Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/4s1KFc_pThYjGBdUJLs2Nl1upLE.roa
File: 4s1KFc_pThYjGBdUJLs2Nl1upLE.roa (raw, json)
Hash identifier: 4dYHQlFuSRkjK7GHEQ+aA58N3FDz6pXVboUirj4ugs0=
Subject key identifier: E2:CD:4A:15:CF:E9:4E:16:23:18:17:54:24:BB:36:36:5D:6E:A4:B1
Certificate issuer: /CN=85e4ac1ee58fb016448ddd1ba7a5ba9a48b33ecc
Certificate serial: 019F2368DD75F16B83AE5B76792D3087F09A
Authority key identifier: 85:E4:AC:1E:E5:8F:B0:16:44:8D:DD:1B:A7:A5:BA:9A:48:B3:3E:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/heSsHuWPsBZEjd0bp6W6mkizPsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/4s1KFc_pThYjGBdUJLs2Nl1upLE.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57225
IP address blocks: 193.150.106.0/24 maxlen: 24
2a0a:b400::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/heSsHuWPsBZEjd0bp6W6mkizPsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/heSsHuWPsBZEjd0bp6W6mkizPsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/heSsHuWPsBZEjd0bp6W6mkizPsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:dd:75:f1:6b:83:ae:5b:76:79:2d:30:87:f0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e4ac1ee58fb016448ddd1ba7a5ba9a48b33ecc
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2cd4a15cfe94e162318175424bb36365d6ea4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:68:ff:21:c2:8b:d6:f5:a2:84:76:f2:49:
bd:16:27:0a:e5:bf:a1:c5:59:0e:20:cb:92:cb:ee:
79:99:bb:dd:75:82:b8:0e:af:94:2a:ae:0a:1c:63:
a9:8d:2e:ea:ba:3d:e8:2c:2c:b7:b1:58:f4:76:f9:
10:43:0b:fe:79:77:6c:07:3f:42:02:75:bc:1e:ca:
a1:6a:0f:75:9e:77:0c:f4:58:f4:d5:0c:7a:f7:0e:
08:bf:ac:ef:70:67:e0:e3:e9:df:ed:d0:56:d9:5a:
14:ce:09:38:56:38:b5:2e:98:04:64:c6:ee:65:6e:
36:bc:e1:1a:aa:f5:f6:90:38:61:48:8e:0f:57:75:
c9:33:3d:35:a5:4f:88:aa:18:f8:3b:62:a3:9e:22:
c0:0b:41:ad:0e:e4:54:f1:76:da:5d:99:d5:8e:ed:
f4:09:b8:59:1a:b2:56:16:d8:d2:6e:ee:7f:e3:b6:
4d:69:7a:0f:3f:f6:bb:e5:d2:5d:0f:ef:37:48:28:
0f:47:83:69:4b:c3:87:1d:09:7b:4f:74:d3:70:ed:
dc:16:09:4b:81:b5:0c:36:cf:fe:c9:76:2c:fa:e5:
ff:6f:4d:76:9b:51:d0:60:46:1d:e1:3c:41:6e:c4:
e8:58:84:a7:be:cc:7b:7b:77:4d:94:ab:66:ac:bd:
81:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CD:4A:15:CF:E9:4E:16:23:18:17:54:24:BB:36:36:5D:6E:A4:B1
X509v3 Authority Key Identifier:
keyid:85:E4:AC:1E:E5:8F:B0:16:44:8D:DD:1B:A7:A5:BA:9A:48:B3:3E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/heSsHuWPsBZEjd0bp6W6mkizPsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/4s1KFc_pThYjGBdUJLs2Nl1upLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/heSsHuWPsBZEjd0bp6W6mkizPsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.106.0/24
IPv6:
2a0a:b400::/31
Signature Algorithm: sha256WithRSAEncryption
12:3d:9d:af:91:f7:a9:0c:bd:98:bd:68:68:45:be:3a:ed:69:
92:e7:89:55:33:6f:5d:eb:cf:bc:f2:fe:6d:ff:d3:c1:18:8b:
57:95:bf:4a:11:e2:e2:74:c0:f9:8c:b6:88:da:f8:f8:c7:fd:
7c:aa:74:9d:ae:e2:09:89:3d:87:78:bb:06:7b:14:d5:42:e7:
cd:fe:fe:1d:79:1b:49:88:98:b2:83:3a:a1:e0:6e:f8:68:3e:
bc:f4:dd:75:1d:c3:6c:8f:30:95:1e:8b:94:30:d3:6d:d6:f5:
76:92:33:87:60:2b:64:8c:5b:f4:15:56:75:05:03:aa:cc:91:
51:c8:25:91:99:9b:c1:61:7a:5c:29:4c:7a:1f:9b:29:32:d8:
a4:90:8c:c7:45:fd:fb:e5:13:a8:a2:d8:28:ef:76:f3:f2:da:
ff:e6:eb:12:43:65:04:32:45:90:36:b2:9e:91:80:52:fa:c8:
23:72:55:9d:0d:3b:21:16:a4:e3:dc:c6:03:32:6c:ef:1a:4b:
ba:8a:db:78:1e:f8:c3:72:66:48:bd:a6:81:df:ac:04:5f:1d:
90:fb:49:ee:a4:45:32:00:02:e4:9d:eb:31:2a:1b:8e:da:66:
01:50:ba:6a:07:3e:74:26:bd:08:ba:58:97:45:91:20:0d:91:
46:20:65:27
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaN118WuDrlt2eS0wh/CaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZTRhYzFlZTU4ZmIwMTY0NDhkZGQxYmE3YTViYTlhNDhi
MzNlY2MwHhcNMjYwNzAyMTUxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmNkNGExNWNmZTk0ZTE2MjMxODE3NTQyNGJiMzYzNjVkNmVhNGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueNo/yHCi9b1ooR28km9FicK5b+h
xVkOIMuSy+55mbvddYK4Dq+UKq4KHGOpjS7quj3oLCy3sVj0dvkQQwv+eXdsBz9C
AnW8Hsqhag91nncM9Fj01Qx69w4Iv6zvcGfg4+nf7dBW2VoUzgk4Vji1LpgEZMbu
ZW42vOEaqvX2kDhhSI4PV3XJMz01pU+Iqhj4O2KjniLAC0GtDuRU8XbaXZnVju30
CbhZGrJWFtjSbu5/47ZNaXoPP/a75dJdD+83SCgPR4NpS8OHHQl7T3TTcO3cFglL
gbUMNs/+yXYs+uX/b012m1HQYEYd4TxBbsToWISnvsx7e3dNlKtmrL2BywIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOLNShXP6U4WIxgXVCS7NjZdbqSxMB8GA1UdIwQY
MBaAFIXkrB7lj7AWRI3dG6eluppIsz7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGVTc0h1V1BzQlpFamQwYnA2VzZta2l6UHN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84MzFmNTMtOTBkMS00MjA4LWE2ZDUt
YzVmZTQ0NDIwYzA5LzEvNHMxS0ZjX3BUaFlqR0JkVUpMczJObDF1cExFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84MzFmNTMtOTBkMS00MjA4LWE2ZDUtYzVmZTQ0NDIwYzA5
LzEvaGVTc0h1V1BzQlpFamQwYnA2VzZta2l6UHN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwZZqMA0E
AgACMAcDBQEqCrQAMA0GCSqGSIb3DQEBCwUAA4IBAQASPZ2vkfepDL2YvWhoRb46
7WmS54lVM29d68+88v5t/9PBGItXlb9KEeLidMD5jLaI2vj4x/18qnSdruIJiT2H
eLsGexTVQufN/v4deRtJiJiygzqh4G74aD689N11HcNsjzCVHouUMNNt1vV2kjOH
YCtkjFv0FVZ1BQOqzJFRyCWRmZvBYXpcKUx6H5spMtikkIzHRf375ROootgo73bz
8tr/5usSQ2UEMkWQNrKekYBS+sgjclWdDTshFqTj3MYDMmzvGku6itt4HvjDcmZI
vaaB36wEXx2Q+0nupEUyAALknesxKhuO2mYBULpqBz50Jr0IuliXRZEgDZFGIGUn
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:22 2026 by rpki-client