Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/d46cb2-fc5a-4bf0-becf-4b0fec4249fa/1/6xq-HTBdmHLwBQD2FJb4zwyhXPg.roa
File: 6xq-HTBdmHLwBQD2FJb4zwyhXPg.roa (raw, json)
Hash identifier: 5d1mv+HtexeG8WGSjPVPvkMUtyvtmv7n+sp8U714YeA=
Subject key identifier: EB:1A:BE:1D:30:5D:98:72:F0:05:00:F6:14:96:F8:CF:0C:A1:5C:F8
Certificate issuer: /CN=a724097b7ef9f513b39e12767d5edcd3e0623a83
Certificate serial: 01A01ED8EBC7A226636B033FB8E4460E8EAF
Authority key identifier: A7:24:09:7B:7E:F9:F5:13:B3:9E:12:76:7D:5E:DC:D3:E0:62:3A:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyQJe3759ROznhJ2fV7c0-BiOoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d46cb2-fc5a-4bf0-becf-4b0fec4249fa/1/6xq-HTBdmHLwBQD2FJb4zwyhXPg.roa
Signing time: Thu 20 Aug 2026 11:05:27 +0000
ROA not before: Thu 20 Aug 2026 11:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219074
IP address blocks: 185.145.190.0/24 maxlen: 24
2a0b:e880::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d46cb2-fc5a-4bf0-becf-4b0fec4249fa/1/pyQJe3759ROznhJ2fV7c0-BiOoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d46cb2-fc5a-4bf0-becf-4b0fec4249fa/1/pyQJe3759ROznhJ2fV7c0-BiOoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyQJe3759ROznhJ2fV7c0-BiOoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:d8:eb:c7:a2:26:63:6b:03:3f:b8:e4:46:0e:8e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a724097b7ef9f513b39e12767d5edcd3e0623a83
Validity
Not Before: Aug 20 11:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb1abe1d305d9872f00500f61496f8cf0ca15cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0c:ac:fc:b8:72:61:76:79:7d:da:32:13:50:
4a:e4:a4:0d:b0:e1:c3:43:10:7a:62:fa:08:3f:b5:
75:83:33:16:68:a3:7b:9f:16:da:e6:2d:02:b0:43:
16:4e:bf:39:69:f2:81:2b:f2:fd:5e:89:67:0b:c1:
83:8a:98:5d:39:6e:58:50:f7:29:e0:a0:1a:29:e4:
d4:76:81:37:94:35:1d:c0:4c:86:8d:31:0c:6b:d8:
4d:66:2e:9d:ab:e7:03:99:19:cd:6b:d5:1f:0f:32:
53:13:d1:ec:c2:b2:f5:f5:b5:85:dd:9e:b0:23:10:
79:c2:6f:8f:5a:25:de:d6:bd:42:be:db:fe:33:fa:
b2:93:7c:65:e6:3e:c8:83:50:8a:45:8b:ea:c2:6b:
1f:6b:c3:d0:b4:f6:68:cc:d0:5f:75:bd:6f:72:db:
35:20:ce:c7:12:ef:5d:9c:e3:fd:81:23:6b:62:a9:
03:e8:e1:6d:4d:f5:bb:da:09:57:ac:ab:b2:f3:f1:
7c:bf:3d:19:81:7c:84:6f:bb:fb:17:7e:68:6a:ef:
25:48:e5:e0:24:51:fc:11:fa:53:8c:02:3f:dc:40:
fd:09:66:9e:07:23:2b:21:59:cb:49:f1:a6:0a:13:
1a:a9:8b:2b:9d:21:c0:d8:f3:2b:8d:45:34:af:4c:
ef:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1A:BE:1D:30:5D:98:72:F0:05:00:F6:14:96:F8:CF:0C:A1:5C:F8
X509v3 Authority Key Identifier:
keyid:A7:24:09:7B:7E:F9:F5:13:B3:9E:12:76:7D:5E:DC:D3:E0:62:3A:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyQJe3759ROznhJ2fV7c0-BiOoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d46cb2-fc5a-4bf0-becf-4b0fec4249fa/1/6xq-HTBdmHLwBQD2FJb4zwyhXPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d46cb2-fc5a-4bf0-becf-4b0fec4249fa/1/pyQJe3759ROznhJ2fV7c0-BiOoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.190.0/24
IPv6:
2a0b:e880::/32
Signature Algorithm: sha256WithRSAEncryption
af:d7:89:15:88:44:be:75:fe:1c:00:b3:2c:99:08:25:e8:47:
b5:3b:52:09:4b:b8:88:30:e6:1f:94:30:2b:d8:e5:77:02:f8:
c6:3d:50:ca:37:26:c9:13:98:72:75:e6:06:51:c1:e7:6c:13:
fb:ee:ec:76:9a:86:1d:de:0f:8e:20:8f:34:50:8c:3f:ff:50:
51:b5:d7:18:bc:10:23:ad:45:f3:ff:c8:77:88:97:e4:f2:85:
4a:1e:0e:2f:2c:c5:16:24:54:75:6a:1c:f2:49:4c:20:a1:1f:
1d:a3:f7:36:6e:6f:b2:7a:84:76:36:8b:c9:7f:c5:4b:79:4d:
87:cb:00:af:e3:2e:6b:ee:3e:eb:3c:ee:16:82:c0:7e:71:7d:
16:e9:e8:1e:7d:a6:60:90:a5:c5:51:28:d7:8f:0a:9c:34:60:
e2:f3:72:9d:39:ce:2e:7c:f5:4b:75:89:60:f0:12:68:2e:f7:
bd:69:44:c3:bb:98:20:18:a9:26:33:2e:2d:42:53:5b:f0:68:
67:e3:84:56:93:7e:fe:f8:51:f5:28:02:83:a5:2e:33:a0:dc:
02:2b:1a:7e:3d:04:df:38:70:bc:65:4e:54:85:2b:e4:82:6a:
a7:17:df:f1:9f:eb:d1:8f:4b:d4:eb:34:32:75:60:fd:f1:9c:
9e:84:cd:9c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaAe2OvHoiZjawM/uORGDo6vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MjQwOTdiN2VmOWY1MTNiMzllMTI3NjdkNWVkY2QzZTA2
MjNhODMwHhcNMjYwODIwMTEwNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjFhYmUxZDMwNWQ5ODcyZjAwNTAwZjYxNDk2ZjhjZjBjYTE1Y2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwys/LhyYXZ5fdoyE1BK5KQNsOHD
QxB6YvoIP7V1gzMWaKN7nxba5i0CsEMWTr85afKBK/L9XolnC8GDiphdOW5YUPcp
4KAaKeTUdoE3lDUdwEyGjTEMa9hNZi6dq+cDmRnNa9UfDzJTE9HswrL19bWF3Z6w
IxB5wm+PWiXe1r1Cvtv+M/qyk3xl5j7Ig1CKRYvqwmsfa8PQtPZozNBfdb1vcts1
IM7HEu9dnOP9gSNrYqkD6OFtTfW72glXrKuy8/F8vz0ZgXyEb7v7F35oau8lSOXg
JFH8EfpTjAI/3ED9CWaeByMrIVnLSfGmChMaqYsrnSHA2PMrjUU0r0zvcwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOsavh0wXZhy8AUA9hSW+M8MoVz4MB8GA1UdIwQY
MBaAFKckCXt++fUTs54Sdn1e3NPgYjqDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHlRSmUzNzU5Uk96bmhKMmZWN2MwLUJpT29NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kNDZjYjItZmM1YS00YmYwLWJlY2Yt
NGIwZmVjNDI0OWZhLzEvNnhxLUhUQmRtSEx3QlFEMkZKYjR6d3loWFBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9kNDZjYjItZmM1YS00YmYwLWJlY2YtNGIwZmVjNDI0OWZh
LzEvcHlRSmUzNzU5Uk96bmhKMmZWN2MwLUJpT29NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuZG+MA0E
AgACMAcDBQAqC+iAMA0GCSqGSIb3DQEBCwUAA4IBAQCv14kViES+df4cALMsmQgl
6Ee1O1IJS7iIMOYflDAr2OV3AvjGPVDKNybJE5hydeYGUcHnbBP77ux2moYd3g+O
II80UIw//1BRtdcYvBAjrUXz/8h3iJfk8oVKHg4vLMUWJFR1ahzySUwgoR8do/c2
bm+yeoR2NovJf8VLeU2HywCv4y5r7j7rPO4WgsB+cX0W6egefaZgkKXFUSjXjwqc
NGDi83KdOc4ufPVLdYlg8BJoLve9aUTDu5ggGKkmMy4tQlNb8Ghn44RWk37++FH1
KAKDpS4zoNwCKxp+PQTfOHC8ZU5UhSvkgmqnF9/xn+vRj0vU6zQydWD98ZyehM2c
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:37:49 2026 by rpki-client