyL
m28u6BPie0cMIXMfLTYwYusqli/sFgEUszOsWLyPHh3oJ5SSyqPXvUVzVQ3hA9oH
/2IXKa1sahZnk3am7VHqLBKa6fsUgxRl3Z1UlTR6zKWJdjMayESm+hm5bwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIukspyUaWNcT4zH5ed8v69iduzUMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvaTZTeW5KUnBZMXhQak1mbDUzeV9yMkoyN05RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDw0i4MA0G
CSqGSIb3DQEBCwUAA4IBAQDVUnRo3XywqgLokXbK8FjyHWxiLwiuntIVGEUl7pfS
Csp0yTJKSGPfJ/eOOySWm6j2dgJVljjsgQV08QypnIVG7FEaENsgYJaDRFD6sRks
WK+Ud6//YC1e3P63Ua63Mo9saBv8rdCltTzNyeMlrmrjkCoShnLJ7eHh9ByHT1Ti
dOwpabGNmR46KHaKmA3HoV4f4PQxbJSGUdet9kck1FLRvzwmKsvE0gZ+fSH/yY6O
1Wuxgx0ihQ5AT80g3FFv7p4UMDN0NDIFE59bnDFx4uVvIeILJfHuYpnidDDrB+g7
locg4O5+CMvMDVOwlhFr6N4I3sxt3TNYAfTk2fGNVYrj
-----END CERTIFICATE-----
Generated at Sun Sep 20 20:29:11 2026 by rpki-client