Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/aq6EbRSc2yPXLymWgfc3hs2RSl0.roa
File: aq6EbRSc2yPXLymWgfc3hs2RSl0.roa (raw, json)
Hash identifier: c4jt4ZG6ePsIANqDTyXyyUoY7noOmOWYrKSmA8oP7jY=
Subject key identifier: 6A:AE:84:6D:14:9C:DB:23:D7:2F:29:96:81:F7:37:86:CD:91:4A:5D
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01A0906C3C5FC751ABD0985C7D32F6DB66E8
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/aq6EbRSc2yPXLymWgfc3hs2RSl0.roa
Signing time: Fri 11 Sep 2026 12:23:27 +0000
ROA not before: Fri 11 Sep 2026 12:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 88.223.43.0/24 maxlen: 24
95.173.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:6c:3c:5f:c7:51:ab:d0:98:5c:7d:32:f6:db:66:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Sep 11 12:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aae846d149cdb23d72f299681f73786cd914a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f7:fe:20:dd:52:c9:01:a1:a0:5b:a3:ea:3d:
2e:8d:37:d6:e6:20:a2:20:b7:c8:64:a7:09:b2:f0:
a3:42:3c:01:8b:84:a1:b4:53:cb:02:ef:71:83:4a:
23:f7:e7:ba:cf:a4:03:7f:d3:32:09:cd:ff:06:2e:
38:b1:54:e7:e1:04:e3:0c:6b:cd:68:a4:59:ea:f9:
2d:e8:bf:c8:bf:a3:55:cd:9f:54:27:37:c7:52:1e:
a5:3e:43:2e:8f:2c:df:06:5e:aa:80:f8:e3:58:e2:
4c:ff:fc:8c:3e:54:4c:d8:ff:2d:9e:c7:f8:8d:98:
11:fc:76:c2:94:dd:65:ff:ec:ff:b9:bb:bf:3a:02:
f3:19:80:9c:f9:da:2b:66:49:81:8d:52:45:d1:77:
04:d6:61:54:e2:e6:62:bf:c9:99:16:37:2c:79:9b:
a4:29:26:e6:fd:6d:fc:42:63:da:ec:e9:f0:60:c9:
77:2b:76:7b:dc:cf:1a:1e:30:c2:31:f7:b4:4d:4f:
4e:b0:e8:b8:f9:17:13:2c:3d:b1:d6:24:31:72:a1:
c3:66:56:73:ce:e8:06:32:20:52:60:ee:bc:7f:f4:
8e:91:79:b0:0d:b9:28:99:5c:1a:15:8b:0b:d6:4c:
1a:21:a6:6b:fe:37:5e:ad:78:54:44:93:1e:33:7a:
c5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AE:84:6D:14:9C:DB:23:D7:2F:29:96:81:F7:37:86:CD:91:4A:5D
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/aq6EbRSc2yPXLymWgfc3hs2RSl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.223.43.0/24
95.173.43.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:0a:21:1a:01:5c:99:bd:cf:0c:b2:92:ce:32:52:43:03:f5:
b5:ed:60:b4:84:35:e2:ff:a1:28:ab:72:2c:89:2f:c5:a5:2c:
0d:30:6e:ed:cb:24:95:1c:0c:b9:68:fa:17:b4:93:a0:f0:8a:
40:4c:44:51:69:96:4e:4a:2b:45:80:81:73:91:06:a4:42:e8:
6d:b2:a2:60:63:ba:57:0f:9d:e6:38:21:3a:20:10:3e:8d:f9:
4b:8d:25:d2:35:33:ed:6b:67:4c:6a:19:f9:46:0b:97:3b:42:
26:72:ac:8e:c3:bc:db:dc:28:cb:45:9b:83:3a:e7:3f:be:e6:
b6:07:14:cb:8a:93:5f:80:8e:bc:6d:52:53:26:37:d0:51:e1:
91:c1:1b:68:80:45:c4:76:88:32:ba:03:e3:6c:c0:31:18:66:
d6:5f:f4:6d:9e:4d:88:ba:f3:bb:83:b2:57:a5:7b:8a:4a:ab:
13:94:8c:6b:3c:8b:97:9d:71:3a:6b:7d:dc:92:31:f7:62:c4:
d5:48:a4:10:5e:58:09:ff:df:07:02:c2:bb:f5:82:b4:91:7b:
4e:4e:6e:33:58:65:c6:ea:e8:a4:92:5a:e3:0c:3d:9d:33:49:
82:80:42:a0:d6:15:76:cc:52:67:e5:e3:e4:f8:74:20:31:84:
c2:21:4e:d8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCQbDxfx1Gr0JhcfTL222boMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0
ZjgzYzQwHhcNMjYwOTExMTIyMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWFlODQ2ZDE0OWNkYjIzZDcyZjI5OTY4MWY3Mzc4NmNkOTE0YTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiff+IN1SyQGhoFuj6j0ujTfW5iCi
ILfIZKcJsvCjQjwBi4ShtFPLAu9xg0oj9+e6z6QDf9MyCc3/Bi44sVTn4QTjDGvN
aKRZ6vkt6L/Iv6NVzZ9UJzfHUh6lPkMujyzfBl6qgPjjWOJM//yMPlRM2P8tnsf4
jZgR/HbClN1l/+z/ubu/OgLzGYCc+dorZkmBjVJF0XcE1mFU4uZiv8mZFjcseZuk
KSbm/W38QmPa7OnwYMl3K3Z73M8aHjDCMfe0TU9OsOi4+RcTLD2x1iQxcqHDZlZz
zugGMiBSYO68f/SOkXmwDbkomVwaFYsL1kwaIaZr/jderXhURJMeM3rFXwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGquhG0UnNsj1y8ploH3N4bNkUpdMB8GA1UdIwQY
MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut
MWY4NzQ2OTQ1NDgzLzEvYXE2RWJSU2MyeVBYTHltV2dmYzNoczJSU2wwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz
LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWN8rAwQA
X60rMA0GCSqGSIb3DQEBCwUAA4IBAQA9CiEaAVyZvc8MspLOMlJDA/W17WC0hDXi
/6Eoq3IsiS/FpSwNMG7tyySVHAy5aPoXtJOg8IpATERRaZZOSitFgIFzkQakQuht
sqJgY7pXD53mOCE6IBA+jflLjSXSNTPta2dMahn5RguXO0ImcqyOw7zb3CjLRZuD
Ouc/vua2BxTLipNfgI68bVJTJjfQUeGRwRtogEXEdogyugPjbMAxGGbWX/Rtnk2I
uvO7g7JXpXuKSqsTlIxrPIuXnXE6a33ckjH3YsTVSKQQXlgJ/98HAsK79YK0kXtO
Tm4zWGXG6uikklrjDD2dM0mCgEKg1hV2zFJn5ePk+HQgMYTCIU7Y
-----END CERTIFICATE-----
Generated at Sun Sep 20 17:54:38 2026 by rpki-client