Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/6WOiM9yMpAPXv_pwmuu8ZsyQa5k.roa
File: 6WOiM9yMpAPXv_pwmuu8ZsyQa5k.roa (raw, json)
Hash identifier: /CJ6KkjHu5nAF395YVdpbobWPnkvJ6vEHcLgjWlrVbc=
Subject key identifier: E9:63:A2:33:DC:8C:A4:03:D7:BF:FA:70:9A:EB:BC:66:CC:90:6B:99
Certificate issuer: /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Certificate serial: 01A038F35AE9FF9396EE315B079B2D094C04
Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/6WOiM9yMpAPXv_pwmuu8ZsyQa5k.roa
Signing time: Tue 25 Aug 2026 12:44:27 +0000
ROA not before: Tue 25 Aug 2026 12:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12655
IP address blocks: 86.109.248.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:f3:5a:e9:ff:93:96:ee:31:5b:07:9b:2d:09:4c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b
Validity
Not Before: Aug 25 12:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e963a233dc8ca403d7bffa709aebbc66cc906b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b8:5b:e8:f9:bc:93:6d:d2:4c:3d:e8:e1:1e:
19:b5:e0:ee:02:2c:4a:e6:9f:f2:9e:e0:82:d9:55:
bb:3b:bc:ce:fd:0f:ec:34:94:c5:a6:ec:cf:b2:65:
cb:ac:9e:cc:22:70:90:0b:7f:e4:b0:4f:be:f2:09:
95:7e:27:4f:72:cc:d5:92:8a:ca:c1:15:24:a7:81:
76:d4:36:3d:be:b9:64:3e:6d:dc:8b:7f:f8:56:f4:
fd:f9:2d:de:8d:5f:8d:e0:d5:09:64:6b:3a:4e:0d:
d9:47:dc:c7:11:7e:3a:75:d5:f0:f2:e3:90:41:99:
1b:ad:b5:a3:d8:7c:3e:17:3c:ea:4f:15:20:00:dc:
44:95:6f:39:09:5f:b1:a0:c9:60:db:15:6a:3d:fd:
d2:d4:de:53:37:77:28:48:54:ee:65:9f:98:fa:f9:
22:6c:c7:1b:14:ba:c7:4d:63:63:f3:f5:a0:42:ef:
d6:96:63:57:0c:54:28:d5:d4:54:52:48:b6:35:2a:
8e:6c:e4:51:85:e3:1c:4d:74:04:8a:13:62:35:b1:
29:1e:28:ce:82:c4:26:66:26:ac:5d:82:0c:1c:bf:
79:7b:bf:a0:0a:20:e5:03:fd:d1:49:7d:03:ff:94:
56:df:0b:e4:82:83:4d:05:30:1e:08:18:91:eb:cc:
31:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:63:A2:33:DC:8C:A4:03:D7:BF:FA:70:9A:EB:BC:66:CC:90:6B:99
X509v3 Authority Key Identifier:
keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/6WOiM9yMpAPXv_pwmuu8ZsyQa5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.109.248.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:57:54:7d:db:8e:c3:6e:3d:9e:3f:bc:18:34:02:8e:50:7d:
3d:a5:fd:b7:9d:d9:99:b3:8c:ad:cd:ee:9b:7f:f6:fa:9d:32:
25:12:32:0e:8d:1d:99:17:20:0f:7b:ef:c6:af:48:c1:24:c3:
7a:8f:e2:e5:8e:a8:05:11:e2:f1:3a:7f:2f:11:5f:62:d7:2f:
8f:65:d7:35:9a:85:3a:4d:33:f7:2b:a8:f8:4a:a8:43:df:0d:
6a:2c:6e:68:7a:22:c8:21:e2:e0:92:93:75:9a:5f:da:78:ac:
72:26:92:18:74:d1:0c:11:27:e8:74:86:f4:ee:e9:be:91:6c:
12:3e:d1:5f:65:38:7b:22:a8:f8:cf:17:34:c3:31:2c:b5:ea:
ba:76:24:4c:45:0c:ca:c9:a5:bb:9a:9e:e9:0b:b6:1e:db:f3:
8e:d9:ff:a4:d6:cf:89:05:29:85:a6:75:75:72:20:34:d3:24:
0b:0b:88:7c:f3:69:80:6f:c9:c3:b3:8f:7e:73:e2:c0:ed:90:
c5:3d:48:69:3c:b1:1f:69:bd:2f:1c:f6:5d:b0:5e:8a:1a:2c:
cd:dd:99:0c:67:f4:8c:67:3a:36:4e:30:04:64:3d:b7:b1:3a:
19:7e:3b:40:d5:ef:65:1c:e0:02:76:0f:f9:ca:91:8e:29:2f:
18:66:2a:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA481rp/5OW7jFbB5stCUwEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYzNlNmNiMmViMDJmY2M3NDJiYWY5MWFiODY1YzliMjBk
NjQ4NGIwHhcNMjYwODI1MTI0NDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTYzYTIzM2RjOGNhNDAzZDdiZmZhNzA5YWViYmM2NmNjOTA2Yjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07hb6Pm8k23STD3o4R4ZteDuAixK
5p/ynuCC2VW7O7zO/Q/sNJTFpuzPsmXLrJ7MInCQC3/ksE++8gmVfidPcszVkorK
wRUkp4F21DY9vrlkPm3ci3/4VvT9+S3ejV+N4NUJZGs6Tg3ZR9zHEX46ddXw8uOQ
QZkbrbWj2Hw+FzzqTxUgANxElW85CV+xoMlg2xVqPf3S1N5TN3coSFTuZZ+Y+vki
bMcbFLrHTWNj8/WgQu/WlmNXDFQo1dRUUki2NSqObORRheMcTXQEihNiNbEpHijO
gsQmZiasXYIMHL95e7+gCiDlA/3RSX0D/5RW3wvkgoNNBTAeCBiR68wxIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOljojPcjKQD17/6cJrrvGbMkGuZMB8GA1UdIwQY
MBaAFGvD5ssusC/MdCuvkauGXJsg1khLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYThQbXl5NndMOHgwSzYtUnE0WmNteURXU0VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mNWU0NDAtMTAwZi00OTMzLWFhYmYt
MTEwOThhYTJlYmMzLzEvNldPaU05eU1wQVBYdl9wd211dThac3lRYTVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mNWU0NDAtMTAwZi00OTMzLWFhYmYtMTEwOThhYTJlYmMz
LzEvYThQbXl5NndMOHgwSzYtUnE0WmNteURXU0VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVm34MA0G
CSqGSIb3DQEBCwUAA4IBAQBaV1R9247Dbj2eP7wYNAKOUH09pf23ndmZs4ytze6b
f/b6nTIlEjIOjR2ZFyAPe+/Gr0jBJMN6j+LljqgFEeLxOn8vEV9i1y+PZdc1moU6
TTP3K6j4SqhD3w1qLG5oeiLIIeLgkpN1ml/aeKxyJpIYdNEMESfodIb07um+kWwS
PtFfZTh7Iqj4zxc0wzEsteq6diRMRQzKyaW7mp7pC7Ye2/OO2f+k1s+JBSmFpnV1
ciA00yQLC4h882mAb8nDs49+c+LA7ZDFPUhpPLEfab0vHPZdsF6KGizN3ZkMZ/SM
Zzo2TjAEZD23sToZfjtA1e9lHOACdg/5ypGOKS8YZioY
-----END CERTIFICATE-----
Generated at Wed Sep 23 11:51:55 2026 by rpki-client