Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/sE2DJdecQ1HKhPIOUC82ABcBhGY.roa
File: sE2DJdecQ1HKhPIOUC82ABcBhGY.roa (raw, json)
Hash identifier: eFJxsPh4ccg39ESyCWLgSbWkuQ3hGua2qxkBmSJajRI=
Subject key identifier: B0:4D:83:25:D7:9C:43:51:CA:84:F2:0E:50:2F:36:00:17:01:84:66
Certificate issuer: /CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Certificate serial: 019F27F03D479DE51E428CEBC81D848AA890
Authority key identifier: 05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/sE2DJdecQ1HKhPIOUC82ABcBhGY.roa
Signing time: Fri 03 Jul 2026 12:24:43 +0000
ROA not before: Fri 03 Jul 2026 12:24:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197912
IP address blocks: 128.127.168.0/21 maxlen: 21
128.127.168.0/24 maxlen: 24
128.127.169.0/24 maxlen: 24
128.127.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:f0:3d:47:9d:e5:1e:42:8c:eb:c8:1d:84:8a:a8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Validity
Not Before: Jul 3 12:24:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b04d8325d79c4351ca84f20e502f360017018466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:94:c5:96:51:3b:76:7f:3b:8c:72:94:a5:fd:
ff:ee:a1:65:56:10:19:28:2e:aa:de:59:da:5d:34:
5b:13:56:f1:23:5b:04:7c:bd:8f:d3:f6:24:5a:0e:
8f:f0:90:61:3e:ac:40:70:05:7d:6d:7d:50:90:37:
d2:78:5a:ed:14:8a:c2:c6:a6:35:7a:47:74:d8:e9:
9d:0e:1a:02:42:c8:69:83:dd:bb:b3:4f:10:f0:b5:
07:d8:8d:66:b2:fe:92:ec:68:9d:15:3c:5e:29:46:
c4:70:f8:a3:72:93:17:17:9f:ff:3a:ee:a8:2b:c1:
4b:5c:81:26:fd:bc:ed:d7:4b:57:7c:4d:51:76:1a:
16:bc:2e:37:6c:01:b1:e0:58:9b:c7:34:8b:60:ff:
a3:de:cf:1f:b9:ce:e1:74:f5:26:5b:d7:a1:5b:6d:
82:61:6e:c5:f8:2f:4c:9d:b0:4e:f5:bf:94:a6:53:
fe:1a:7d:b6:16:32:67:6b:b0:9c:49:34:96:d0:f3:
6e:33:a6:3d:7b:5d:9f:33:7f:3f:d1:19:ed:17:fe:
12:fc:78:8d:a7:e9:c1:90:a5:48:6f:a8:00:89:6c:
ed:fb:17:53:00:c5:4c:bc:7a:49:95:4d:76:e7:32:
c9:46:ee:dc:99:b4:7a:1d:60:e3:d9:9f:37:12:50:
55:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4D:83:25:D7:9C:43:51:CA:84:F2:0E:50:2F:36:00:17:01:84:66
X509v3 Authority Key Identifier:
keyid:05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/sE2DJdecQ1HKhPIOUC82ABcBhGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.127.168.0/21
Signature Algorithm: sha256WithRSAEncryption
16:85:d1:13:a6:1c:2d:76:39:00:eb:31:1a:ca:0b:cc:20:5e:
1e:83:37:c9:00:74:da:20:4e:e4:9a:f3:8b:5e:a1:97:7b:75:
21:a8:79:41:b7:78:0f:34:05:69:09:0f:80:12:74:41:de:19:
37:97:02:49:f5:27:71:08:6b:2e:01:d8:c6:9e:52:c0:cb:b6:
2f:d5:06:4c:62:54:17:39:fb:88:6a:1e:19:fe:4f:5b:7c:91:
c2:c6:2c:4c:a0:79:e1:18:71:00:7f:69:2c:b2:90:bc:4b:3d:
d5:63:e4:da:8a:5e:cc:0b:e1:c5:06:a7:12:f6:c0:04:fa:99:
ce:d0:35:d3:01:28:4b:3b:03:cf:e9:ff:ed:95:1a:02:e7:71:
85:1f:44:c7:9a:30:22:02:35:5d:61:46:76:6f:6e:cc:3d:df:
08:4d:7f:1c:df:8e:2a:1e:40:82:8b:d3:b2:27:0d:57:71:e5:
20:82:d1:5e:bc:f7:ec:79:08:81:4c:02:2b:2d:78:ec:f7:23:
c7:7a:18:1c:8e:1b:3a:7c:28:15:e4:ee:88:a5:4d:46:43:1f:
5b:c1:7e:43:e1:4f:ad:1b:6e:7f:fd:32:b7:22:2e:c2:2d:20:
43:c9:57:bc:40:f8:b3:a1:81:cb:07:68:9f:08:1f:43:16:59:
05:83:26:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8n8D1HneUeQozryB2EiqiQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MGIxZTM4YzcwNGJkMDhlM2I5ZDE3ZjU5MDM2N2IxZDFm
MDNjNGEwHhcNMjYwNzAzMTIyNDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDRkODMyNWQ3OWM0MzUxY2E4NGYyMGU1MDJmMzYwMDE3MDE4NDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJTFllE7dn87jHKUpf3/7qFlVhAZ
KC6q3lnaXTRbE1bxI1sEfL2P0/YkWg6P8JBhPqxAcAV9bX1QkDfSeFrtFIrCxqY1
ekd02OmdDhoCQshpg927s08Q8LUH2I1msv6S7GidFTxeKUbEcPijcpMXF5//Ou6o
K8FLXIEm/bzt10tXfE1RdhoWvC43bAGx4FibxzSLYP+j3s8fuc7hdPUmW9ehW22C
YW7F+C9MnbBO9b+UplP+Gn22FjJna7CcSTSW0PNuM6Y9e12fM38/0RntF/4S/HiN
p+nBkKVIb6gAiWzt+xdTAMVMvHpJlU125zLJRu7cmbR6HWDj2Z83ElBVXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLBNgyXXnENRyoTyDlAvNgAXAYRmMB8GA1UdIwQY
MBaAFAULHjjHBL0I47nRf1kDZ7HR8DxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlFzZU9NY0V2UWpqdWRGX1dRTm5zZEh3UEVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8zY2M5YjQtMWVmZi00OGM5LWIyZjYt
YTAxZTllNmRjYmYyLzEvc0UyREpkZWNRMUhLaFBJT1VDODJBQmNCaEdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8zY2M5YjQtMWVmZi00OGM5LWIyZjYtYTAxZTllNmRjYmYy
LzEvQlFzZU9NY0V2UWpqdWRGX1dRTm5zZEh3UEVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgH+oMA0G
CSqGSIb3DQEBCwUAA4IBAQAWhdETphwtdjkA6zEaygvMIF4egzfJAHTaIE7kmvOL
XqGXe3UhqHlBt3gPNAVpCQ+AEnRB3hk3lwJJ9SdxCGsuAdjGnlLAy7Yv1QZMYlQX
OfuIah4Z/k9bfJHCxixMoHnhGHEAf2ksspC8Sz3VY+Tail7MC+HFBqcS9sAE+pnO
0DXTAShLOwPP6f/tlRoC53GFH0THmjAiAjVdYUZ2b27MPd8ITX8c344qHkCCi9Oy
Jw1XceUggtFevPfseQiBTAIrLXjs9yPHehgcjhs6fCgV5O6IpU1GQx9bwX5D4U+t
G25//TK3Ii7CLSBDyVe8QPizoYHLB2ifCB9DFlkFgyaJ
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:14 2026 by rpki-client