Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/6qq-XP4ny-ZL6xPgXFHSsRpCuwM.roa
File: 6qq-XP4ny-ZL6xPgXFHSsRpCuwM.roa (raw, json)
Hash identifier: IK596nydspVw6R5w8rD7i/ctSKHG7IK4tKm38ELlVcI=
Subject key identifier: EA:AA:BE:5C:FE:27:CB:E6:4B:EB:13:E0:5C:51:D2:B1:1A:42:BB:03
Certificate issuer: /CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Certificate serial: 01A0CC9FEA0A4E7C945D76EBD49EE7BE64F8
Authority key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/6qq-XP4ny-ZL6xPgXFHSsRpCuwM.roa
Signing time: Wed 23 Sep 2026 04:57:07 +0000
ROA not before: Wed 23 Sep 2026 04:57:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21057
IP address blocks: 31.187.68.0/24 maxlen: 24
80.84.128.0/22 maxlen: 22
80.84.132.0/22 maxlen: 22
80.84.133.0/24 maxlen: 24
80.84.137.0/24 maxlen: 24
80.84.138.0/23 maxlen: 23
80.84.138.0/24 maxlen: 24
80.84.139.0/24 maxlen: 24
80.84.140.0/23 maxlen: 23
80.84.140.0/24 maxlen: 24
80.84.141.0/24 maxlen: 24
80.84.148.0/24 maxlen: 24
80.84.150.0/23 maxlen: 23
80.84.152.0/22 maxlen: 22
80.84.156.0/23 maxlen: 23
80.84.158.0/23 maxlen: 23
80.84.159.0/24 maxlen: 24
178.249.8.0/22 maxlen: 22
178.249.11.0/24 maxlen: 24
178.249.12.0/22 maxlen: 22
178.249.13.0/24 maxlen: 24
178.249.14.0/24 maxlen: 24
178.249.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 09:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:9f:ea:0a:4e:7c:94:5d:76:eb:d4:9e:e7:be:64:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Validity
Not Before: Sep 23 04:57:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eaaabe5cfe27cbe64beb13e05c51d2b11a42bb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:2e:1a:a9:b1:7d:c9:96:c1:d1:1d:37:35:
1d:fb:0d:d2:d6:a6:96:03:45:34:1d:aa:27:9e:d2:
be:07:02:f2:92:49:8e:1b:87:0b:89:9b:46:b0:ba:
e5:83:f0:34:cc:40:e4:c4:84:8d:38:1e:be:25:6a:
40:69:4e:09:f8:e3:f2:fd:81:80:1e:99:8e:f0:a4:
b9:ea:a0:4f:99:e7:8a:8f:f5:c5:c1:4b:ce:a9:b2:
50:6f:27:2b:67:a0:dc:31:17:a1:cc:23:55:91:4c:
ab:bf:0d:b9:73:f4:37:b3:6f:63:7e:86:c8:ee:ae:
24:c5:f8:eb:fa:6f:d9:67:52:8b:5c:db:e2:8e:69:
6f:f5:d1:4d:ed:2e:4f:d6:07:2e:5f:45:31:43:59:
6c:25:d9:7f:53:14:0b:e3:d3:09:0a:74:86:00:5f:
b7:18:09:27:68:ee:02:91:3c:d3:c3:90:0d:1b:1f:
fb:0c:69:66:12:88:80:46:61:07:06:27:d5:e7:42:
e1:96:09:d0:c9:8a:2b:bd:0f:e4:fe:83:62:65:90:
b3:c2:76:c1:b3:cc:05:75:eb:a1:0c:b8:2f:d4:bf:
5a:a4:1f:00:d2:71:03:1b:49:4b:19:ae:82:51:46:
33:e9:86:29:b5:aa:0d:9e:32:27:61:d1:a4:51:f2:
f8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AA:BE:5C:FE:27:CB:E6:4B:EB:13:E0:5C:51:D2:B1:1A:42:BB:03
X509v3 Authority Key Identifier:
keyid:EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/6qq-XP4ny-ZL6xPgXFHSsRpCuwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.68.0/24
80.84.128.0/21
80.84.137.0-80.84.141.255
80.84.148.0/24
80.84.150.0-80.84.159.255
178.249.8.0/21
Signature Algorithm: sha256WithRSAEncryption
74:05:4f:e0:09:29:72:72:b6:bf:6c:76:78:ba:53:33:83:f2:
09:a4:d9:e8:de:65:eb:79:34:e4:90:1f:12:b3:33:8e:ed:b2:
47:8f:89:15:51:bc:f6:13:6c:fc:a6:10:4b:1c:2f:d2:66:80:
20:2e:fa:22:f9:f3:19:f7:cb:a3:d1:e0:01:cb:79:c4:4c:e2:
48:81:e2:2d:c2:bc:b2:04:11:9b:3a:18:ab:43:08:7c:75:56:
20:aa:83:a3:09:0a:81:43:95:79:11:74:8c:e4:82:33:66:1b:
4c:0b:ac:f1:06:58:30:54:8b:24:e2:63:b6:14:cc:c2:d8:45:
df:23:b7:ea:fa:37:cf:13:d4:01:a3:93:8c:24:7e:c4:3c:fa:
45:9e:8a:7c:9d:93:ea:9e:16:68:f2:65:c0:e7:11:8a:79:4f:
79:cb:60:83:ac:7a:7a:61:71:ce:cd:e6:c8:10:3e:6e:b3:2e:
3d:7b:be:51:fc:94:bd:92:fa:65:4d:3e:93:63:44:33:ac:8e:
9e:d0:17:58:26:62:6b:2f:35:93:13:05:a2:15:1d:8b:07:fb:
56:d5:2b:66:25:b8:09:4a:67:b6:39:0f:cb:85:04:e5:1f:df:
5e:9e:b2:37:fb:79:24:6d:6c:af:f6:17:8c:30:9d:8c:c1:5e:
47:51:38:39
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAaDMn+oKTnyUXXbr1J7nvmT4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYmE3NzRiYTgyZmIwNDI3Zjc2NmU3ODNlNzcwZjRiZDk2
NDE2ZjkwHhcNMjYwOTIzMDQ1NzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWFhYmU1Y2ZlMjdjYmU2NGJlYjEzZTA1YzUxZDJiMTFhNDJiYjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYMuGqmxfcmWwdEdNzUd+w3S1qaW
A0U0HaonntK+BwLykkmOG4cLiZtGsLrlg/A0zEDkxISNOB6+JWpAaU4J+OPy/YGA
HpmO8KS56qBPmeeKj/XFwUvOqbJQbycrZ6DcMRehzCNVkUyrvw25c/Q3s29jfobI
7q4kxfjr+m/ZZ1KLXNvijmlv9dFN7S5P1gcuX0UxQ1lsJdl/UxQL49MJCnSGAF+3
GAknaO4CkTzTw5ANGx/7DGlmEoiARmEHBifV50LhlgnQyYorvQ/k/oNiZZCzwnbB
s8wFdeuhDLgv1L9apB8A0nEDG0lLGa6CUUYz6YYptaoNnjInYdGkUfL4QQIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFOqqvlz+J8vmS+sT4FxR0rEaQrsDMB8GA1UdIwQY
MBaAFOy6d0uoL7BCf3ZueD53D0vZZBb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0xwM1M2Z3ZzRUpfZG01NFBuY1BTOWxrRnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84MTBjMTEtYTEwNS00ZGIxLWE2YjUt
MzkyYjg2M2M5ZjAzLzEvNnFxLVhQNG55LVpMNnhQZ1hGSFNzUnBDdXdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi84MTBjMTEtYTEwNS00ZGIxLWE2YjUtMzkyYjg2M2M5ZjAz
LzEvN0xwM1M2Z3ZzRUpfZG01NFBuY1BTOWxrRnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQAH7tEAwQD
UFSAMAwDBABQVIkDBAFQVIwDBABQVJQwDAMEAVBUlgMEBVBUgAMEA7L5CDANBgkq
hkiG9w0BAQsFAAOCAQEAdAVP4AkpcnK2v2x2eLpTM4PyCaTZ6N5l63k05JAfErMz
ju2yR4+JFVG89hNs/KYQSxwv0maAIC76IvnzGffLo9HgAct5xEziSIHiLcK8sgQR
mzoYq0MIfHVWIKqDowkKgUOVeRF0jOSCM2YbTAus8QZYMFSLJOJjthTMwthF3yO3
6vo3zxPUAaOTjCR+xDz6RZ6KfJ2T6p4WaPJlwOcRinlPectgg6x6emFxzs3myBA+
brMuPXu+UfyUvZL6ZU0+k2NEM6yOntAXWCZiay81kxMFohUdiwf7VtUrZiW4CUpn
tjkPy4UE5R/fXp6yN/t5JG1sr/YXjDCdjMFeR1E4OQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:15:25 2026 by rpki-client