Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/6h15ndycQZ7WrXImczD2Ev_bkCE.roa
File: 6h15ndycQZ7WrXImczD2Ev_bkCE.roa (raw, json)
Hash identifier: /doa4/0OtLcTmvyOJrYtOjbNHUmwErl0lGb/VqRY4T4=
Subject key identifier: EA:1D:79:9D:DC:9C:41:9E:D6:AD:72:26:73:30:F6:12:FF:DB:90:21
Certificate issuer: /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial: 01A1C9BAF90FFF3328BC6D340A9EE27E6945
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/6h15ndycQZ7WrXImczD2Ev_bkCE.roa
Signing time: Wed 11 Nov 2026 08:30:36 +0000
ROA not before: Wed 11 Nov 2026 08:30:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6698
IP address blocks: 31.42.184.0/22 maxlen: 24
45.11.56.0/22 maxlen: 24
45.11.57.0/24 maxlen: 24
45.12.0.0/22 maxlen: 24
45.12.0.0/24 maxlen: 24
45.12.1.0/24 maxlen: 24
45.12.2.0/24 maxlen: 24
45.12.3.0/24 maxlen: 24
45.134.172.0/22 maxlen: 24
45.134.173.0/24 maxlen: 24
62.182.80.0/21 maxlen: 24
62.182.84.0/24 maxlen: 24
82.158.194.0/24 maxlen: 24
82.158.197.0/24 maxlen: 24
82.158.198.0/23 maxlen: 23
82.158.200.0/23 maxlen: 23
82.158.202.0/23 maxlen: 23
85.137.49.0/24 maxlen: 24
85.137.50.0/24 maxlen: 24
85.137.57.0/24 maxlen: 24
91.208.115.0/24 maxlen: 24
91.218.48.0/22 maxlen: 24
91.222.172.0/22 maxlen: 24
91.234.198.0/23 maxlen: 24
128.0.104.0/24 maxlen: 24
152.89.60.0/22 maxlen: 24
176.97.112.0/20 maxlen: 24
176.97.112.0/23 maxlen: 24
176.97.114.0/24 maxlen: 24
176.97.115.0/24 maxlen: 24
176.97.122.0/23 maxlen: 23
176.97.124.0/24 maxlen: 24
176.119.24.0/21 maxlen: 24
176.119.30.0/24 maxlen: 24
176.119.31.0/24 maxlen: 24
185.66.88.0/22 maxlen: 24
185.66.91.0/24 maxlen: 24
185.254.196.0/22 maxlen: 24
185.254.198.0/24 maxlen: 24
185.254.199.0/24 maxlen: 24
193.23.181.0/24 maxlen: 24
194.42.204.0/22 maxlen: 24
194.42.204.0/24 maxlen: 24
194.42.205.0/24 maxlen: 24
195.26.86.0/23 maxlen: 24
195.66.210.0/24 maxlen: 24
195.66.212.0/22 maxlen: 24
195.128.248.0/23 maxlen: 24
195.160.220.0/22 maxlen: 24
212.86.116.0/22 maxlen: 24
212.86.116.0/24 maxlen: 24
212.86.117.0/24 maxlen: 24
212.86.118.0/23 maxlen: 23
212.86.124.0/24 maxlen: 24
2a09:2dc2::/32 maxlen: 32
2a09:2dc5::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c9:ba:f9:0f:ff:33:28:bc:6d:34:0a:9e:e2:7e:69:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Validity
Not Before: Nov 11 08:30:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea1d799ddc9c419ed6ad72267330f612ffdb9021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:21:f0:47:ce:fc:26:24:b2:1a:6b:f9:08:3e:
78:67:cb:76:03:a2:91:64:42:28:6b:40:c9:aa:d5:
86:c7:02:d0:dd:07:98:e9:70:28:b0:5a:a0:88:b2:
6f:90:89:e5:c8:a5:41:8d:11:9a:42:7d:a0:05:56:
c4:70:f6:86:6a:9f:85:27:6a:78:84:17:29:d3:7f:
fa:99:dd:9c:4f:95:97:4f:56:cd:05:d1:93:19:08:
ca:51:58:83:35:16:5e:dd:e8:01:d8:f8:c5:f2:46:
44:f8:d7:55:2c:d4:c5:00:90:d7:c3:27:07:6d:84:
37:9f:a2:97:b8:79:4b:38:c1:72:25:4c:bf:07:b6:
5d:bd:e8:a5:eb:e8:9a:91:c2:ba:bd:ce:df:f1:5a:
df:23:0e:ce:09:81:19:be:06:34:ce:f3:53:e1:c0:
ce:a4:55:3c:85:ba:ff:02:9f:c9:29:18:38:f9:32:
6a:35:b3:ad:fe:b8:03:c5:c9:58:c4:37:b0:f4:5d:
9e:5a:2c:7c:23:3d:6f:ed:ca:cb:07:24:02:92:ed:
83:d8:0b:57:27:d2:2c:15:ac:db:d1:47:03:3e:3d:
0d:c4:f2:a6:57:03:f8:10:cf:bb:09:fa:31:76:d9:
cc:c7:bd:1b:8a:88:0c:58:d8:d6:93:ce:3f:80:1d:
0d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1D:79:9D:DC:9C:41:9E:D6:AD:72:26:73:30:F6:12:FF:DB:90:21
X509v3 Authority Key Identifier:
keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/6h15ndycQZ7WrXImczD2Ev_bkCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.184.0/22
45.11.56.0/22
45.12.0.0/22
45.134.172.0/22
62.182.80.0/21
82.158.194.0/24
82.158.197.0-82.158.203.255
85.137.49.0-85.137.50.255
85.137.57.0/24
91.208.115.0/24
91.218.48.0/22
91.222.172.0/22
91.234.198.0/23
128.0.104.0/24
152.89.60.0/22
176.97.112.0/20
176.119.24.0/21
185.66.88.0/22
185.254.196.0/22
193.23.181.0/24
194.42.204.0/22
195.26.86.0/23
195.66.210.0/24
195.66.212.0/22
195.128.248.0/23
195.160.220.0/22
212.86.116.0/22
212.86.124.0/24
IPv6:
2a09:2dc2::/32
2a09:2dc5::/32
Signature Algorithm: sha256WithRSAEncryption
02:25:0f:29:fe:35:e7:27:a6:fd:f0:98:56:d7:31:9b:0a:07:
55:13:37:94:06:59:32:52:ff:8a:b7:89:e6:6b:93:30:be:f2:
eb:e7:6b:f3:95:e4:49:54:c0:b4:40:58:da:e7:83:76:9a:c2:
bf:ad:6c:8b:9f:dd:c6:e1:93:d9:93:5e:b1:48:1c:87:f9:f6:
06:16:a0:f3:93:6b:24:4b:59:ea:79:58:67:19:78:96:fe:c5:
30:75:2d:16:f4:f8:42:52:5d:43:e7:a2:60:a9:c2:04:ea:38:
37:52:e6:39:d0:61:24:ae:19:0e:7f:22:83:fc:e5:8c:30:23:
af:a6:45:6c:b5:91:bb:6d:64:93:bf:34:69:d0:ee:69:b3:b0:
e9:8b:e5:a1:f5:23:8e:19:0b:60:b6:6e:1d:ec:a8:ad:f8:4d:
14:08:f0:a7:4b:8d:c6:fa:ee:65:7f:03:74:05:c5:74:b0:d0:
6e:34:9c:32:85:d6:52:ce:32:d4:03:a2:ea:8a:e2:9a:c2:d7:
34:5e:c1:db:08:70:40:40:cc:1a:69:45:75:ec:42:f8:fe:d5:
92:e1:76:e6:2e:ba:f8:c3:0c:c7:23:4c:d2:e2:45:82:19:f6:
42:33:84:6d:c4:31:28:4f:a6:7f:97:4c:79:3b:38:cb:4a:d7:
9c:58:42:50
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:30:54 2026 by rpki-client