Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/jK6ZUPsNFkyKtYKTfMd87vm3Fl0.roa
File: jK6ZUPsNFkyKtYKTfMd87vm3Fl0.roa (raw, json)
Hash identifier: GUweVKKgWw2gQHZHD+EmHgTHUZnsZaLcXUcKT7YkfRk=
Subject key identifier: 8C:AE:99:50:FB:0D:16:4C:8A:B5:82:93:7C:C7:7C:EE:F9:B7:16:5D
Certificate issuer: /CN=9be0a611e0678b8d329ee550312b246e0dcf4698
Certificate serial: 019B7AC928E44092D4D0C811D241420F976E
Authority key identifier: 9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/jK6ZUPsNFkyKtYKTfMd87vm3Fl0.roa
Signing time: Thu 01 Jan 2026 18:19:22 +0000
ROA not before: Thu 01 Jan 2026 18:19:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6744
IP address blocks: 150.140.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c9:28:e4:40:92:d4:d0:c8:11:d2:41:42:0f:97:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be0a611e0678b8d329ee550312b246e0dcf4698
Validity
Not Before: Jan 1 18:19:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cae9950fb0d164c8ab582937cc77ceef9b7165d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:35:c1:61:b9:f1:78:17:a5:31:01:8c:fa:
ba:fe:d0:bc:b1:9b:e2:7b:91:eb:3a:6d:2d:0b:d6:
b4:1c:64:9a:e7:12:cd:92:c0:43:20:b6:ae:36:e2:
6c:1b:54:a5:72:1f:48:4a:dc:5f:33:c2:ae:b4:77:
a5:73:dd:37:95:b3:27:e8:60:40:e1:8f:63:dd:74:
d7:da:e4:5c:a1:71:ff:3a:08:d1:fb:7c:eb:1d:88:
7f:ff:79:02:af:99:25:27:84:33:f5:ab:39:2a:4b:
66:5c:12:0b:67:d4:20:46:6c:f3:c5:56:4a:a8:34:
65:5a:82:8c:fa:5a:d6:ff:66:95:fc:7d:06:81:e1:
d5:c1:58:87:58:e1:cd:b6:ec:d0:c9:23:5a:d1:91:
25:94:95:ce:43:87:8a:30:b0:f9:e1:9e:5f:51:d0:
03:92:2c:82:73:72:8f:3b:9d:9a:77:02:af:11:18:
ec:81:72:7e:41:07:b3:8e:66:1b:e1:bb:29:33:6f:
1a:eb:1f:de:60:49:00:5e:21:26:0b:c3:cb:51:85:
b2:77:ca:cb:89:00:da:2b:a2:99:42:50:6f:cf:82:
34:03:31:e9:97:ac:33:01:79:57:19:a2:e0:9c:74:
cf:40:00:1a:4b:38:14:b0:92:59:43:f6:67:f9:d2:
b8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AE:99:50:FB:0D:16:4C:8A:B5:82:93:7C:C7:7C:EE:F9:B7:16:5D
X509v3 Authority Key Identifier:
keyid:9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/jK6ZUPsNFkyKtYKTfMd87vm3Fl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.140.0.0/17
Signature Algorithm: sha256WithRSAEncryption
51:ed:ac:bd:aa:a1:57:89:03:0f:bc:bc:a2:17:ce:6a:b0:4e:
6a:9d:73:2e:51:9c:bd:72:67:9b:a8:70:ca:9f:43:a6:5f:50:
44:f9:ae:63:49:06:b8:84:30:19:6b:b9:52:ae:75:4d:39:f7:
11:be:c6:e6:bc:c0:da:7c:b5:a9:e4:7f:ad:79:e5:25:e9:f6:
3b:a0:87:21:f2:e5:98:6b:38:00:14:6a:6e:5f:88:e9:03:74:
a8:74:bd:ae:f1:5d:65:31:1d:0a:21:1a:94:0c:2e:98:27:59:
d7:0f:1e:b1:66:c3:6f:84:d4:b3:21:7c:fc:71:3d:42:05:f8:
58:9c:b5:f3:df:e5:21:a1:a8:10:09:fc:a4:5a:93:89:3a:80:
95:c6:fa:73:d7:ec:16:73:1e:d7:4f:1a:01:5c:b2:f7:5d:a8:
a4:a3:f3:38:d7:f9:d7:be:ff:0e:a4:bb:01:27:91:32:6d:58:
e4:b4:b8:da:ff:79:66:6f:b6:04:ee:94:64:36:c8:3e:72:59:
ac:77:17:df:e4:d6:f9:97:7e:01:40:49:2a:f3:19:c4:cc:eb:
26:63:20:01:93:f9:5c:4b:cf:d2:16:2c:37:36:35:9c:b5:71:
67:1e:ec:f4:e0:3b:79:aa:75:d3:a4:73:60:1b:9a:58:a7:05:
6d:79:8f:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6ySjkQJLU0MgR0kFCD5duMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZTBhNjExZTA2NzhiOGQzMjllZTU1MDMxMmIyNDZlMGRj
ZjQ2OTgwHhcNMjYwMTAxMTgxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2FlOTk1MGZiMGQxNjRjOGFiNTgyOTM3Y2M3N2NlZWY5YjcxNjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE01wWG58XgXpTEBjPq6/tC8sZvi
e5HrOm0tC9a0HGSa5xLNksBDILauNuJsG1Slch9IStxfM8KutHelc903lbMn6GBA
4Y9j3XTX2uRcoXH/OgjR+3zrHYh//3kCr5klJ4Qz9as5KktmXBILZ9QgRmzzxVZK
qDRlWoKM+lrW/2aV/H0GgeHVwViHWOHNtuzQySNa0ZEllJXOQ4eKMLD54Z5fUdAD
kiyCc3KPO52adwKvERjsgXJ+QQezjmYb4bspM28a6x/eYEkAXiEmC8PLUYWyd8rL
iQDaK6KZQlBvz4I0AzHpl6wzAXlXGaLgnHTPQAAaSzgUsJJZQ/Zn+dK40wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIyumVD7DRZMirWCk3zHfO75txZdMB8GA1UdIwQY
MBaAFJvgphHgZ4uNMp7lUDErJG4Nz0aYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbS1DbUVlQm5pNDB5bnVWUU1Tc2tiZzNQUnBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8wM2YyNTYtNzQwMS00YWY0LTk3ZDAt
ZWFkMWFmODY5MWJhLzEvaks2WlVQc05Ga3lLdFlLVGZNZDg3dm0zRmwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8wM2YyNTYtNzQwMS00YWY0LTk3ZDAtZWFkMWFmODY5MWJh
LzEvbS1DbUVlQm5pNDB5bnVWUU1Tc2tiZzNQUnBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHlowAMA0G
CSqGSIb3DQEBCwUAA4IBAQBR7ay9qqFXiQMPvLyiF85qsE5qnXMuUZy9cmebqHDK
n0OmX1BE+a5jSQa4hDAZa7lSrnVNOfcRvsbmvMDafLWp5H+teeUl6fY7oIch8uWY
azgAFGpuX4jpA3SodL2u8V1lMR0KIRqUDC6YJ1nXDx6xZsNvhNSzIXz8cT1CBfhY
nLXz3+UhoagQCfykWpOJOoCVxvpz1+wWcx7XTxoBXLL3Xaiko/M41/nXvv8OpLsB
J5EybVjktLja/3lmb7YE7pRkNsg+clmsdxff5Nb5l34BQEkq8xnEzOsmYyABk/lc
S8/SFiw3NjWctXFnHuz04Dt5qnXTpHNgG5pYpwVteY/Z
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:24:44 2026 by rpki-client