Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/sg6AMDBnEClTk14yZrKH_UdfS-0.roa
File: sg6AMDBnEClTk14yZrKH_UdfS-0.roa (raw, json)
Hash identifier: uREnj3d/6nKXsYDGOx95oE8DlNkz3JuX/7dowk4t+kY=
Subject key identifier: B2:0E:80:30:30:67:10:29:53:93:5E:32:66:B2:87:FD:47:5F:4B:ED
Certificate issuer: /CN=4129266a1e2ec9837a531344fb4cc755c2b4d499
Certificate serial: 01A009E8B74E25DBA8CE8B4D24524825C012
Authority key identifier: 41:29:26:6A:1E:2E:C9:83:7A:53:13:44:FB:4C:C7:55:C2:B4:D4:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSkmah4uyYN6UxNE-0zHVcK01Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/sg6AMDBnEClTk14yZrKH_UdfS-0.roa
Signing time: Sun 16 Aug 2026 09:30:41 +0000
ROA not before: Sun 16 Aug 2026 09:30:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51561
IP address blocks: 185.253.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/QSkmah4uyYN6UxNE-0zHVcK01Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/QSkmah4uyYN6UxNE-0zHVcK01Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSkmah4uyYN6UxNE-0zHVcK01Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:09:e8:b7:4e:25:db:a8:ce:8b:4d:24:52:48:25:c0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4129266a1e2ec9837a531344fb4cc755c2b4d499
Validity
Not Before: Aug 16 09:30:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b20e80303067102953935e3266b287fd475f4bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c1:42:4e:6b:e6:bf:1b:a7:f7:68:38:d5:d9:
dc:9c:32:ce:b2:0c:87:18:66:84:ae:1e:08:57:ce:
fc:8c:26:11:59:ad:b5:9d:3d:1b:7d:d4:72:41:61:
c2:93:14:51:d0:32:3a:b7:b7:0d:43:22:44:e1:cf:
a7:7a:86:00:37:e6:02:b3:0d:43:e0:d2:47:6b:6c:
ff:5c:df:13:4e:79:0a:66:19:7c:8e:1a:ca:98:7f:
14:18:9e:ad:61:7d:09:b3:be:39:d3:68:83:c2:b1:
a4:52:93:9d:73:97:a3:68:2f:f3:db:7e:13:84:4c:
37:56:1d:a4:1c:b3:ea:00:a8:7b:51:d9:87:60:e5:
d6:71:fb:96:c8:8f:9e:55:eb:e7:71:eb:5d:b0:95:
1c:1b:5f:b0:73:33:ba:a2:cc:86:0c:71:1e:34:7e:
5f:94:fd:42:bd:9e:7f:05:eb:87:c6:7c:6a:61:64:
b7:73:ea:5c:ea:14:36:ae:4c:a4:50:e3:06:0b:60:
8c:26:c7:95:d4:c2:2d:46:38:4d:91:db:52:8b:72:
80:4c:65:76:57:d0:64:18:15:ca:64:84:b0:1f:7a:
76:d0:fd:fe:ce:b7:c3:e7:cd:b5:c5:16:8f:5e:9d:
bd:df:01:c8:ba:fb:bc:63:8e:3c:1a:f7:df:26:eb:
d0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0E:80:30:30:67:10:29:53:93:5E:32:66:B2:87:FD:47:5F:4B:ED
X509v3 Authority Key Identifier:
keyid:41:29:26:6A:1E:2E:C9:83:7A:53:13:44:FB:4C:C7:55:C2:B4:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSkmah4uyYN6UxNE-0zHVcK01Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/sg6AMDBnEClTk14yZrKH_UdfS-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/QSkmah4uyYN6UxNE-0zHVcK01Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.88.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c7:e5:2a:0a:16:73:c7:05:49:c2:37:6f:7d:36:9d:27:d3:
77:f4:da:8a:3c:e0:1d:96:6d:4a:23:52:24:04:81:d8:a4:0a:
7f:60:ae:83:b9:dd:61:2a:01:f9:fd:80:0f:04:39:17:43:b4:
39:bd:55:b9:75:0d:22:58:d4:79:ca:6b:50:db:63:fb:f2:81:
59:eb:c7:cc:ec:96:d0:e3:90:74:bc:c6:d3:69:a7:26:54:8a:
db:42:15:23:c5:9e:e8:b2:bc:ea:16:a3:c9:fc:3e:32:4a:b4:
d1:c4:31:bf:e2:43:20:43:e2:b7:d2:ba:c7:2a:11:95:df:77:
83:35:b8:2d:8a:c5:44:db:90:49:d3:ef:6a:40:16:c3:45:66:
0e:bc:33:19:b6:9e:41:91:c6:af:44:2c:50:f0:d7:66:ea:3a:
09:a0:8a:f5:fb:ce:67:cc:89:f5:cf:14:e3:c6:2a:b6:ca:ae:
17:e5:18:d3:ac:57:02:2a:9a:0c:4a:98:0b:9d:73:f5:6e:ad:
0b:d5:88:2b:5c:03:4c:cf:73:51:71:25:88:7e:29:b8:60:e8:
d0:ff:60:4a:a4:3c:52:fa:61:82:11:3e:dc:2c:6f:d5:e9:f9:
9e:bc:1b:77:f6:6e:d7:93:dc:19:62:22:10:a8:ba:8e:01:93:
c0:95:e5:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAJ6LdOJduozotNJFJIJcASMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMjkyNjZhMWUyZWM5ODM3YTUzMTM0NGZiNGNjNzU1YzJi
NGQ0OTkwHhcNMjYwODE2MDkzMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjBlODAzMDMwNjcxMDI5NTM5MzVlMzI2NmIyODdmZDQ3NWY0YmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMFCTmvmvxun92g41dncnDLOsgyH
GGaErh4IV878jCYRWa21nT0bfdRyQWHCkxRR0DI6t7cNQyJE4c+neoYAN+YCsw1D
4NJHa2z/XN8TTnkKZhl8jhrKmH8UGJ6tYX0Js74502iDwrGkUpOdc5ejaC/z234T
hEw3Vh2kHLPqAKh7UdmHYOXWcfuWyI+eVevncetdsJUcG1+wczO6osyGDHEeNH5f
lP1CvZ5/BeuHxnxqYWS3c+pc6hQ2rkykUOMGC2CMJseV1MItRjhNkdtSi3KATGV2
V9BkGBXKZISwH3p20P3+zrfD5821xRaPXp293wHIuvu8Y448GvffJuvQKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLIOgDAwZxApU5NeMmayh/1HX0vtMB8GA1UdIwQY
MBaAFEEpJmoeLsmDelMTRPtMx1XCtNSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVNrbWFoNHV5WU42VXhORS0wekhWY0swMUprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iMzlmYWItYWVjOS00ZTU2LWE3NmIt
ZmQ0ZTQwNzVlYzg3LzEvc2c2QU1EQm5FQ2xUazE0eVpyS0hfVWRmUy0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9iMzlmYWItYWVjOS00ZTU2LWE3NmItZmQ0ZTQwNzVlYzg3
LzEvUVNrbWFoNHV5WU42VXhORS0wekhWY0swMUprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf1YMA0G
CSqGSIb3DQEBCwUAA4IBAQARx+UqChZzxwVJwjdvfTadJ9N39NqKPOAdlm1KI1Ik
BIHYpAp/YK6Dud1hKgH5/YAPBDkXQ7Q5vVW5dQ0iWNR5ymtQ22P78oFZ68fM7JbQ
45B0vMbTaacmVIrbQhUjxZ7osrzqFqPJ/D4ySrTRxDG/4kMgQ+K30rrHKhGV33eD
NbgtisVE25BJ0+9qQBbDRWYOvDMZtp5BkcavRCxQ8Ndm6joJoIr1+85nzIn1zxTj
xiq2yq4X5RjTrFcCKpoMSpgLnXP1bq0L1YgrXANMz3NRcSWIfim4YOjQ/2BKpDxS
+mGCET7cLG/V6fmevBt39m7Xk9wZYiIQqLqOAZPAleUz
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:49:33 2026 by rpki-client