Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/b6x1rYAi_GGaREYh3D45b2ADPK4.roa
File: b6x1rYAi_GGaREYh3D45b2ADPK4.roa (raw, json)
Hash identifier: MHKlwWHLtN+hAl5C5FLdEufOnusGItrTQ/WMhZAOVz8=
Subject key identifier: 6F:AC:75:AD:80:22:FC:61:9A:44:46:21:DC:3E:39:6F:60:03:3C:AE
Certificate issuer: /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Certificate serial: 01A0FC369519D8CD21ACCB5652E0C6BB1B99
Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/b6x1rYAi_GGaREYh3D45b2ADPK4.roa
Signing time: Fri 02 Oct 2026 10:43:50 +0000
ROA not before: Fri 02 Oct 2026 10:43:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213780
IP address blocks: 92.38.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:36:95:19:d8:cd:21:ac:cb:56:52:e0:c6:bb:1b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Validity
Not Before: Oct 2 10:43:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fac75ad8022fc619a444621dc3e396f60033cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:42:fd:23:9d:ca:80:0e:32:cb:63:60:cb:
86:ac:f4:aa:9f:b5:3f:a3:71:fa:90:33:3b:ca:d7:
e0:b5:59:8d:50:a4:73:e1:9d:4d:d6:45:16:14:e2:
49:f2:aa:4e:84:9a:08:90:90:fb:0c:6d:4c:d2:76:
66:82:c2:d0:25:65:22:dc:1c:94:c5:66:f5:06:3c:
60:c7:3f:9b:c0:b6:c7:1c:1b:d3:e3:b1:4e:bb:f8:
87:76:44:d4:59:8e:8f:29:09:6e:2f:a0:dd:17:49:
e8:c7:cd:7f:f7:ca:20:36:a5:c3:d8:2a:86:bb:52:
aa:43:da:80:8e:c0:8c:3f:d6:f3:c3:14:07:a6:09:
6a:b4:3a:65:9b:89:5b:03:14:c4:a1:92:d6:d7:85:
48:e8:9f:3f:ad:ae:5d:93:74:71:dc:0b:40:fc:2e:
d3:c5:ab:ff:d9:38:68:7d:87:28:80:e1:97:a4:5f:
c3:bf:7a:41:d4:f8:cc:f6:d3:da:3a:62:03:7e:dd:
1d:7c:14:6f:18:06:5f:9a:95:6c:88:59:d5:20:33:
87:a9:74:56:db:e9:7a:b3:1f:d2:d4:42:3c:01:85:
73:3d:bc:44:91:e8:b2:f4:50:df:f6:72:16:4b:e7:
b6:6c:de:79:8e:31:51:f2:77:78:44:4b:27:3e:5a:
6a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AC:75:AD:80:22:FC:61:9A:44:46:21:DC:3E:39:6F:60:03:3C:AE
X509v3 Authority Key Identifier:
keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/b6x1rYAi_GGaREYh3D45b2ADPK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.222.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:62:b4:a7:be:8a:9b:e9:be:82:dd:a2:7a:18:39:bc:f1:f2:
81:06:9f:fb:41:41:ed:0c:8d:06:46:06:ee:4a:92:16:3f:eb:
17:59:80:f3:cc:9d:34:12:b5:b4:a7:a3:77:f9:ec:75:09:37:
5e:69:1b:8e:6b:b2:c7:7d:c8:f6:6b:f9:f2:eb:02:c1:8a:84:
9e:43:dd:61:ea:e4:ca:9e:7b:23:8d:4e:f2:8c:53:ce:97:d4:
e6:da:40:de:2f:f3:d0:84:6c:26:80:19:24:50:23:ba:ff:9b:
fd:9f:03:55:84:b6:31:aa:24:45:80:0b:9a:27:9c:df:d8:f9:
6c:bc:f4:33:8c:9e:28:2a:a9:5b:3a:b9:63:b5:5c:b6:27:d5:
19:81:c9:ab:44:bf:3a:bc:5d:70:7f:4a:b0:a7:d1:87:bd:9b:
76:f9:7e:53:79:c3:31:1c:de:9d:4b:73:3d:d7:44:ef:2b:e6:
f9:da:a4:9a:90:4d:b7:78:54:7a:e0:6f:78:6f:94:4b:cd:58:
84:eb:1b:e5:56:7b:0a:58:68:a1:6b:b5:80:07:9e:f3:35:af:
19:6a:1e:47:a6:64:2c:41:0d:fd:d5:21:00:24:6f:00:a9:12:
c8:0c:c9:e8:4d:d6:d2:4e:a3:22:58:a7:f6:ad:28:63:76:61:
22:f0:5e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:54:46 2026 by rpki-client