Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/n1a6LkWWBYXv3xOK1kSp0WNucpU.roa
File: n1a6LkWWBYXv3xOK1kSp0WNucpU.roa (raw, json)
Hash identifier: obbHB0NOYZL+bKj74fglH+G2+FmY39/Gan1NwCxdrf8=
Subject key identifier: 9F:56:BA:2E:45:96:05:85:EF:DF:13:8A:D6:44:A9:D1:63:6E:72:95
Certificate issuer: /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial: 019B7F82F1C6A78646104899B46E4BD483F3
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/n1a6LkWWBYXv3xOK1kSp0WNucpU.roa
Signing time: Fri 02 Jan 2026 16:20:46 +0000
ROA not before: Fri 02 Jan 2026 16:20:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201453
IP address blocks: 185.74.192.0/24 maxlen: 24
185.112.76.0/24 maxlen: 24
185.112.78.0/24 maxlen: 24
185.163.166.0/24 maxlen: 24
185.163.167.0/24 maxlen: 24
185.178.80.0/22 maxlen: 22
185.178.80.0/24 maxlen: 24
185.178.81.0/24 maxlen: 24
185.178.82.0/24 maxlen: 24
185.178.83.0/24 maxlen: 24
185.183.16.0/24 maxlen: 24
185.183.17.0/24 maxlen: 24
185.183.18.0/24 maxlen: 24
185.194.24.0/24 maxlen: 24
185.194.26.0/24 maxlen: 24
185.194.27.0/24 maxlen: 24
185.219.216.0/22 maxlen: 22
185.221.188.0/24 maxlen: 24
185.221.189.0/24 maxlen: 24
185.225.148.0/24 maxlen: 24
2a05:4ac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:82:f1:c6:a7:86:46:10:48:99:b4:6e:4b:d4:83:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Validity
Not Before: Jan 2 16:20:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f56ba2e45960585efdf138ad644a9d1636e7295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:f3:3d:c1:36:79:44:a7:2b:25:42:96:f9:
a1:b1:1f:95:5e:92:bd:cb:58:ea:0e:2c:75:8b:a5:
9e:bf:ee:a6:03:d8:58:fa:45:96:bf:a4:dd:1d:d0:
47:ae:7e:a8:6d:b3:7f:df:e8:40:23:12:39:90:cb:
54:11:37:2c:a9:f7:39:3d:70:43:21:2e:31:b8:f8:
53:ed:72:53:52:46:37:79:83:14:80:47:d5:0a:d1:
8b:0a:ee:c7:94:1f:13:d3:44:0e:71:fd:3b:1d:b8:
63:68:14:e4:b8:ea:6b:db:c0:19:be:de:2a:1a:b5:
3a:10:cd:ca:14:d2:22:51:e5:61:1e:93:fa:df:e3:
58:70:ff:28:65:af:29:d5:21:9e:02:b5:2a:af:1f:
54:3d:32:43:89:4e:97:36:ee:21:da:4c:fc:39:f6:
0c:57:b1:da:95:e4:10:1a:67:1e:b2:05:90:e7:0a:
1b:b5:45:02:c8:1d:f5:c1:db:9a:db:0d:e7:47:e0:
df:c2:15:a2:f1:a9:0c:d3:46:62:02:0d:99:79:f6:
60:ed:e4:34:01:7f:34:a2:85:3c:50:e9:df:5d:0d:
19:44:de:4b:5f:d3:f4:d5:3a:1b:8a:4f:4f:a3:b9:
17:f4:58:90:a6:61:5d:d2:60:e9:27:1a:0d:15:41:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:56:BA:2E:45:96:05:85:EF:DF:13:8A:D6:44:A9:D1:63:6E:72:95
X509v3 Authority Key Identifier:
keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/n1a6LkWWBYXv3xOK1kSp0WNucpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.192.0/24
185.112.76.0/24
185.112.78.0/24
185.163.166.0/23
185.178.80.0/22
185.183.16.0-185.183.18.255
185.194.24.0/24
185.194.26.0/23
185.219.216.0/22
185.221.188.0/23
185.225.148.0/24
IPv6:
2a05:4ac0::/32
Signature Algorithm: sha256WithRSAEncryption
38:38:f1:a0:5e:f6:b7:e5:2a:5e:ec:d2:7a:da:f0:fa:cd:50:
bb:c1:77:d0:14:bd:d2:71:80:77:cf:3b:3b:ef:1a:66:db:d3:
2e:60:83:23:07:c0:84:07:78:b9:8f:12:57:bf:a0:99:9a:d5:
5c:cd:65:b4:2f:09:41:9f:ea:c8:09:dc:ce:9e:dc:a1:6d:13:
c5:a0:8f:51:c4:7d:4e:be:77:96:f9:f6:a9:0c:fe:6a:d0:6b:
94:dc:ef:ff:4a:9b:71:7b:15:5a:22:fe:bc:48:5a:0f:57:c3:
07:d2:31:bd:7b:54:01:31:93:14:e6:cc:31:3a:d7:4c:29:92:
e9:1d:85:c4:a4:b3:23:b3:ce:69:80:30:93:01:44:5d:7a:37:
5d:93:87:24:fa:6d:dc:f5:7a:33:57:5f:9a:18:32:bc:a6:50:
70:13:1a:49:fc:e1:f6:dc:c2:3f:99:ab:3f:f6:0e:f6:f8:19:
ae:b6:7d:31:8a:2d:d5:7c:26:83:1a:6a:fd:31:bf:4d:da:0d:
38:0e:59:18:f4:4f:bc:8a:d3:7a:dc:a7:3c:d3:92:0f:c2:14:
ea:f4:52:7e:1a:4b:69:af:63:5e:81:36:3e:b4:cb:a9:74:e7:
4e:88:d3:b6:2f:9e:08:a6:a9:39:89:43:46:db:e5:ce:08:ac:
eb:74:3a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:52:19 2026 by rpki-client