Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/sYoKDrEnRgGHtlDYciqlZdq_eAc.roa
File: sYoKDrEnRgGHtlDYciqlZdq_eAc.roa (raw, json)
Hash identifier: LBLGerR6KX69J0FuxJLO1fQ5hjhP65hqaDfpUhcq97o=
Subject key identifier: B1:8A:0A:0E:B1:27:46:01:87:B6:50:D8:72:2A:A5:65:DA:BF:78:07
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019DCECC479B1F461FF8E08DFC8E5006762D
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/sYoKDrEnRgGHtlDYciqlZdq_eAc.roa
Signing time: Mon 27 Apr 2026 11:56:27 +0000
ROA not before: Mon 27 Apr 2026 11:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 193.233.130.0/23 maxlen: 24
193.233.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:cc:47:9b:1f:46:1f:f8:e0:8d:fc:8e:50:06:76:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Apr 27 11:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b18a0a0eb127460187b650d8722aa565dabf7807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6c:f4:7c:dd:bb:5d:5c:00:91:4b:af:a7:0c:
ba:d5:13:4b:83:e9:fa:d6:d9:9b:8d:5d:08:d4:5a:
5e:e6:df:c3:0f:50:ac:3f:60:ce:c2:b3:09:6a:6d:
c6:5e:b4:96:d9:d9:92:f2:83:ac:73:e9:3a:f8:c1:
46:50:4a:2a:38:69:49:3f:df:e7:be:a5:ba:fb:26:
34:65:58:d5:bc:ea:a8:ce:45:25:9d:d6:7a:6b:1c:
37:85:80:1a:fa:3d:ef:d6:fa:df:34:9c:43:05:4f:
a1:ba:57:6c:6c:21:5c:62:7c:cc:cf:75:53:93:a3:
95:44:06:72:f1:bc:77:53:89:fd:d8:0d:a1:b4:e6:
65:fc:ca:aa:f3:50:e5:93:49:e9:66:f8:56:07:f0:
74:2c:ad:54:c3:8e:00:90:89:ac:2f:7f:c8:3f:7c:
c6:b6:e5:29:e7:1e:fb:b2:68:fe:fe:60:44:b5:3b:
71:89:be:2d:ef:70:b4:6e:bd:bf:e2:52:05:d4:e3:
6e:e5:ba:23:e2:ac:1c:3e:52:f9:4b:af:06:b9:10:
46:a2:ee:5c:2a:29:c3:45:5a:45:aa:e7:c5:ec:37:
01:56:88:ae:d4:ef:5e:d1:46:24:1b:58:d4:01:f6:
24:d0:e6:ba:c8:81:aa:b0:ee:66:1f:09:79:fb:1d:
3d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8A:0A:0E:B1:27:46:01:87:B6:50:D8:72:2A:A5:65:DA:BF:78:07
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/sYoKDrEnRgGHtlDYciqlZdq_eAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.130.0/23
193.233.202.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:64:da:3c:01:f8:d4:6d:cc:0a:6c:34:47:d0:6e:5b:20:3a:
fa:63:86:29:8c:a6:9b:01:73:21:e3:54:99:97:83:1e:1b:f3:
b5:1f:5a:2f:38:28:3a:6e:2d:9e:3b:13:21:0c:8d:5b:35:37:
1e:25:93:a0:dd:6b:e4:c4:95:92:3d:3c:8d:e0:2c:43:10:25:
31:e5:7d:75:f9:15:f6:0b:11:06:6f:48:01:ab:9c:a9:27:a6:
62:fa:6d:62:94:91:78:02:87:89:c9:c1:e4:9a:d6:de:24:c8:
bd:0c:f3:87:0c:79:7c:20:7d:b4:f0:67:e1:2e:d0:6e:ff:fb:
62:e3:71:33:fd:87:e4:24:cb:c6:f2:53:f8:9a:64:62:e4:c4:
21:50:07:8a:4d:c4:32:c4:70:14:05:9d:f7:5e:76:88:3a:ae:
7d:fe:1b:dc:7d:5f:fc:f2:71:18:13:d7:cf:7a:30:e2:ca:cf:
fb:a0:d6:06:e8:7b:71:a4:2a:98:61:db:c1:25:85:61:7f:a8:
f1:6f:b8:e4:a8:19:62:6c:9f:1f:49:10:6d:15:33:b3:dc:e9:
a0:9b:f2:e9:71:4d:ca:63:71:7c:6f:df:f7:df:d8:2a:26:67:
4a:7c:98:15:54:27:be:e1:f7:30:4c:09:00:8c:b8:27:d9:b3:
26:a6:8b:fd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ3OzEebH0Yf+OCN/I5QBnYtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjYwNDI3MTE1NjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMThhMGEwZWIxMjc0NjAxODdiNjUwZDg3MjJhYTU2NWRhYmY3ODA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmz0fN27XVwAkUuvpwy61RNLg+n6
1tmbjV0I1Fpe5t/DD1CsP2DOwrMJam3GXrSW2dmS8oOsc+k6+MFGUEoqOGlJP9/n
vqW6+yY0ZVjVvOqozkUlndZ6axw3hYAa+j3v1vrfNJxDBU+huldsbCFcYnzMz3VT
k6OVRAZy8bx3U4n92A2htOZl/Mqq81Dlk0npZvhWB/B0LK1Uw44AkImsL3/IP3zG
tuUp5x77smj+/mBEtTtxib4t73C0br2/4lIF1ONu5boj4qwcPlL5S68GuRBGou5c
KinDRVpFqufF7DcBVoiu1O9e0UYkG1jUAfYk0Oa6yIGqsO5mHwl5+x09dQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLGKCg6xJ0YBh7ZQ2HIqpWXav3gHMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvc1lvS0RyRW5SZ0dIdGxEWWNpcWxaZHFfZUFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwemCAwQB
wenKMA0GCSqGSIb3DQEBCwUAA4IBAQBfZNo8AfjUbcwKbDRH0G5bIDr6Y4YpjKab
AXMh41SZl4MeG/O1H1ovOCg6bi2eOxMhDI1bNTceJZOg3WvkxJWSPTyN4CxDECUx
5X11+RX2CxEGb0gBq5ypJ6Zi+m1ilJF4AoeJycHkmtbeJMi9DPOHDHl8IH208Gfh
LtBu//ti43Ez/YfkJMvG8lP4mmRi5MQhUAeKTcQyxHAUBZ33XnaIOq59/hvcfV/8
8nEYE9fPejDiys/7oNYG6HtxpCqYYdvBJYVhf6jxb7jkqBlibJ8fSRBtFTOz3Omg
m/LpcU3KY3F8b9/339gqJmdKfJgVVCe+4fcwTAkAjLgn2bMmpov9
-----END CERTIFICATE-----
Generated at Wed May 13 01:14:35 2026 by rpki-client