Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/PdHeaDywJi7J-a3zuc6-1mdUfSM.roa
File: PdHeaDywJi7J-a3zuc6-1mdUfSM.roa (raw, json)
Hash identifier: l+ho2GKXOZvF0KZ6/PCYPC090Oshz6jifmJBVRB6i5c=
Subject key identifier: 3D:D1:DE:68:3C:B0:26:2E:C9:F9:AD:F3:B9:CE:BE:D6:67:54:7D:23
Certificate issuer: /CN=94808a6ddb340d0a8a2127c64da28d770eedde93
Certificate serial: 019F2368A27453F55CBC589F9E5B3C558A10
Authority key identifier: 94:80:8A:6D:DB:34:0D:0A:8A:21:27:C6:4D:A2:8D:77:0E:ED:DE:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/PdHeaDywJi7J-a3zuc6-1mdUfSM.roa
Signing time: Thu 02 Jul 2026 15:18:07 +0000
ROA not before: Thu 02 Jul 2026 15:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205471
IP address blocks: 185.69.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a2:74:53:f5:5c:bc:58:9f:9e:5b:3c:55:8a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94808a6ddb340d0a8a2127c64da28d770eedde93
Validity
Not Before: Jul 2 15:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3dd1de683cb0262ec9f9adf3b9cebed667547d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:b3:80:8b:72:89:50:86:bd:20:58:dd:4a:
d2:05:89:7e:02:b1:d7:c9:61:25:ae:e1:37:b8:22:
c1:5e:f0:41:74:a0:52:67:a5:91:31:d3:81:b1:e8:
31:c5:fc:0f:d3:65:2d:39:82:00:89:74:67:c2:db:
ba:ab:57:00:a5:ba:60:a6:7f:c0:43:35:95:93:e2:
8b:86:e6:70:28:3f:38:57:4b:cf:9d:fc:07:4f:8d:
af:52:5c:9c:ba:86:7f:81:d4:29:e4:7b:11:ef:fe:
ee:5c:9b:9f:af:97:e0:0c:2e:70:f4:6f:ee:ae:15:
54:42:71:ec:97:53:ce:22:a7:86:29:c8:02:aa:29:
0a:af:3d:2d:bd:7a:d3:f8:90:53:3d:b7:af:b3:cf:
2e:0a:fd:4d:c5:be:4d:77:f6:be:75:ab:81:80:b9:
35:37:04:6f:a1:e7:98:02:ea:40:12:20:72:1e:9d:
ce:00:00:58:20:1f:5e:2f:d9:0b:d4:5f:fd:06:46:
da:83:c5:eb:9f:97:63:8b:6b:cd:9a:d6:a0:77:f9:
26:33:40:a5:da:c9:3f:7a:1d:84:33:22:3b:3d:8a:
f3:ff:cf:43:6b:b5:b6:f5:2b:10:40:aa:1a:1d:4f:
e2:12:26:c4:6d:db:fc:e8:3a:1c:3f:56:d1:38:0a:
d6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D1:DE:68:3C:B0:26:2E:C9:F9:AD:F3:B9:CE:BE:D6:67:54:7D:23
X509v3 Authority Key Identifier:
keyid:94:80:8A:6D:DB:34:0D:0A:8A:21:27:C6:4D:A2:8D:77:0E:ED:DE:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/PdHeaDywJi7J-a3zuc6-1mdUfSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.185.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:68:79:e5:a4:41:08:ab:40:52:14:63:6c:99:14:29:c8:7c:
2a:18:7b:35:8e:bc:0a:6b:3f:c8:a1:bb:32:ff:bf:cd:7d:6b:
50:00:92:f1:50:68:72:a5:19:25:66:b4:01:3f:b4:84:5e:04:
79:e1:2e:b4:b4:34:21:f3:02:c2:4b:7e:a1:c7:17:19:70:c1:
19:c1:17:89:24:5f:a8:1c:d8:16:9d:d8:dd:35:a1:3c:8e:e2:
fb:9e:dc:e5:57:f9:d3:41:bc:de:dc:4b:68:2c:51:17:a5:a1:
40:2f:1b:96:94:0d:69:b0:e5:16:5b:c2:8c:4c:f1:df:da:68:
36:4e:f3:19:c4:32:04:3b:b4:68:dc:6e:09:a0:60:75:8d:3c:
36:b7:9d:d2:75:bf:d8:fc:5e:c0:1a:0b:03:5b:5d:be:2c:6f:
2d:f6:85:fc:c1:b2:c1:40:19:cf:bc:7d:24:ba:f1:c1:d6:b1:
1c:ff:3e:fd:a5:55:3c:8e:92:44:a2:72:44:01:af:85:09:94:
d3:48:dd:39:87:a1:e4:a1:a0:cd:50:2b:3f:e4:65:b0:b7:33:
b4:c8:1a:51:44:46:18:d1:44:c6:0a:d4:a7:5e:c3:e5:ee:79:
83:d0:a1:fb:fa:30:a1:59:33:58:42:32:b0:72:ac:94:1b:2e:
c0:31:78:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaKJ0U/VcvFifnls8VYoQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ODA4YTZkZGIzNDBkMGE4YTIxMjdjNjRkYTI4ZDc3MGVl
ZGRlOTMwHhcNMjYwNzAyMTUxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGQxZGU2ODNjYjAyNjJlYzlmOWFkZjNiOWNlYmVkNjY3NTQ3ZDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst+zgItyiVCGvSBY3UrSBYl+ArHX
yWElruE3uCLBXvBBdKBSZ6WRMdOBsegxxfwP02UtOYIAiXRnwtu6q1cApbpgpn/A
QzWVk+KLhuZwKD84V0vPnfwHT42vUlycuoZ/gdQp5HsR7/7uXJufr5fgDC5w9G/u
rhVUQnHsl1POIqeGKcgCqikKrz0tvXrT+JBTPbevs88uCv1Nxb5Nd/a+dauBgLk1
NwRvoeeYAupAEiByHp3OAABYIB9eL9kL1F/9Bkbag8Xrn5dji2vNmtagd/kmM0Cl
2sk/eh2EMyI7PYrz/89Da7W29SsQQKoaHU/iEibEbdv86DocP1bROArWbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD3R3mg8sCYuyfmt87nOvtZnVH0jMB8GA1UdIwQY
MBaAFJSAim3bNA0KiiEnxk2ijXcO7d6TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbElDS2JkczBEUXFLSVNmR1RhS05kdzd0M3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85ZDQyMDMtMmVlZS00MWRlLThkODUt
MDhiZjIyZjY0MDk3LzEvUGRIZWFEeXdKaTdKLWEzenVjNi0xbWRVZlNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85ZDQyMDMtMmVlZS00MWRlLThkODUtMDhiZjIyZjY0MDk3
LzEvbElDS2JkczBEUXFLSVNmR1RhS05kdzd0M3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUW5MA0G
CSqGSIb3DQEBCwUAA4IBAQC0aHnlpEEIq0BSFGNsmRQpyHwqGHs1jrwKaz/Iobsy
/7/NfWtQAJLxUGhypRklZrQBP7SEXgR54S60tDQh8wLCS36hxxcZcMEZwReJJF+o
HNgWndjdNaE8juL7ntzlV/nTQbze3EtoLFEXpaFALxuWlA1psOUWW8KMTPHf2mg2
TvMZxDIEO7Ro3G4JoGB1jTw2t53Sdb/Y/F7AGgsDW12+LG8t9oX8wbLBQBnPvH0k
uvHB1rEc/z79pVU8jpJEonJEAa+FCZTTSN05h6HkoaDNUCs/5GWwtzO0yBpRREYY
0UTGCtSnXsPl7nmD0KH7+jChWTNYQjKwcqyUGy7AMXic
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:36:53 2026 by rpki-client