Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/81KmG-lJ3a7Q1F_ibU_WeulVwwE.roa
File: 81KmG-lJ3a7Q1F_ibU_WeulVwwE.roa (raw, json)
Hash identifier: Me69eZJlVslUkFLgwCyc3Td1lNW+D4qhLz+x5RfT7yE=
Subject key identifier: F3:52:A6:1B:E9:49:DD:AE:D0:D4:5F:E2:6D:4F:D6:7A:E9:55:C3:01
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019E1CE2F71CE4125C73FD6155CC7EA0DBDB
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/81KmG-lJ3a7Q1F_ibU_WeulVwwE.roa
Signing time: Tue 12 May 2026 15:51:36 +0000
ROA not before: Tue 12 May 2026 15:51:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200017
IP address blocks: 185.242.108.0/24 maxlen: 24
185.242.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:e2:f7:1c:e4:12:5c:73:fd:61:55:cc:7e:a0:db:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: May 12 15:51:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f352a61be949ddaed0d45fe26d4fd67ae955c301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c4:0d:da:69:32:57:04:85:53:dc:d0:f0:04:
9b:51:56:32:e5:30:bd:31:e4:4c:1b:79:a8:3d:b8:
88:6f:39:7a:f4:36:b3:22:7e:a0:98:ba:67:a5:f4:
c4:0a:4b:fd:bb:10:c3:98:fe:12:c4:c5:75:19:c8:
dd:43:33:de:34:b4:1c:38:03:ae:83:e4:97:f8:a7:
ae:0a:33:63:9c:d9:24:fb:f2:80:b7:58:0d:93:2b:
52:21:2a:c1:81:5b:62:d9:57:f8:75:3e:15:06:66:
9d:74:f6:9c:9a:a2:9a:43:d4:b4:3a:10:4e:da:be:
7f:66:12:d1:f4:00:10:1f:27:cb:89:9a:25:da:00:
46:ce:99:0f:2d:08:d7:6f:8a:4c:97:48:68:90:26:
b9:c5:47:fd:ce:89:32:fe:c1:51:86:84:d8:38:2c:
8a:95:da:47:8b:0d:5b:73:f1:2d:b4:e6:a1:74:2b:
4e:23:f5:9e:11:12:69:01:4c:85:6a:6d:49:57:ca:
d9:26:6c:3b:d8:50:13:c5:af:d0:c7:6d:e2:2b:dc:
fe:97:d5:2d:95:a1:e3:d1:16:18:4a:58:3b:5b:b8:
b2:c3:d8:d9:98:78:f7:d8:32:70:ec:a1:a9:41:a2:
0a:af:92:c2:9d:6a:8b:f1:96:56:e6:ef:85:b2:b8:
1b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:52:A6:1B:E9:49:DD:AE:D0:D4:5F:E2:6D:4F:D6:7A:E9:55:C3:01
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/81KmG-lJ3a7Q1F_ibU_WeulVwwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.108.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:f2:90:ca:a1:00:8e:12:47:01:7a:ab:0d:c0:0d:7d:bc:46:
f1:bd:5d:1e:86:9a:ed:f3:3b:e7:f8:66:32:b7:fe:83:4c:ca:
3c:4f:66:11:e7:1e:76:37:94:af:99:f8:5b:a4:7b:8b:1d:5c:
2d:1a:a0:9b:fb:ca:fc:ba:1c:0c:f4:7f:02:62:dd:3e:c7:bd:
cd:15:54:82:1b:24:87:9d:06:5c:62:f8:6a:c3:70:6e:7b:9d:
b0:0f:99:08:5b:93:c1:5a:68:93:e0:5f:cb:45:43:3a:88:78:
1f:74:fa:e5:71:07:b2:a6:85:69:13:14:ea:39:91:d6:b8:e2:
31:96:4c:fb:d2:c8:66:5b:c5:4b:a9:2a:31:58:64:75:6e:81:
fc:b6:cf:60:4a:81:2c:8a:42:6b:8b:12:07:10:b6:68:0e:93:
09:9e:65:d6:b4:4f:49:5b:73:40:74:d8:be:75:1d:b7:64:47:
93:2f:dd:dc:d1:c3:b2:3e:fd:a1:53:53:a7:aa:f8:d5:e3:19:
3a:4a:cf:c6:b6:99:e6:94:4d:8e:5b:40:02:cf:34:5e:cc:df:
67:fc:28:6f:33:2a:32:c1:f5:57:90:09:d5:05:fa:a6:16:a4:
e5:35:36:df:78:43:62:53:ea:cb:3f:2e:31:88:30:57:29:51:
fb:d8:ae:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ4c4vcc5BJcc/1hVcx+oNvbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYwNTEyMTU1MTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzUyYTYxYmU5NDlkZGFlZDBkNDVmZTI2ZDRmZDY3YWU5NTVjMzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsQN2mkyVwSFU9zQ8ASbUVYy5TC9
MeRMG3moPbiIbzl69DazIn6gmLpnpfTECkv9uxDDmP4SxMV1GcjdQzPeNLQcOAOu
g+SX+KeuCjNjnNkk+/KAt1gNkytSISrBgVti2Vf4dT4VBmaddPacmqKaQ9S0OhBO
2r5/ZhLR9AAQHyfLiZol2gBGzpkPLQjXb4pMl0hokCa5xUf9zoky/sFRhoTYOCyK
ldpHiw1bc/EttOahdCtOI/WeERJpAUyFam1JV8rZJmw72FATxa/Qx23iK9z+l9Ut
laHj0RYYSlg7W7iyw9jZmHj32DJw7KGpQaIKr5LCnWqL8ZZW5u+Fsrgb+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPNSphvpSd2u0NRf4m1P1nrpVcMBMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvODFLbUctbEozYTdRMUZfaWJVX1dldWxWd3dFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufJsMA0G
CSqGSIb3DQEBCwUAA4IBAQAO8pDKoQCOEkcBeqsNwA19vEbxvV0ehprt8zvn+GYy
t/6DTMo8T2YR5x52N5SvmfhbpHuLHVwtGqCb+8r8uhwM9H8CYt0+x73NFVSCGySH
nQZcYvhqw3Bue52wD5kIW5PBWmiT4F/LRUM6iHgfdPrlcQeypoVpExTqOZHWuOIx
lkz70shmW8VLqSoxWGR1boH8ts9gSoEsikJrixIHELZoDpMJnmXWtE9JW3NAdNi+
dR23ZEeTL93c0cOyPv2hU1OnqvjV4xk6Ss/GtpnmlE2OW0ACzzRezN9n/ChvMyoy
wfVXkAnVBfqmFqTlNTbfeENiU+rLPy4xiDBXKVH72K7r
-----END CERTIFICATE-----
Generated at Wed May 13 02:20:14 2026 by rpki-client