Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/f8g99RRZqCoxm5euSeYWZpHjx84.roa
File: f8g99RRZqCoxm5euSeYWZpHjx84.roa (raw, json)
Hash identifier: RAak1S/CpTHbug6ZdRWMP+IfC0d0jFHGr8IO+OZIlxQ=
Subject key identifier: 7F:C8:3D:F5:14:59:A8:2A:31:9B:97:AE:49:E6:16:66:91:E3:C7:CE
Certificate issuer: /CN=6f93bf0c7f3626dc045a98a396d47d335b73fe55
Certificate serial: 019F236934EC5DAB27B970CFE943B14284DD
Authority key identifier: 6F:93:BF:0C:7F:36:26:DC:04:5A:98:A3:96:D4:7D:33:5B:73:FE:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5O_DH82JtwEWpijltR9M1tz_lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/f8g99RRZqCoxm5euSeYWZpHjx84.roa
Signing time: Thu 02 Jul 2026 15:18:44 +0000
ROA not before: Thu 02 Jul 2026 15:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56786
IP address blocks: 185.250.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/b5O_DH82JtwEWpijltR9M1tz_lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/b5O_DH82JtwEWpijltR9M1tz_lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5O_DH82JtwEWpijltR9M1tz_lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:34:ec:5d:ab:27:b9:70:cf:e9:43:b1:42:84:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f93bf0c7f3626dc045a98a396d47d335b73fe55
Validity
Not Before: Jul 2 15:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7fc83df51459a82a319b97ae49e6166691e3c7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:36:a7:ae:8d:46:62:9a:47:da:23:fa:c5:
d9:b1:0e:f9:9e:95:25:49:b2:cc:82:45:ae:07:de:
bc:d7:fc:6d:a3:80:00:ea:6f:d3:cd:78:28:7c:fd:
23:fa:73:b4:db:3e:c9:ef:4d:4a:d9:5c:94:bf:52:
a4:b5:63:c1:6a:e1:2c:b6:c1:6a:0d:a3:44:94:b4:
75:85:dc:83:48:69:83:d6:c1:95:f4:da:03:9d:84:
a8:2b:19:01:5b:8f:ed:46:87:81:56:76:16:72:56:
a6:60:94:df:55:fd:9a:8c:1b:1c:39:24:91:b2:29:
dd:ce:9d:ca:cc:70:5b:d9:be:c0:e5:8e:ff:56:4a:
c1:f0:14:d4:67:2c:c5:2c:72:79:d7:a2:de:f8:61:
5a:df:6a:a7:45:9c:39:4f:d2:d7:f9:b5:06:14:63:
35:53:f6:b0:e6:69:14:07:8d:dc:58:ff:45:d4:88:
84:be:a0:49:59:8a:9f:55:58:d7:55:ac:0f:40:23:
ff:d1:2f:50:de:ab:da:33:0c:2f:bc:5b:f0:96:a2:
a3:11:dd:26:27:d5:f8:07:97:5d:d8:4b:ca:53:59:
1b:8d:9d:7a:e5:c9:0b:98:e0:bf:c1:35:40:9c:20:
0b:72:cf:c8:ce:10:ca:b6:a2:18:d4:33:c8:6a:58:
b4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C8:3D:F5:14:59:A8:2A:31:9B:97:AE:49:E6:16:66:91:E3:C7:CE
X509v3 Authority Key Identifier:
keyid:6F:93:BF:0C:7F:36:26:DC:04:5A:98:A3:96:D4:7D:33:5B:73:FE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5O_DH82JtwEWpijltR9M1tz_lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/f8g99RRZqCoxm5euSeYWZpHjx84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/b5O_DH82JtwEWpijltR9M1tz_lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.64.0/24
Signature Algorithm: sha256WithRSAEncryption
20:34:d7:8b:b6:4f:a8:c1:fe:63:5f:8e:1a:05:c5:44:81:9d:
88:02:4d:80:06:d3:4b:a9:df:8f:7d:e7:da:ed:b6:8c:19:2f:
30:eb:ba:ae:63:59:30:8c:f1:cd:e8:5c:93:f8:9c:f5:90:d3:
3d:44:fa:52:b6:75:ac:94:66:f1:6c:ef:44:ce:65:d0:25:fd:
57:f1:5f:a5:07:bc:5b:bb:52:64:86:34:1b:90:66:fe:45:ae:
bd:77:c7:b3:ce:49:d8:38:91:d1:28:d7:d6:12:aa:c7:39:86:
65:b6:05:91:2a:ef:20:f0:cd:93:cf:7a:52:27:45:68:40:90:
4c:59:bf:9e:e8:97:ec:dc:69:43:cc:2d:98:39:33:e1:5e:d9:
23:fe:4d:1a:e6:65:34:e3:30:4b:8b:4d:0d:82:d7:d7:e0:c1:
6a:f6:dd:4b:64:c4:46:33:78:5f:0d:7a:61:c8:f0:38:d0:e7:
05:9a:5d:e7:b6:eb:00:a2:1b:d4:0c:c1:ac:68:c6:a8:69:c5:
cc:e6:aa:9a:b4:06:55:30:f2:cc:64:75:c9:6b:e1:98:e2:e5:
ed:79:00:ed:ab:26:80:c3:31:a6:54:1e:01:a4:07:57:45:bb:
e8:b1:00:5d:bb:5c:f0:43:8a:2d:ca:a7:32:3c:46:00:76:10:
90:66:49:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaTTsXasnuXDP6UOxQoTdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmOTNiZjBjN2YzNjI2ZGMwNDVhOThhMzk2ZDQ3ZDMzNWI3
M2ZlNTUwHhcNMjYwNzAyMTUxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmM4M2RmNTE0NTlhODJhMzE5Yjk3YWU0OWU2MTY2NjkxZTNjN2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtw2p66NRmKaR9oj+sXZsQ75npUl
SbLMgkWuB9681/xto4AA6m/TzXgofP0j+nO02z7J701K2VyUv1KktWPBauEstsFq
DaNElLR1hdyDSGmD1sGV9NoDnYSoKxkBW4/tRoeBVnYWclamYJTfVf2ajBscOSSR
sindzp3KzHBb2b7A5Y7/VkrB8BTUZyzFLHJ516Le+GFa32qnRZw5T9LX+bUGFGM1
U/aw5mkUB43cWP9F1IiEvqBJWYqfVVjXVawPQCP/0S9Q3qvaMwwvvFvwlqKjEd0m
J9X4B5dd2EvKU1kbjZ165ckLmOC/wTVAnCALcs/IzhDKtqIY1DPIali0FQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH/IPfUUWagqMZuXrknmFmaR48fOMB8GA1UdIwQY
MBaAFG+Tvwx/NibcBFqYo5bUfTNbc/5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjVPX0RIODJKdHdFV3Bpamx0UjlNMXR6X2xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yMjhlZmUtZmYzMC00MzI4LWE5MTUt
MGYzYjZmOTY5OTBiLzEvZjhnOTlSUlpxQ294bTVldVNlWVdacEhqeDg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yMjhlZmUtZmYzMC00MzI4LWE5MTUtMGYzYjZmOTY5OTBi
LzEvYjVPX0RIODJKdHdFV3Bpamx0UjlNMXR6X2xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufpAMA0G
CSqGSIb3DQEBCwUAA4IBAQAgNNeLtk+owf5jX44aBcVEgZ2IAk2ABtNLqd+Pfefa
7baMGS8w67quY1kwjPHN6FyT+Jz1kNM9RPpStnWslGbxbO9EzmXQJf1X8V+lB7xb
u1JkhjQbkGb+Ra69d8ezzknYOJHRKNfWEqrHOYZltgWRKu8g8M2Tz3pSJ0VoQJBM
Wb+e6Jfs3GlDzC2YOTPhXtkj/k0a5mU04zBLi00NgtfX4MFq9t1LZMRGM3hfDXph
yPA40OcFml3ntusAohvUDMGsaMaoacXM5qqatAZVMPLMZHXJa+GY4uXteQDtqyaA
wzGmVB4BpAdXRbvosQBdu1zwQ4otyqcyPEYAdhCQZknV
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:01:04 2026 by rpki-client