Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/b4ljpqvJJ99yhvWp5OXK-V_rwA4.roa
File: b4ljpqvJJ99yhvWp5OXK-V_rwA4.roa (raw, json)
Hash identifier: uWVsOUuJFYO4g8DznA/hJUwAXuQNluCi4DapHS7DI2c=
Subject key identifier: 6F:89:63:A6:AB:C9:27:DF:72:86:F5:A9:E4:E5:CA:F9:5F:EB:C0:0E
Certificate issuer: /CN=3c510e21ba1c9d600589130255a36928f1c8f23b
Certificate serial: 019F2368E1ED2BC96543D02C398945A15602
Authority key identifier: 3C:51:0E:21:BA:1C:9D:60:05:89:13:02:55:A3:69:28:F1:C8:F2:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFEOIbocnWAFiRMCVaNpKPHI8js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/b4ljpqvJJ99yhvWp5OXK-V_rwA4.roa
Signing time: Thu 02 Jul 2026 15:18:23 +0000
ROA not before: Thu 02 Jul 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30971
IP address blocks: 83.136.32.0/21 maxlen: 24
185.102.15.0/24 maxlen: 24
193.46.104.0/21 maxlen: 24
193.46.112.0/20 maxlen: 24
2a02:850::/44 maxlen: 44
2a02:850:10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFEOIbocnWAFiRMCVaNpKPHI8js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e1:ed:2b:c9:65:43:d0:2c:39:89:45:a1:56:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c510e21ba1c9d600589130255a36928f1c8f23b
Validity
Not Before: Jul 2 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f8963a6abc927df7286f5a9e4e5caf95febc00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:54:f7:93:68:29:7c:6e:ba:7d:e6:78:72:
69:83:b0:89:fc:71:2d:0c:2b:ef:db:b4:09:e2:39:
58:58:04:65:80:f9:08:e3:4c:93:50:0b:6d:62:50:
99:16:a4:ce:ac:c0:e8:36:64:24:96:71:a9:7c:0b:
07:43:cd:e7:50:86:78:70:e2:cb:0c:61:d6:b2:8c:
b4:c8:84:bb:ca:10:b5:8e:81:2b:c6:0c:7a:45:95:
9a:80:ae:c3:8a:a5:09:56:79:60:68:8c:ee:51:02:
eb:71:4b:06:0b:f1:25:da:ae:93:2e:20:5c:1b:61:
44:58:9c:bf:6f:3c:df:c8:3e:0b:1f:2d:b7:80:99:
ed:1f:f2:cc:78:10:ac:3a:f8:5d:78:3e:a1:c9:d3:
5d:ec:06:3c:f1:71:80:82:ab:10:78:90:8a:22:73:
7d:f3:15:e6:62:3a:ce:19:80:9d:c8:80:0e:5d:cb:
30:d6:2b:91:cd:c9:f2:53:1b:f6:7f:6d:92:5a:81:
33:58:5e:61:a1:3e:88:10:a9:76:de:53:1e:3e:96:
6b:ac:87:91:9a:7c:9b:dd:09:c5:e7:8a:5a:bb:d1:
30:82:8c:13:a2:01:5a:dd:40:33:ac:17:63:4f:62:
50:cd:07:a2:40:77:c8:88:63:99:d0:d8:18:17:97:
6b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:89:63:A6:AB:C9:27:DF:72:86:F5:A9:E4:E5:CA:F9:5F:EB:C0:0E
X509v3 Authority Key Identifier:
keyid:3C:51:0E:21:BA:1C:9D:60:05:89:13:02:55:A3:69:28:F1:C8:F2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFEOIbocnWAFiRMCVaNpKPHI8js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/b4ljpqvJJ99yhvWp5OXK-V_rwA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.32.0/21
185.102.15.0/24
193.46.104.0-193.46.127.255
IPv6:
2a02:850::/43
Signature Algorithm: sha256WithRSAEncryption
4f:d5:2e:fe:f2:50:10:65:db:fe:83:a3:12:8f:f0:fd:bc:e7:
1e:0a:83:05:27:94:61:db:7a:5a:01:81:6e:1b:67:47:eb:df:
30:43:a4:63:07:cc:5e:9f:1f:52:2d:45:ca:cc:fc:e4:cf:96:
a4:71:45:af:1b:3a:1b:42:12:f0:e4:3a:ec:fb:7e:c5:a5:24:
5b:7d:81:fd:aa:ae:45:96:69:f5:e8:9b:9b:8a:85:3d:90:c8:
cf:44:75:b3:f3:c8:af:83:40:67:d1:b5:d2:87:58:d1:0e:49:
4d:fe:8e:43:ea:01:79:88:29:be:04:fe:a0:6a:34:55:5b:66:
82:f7:31:19:92:b1:0c:ec:7d:69:ef:ec:8a:46:60:af:88:aa:
79:5b:eb:be:52:f7:ac:24:a3:3e:39:cc:e0:48:d9:33:23:83:
af:65:1a:f2:e0:5c:03:cc:6f:b2:8a:f9:fe:da:fc:5f:38:86:
ce:6a:de:e3:0e:42:31:c0:f6:00:eb:32:7a:7f:e5:49:40:d4:
70:47:78:f0:70:f6:58:9c:60:fa:1f:16:c0:e6:35:69:ec:fa:
01:a0:9e:7a:0e:60:88:5a:fc:e0:de:ab:14:96:ca:54:80:30:
c9:5e:ca:ee:85:e3:b4:5e:c7:8b:57:c5:37:c6:f3:ae:30:81:
e9:ed:e6:a0
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgISAZ8jaOHtK8llQ9AsOYlFoVYCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNTEwZTIxYmExYzlkNjAwNTg5MTMwMjU1YTM2OTI4ZjFj
OGYyM2IwHhcNMjYwNzAyMTUxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Zjg5NjNhNmFiYzkyN2RmNzI4NmY1YTllNGU1Y2FmOTVmZWJjMDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurxU95NoKXxuun3meHJpg7CJ/HEt
DCvv27QJ4jlYWARlgPkI40yTUAttYlCZFqTOrMDoNmQklnGpfAsHQ83nUIZ4cOLL
DGHWsoy0yIS7yhC1joErxgx6RZWagK7DiqUJVnlgaIzuUQLrcUsGC/El2q6TLiBc
G2FEWJy/bzzfyD4LHy23gJntH/LMeBCsOvhdeD6hydNd7AY88XGAgqsQeJCKInN9
8xXmYjrOGYCdyIAOXcsw1iuRzcnyUxv2f22SWoEzWF5hoT6IEKl23lMePpZrrIeR
mnyb3QnF54pau9EwgowTogFa3UAzrBdjT2JQzQeiQHfIiGOZ0NgYF5drUwIDAQAB
o4ICLjCCAiowHQYDVR0OBBYEFG+JY6arySffcob1qeTlyvlf68AOMB8GA1UdIwQY
MBaAFDxRDiG6HJ1gBYkTAlWjaSjxyPI7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEZFT0lib2NuV0FGaVJNQ1ZhTnBLUEhJOGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zNDgxMDQtOGE0MS00OTQ5LTg1NTIt
YTk3NjVlZGM3OTVjLzEvYjRsanBxdkpKOTl5aHZXcDVPWEstVl9yd0E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zNDgxMDQtOGE0MS00OTQ5LTg1NTItYTk3NjVlZGM3OTVj
LzEvUEZFT0lib2NuV0FGaVJNQ1ZhTnBLUEhJOGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAgBAIAATAaAwQDU4ggAwQA
uWYPMAwDBAPBLmgDBAfBLgAwDwQCAAIwCQMHBSoCCFAAADANBgkqhkiG9w0BAQsF
AAOCAQEAT9Uu/vJQEGXb/oOjEo/w/bznHgqDBSeUYdt6WgGBbhtnR+vfMEOkYwfM
Xp8fUi1Fysz85M+WpHFFrxs6G0IS8OQ67Pt+xaUkW32B/aquRZZp9eibm4qFPZDI
z0R1s/PIr4NAZ9G10odY0Q5JTf6OQ+oBeYgpvgT+oGo0VVtmgvcxGZKxDOx9ae/s
ikZgr4iqeVvrvlL3rCSjPjnM4EjZMyODr2Ua8uBcA8xvsor5/tr8XziGzmre4w5C
McD2AOsyen/lSUDUcEd48HD2WJxg+h8WwOY1aez6AaCeeg5giFr84N6rFJbKVIAw
yV7K7oXjtF7Hi1fFN8bzrjCB6e3moA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:09:11 2026 by rpki-client