Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/t3aKyQAZqp0JpNY9WkTBO5wmV88.roa
File: t3aKyQAZqp0JpNY9WkTBO5wmV88.roa (raw, json)
Hash identifier: 2JKrAMaSBOfAdSssyHnAfVhbKUiXcGPrBZgPHZSrc8A=
Subject key identifier: B7:76:8A:C9:00:19:AA:9D:09:A4:D6:3D:5A:44:C1:3B:9C:26:57:CF
Certificate issuer: /CN=f284bb7958587a60599de173b4e85a0c9491a1a4
Certificate serial: 019F236888B13A175DF564F8D4792666F053
Authority key identifier: F2:84:BB:79:58:58:7A:60:59:9D:E1:73:B4:E8:5A:0C:94:91:A1:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oS7eVhYemBZneFztOhaDJSRoaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/t3aKyQAZqp0JpNY9WkTBO5wmV88.roa
Signing time: Thu 02 Jul 2026 15:18:01 +0000
ROA not before: Thu 02 Jul 2026 15:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60086
IP address blocks: 185.59.0.0/22 maxlen: 22
2a02:66a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oS7eVhYemBZneFztOhaDJSRoaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:88:b1:3a:17:5d:f5:64:f8:d4:79:26:66:f0:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f284bb7958587a60599de173b4e85a0c9491a1a4
Validity
Not Before: Jul 2 15:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7768ac90019aa9d09a4d63d5a44c13b9c2657cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:63:55:6c:da:32:46:7e:4e:92:3a:5e:ad:f7:
6a:0c:db:32:52:40:04:39:88:71:fb:cd:40:a6:28:
94:aa:26:9f:40:87:b1:af:23:d0:11:9e:3a:25:e4:
e3:67:53:01:42:06:92:08:cd:98:9f:b0:48:e0:a6:
95:cf:05:f8:73:d7:55:43:4b:0a:3f:ac:32:91:bd:
19:75:18:31:b7:34:14:e2:7a:30:c3:d7:c2:d0:e2:
9c:69:ce:7c:ba:b7:83:6e:de:70:29:2c:da:6f:a2:
83:bd:13:df:64:4e:19:22:2b:6e:8e:3c:de:50:61:
34:71:57:20:be:4c:65:71:56:95:2d:fb:28:c0:77:
58:41:a8:4c:e2:da:3c:0c:4a:fb:69:17:78:d8:3b:
6f:63:2c:ba:27:1a:11:12:91:61:63:48:b6:03:f7:
44:e2:ad:45:2c:47:78:fd:cd:e7:0b:02:de:d2:55:
df:07:3c:d1:c8:1f:15:ad:82:27:a4:c0:c4:12:84:
48:9c:48:99:bb:ba:43:56:4f:ae:62:88:a4:ab:b5:
db:2b:fe:b8:c1:24:67:76:84:29:f9:11:eb:9b:67:
03:f4:b8:61:ca:dd:95:94:98:40:b9:d4:d6:45:71:
63:df:c1:57:d0:7a:d4:2b:d9:ec:b1:9e:59:27:f1:
5e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:76:8A:C9:00:19:AA:9D:09:A4:D6:3D:5A:44:C1:3B:9C:26:57:CF
X509v3 Authority Key Identifier:
keyid:F2:84:BB:79:58:58:7A:60:59:9D:E1:73:B4:E8:5A:0C:94:91:A1:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oS7eVhYemBZneFztOhaDJSRoaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/t3aKyQAZqp0JpNY9WkTBO5wmV88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.59.0.0/22
IPv6:
2a02:66a0::/32
Signature Algorithm: sha256WithRSAEncryption
37:f5:c0:8a:67:ca:3a:2f:78:64:c5:2c:08:8a:ae:69:c4:4d:
0d:61:79:de:d9:61:2e:0b:a1:b5:92:3b:1f:b7:f3:9a:a0:86:
7b:db:7e:d6:12:1d:e1:20:4a:34:eb:3c:f8:6a:cf:8d:54:b8:
ee:e2:5e:6a:c7:c1:a8:d7:ed:b0:8a:46:15:8f:1d:b9:25:f7:
1a:02:60:d8:92:f3:4b:b6:91:41:99:69:05:39:a6:00:75:c8:
e5:c1:85:ea:4a:8a:df:11:dd:48:68:28:5e:7c:43:0e:90:9f:
60:d9:11:f1:80:8c:c7:35:73:ae:57:96:ed:6c:05:72:d3:0a:
e1:f2:38:44:df:8c:fd:3a:c8:b2:eb:2c:77:80:74:a2:a8:f5:
4e:80:8c:76:6a:30:21:5e:1a:75:20:a3:b0:14:7b:1b:a6:e3:
11:11:24:34:11:1b:f9:7b:04:39:3c:2f:ec:72:cb:b8:11:22:
14:c4:1f:87:26:42:0f:a6:22:34:c9:05:8d:ff:4e:e0:15:17:
95:d5:0b:04:79:58:25:95:ee:f7:51:e8:28:7c:fc:fb:37:8d:
29:2d:56:d2:c6:1d:7a:f2:b5:3d:53:8e:3b:bf:04:76:e5:43:
af:36:af:a4:82:8a:e4:10:0a:3c:b6:49:17:db:c5:b4:11:20:
5d:07:97:26
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaIixOhdd9WT41HkmZvBTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyODRiYjc5NTg1ODdhNjA1OTlkZTE3M2I0ZTg1YTBjOTQ5
MWExYTQwHhcNMjYwNzAyMTUxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzc2OGFjOTAwMTlhYTlkMDlhNGQ2M2Q1YTQ0YzEzYjljMjY1N2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mNVbNoyRn5OkjperfdqDNsyUkAE
OYhx+81ApiiUqiafQIexryPQEZ46JeTjZ1MBQgaSCM2Yn7BI4KaVzwX4c9dVQ0sK
P6wykb0ZdRgxtzQU4noww9fC0OKcac58ureDbt5wKSzab6KDvRPfZE4ZIitujjze
UGE0cVcgvkxlcVaVLfsowHdYQahM4to8DEr7aRd42DtvYyy6JxoREpFhY0i2A/dE
4q1FLEd4/c3nCwLe0lXfBzzRyB8VrYInpMDEEoRInEiZu7pDVk+uYoikq7XbK/64
wSRndoQp+RHrm2cD9Lhhyt2VlJhAudTWRXFj38FX0HrUK9nssZ5ZJ/FeNQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLd2iskAGaqdCaTWPVpEwTucJlfPMB8GA1UdIwQY
MBaAFPKEu3lYWHpgWZ3hc7ToWgyUkaGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG9TN2VWaFllbUJabmVGenRPaGFESlNSb2FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8yMjhlMTYtZjgwOC00NDcxLWE5ODQt
MzY0ZWUyODU5ZjJjLzEvdDNhS3lRQVpxcDBKcE5ZOVdrVEJPNXdtVjg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8yMjhlMTYtZjgwOC00NDcxLWE5ODQtMzY0ZWUyODU5ZjJj
LzEvOG9TN2VWaFllbUJabmVGenRPaGFESlNSb2FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTsAMA0E
AgACMAcDBQAqAmagMA0GCSqGSIb3DQEBCwUAA4IBAQA39cCKZ8o6L3hkxSwIiq5p
xE0NYXne2WEuC6G1kjsft/OaoIZ7237WEh3hIEo06zz4as+NVLju4l5qx8Go1+2w
ikYVjx25JfcaAmDYkvNLtpFBmWkFOaYAdcjlwYXqSorfEd1IaChefEMOkJ9g2RHx
gIzHNXOuV5btbAVy0wrh8jhE34z9Osiy6yx3gHSiqPVOgIx2ajAhXhp1IKOwFHsb
puMRESQ0ERv5ewQ5PC/scsu4ESIUxB+HJkIPpiI0yQWN/07gFReV1QsEeVglle73
UegofPz7N40pLVbSxh168rU9U447vwR25UOvNq+kgorkEAo8tkkX28W0ESBdB5cm
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:33:37 2026 by rpki-client