Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/apPx3gWWIpPWwELtpKMOfedJ4k8.roa
File: apPx3gWWIpPWwELtpKMOfedJ4k8.roa (raw, json)
Hash identifier: L2yyhrzd5mRGd2rzEg04lr+rJwZPevmKVoJK5XcNojM=
Subject key identifier: 6A:93:F1:DE:05:96:22:93:D6:C0:42:ED:A4:A3:0E:7D:E7:49:E2:4F
Certificate issuer: /CN=90a02705006532ef33a0064f875a100923509fd5
Certificate serial: 019EB704E3EC86A65A1EC06BF51A49F5EA46
Authority key identifier: 90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/apPx3gWWIpPWwELtpKMOfedJ4k8.roa
Signing time: Thu 11 Jun 2026 14:10:11 +0000
ROA not before: Thu 11 Jun 2026 14:10:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198380
IP address blocks: 185.154.236.0/22 maxlen: 24
185.211.80.0/22 maxlen: 24
185.219.86.0/24 maxlen: 24
2a07:9680::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:04:e3:ec:86:a6:5a:1e:c0:6b:f5:1a:49:f5:ea:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a02705006532ef33a0064f875a100923509fd5
Validity
Not Before: Jun 11 14:10:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a93f1de05962293d6c042eda4a30e7de749e24f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:18:2c:1b:47:5e:de:20:af:44:4b:c1:d2:f5:
b4:84:ee:65:5d:54:ac:f7:96:9f:58:6b:d1:28:dd:
45:8f:f8:c5:8c:11:82:e0:08:1e:c3:6a:6b:cf:ea:
e4:0d:fd:ae:8a:74:3d:6a:a4:2d:c9:b2:9e:20:02:
04:1e:06:1a:35:7f:44:eb:c2:a5:65:20:5a:ce:a9:
cb:db:66:c7:1e:b2:1e:f6:42:f7:c2:4d:34:c7:98:
c4:e1:1d:c8:0d:e5:9f:f6:5b:e0:c4:e6:11:4f:f9:
08:03:9b:48:6f:0e:85:2a:82:c4:2a:4f:16:db:d3:
05:a5:2c:e2:a8:da:84:db:20:c7:fd:88:3b:6a:02:
22:cd:f1:df:f9:15:20:71:ac:06:0e:d9:c0:05:d2:
ef:73:06:38:d8:d9:df:3d:eb:cf:f6:87:92:c7:d1:
3c:e8:8a:b8:e0:01:af:2c:21:dc:39:0d:b8:2f:3d:
69:ea:c9:51:00:9b:d6:cc:30:3a:2e:79:3a:65:9d:
ef:8a:07:56:13:10:a0:28:de:52:45:63:c1:f9:49:
f8:31:05:88:84:31:81:72:27:8a:51:bb:43:7c:3b:
54:3d:52:52:65:05:91:72:40:a7:d1:be:59:c9:03:
58:9f:8d:0e:01:bb:09:ff:70:71:ba:51:b1:8b:4a:
ac:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:93:F1:DE:05:96:22:93:D6:C0:42:ED:A4:A3:0E:7D:E7:49:E2:4F
X509v3 Authority Key Identifier:
keyid:90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/apPx3gWWIpPWwELtpKMOfedJ4k8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.236.0/22
185.211.80.0/22
185.219.86.0/24
IPv6:
2a07:9680::/29
Signature Algorithm: sha256WithRSAEncryption
92:cf:25:6a:01:cc:c1:ca:4f:1c:aa:22:aa:3b:31:30:85:6c:
ce:93:d4:3a:21:02:92:f2:f7:76:ba:50:02:fa:e0:76:9b:21:
71:d9:18:de:4c:29:d0:5c:77:94:49:65:9e:91:cf:ef:88:30:
f1:a2:a1:a3:f9:a8:46:f2:8e:68:0c:62:59:90:35:e0:ee:94:
e2:91:9c:9e:fe:c8:40:70:55:cf:cb:5d:84:51:7d:bf:1d:87:
01:c8:63:1d:e9:08:63:f2:ef:95:9b:fc:5c:b9:b8:09:42:d0:
52:56:63:20:d0:8c:fc:43:17:04:88:68:db:fa:23:8b:05:2e:
a9:4c:a7:8b:56:3d:b4:c1:a5:4f:78:38:93:2c:03:b3:fb:3b:
6e:3e:c8:3e:24:89:73:d9:3e:40:6e:a3:3b:ec:c5:b8:72:de:
e7:61:ce:0c:ee:88:87:e7:a5:c1:df:1b:b8:cb:1c:c3:ce:e8:
72:65:3b:5c:eb:8e:92:7c:63:60:88:10:19:50:10:60:b1:06:
da:11:5b:aa:08:72:4b:f0:b5:6e:98:90:fb:ee:f6:26:62:3a:
71:bc:95:fa:da:02:fe:98:6f:64:dc:4f:ff:c3:1c:56:7b:06:
72:a5:08:17:08:d9:2e:a9:9c:03:46:a2:f9:fe:96:1a:4b:27:
c8:31:f1:c8
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZ63BOPshqZaHsBr9RpJ9epGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYTAyNzA1MDA2NTMyZWYzM2EwMDY0Zjg3NWExMDA5MjM1
MDlmZDUwHhcNMjYwNjExMTQxMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTkzZjFkZTA1OTYyMjkzZDZjMDQyZWRhNGEzMGU3ZGU3NDllMjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBgsG0de3iCvREvB0vW0hO5lXVSs
95afWGvRKN1Fj/jFjBGC4Agew2prz+rkDf2uinQ9aqQtybKeIAIEHgYaNX9E68Kl
ZSBazqnL22bHHrIe9kL3wk00x5jE4R3IDeWf9lvgxOYRT/kIA5tIbw6FKoLEKk8W
29MFpSziqNqE2yDH/Yg7agIizfHf+RUgcawGDtnABdLvcwY42NnfPevP9oeSx9E8
6Iq44AGvLCHcOQ24Lz1p6slRAJvWzDA6Lnk6ZZ3vigdWExCgKN5SRWPB+Un4MQWI
hDGBcieKUbtDfDtUPVJSZQWRckCn0b5ZyQNYn40OAbsJ/3BxulGxi0qsYQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFGqT8d4FliKT1sBC7aSjDn3nSeJPMB8GA1UdIwQY
MBaAFJCgJwUAZTLvM6AGT4daEAkjUJ/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0tBbkJRQmxNdTh6b0FaUGgxb1FDU05RbjlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kOWY0ODItMTM1ZS00N2Y2LTkzMTct
Njc4NWFkYTUyN2MxLzEvYXBQeDNnV1dJcFBXd0VMdHBLTU9mZWRKNGs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9kOWY0ODItMTM1ZS00N2Y2LTkzMTctNjc4NWFkYTUyN2Mx
LzEva0tBbkJRQmxNdTh6b0FaUGgxb1FDU05RbjlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuZrsAwQC
udNQAwQAudtWMA0EAgACMAcDBQMqB5aAMA0GCSqGSIb3DQEBCwUAA4IBAQCSzyVq
AczByk8cqiKqOzEwhWzOk9Q6IQKS8vd2ulAC+uB2myFx2RjeTCnQXHeUSWWekc/v
iDDxoqGj+ahG8o5oDGJZkDXg7pTikZye/shAcFXPy12EUX2/HYcByGMd6Qhj8u+V
m/xcubgJQtBSVmMg0Iz8QxcEiGjb+iOLBS6pTKeLVj20waVPeDiTLAOz+ztuPsg+
JIlz2T5AbqM77MW4ct7nYc4M7oiH56XB3xu4yxzDzuhyZTtc646SfGNgiBAZUBBg
sQbaEVuqCHJL8LVumJD77vYmYjpxvJX62gL+mG9k3E//wxxWewZypQgXCNkuqZwD
RqL5/pYaSyfIMfHI
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:29:17 2026 by rpki-client