Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/C0q_FEBxSMrd9E0lH1qFkI0HoA4.roa
File: C0q_FEBxSMrd9E0lH1qFkI0HoA4.roa (raw, json)
Hash identifier: z039AMhLSdjI+bLUAHVfZeXYFKTMJ1GuEuS23INfAZY=
Subject key identifier: 0B:4A:BF:14:40:71:48:CA:DD:F4:4D:25:1F:5A:85:90:8D:07:A0:0E
Certificate issuer: /CN=25a9ff1c6f6e2c850c2991179fe521bc11667703
Certificate serial: 019F23687739F5919267614F397A41D51DCC
Authority key identifier: 25:A9:FF:1C:6F:6E:2C:85:0C:29:91:17:9F:E5:21:BC:11:66:77:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/C0q_FEBxSMrd9E0lH1qFkI0HoA4.roa
Signing time: Thu 02 Jul 2026 15:17:56 +0000
ROA not before: Thu 02 Jul 2026 15:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214239
IP address blocks: 185.210.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:77:39:f5:91:92:67:61:4f:39:7a:41:d5:1d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a9ff1c6f6e2c850c2991179fe521bc11667703
Validity
Not Before: Jul 2 15:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b4abf14407148caddf44d251f5a85908d07a00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ef:d2:8f:42:91:ef:9f:a6:45:01:d5:41:e2:
89:e6:7d:89:57:5d:0d:c7:1f:25:44:3c:42:88:66:
e9:db:14:7a:41:79:74:4f:bf:bc:a0:f1:9f:b6:65:
1c:3e:da:3b:ec:94:88:c6:79:10:7c:65:36:70:29:
63:bd:00:ba:03:b3:4b:1d:3e:6c:d7:4a:85:d5:36:
f2:29:63:f5:ae:fb:c8:b8:3d:77:3b:a7:ad:43:2c:
d9:ac:09:ad:be:58:4d:28:f3:32:e3:3e:12:1a:d0:
94:99:d9:35:01:35:25:46:e5:76:84:04:b2:60:f9:
43:85:b8:d6:60:54:58:8d:e3:25:45:7b:40:10:a6:
52:c0:c7:9c:39:d9:20:98:33:16:2e:a0:ba:89:f2:
4c:5e:66:74:09:29:22:79:86:29:f9:23:30:e9:d9:
66:e8:aa:65:c2:52:79:85:9d:e9:71:f1:72:07:83:
8e:53:b2:4b:ff:6b:e5:d8:87:69:0c:bd:01:f6:44:
14:a2:92:c1:bd:5e:94:a1:30:25:43:55:38:c0:2e:
b5:81:35:a9:bf:e6:41:3f:38:a8:04:ec:c9:c4:21:
d7:38:a0:ed:5c:e7:a3:3b:dc:5b:0b:d9:fe:2d:54:
3c:f5:0e:3b:35:cf:d1:7e:e8:37:52:47:c7:1f:3c:
4e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4A:BF:14:40:71:48:CA:DD:F4:4D:25:1F:5A:85:90:8D:07:A0:0E
X509v3 Authority Key Identifier:
keyid:25:A9:FF:1C:6F:6E:2C:85:0C:29:91:17:9F:E5:21:BC:11:66:77:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/C0q_FEBxSMrd9E0lH1qFkI0HoA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.54.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:5a:31:76:7a:f0:28:9d:24:12:a2:b4:cb:a5:fa:58:81:87:
0a:f0:d6:4c:81:d9:ba:a5:ec:30:b0:2f:bb:ec:16:5f:be:78:
6e:69:b0:b9:e4:9e:bc:3c:d3:f3:be:eb:72:f2:33:26:d9:26:
f5:3b:4f:d7:ae:de:20:d8:49:9b:2b:38:c7:ef:5b:f8:38:00:
84:64:19:ec:26:58:5d:6b:8d:7e:43:1e:5d:2c:14:5b:66:91:
8a:5e:89:4e:b8:38:05:7d:6f:f4:9f:44:f6:81:9f:06:33:76:
0d:a7:a5:7d:0f:a3:e2:2a:c9:bd:20:09:8a:e7:73:10:dd:f3:
f3:bc:41:e3:99:77:0b:17:60:3d:a6:46:b9:fb:76:71:c0:b4:
4b:3b:40:d1:c7:4e:53:3c:a1:56:45:00:fa:9a:7a:3f:68:2c:
0e:d0:f6:58:41:0f:02:fc:b4:26:42:f2:45:78:dd:90:02:fa:
d6:0c:5a:81:56:cb:d5:49:e7:14:d0:73:d4:b7:83:b8:41:75:
dc:cc:3f:62:ba:02:e3:2e:dd:2a:7a:38:9a:0f:95:13:e1:ca:
60:fa:ba:4c:04:3a:ed:c9:ea:20:e3:d1:1a:5e:52:8f:c9:4d:
36:66:be:4e:23:d6:ba:9d:0b:f8:94:bd:63:08:e7:17:27:f7:
88:bd:da:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaHc59ZGSZ2FPOXpB1R3MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YTlmZjFjNmY2ZTJjODUwYzI5OTExNzlmZTUyMWJjMTE2
Njc3MDMwHhcNMjYwNzAyMTUxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjRhYmYxNDQwNzE0OGNhZGRmNDRkMjUxZjVhODU5MDhkMDdhMDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+/Sj0KR75+mRQHVQeKJ5n2JV10N
xx8lRDxCiGbp2xR6QXl0T7+8oPGftmUcPto77JSIxnkQfGU2cCljvQC6A7NLHT5s
10qF1TbyKWP1rvvIuD13O6etQyzZrAmtvlhNKPMy4z4SGtCUmdk1ATUlRuV2hASy
YPlDhbjWYFRYjeMlRXtAEKZSwMecOdkgmDMWLqC6ifJMXmZ0CSkieYYp+SMw6dlm
6KplwlJ5hZ3pcfFyB4OOU7JL/2vl2IdpDL0B9kQUopLBvV6UoTAlQ1U4wC61gTWp
v+ZBPzioBOzJxCHXOKDtXOejO9xbC9n+LVQ89Q47Nc/Rfug3UkfHHzxO2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAtKvxRAcUjK3fRNJR9ahZCNB6AOMB8GA1UdIwQY
MBaAFCWp/xxvbiyFDCmRF5/lIbwRZncDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmFuX0hHOXVMSVVNS1pFWG4tVWh2QkZtZHdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kYzY1MGEtYzhjMy00ZTMxLWE3OTAt
YzIzZjczMTM2MmNlLzEvQzBxX0ZFQnhTTXJkOUUwbEgxcUZrSTBIb0E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kYzY1MGEtYzhjMy00ZTMxLWE3OTAtYzIzZjczMTM2MmNl
LzEvSmFuX0hHOXVMSVVNS1pFWG4tVWh2QkZtZHdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudI2MA0G
CSqGSIb3DQEBCwUAA4IBAQCcWjF2evAonSQSorTLpfpYgYcK8NZMgdm6pewwsC+7
7BZfvnhuabC55J68PNPzvuty8jMm2Sb1O0/Xrt4g2EmbKzjH71v4OACEZBnsJlhd
a41+Qx5dLBRbZpGKXolOuDgFfW/0n0T2gZ8GM3YNp6V9D6PiKsm9IAmK53MQ3fPz
vEHjmXcLF2A9pka5+3ZxwLRLO0DRx05TPKFWRQD6mno/aCwO0PZYQQ8C/LQmQvJF
eN2QAvrWDFqBVsvVSecU0HPUt4O4QXXczD9iugLjLt0qejiaD5UT4cpg+rpMBDrt
yeog49EaXlKPyU02Zr5OI9a6nQv4lL1jCOcXJ/eIvdon
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:14 2026 by rpki-client