Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/aoK4O5p5TThsIV3yaJN8jIRv9XE.roa
File: aoK4O5p5TThsIV3yaJN8jIRv9XE.roa (raw, json)
Hash identifier: nmrjfUmKSW8e+KfYJ4nX5j5UtlDSvUEZyvXS5XHSEm0=
Subject key identifier: 6A:82:B8:3B:9A:79:4D:38:6C:21:5D:F2:68:93:7C:8C:84:6F:F5:71
Certificate issuer: /CN=86b323f500e7c142a41ff9bf543991f0f25dc1b9
Certificate serial: 019F23692F81B4C401DFDE3A448C418C12E2
Authority key identifier: 86:B3:23:F5:00:E7:C1:42:A4:1F:F9:BF:54:39:91:F0:F2:5D:C1:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hrMj9QDnwUKkH_m_VDmR8PJdwbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/aoK4O5p5TThsIV3yaJN8jIRv9XE.roa
Signing time: Thu 02 Jul 2026 15:18:43 +0000
ROA not before: Thu 02 Jul 2026 15:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216054
IP address blocks: 185.83.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hrMj9QDnwUKkH_m_VDmR8PJdwbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2f:81:b4:c4:01:df:de:3a:44:8c:41:8c:12:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b323f500e7c142a41ff9bf543991f0f25dc1b9
Validity
Not Before: Jul 2 15:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a82b83b9a794d386c215df268937c8c846ff571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:57:e1:82:7c:75:a4:78:af:5b:70:90:f9:97:
46:65:1a:ab:63:d6:d5:f4:f9:08:a0:7a:32:82:fb:
e9:32:b8:6a:73:02:fc:62:99:bd:38:d3:ae:35:db:
25:6b:d5:37:a2:c8:9c:30:19:8a:c5:90:68:87:d0:
08:4d:35:2c:3a:1c:db:25:a8:52:5e:30:ee:17:3e:
0f:93:7f:16:c0:b2:49:71:8c:70:80:b3:34:75:83:
5d:31:da:d9:7a:50:4b:43:2f:0b:09:e6:7d:9a:20:
9c:76:57:7a:c1:a4:7b:4f:42:fb:42:54:03:7a:9c:
b0:79:00:35:8a:54:da:e6:5c:3b:ee:23:57:1c:92:
83:7c:0f:a7:8c:4b:2f:95:4f:8d:b3:20:4b:4b:97:
03:8f:c5:3a:24:3c:88:7d:5b:83:e0:6b:3b:8c:fa:
6c:2b:11:cf:bc:84:c4:57:e5:91:78:ec:c0:ab:cf:
78:55:6b:a3:2c:6a:c2:4f:f9:f8:15:77:cf:60:0e:
45:e5:96:3b:90:db:27:cc:e9:8d:ea:de:9c:d0:7e:
d4:5e:e1:bc:48:b6:e9:51:41:85:8e:85:9c:0e:ef:
a3:03:19:cc:09:a7:0b:66:73:63:42:dc:55:36:fb:
90:df:cc:bb:08:d1:3a:1c:80:f0:af:81:b4:08:3d:
cf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:82:B8:3B:9A:79:4D:38:6C:21:5D:F2:68:93:7C:8C:84:6F:F5:71
X509v3 Authority Key Identifier:
keyid:86:B3:23:F5:00:E7:C1:42:A4:1F:F9:BF:54:39:91:F0:F2:5D:C1:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrMj9QDnwUKkH_m_VDmR8PJdwbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/aoK4O5p5TThsIV3yaJN8jIRv9XE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.182.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:96:4d:69:d6:4e:64:26:68:b0:d6:29:5d:9a:ed:0d:e4:68:
0b:77:fc:da:15:17:20:8b:9d:1e:aa:52:8c:6d:6e:d9:11:99:
bc:46:01:8f:bc:9f:e7:21:10:b6:d9:1f:1e:82:e6:5e:86:b6:
50:99:00:71:76:13:80:54:1a:3b:aa:81:de:38:c3:d4:4c:f5:
6c:e5:00:63:ee:68:aa:1b:21:5f:50:f9:b8:5c:5c:f0:30:af:
b0:17:13:18:3f:d5:94:12:24:d9:fb:4e:55:0f:58:3c:4c:99:
ad:1d:f4:5f:73:cb:9a:f3:ab:9f:a4:fb:fe:6f:59:f3:3c:98:
8b:ac:b7:b2:21:9f:bb:6f:f7:56:83:e1:d5:3d:81:75:cd:a3:
cb:c1:7f:7f:58:13:3e:f3:cb:fe:74:89:5b:2c:64:52:c5:80:
42:89:78:a7:0d:83:d9:92:99:57:fd:c0:85:fa:73:27:4a:57:
a2:58:6e:a7:8a:46:06:f9:4d:27:26:57:37:2a:92:97:99:ca:
78:9b:5a:b0:e0:e0:c0:cd:59:d5:25:bc:44:5c:f0:a0:29:6f:
b9:d7:fb:f3:cb:1b:36:8f:56:75:0d:d3:e0:4c:47:d1:56:e5:
b5:1f:fb:4e:3e:39:d2:d5:8a:1b:a2:a6:9a:4e:17:78:91:a3:
f1:b1:13:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaS+BtMQB3946RIxBjBLiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YjMyM2Y1MDBlN2MxNDJhNDFmZjliZjU0Mzk5MWYwZjI1
ZGMxYjkwHhcNMjYwNzAyMTUxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTgyYjgzYjlhNzk0ZDM4NmMyMTVkZjI2ODkzN2M4Yzg0NmZmNTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlfhgnx1pHivW3CQ+ZdGZRqrY9bV
9PkIoHoygvvpMrhqcwL8Ypm9ONOuNdsla9U3osicMBmKxZBoh9AITTUsOhzbJahS
XjDuFz4Pk38WwLJJcYxwgLM0dYNdMdrZelBLQy8LCeZ9miCcdld6waR7T0L7QlQD
epyweQA1ilTa5lw77iNXHJKDfA+njEsvlU+NsyBLS5cDj8U6JDyIfVuD4Gs7jPps
KxHPvITEV+WReOzAq894VWujLGrCT/n4FXfPYA5F5ZY7kNsnzOmN6t6c0H7UXuG8
SLbpUUGFjoWcDu+jAxnMCacLZnNjQtxVNvuQ38y7CNE6HIDwr4G0CD3PRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGqCuDuaeU04bCFd8miTfIyEb/VxMB8GA1UdIwQY
MBaAFIazI/UA58FCpB/5v1Q5kfDyXcG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHJNajlRRG53VUtrSF9tX1ZEbVI4UEpkd2JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjdlNTYtMDkxNi00N2FjLTg1ODYt
YTkzODhmMzFiNDdlLzEvYW9LNE81cDVUVGhzSVYzeWFKTjhqSVJ2OVhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8zZjdlNTYtMDkxNi00N2FjLTg1ODYtYTkzODhmMzFiNDdl
LzEvaHJNajlRRG53VUtrSF9tX1ZEbVI4UEpkd2JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVO2MA0G
CSqGSIb3DQEBCwUAA4IBAQCelk1p1k5kJmiw1ildmu0N5GgLd/zaFRcgi50eqlKM
bW7ZEZm8RgGPvJ/nIRC22R8eguZehrZQmQBxdhOAVBo7qoHeOMPUTPVs5QBj7miq
GyFfUPm4XFzwMK+wFxMYP9WUEiTZ+05VD1g8TJmtHfRfc8ua86ufpPv+b1nzPJiL
rLeyIZ+7b/dWg+HVPYF1zaPLwX9/WBM+88v+dIlbLGRSxYBCiXinDYPZkplX/cCF
+nMnSleiWG6nikYG+U0nJlc3KpKXmcp4m1qw4ODAzVnVJbxEXPCgKW+51/vzyxs2
j1Z1DdPgTEfRVuW1H/tOPjnS1YoboqaaThd4kaPxsRPN
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:13:36 2026 by rpki-client