Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/oThXb4QmTGdzVtthRGYRVzspjNY.roa
File: oThXb4QmTGdzVtthRGYRVzspjNY.roa (raw, json)
Hash identifier: vrCmZWsAWrsHQ4ME8ZX38nmpmr/rd33lideKndjp8sU=
Subject key identifier: A1:38:57:6F:84:26:4C:67:73:56:DB:61:44:66:11:57:3B:29:8C:D6
Certificate issuer: /CN=94808a6ddb340d0a8a2127c64da28d770eedde93
Certificate serial: 019F2368A0DBC1E8C0D46520B61DF6C2C44A
Authority key identifier: 94:80:8A:6D:DB:34:0D:0A:8A:21:27:C6:4D:A2:8D:77:0E:ED:DE:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/oThXb4QmTGdzVtthRGYRVzspjNY.roa
Signing time: Thu 02 Jul 2026 15:18:07 +0000
ROA not before: Thu 02 Jul 2026 15:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59974
IP address blocks: 185.69.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a0:db:c1:e8:c0:d4:65:20:b6:1d:f6:c2:c4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94808a6ddb340d0a8a2127c64da28d770eedde93
Validity
Not Before: Jul 2 15:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a138576f84264c677356db61446611573b298cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:8f:cc:52:00:31:c3:2b:86:30:4b:af:d1:
ee:f7:1e:62:67:5f:d0:55:2b:30:0c:ca:3d:59:95:
e8:ee:af:b9:d6:84:08:84:4b:80:c7:f8:90:2a:3f:
b7:ae:b2:4f:31:c6:11:17:e2:a6:be:24:e3:00:3d:
f1:96:b3:7c:ec:ab:d6:3c:80:ea:e7:b9:2a:a1:d4:
df:a0:26:5c:d8:90:da:c3:c6:04:c6:09:0d:c2:60:
13:50:05:5d:2d:c9:1f:07:83:38:81:b4:b8:31:fb:
b5:be:40:30:4f:6a:a5:a6:ad:dd:73:d5:67:18:22:
06:57:8a:b6:35:cf:15:d7:36:51:35:9f:c8:4f:f9:
08:ad:24:af:b8:3a:54:1a:94:90:67:1d:19:e4:36:
32:7c:cc:53:03:da:0c:b7:ef:62:32:4b:f1:a7:34:
79:b7:56:ff:95:01:9e:67:75:96:df:98:60:9f:e0:
af:99:73:15:fa:4b:14:03:af:86:cb:2c:12:38:21:
e9:7e:90:b2:cb:c9:ff:77:ac:9f:68:4c:ee:b4:a6:
3e:f2:52:15:34:38:f2:d8:d8:37:bc:12:0c:f4:5f:
84:25:d8:04:67:a9:b4:10:8b:b0:46:12:90:86:8f:
9c:fc:1e:1d:3a:81:0b:9f:59:ce:75:45:9c:91:05:
45:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:38:57:6F:84:26:4C:67:73:56:DB:61:44:66:11:57:3B:29:8C:D6
X509v3 Authority Key Identifier:
keyid:94:80:8A:6D:DB:34:0D:0A:8A:21:27:C6:4D:A2:8D:77:0E:ED:DE:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/oThXb4QmTGdzVtthRGYRVzspjNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.186.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:48:e3:97:bb:9c:c6:42:b0:f3:1c:ff:c0:ff:4c:6d:57:8e:
92:b3:d0:95:43:65:97:60:3c:07:ab:1a:45:e1:8b:ac:92:4b:
d4:8b:9d:2d:6f:87:f6:76:fd:3d:ab:f9:ab:e4:5b:47:69:de:
8e:7f:07:f9:76:dc:76:b7:ba:c1:7d:0b:b3:33:94:43:ab:35:
e7:90:d4:5c:7e:61:68:ef:a4:48:14:98:ae:70:92:2c:2e:39:
5e:38:63:4a:b0:7a:b5:55:7b:df:cf:63:7c:b7:2f:ca:e0:7b:
c0:ab:db:35:56:09:47:1d:12:32:83:52:a7:dd:da:0c:aa:2c:
b3:a5:dd:fc:db:c3:ba:a5:34:ad:9b:51:84:08:8d:b3:00:ba:
ab:66:1f:11:b5:3d:84:ef:1b:a2:d9:5b:a1:48:ba:c6:30:55:
b6:b1:f5:9b:6b:f0:51:45:f6:ab:37:61:83:3d:aa:3d:fa:c3:
a2:10:5c:0a:ce:f0:ed:7f:8d:cd:e2:b3:9e:8a:1e:d8:e3:1e:
84:39:aa:81:09:5a:e7:4d:00:9b:44:1e:b5:f5:18:4d:e6:58:
02:ca:76:1f:c2:41:1c:1b:d4:8d:9b:60:3f:84:28:ae:09:4b:
6d:1d:7d:1d:af:df:9f:5b:d4:cd:15:8f:ea:7c:a3:bb:3e:75:
bd:b6:76:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaKDbwejA1GUgth32wsRKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ODA4YTZkZGIzNDBkMGE4YTIxMjdjNjRkYTI4ZDc3MGVl
ZGRlOTMwHhcNMjYwNzAyMTUxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTM4NTc2Zjg0MjY0YzY3NzM1NmRiNjE0NDY2MTE1NzNiMjk4Y2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3KPzFIAMcMrhjBLr9Hu9x5iZ1/Q
VSswDMo9WZXo7q+51oQIhEuAx/iQKj+3rrJPMcYRF+KmviTjAD3xlrN87KvWPIDq
57kqodTfoCZc2JDaw8YExgkNwmATUAVdLckfB4M4gbS4Mfu1vkAwT2qlpq3dc9Vn
GCIGV4q2Nc8V1zZRNZ/IT/kIrSSvuDpUGpSQZx0Z5DYyfMxTA9oMt+9iMkvxpzR5
t1b/lQGeZ3WW35hgn+CvmXMV+ksUA6+GyywSOCHpfpCyy8n/d6yfaEzutKY+8lIV
NDjy2Ng3vBIM9F+EJdgEZ6m0EIuwRhKQho+c/B4dOoELn1nOdUWckQVFQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKE4V2+EJkxnc1bbYURmEVc7KYzWMB8GA1UdIwQY
MBaAFJSAim3bNA0KiiEnxk2ijXcO7d6TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbElDS2JkczBEUXFLSVNmR1RhS05kdzd0M3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85ZDQyMDMtMmVlZS00MWRlLThkODUt
MDhiZjIyZjY0MDk3LzEvb1RoWGI0UW1UR2R6VnR0aFJHWVJWenNwak5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85ZDQyMDMtMmVlZS00MWRlLThkODUtMDhiZjIyZjY0MDk3
LzEvbElDS2JkczBEUXFLSVNmR1RhS05kdzd0M3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUW6MA0G
CSqGSIb3DQEBCwUAA4IBAQBMSOOXu5zGQrDzHP/A/0xtV46Ss9CVQ2WXYDwHqxpF
4YuskkvUi50tb4f2dv09q/mr5FtHad6Ofwf5dtx2t7rBfQuzM5RDqzXnkNRcfmFo
76RIFJiucJIsLjleOGNKsHq1VXvfz2N8ty/K4HvAq9s1VglHHRIyg1Kn3doMqiyz
pd3828O6pTStm1GECI2zALqrZh8RtT2E7xui2VuhSLrGMFW2sfWba/BRRfarN2GD
Pao9+sOiEFwKzvDtf43N4rOeih7Y4x6EOaqBCVrnTQCbRB619RhN5lgCynYfwkEc
G9SNm2A/hCiuCUttHX0dr9+fW9TNFY/qfKO7PnW9tnbR
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:04 2026 by rpki-client