Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/d71q5qv3VSjpx1CS3WscUppwd64.roa
File: d71q5qv3VSjpx1CS3WscUppwd64.roa (raw, json)
Hash identifier: OevqVjTCs3/wWZ1yMZ43nseB2OKhmzpE8ZCb8GW131s=
Subject key identifier: 77:BD:6A:E6:AB:F7:55:28:E9:C7:50:92:DD:6B:1C:52:9A:70:77:AE
Certificate issuer: /CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
Certificate serial: 019F23C950D688CB6C7510860859C77DDA5F
Authority key identifier: 9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/d71q5qv3VSjpx1CS3WscUppwd64.roa
Signing time: Thu 02 Jul 2026 17:03:43 +0000
ROA not before: Thu 02 Jul 2026 17:03:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212080
IP address blocks: 194.33.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:c9:50:d6:88:cb:6c:75:10:86:08:59:c7:7d:da:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
Validity
Not Before: Jul 2 17:03:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77bd6ae6abf75528e9c75092dd6b1c529a7077ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:bf:aa:2f:8f:86:14:84:75:ef:96:8f:fe:96:
ba:88:bc:13:c3:1a:9d:d3:8c:27:3f:f4:44:62:94:
05:89:a2:59:16:4b:4d:e2:72:59:9b:4c:f1:53:32:
8f:4f:40:54:98:fa:e6:88:89:f8:3e:c0:bf:86:86:
2a:5c:5b:f7:36:bc:e4:1d:4f:cb:ae:ed:02:d1:03:
33:ca:58:05:10:74:f8:48:b6:e5:f8:e3:ae:38:5a:
b1:f6:df:b7:69:d2:f2:c2:85:94:48:83:97:b4:fd:
3c:da:05:83:d8:e6:3e:14:ec:e7:c8:c7:e1:44:93:
2d:69:a3:bb:d3:aa:da:6b:e4:12:f4:78:5d:6a:53:
0a:3d:90:b3:fc:fa:d0:b1:b4:60:e8:c9:94:91:48:
d6:2d:41:74:8c:3c:01:0d:bb:a6:cc:41:c7:31:ca:
50:13:d5:a9:ab:1d:f4:45:37:a9:71:ca:37:84:77:
61:60:52:c1:f1:cb:39:db:42:3d:29:3b:65:d5:06:
0e:7d:4f:cb:d1:57:f4:b8:6f:40:3e:17:b0:7c:eb:
fd:66:6b:07:de:71:90:d3:98:66:3b:80:95:5d:9e:
b2:f3:56:14:65:0d:c8:a5:35:fe:0c:44:4c:48:62:
53:da:0c:2c:d8:10:16:34:ee:42:49:bd:d7:38:da:
14:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BD:6A:E6:AB:F7:55:28:E9:C7:50:92:DD:6B:1C:52:9A:70:77:AE
X509v3 Authority Key Identifier:
keyid:9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/d71q5qv3VSjpx1CS3WscUppwd64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.106.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:e6:21:b8:a5:70:21:87:4a:e1:0b:2d:aa:92:27:be:9a:20:
fd:5c:1a:63:9b:a0:6d:5a:04:59:c7:46:e3:9f:9f:35:7e:ce:
99:e8:c9:eb:ea:e0:ea:1a:94:a2:8a:7d:4a:24:11:d3:94:eb:
28:cc:ce:36:c9:99:5e:49:88:df:4f:d8:56:b9:9c:f4:1e:77:
04:7d:29:41:f4:d1:bb:a0:2e:f0:15:88:4c:5d:5a:aa:58:07:
65:c5:4d:e7:f9:2f:4e:b2:37:b8:26:b4:50:7b:7a:43:06:76:
e1:ea:49:bd:69:40:0f:32:d2:c2:67:dd:75:cf:69:9a:fe:2e:
75:c2:df:c5:0a:77:e4:e4:15:96:1e:22:d5:0b:81:6f:c5:ca:
75:33:b8:6e:47:b7:f7:f6:8e:68:46:54:14:89:e8:de:bb:8d:
0d:bc:f6:e2:03:26:6d:95:e5:3c:8a:bc:6f:69:14:eb:4e:38:
2f:cb:f4:47:f0:b4:6c:e8:80:17:7f:c0:91:8e:74:e1:74:b5:
07:ad:6a:28:63:26:08:c0:d1:c3:06:18:6c:15:97:12:5c:48:
4c:4c:c5:a9:0c:04:f8:b7:d2:03:bd:e7:32:5a:a8:7c:3e:68:
63:03:a0:d8:ff:74:21:0a:72:ea:95:75:12:83:ff:ca:fb:a4:
57:14:74:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jyVDWiMtsdRCGCFnHfdpfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNDdlZTczYzI4NzgwYjEyZjE1MmNmYTI1OWFkZTNkOGFl
MGQxM2IwHhcNMjYwNzAyMTcwMzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2JkNmFlNmFiZjc1NTI4ZTljNzUwOTJkZDZiMWM1MjlhNzA3N2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8L+qL4+GFIR175aP/pa6iLwTwxqd
04wnP/REYpQFiaJZFktN4nJZm0zxUzKPT0BUmPrmiIn4PsC/hoYqXFv3NrzkHU/L
ru0C0QMzylgFEHT4SLbl+OOuOFqx9t+3adLywoWUSIOXtP082gWD2OY+FOznyMfh
RJMtaaO706raa+QS9HhdalMKPZCz/PrQsbRg6MmUkUjWLUF0jDwBDbumzEHHMcpQ
E9Wpqx30RTepcco3hHdhYFLB8cs520I9KTtl1QYOfU/L0Vf0uG9APhewfOv9ZmsH
3nGQ05hmO4CVXZ6y81YUZQ3IpTX+DERMSGJT2gws2BAWNO5CSb3XONoUGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHe9auar91Uo6cdQkt1rHFKacHeuMB8GA1UdIwQY
MBaAFJxH7nPCh4CxLxUs+iWa3j2K4NE7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkVmdWM4S0hnTEV2RlN6NkpacmVQWXJnMFRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9jN2M1MWQtNGY5MC00MDg3LWExM2Et
ZjNjMWE5YTExZDczLzEvZDcxcTVxdjNWU2pweDFDUzNXc2NVcHB3ZDY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9jN2M1MWQtNGY5MC00MDg3LWExM2EtZjNjMWE5YTExZDcz
LzEvbkVmdWM4S0hnTEV2RlN6NkpacmVQWXJnMFRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiFqMA0G
CSqGSIb3DQEBCwUAA4IBAQAc5iG4pXAhh0rhCy2qkie+miD9XBpjm6BtWgRZx0bj
n581fs6Z6Mnr6uDqGpSiin1KJBHTlOsozM42yZleSYjfT9hWuZz0HncEfSlB9NG7
oC7wFYhMXVqqWAdlxU3n+S9Osje4JrRQe3pDBnbh6km9aUAPMtLCZ911z2ma/i51
wt/FCnfk5BWWHiLVC4Fvxcp1M7huR7f39o5oRlQUiejeu40NvPbiAyZtleU8irxv
aRTrTjgvy/RH8LRs6IAXf8CRjnThdLUHrWooYyYIwNHDBhhsFZcSXEhMTMWpDAT4
t9IDvecyWqh8PmhjA6DY/3QhCnLqlXUSg//K+6RXFHSL
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:21:08 2026 by rpki-client