Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/6UnLf-WfoW9sr8JO9S3jMv6qGIA.roa
File: 6UnLf-WfoW9sr8JO9S3jMv6qGIA.roa (raw, json)
Hash identifier: 2bd+YNQSpktsNSy1cZJWllJsfSQnRwhxzclMAXA57Ro=
Subject key identifier: E9:49:CB:7F:E5:9F:A1:6F:6C:AF:C2:4E:F5:2D:E3:32:FE:AA:18:80
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 019A06E502A44C2B6CAE258F65377924A16B
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/6UnLf-WfoW9sr8JO9S3jMv6qGIA.roa
Signing time: Tue 21 Oct 2025 13:11:03 +0000
ROA not before: Tue 21 Oct 2025 13:11:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59651
IP address blocks: 146.19.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:e5:02:a4:4c:2b:6c:ae:25:8f:65:37:79:24:a1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Oct 21 13:11:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e949cb7fe59fa16f6cafc24ef52de332feaa1880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:f9:b5:4f:26:a9:ce:b6:f0:03:d5:4b:fe:
dc:c6:b0:db:08:9e:72:81:c0:a2:04:16:b3:86:b2:
eb:3d:76:81:e9:44:ec:99:0f:3a:93:61:65:b8:ab:
76:ca:3e:7f:7a:af:31:60:e5:cf:bd:e3:af:c7:72:
8c:d6:9d:51:1f:6c:98:ff:69:0f:88:da:69:65:84:
36:81:86:6f:a0:8a:0c:b8:2e:0c:09:c9:b6:26:a0:
c3:28:61:24:55:dc:8a:e4:92:13:cc:29:1c:58:43:
fa:24:3b:8d:e3:b0:11:16:41:5d:c9:2e:53:9a:0d:
2a:6f:b2:3d:2b:30:2c:ef:cd:4c:04:c0:5d:01:d6:
a0:41:8a:e6:87:99:94:33:22:83:77:dc:c4:8c:12:
6a:41:38:ce:d3:d4:f2:89:33:58:f0:f9:3d:bd:5c:
c5:1f:b8:18:2e:90:cf:03:0c:87:95:c2:e1:44:1c:
6d:ca:7a:c7:43:f7:d0:5b:95:d2:e7:a7:16:11:cc:
59:f6:e4:5b:b0:6f:b1:f1:64:21:af:a3:ea:5b:fa:
72:71:05:9d:74:7c:c0:00:7a:b4:e8:9e:67:c3:f6:
12:48:38:9e:27:19:a1:fd:6c:cf:4e:99:21:3d:f2:
aa:de:82:f5:45:28:4f:c2:bb:06:9d:01:ca:b1:97:
c3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:49:CB:7F:E5:9F:A1:6F:6C:AF:C2:4E:F5:2D:E3:32:FE:AA:18:80
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/6UnLf-WfoW9sr8JO9S3jMv6qGIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.140.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:3f:81:7c:e0:b6:f3:07:c6:92:0e:0a:91:4f:53:b4:17:85:
f1:af:11:aa:31:e7:1a:a7:55:3b:d7:4f:c1:89:19:bd:7a:f1:
d9:11:bd:ff:81:c5:96:d6:4a:4e:c3:ba:eb:03:2d:a0:a3:a1:
ec:d3:68:de:54:fe:32:e4:8a:2b:26:10:f6:a4:a3:55:47:58:
49:fc:1c:7e:e4:7e:88:99:ca:df:32:3b:f5:a6:8e:19:89:79:
23:37:d2:73:9f:3e:64:c9:f4:1c:e4:05:60:07:38:48:53:49:
50:62:d8:ce:2f:37:ff:15:f0:54:41:22:12:ed:cc:82:36:a1:
0a:6e:05:ae:ae:7c:08:ff:11:67:1a:05:08:3b:6c:fd:d0:5e:
20:ff:a5:dc:1b:e4:21:90:12:5c:d6:19:63:a3:41:40:64:ac:
a1:81:3d:c1:5e:c3:0e:8a:ac:4b:60:c3:04:cd:af:64:48:94:
c3:4f:64:4f:1e:0c:1f:42:d5:ff:6a:d7:58:95:b0:22:e5:64:
9f:10:b8:ea:2e:47:83:c1:e0:91:c4:37:73:6c:ca:b0:b7:68:
2d:98:43:59:ae:ac:4f:d3:7f:e7:67:f4:b6:1e:be:96:25:27:
98:52:fe:8b:ce:46:6a:d0:3d:2d:3c:be:85:00:63:a7:c4:10:
9d:4d:c7:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZoG5QKkTCtsriWPZTd5JKFrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMWQ2ZWJhNDYzYjc1NjRhYmZhZTkzOGI0NmVkNDcxODdk
ZTBlYzAwHhcNMjUxMDIxMTMxMTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTQ5Y2I3ZmU1OWZhMTZmNmNhZmMyNGVmNTJkZTMzMmZlYWExODgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkf5tU8mqc628APVS/7cxrDbCJ5y
gcCiBBazhrLrPXaB6UTsmQ86k2FluKt2yj5/eq8xYOXPveOvx3KM1p1RH2yY/2kP
iNppZYQ2gYZvoIoMuC4MCcm2JqDDKGEkVdyK5JITzCkcWEP6JDuN47ARFkFdyS5T
mg0qb7I9KzAs781MBMBdAdagQYrmh5mUMyKDd9zEjBJqQTjO09TyiTNY8Pk9vVzF
H7gYLpDPAwyHlcLhRBxtynrHQ/fQW5XS56cWEcxZ9uRbsG+x8WQhr6PqW/pycQWd
dHzAAHq06J5nw/YSSDieJxmh/WzPTpkhPfKq3oL1RShPwrsGnQHKsZfDZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOlJy3/ln6FvbK/CTvUt4zL+qhiAMB8GA1UdIwQY
MBaAFNsdbrpGO3Vkq/rpOLRu1HGH3g7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAt
NmYyY2Y0ZjAzY2ViLzEvNlVuTGYtV2ZvVzlzcjhKTzlTM2pNdjZxR0lBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAtNmYyY2Y0ZjAzY2Vi
LzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhOMMA0G
CSqGSIb3DQEBCwUAA4IBAQAMP4F84LbzB8aSDgqRT1O0F4XxrxGqMecap1U710/B
iRm9evHZEb3/gcWW1kpOw7rrAy2go6Hs02jeVP4y5IorJhD2pKNVR1hJ/Bx+5H6I
mcrfMjv1po4ZiXkjN9Jznz5kyfQc5AVgBzhIU0lQYtjOLzf/FfBUQSIS7cyCNqEK
bgWurnwI/xFnGgUIO2z90F4g/6XcG+QhkBJc1hljo0FAZKyhgT3BXsMOiqxLYMME
za9kSJTDT2RPHgwfQtX/atdYlbAi5WSfELjqLkeDweCRxDdzbMqwt2gtmENZrqxP
03/nZ/S2Hr6WJSeYUv6LzkZq0D0tPL6FAGOnxBCdTcfE
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:31:03 2025 by rpki-client