Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/The51JB1jk7iu3SgU3iebbViaAo.roa
File: The51JB1jk7iu3SgU3iebbViaAo.roa (raw, json)
Hash identifier: IgvjzXkDcI1pUGZYnrs8Dyz1K9/Iv3JYSfz6oucCdSI=
Subject key identifier: 4E:17:B9:D4:90:75:8E:4E:E2:BB:74:A0:53:78:9E:6D:B5:62:68:0A
Certificate issuer: /CN=86b323f500e7c142a41ff9bf543991f0f25dc1b9
Certificate serial: 019F23692EA34EF5E4DDD6193858A5DB12D2
Authority key identifier: 86:B3:23:F5:00:E7:C1:42:A4:1F:F9:BF:54:39:91:F0:F2:5D:C1:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hrMj9QDnwUKkH_m_VDmR8PJdwbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/The51JB1jk7iu3SgU3iebbViaAo.roa
Signing time: Thu 02 Jul 2026 15:18:43 +0000
ROA not before: Thu 02 Jul 2026 15:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58192
IP address blocks: 185.83.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hrMj9QDnwUKkH_m_VDmR8PJdwbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2e:a3:4e:f5:e4:dd:d6:19:38:58:a5:db:12:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b323f500e7c142a41ff9bf543991f0f25dc1b9
Validity
Not Before: Jul 2 15:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e17b9d490758e4ee2bb74a053789e6db562680a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:25:52:8c:f7:96:05:76:79:9b:05:d2:09:0d:
8a:46:d5:f2:85:53:67:7d:b8:07:93:18:dd:40:75:
c3:fd:8a:b1:67:5f:1e:ba:8d:46:4b:71:9a:c1:d6:
39:30:e4:d2:4b:70:78:d8:d5:ca:f6:1d:a8:e1:4a:
a2:67:e7:d4:39:f7:66:02:d0:38:35:cc:ed:dc:99:
83:fb:5c:9f:97:fe:49:2a:fd:16:b6:28:be:6d:4d:
78:52:c0:ad:c2:7d:fe:ff:63:f9:65:e4:10:a4:df:
49:0b:ee:40:ac:0a:f6:70:fd:f7:70:23:b0:7f:1e:
34:56:f0:66:9d:cb:d9:cb:5d:b7:9c:c5:64:63:97:
42:5f:68:71:83:8a:4e:ad:e9:67:9f:3f:b4:63:43:
ae:c1:ef:79:e3:72:8e:a8:7f:d9:24:0d:bc:1a:15:
92:61:fb:35:9c:0f:0c:4a:31:93:8c:4c:53:7e:46:
ec:e7:4e:a2:8e:34:81:12:a9:67:ea:c0:b9:d4:4e:
d7:72:7c:12:d7:fc:1d:72:5e:41:1a:35:54:50:5c:
38:5e:f7:a6:8b:6b:32:13:a0:4d:93:f8:2c:f8:9a:
87:13:b2:f6:1f:9a:9f:ef:39:f7:bc:76:02:9b:74:
88:ee:b6:e1:29:0f:d7:81:81:c4:d7:58:6a:fb:06:
c3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:17:B9:D4:90:75:8E:4E:E2:BB:74:A0:53:78:9E:6D:B5:62:68:0A
X509v3 Authority Key Identifier:
keyid:86:B3:23:F5:00:E7:C1:42:A4:1F:F9:BF:54:39:91:F0:F2:5D:C1:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrMj9QDnwUKkH_m_VDmR8PJdwbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/The51JB1jk7iu3SgU3iebbViaAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.182.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:34:58:82:c2:86:6f:e2:1e:09:fe:b5:60:12:a5:fa:d0:ee:
29:f8:1a:3f:5f:ae:ae:39:9f:27:02:c4:2e:d6:b7:26:48:94:
6e:e5:ac:5c:06:78:20:b7:16:8d:b1:c8:d7:d1:a7:16:99:02:
8b:2f:c1:e2:f2:ae:65:ad:05:76:fa:4d:38:bc:2d:c1:5d:ec:
8d:62:99:c5:dd:a7:ca:d0:1e:d5:bb:b7:35:30:63:37:8b:1a:
9f:49:71:38:9b:69:01:ee:10:b6:5d:2b:9d:ed:4d:87:8b:9d:
e4:a7:2e:81:5b:f8:d5:6b:13:a2:df:3a:4e:42:f9:f8:18:d5:
7b:c3:53:9b:ba:ba:21:ba:d1:b3:5a:9b:31:76:15:4c:fe:7e:
1f:3a:90:72:5d:5b:3b:8b:ea:62:d6:0c:b8:b5:3f:0e:0a:76:
79:3a:80:43:0c:ae:4e:88:ae:16:36:39:ab:59:a6:06:85:6d:
54:66:42:55:85:6c:ec:79:d2:51:44:c2:2c:7a:3a:f8:2d:cb:
d1:b9:d0:bf:4c:10:f0:c5:a4:6b:a7:2c:74:39:78:fd:68:11:
95:37:df:30:76:f9:02:b3:65:6d:af:db:c9:37:19:ee:35:26:
57:81:58:8c:17:b1:97:7d:14:f6:ab:00:8a:0a:c0:4c:9b:1f:
e6:cb:ba:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaS6jTvXk3dYZOFil2xLSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YjMyM2Y1MDBlN2MxNDJhNDFmZjliZjU0Mzk5MWYwZjI1
ZGMxYjkwHhcNMjYwNzAyMTUxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTE3YjlkNDkwNzU4ZTRlZTJiYjc0YTA1Mzc4OWU2ZGI1NjI2ODBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiVSjPeWBXZ5mwXSCQ2KRtXyhVNn
fbgHkxjdQHXD/YqxZ18euo1GS3GawdY5MOTSS3B42NXK9h2o4UqiZ+fUOfdmAtA4
Nczt3JmD+1yfl/5JKv0Wtii+bU14UsCtwn3+/2P5ZeQQpN9JC+5ArAr2cP33cCOw
fx40VvBmncvZy123nMVkY5dCX2hxg4pOrelnnz+0Y0Ouwe9543KOqH/ZJA28GhWS
Yfs1nA8MSjGTjExTfkbs506ijjSBEqln6sC51E7XcnwS1/wdcl5BGjVUUFw4Xvem
i2syE6BNk/gs+JqHE7L2H5qf7zn3vHYCm3SI7rbhKQ/XgYHE11hq+wbD0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE4XudSQdY5O4rt0oFN4nm21YmgKMB8GA1UdIwQY
MBaAFIazI/UA58FCpB/5v1Q5kfDyXcG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHJNajlRRG53VUtrSF9tX1ZEbVI4UEpkd2JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjdlNTYtMDkxNi00N2FjLTg1ODYt
YTkzODhmMzFiNDdlLzEvVGhlNTFKQjFqazdpdTNTZ1UzaWViYlZpYUFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8zZjdlNTYtMDkxNi00N2FjLTg1ODYtYTkzODhmMzFiNDdl
LzEvaHJNajlRRG53VUtrSF9tX1ZEbVI4UEpkd2JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVO2MA0G
CSqGSIb3DQEBCwUAA4IBAQCNNFiCwoZv4h4J/rVgEqX60O4p+Bo/X66uOZ8nAsQu
1rcmSJRu5axcBnggtxaNscjX0acWmQKLL8Hi8q5lrQV2+k04vC3BXeyNYpnF3afK
0B7Vu7c1MGM3ixqfSXE4m2kB7hC2XSud7U2Hi53kpy6BW/jVaxOi3zpOQvn4GNV7
w1OburohutGzWpsxdhVM/n4fOpByXVs7i+pi1gy4tT8OCnZ5OoBDDK5OiK4WNjmr
WaYGhW1UZkJVhWzsedJRRMIsejr4LcvRudC/TBDwxaRrpyx0OXj9aBGVN98wdvkC
s2Vtr9vJNxnuNSZXgViMF7GXfRT2qwCKCsBMmx/my7pk
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:38:23 2026 by rpki-client