Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/nBuGkgnRBT8Qjm-TUyDH9_cSUdU.roa
File: nBuGkgnRBT8Qjm-TUyDH9_cSUdU.roa (raw, json)
Hash identifier: h48y87G6eR9F9kAAK7RxKWZLvvNL/xDbVjxHO1JHOG4=
Subject key identifier: 9C:1B:86:92:09:D1:05:3F:10:8E:6F:93:53:20:C7:F7:F7:12:51:D5
Certificate issuer: /CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Certificate serial: 019F18173EB47078CD9B0BB01EB23D9004B6
Authority key identifier: A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/nBuGkgnRBT8Qjm-TUyDH9_cSUdU.roa
Signing time: Tue 30 Jun 2026 10:33:24 +0000
ROA not before: Tue 30 Jun 2026 10:33:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207935
IP address blocks: 185.234.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:17:3e:b4:70:78:cd:9b:0b:b0:1e:b2:3d:90:04:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Validity
Not Before: Jun 30 10:33:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c1b869209d1053f108e6f935320c7f7f71251d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:e7:3a:9e:1c:37:8b:ba:48:33:83:7a:8b:
2c:f9:b6:37:f2:92:da:2e:50:3d:97:01:bb:8e:f3:
f4:11:30:13:eb:ba:05:41:20:30:7e:90:82:95:c5:
80:c7:21:64:66:c6:e0:6b:68:26:11:74:e4:f0:9a:
04:2d:38:57:47:bb:84:4e:b8:e6:3c:90:ab:34:3f:
c3:5b:72:67:6e:02:06:9e:38:d4:6b:87:74:3e:50:
08:e2:07:32:31:37:ad:7d:6a:2f:4e:04:a0:80:d7:
e5:57:6d:69:ef:ca:26:8d:4b:23:08:ea:c9:fc:40:
10:20:d6:60:b1:3a:49:c0:93:54:ec:c9:4b:da:7d:
81:46:13:66:b6:28:95:20:47:5f:ec:b1:af:32:89:
55:e8:fd:9a:7b:65:8e:33:50:ea:f3:42:3b:fa:7c:
a3:36:6f:fc:f5:80:58:4d:ff:60:22:b3:19:bf:8b:
5f:c9:8f:d3:3d:ad:4f:00:ce:aa:04:8a:fd:fb:47:
05:9f:46:e1:72:e8:68:b7:6a:86:f8:06:a8:ba:36:
fc:71:4a:47:54:c6:bc:ac:21:f0:32:b4:3b:5a:24:
9d:61:70:04:31:52:19:d3:ba:35:a2:12:57:ab:ee:
18:fc:6f:78:dd:cc:ca:7a:ce:b2:ee:b0:b3:0a:dd:
8b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1B:86:92:09:D1:05:3F:10:8E:6F:93:53:20:C7:F7:F7:12:51:D5
X509v3 Authority Key Identifier:
keyid:A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/nBuGkgnRBT8Qjm-TUyDH9_cSUdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.119.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:cf:4e:27:cc:8d:10:27:20:bf:ee:95:6a:35:1d:c1:7c:33:
06:c0:98:93:c4:93:27:69:02:ad:bd:6c:6f:1f:55:24:4e:6e:
90:64:d1:24:89:90:c6:47:8f:57:da:66:ab:5a:22:68:b7:88:
58:2f:5e:97:42:60:d3:40:32:04:6f:b6:bc:c0:7a:46:d0:fd:
47:66:8e:bb:8d:e6:42:c1:6e:1b:31:10:be:a4:c7:c0:d1:6b:
75:c2:92:49:75:85:03:38:13:9b:b5:76:a5:71:f6:3a:d0:cb:
7c:cf:1a:d7:72:f1:4b:34:b2:53:68:2b:7b:f6:b5:2d:7e:04:
27:58:6e:23:8f:08:c8:d4:00:ca:e0:34:ff:26:c3:5c:59:0c:
25:be:1c:3a:8c:1a:4b:b6:3a:21:22:5f:3a:52:ce:9b:b7:e2:
c5:0f:23:e3:fb:5e:71:ae:3c:e0:67:29:fc:2a:0f:18:df:01:
f8:5a:fe:c9:54:09:f4:87:d4:f7:1e:e6:fc:96:f6:af:1d:26:
91:4e:24:bd:11:f1:48:7c:67:2e:bd:15:de:6d:49:82:8e:55:
a1:27:bc:f8:87:dd:af:45:86:14:6b:df:3b:48:d8:71:44:92:
d3:a9:a5:4c:62:d6:31:8b:35:b0:7c:07:51:9a:6c:b3:95:2c:
af:0a:10:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8YFz60cHjNmwuwHrI9kAS2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyY2JlOWFiYTFmZjc1NjRkOTEzZWQ3ODY3MmUzMzcxYjdm
MzU4MjQwHhcNMjYwNjMwMTAzMzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzFiODY5MjA5ZDEwNTNmMTA4ZTZmOTM1MzIwYzdmN2Y3MTI1MWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEXnOp4cN4u6SDODeoss+bY38pLa
LlA9lwG7jvP0ETAT67oFQSAwfpCClcWAxyFkZsbga2gmEXTk8JoELThXR7uETrjm
PJCrND/DW3JnbgIGnjjUa4d0PlAI4gcyMTetfWovTgSggNflV21p78omjUsjCOrJ
/EAQINZgsTpJwJNU7MlL2n2BRhNmtiiVIEdf7LGvMolV6P2ae2WOM1Dq80I7+nyj
Nm/89YBYTf9gIrMZv4tfyY/TPa1PAM6qBIr9+0cFn0bhcuhot2qG+Aaoujb8cUpH
VMa8rCHwMrQ7WiSdYXAEMVIZ07o1ohJXq+4Y/G943czKes6y7rCzCt2LPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJwbhpIJ0QU/EI5vk1Mgx/f3ElHVMB8GA1UdIwQY
MBaAFKLL6auh/3Vk2RPteGcuM3G381gkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3N2cHE2SF9kV1RaRS0xNFp5NHpjYmZ6V0NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80MDhlODMtNTMwZC00NDYyLWIxYzkt
ZGYzMjRjNGM2ZWVkLzEvbkJ1R2tnblJCVDhRam0tVFV5REg5X2NTVWRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS80MDhlODMtNTMwZC00NDYyLWIxYzktZGYzMjRjNGM2ZWVk
LzEvb3N2cHE2SF9kV1RaRS0xNFp5NHpjYmZ6V0NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuep3MA0G
CSqGSIb3DQEBCwUAA4IBAQCOz04nzI0QJyC/7pVqNR3BfDMGwJiTxJMnaQKtvWxv
H1UkTm6QZNEkiZDGR49X2marWiJot4hYL16XQmDTQDIEb7a8wHpG0P1HZo67jeZC
wW4bMRC+pMfA0Wt1wpJJdYUDOBObtXalcfY60Mt8zxrXcvFLNLJTaCt79rUtfgQn
WG4jjwjI1ADK4DT/JsNcWQwlvhw6jBpLtjohIl86Us6bt+LFDyPj+15xrjzgZyn8
Kg8Y3wH4Wv7JVAn0h9T3Hub8lvavHSaRTiS9EfFIfGcuvRXebUmCjlWhJ7z4h92v
RYYUa987SNhxRJLTqaVMYtYxizWwfAdRmmyzlSyvChBG
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:54:33 2026 by rpki-client