Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/u17kqdLSyyJq5U0Zxqr0EXjDmmI.roa
File: u17kqdLSyyJq5U0Zxqr0EXjDmmI.roa (raw, json)
Hash identifier: MsgYyS7H7F1Fay5YAf1h7SpoZxvLFnXiACTNhjQnhyA=
Subject key identifier: BB:5E:E4:A9:D2:D2:CB:22:6A:E5:4D:19:C6:AA:F4:11:78:C3:9A:62
Certificate issuer: /CN=3c510e21ba1c9d600589130255a36928f1c8f23b
Certificate serial: 019F2368E0E7F0CE5A6E9FCFD4D1C73461EF
Authority key identifier: 3C:51:0E:21:BA:1C:9D:60:05:89:13:02:55:A3:69:28:F1:C8:F2:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFEOIbocnWAFiRMCVaNpKPHI8js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/u17kqdLSyyJq5U0Zxqr0EXjDmmI.roa
Signing time: Thu 02 Jul 2026 15:18:23 +0000
ROA not before: Thu 02 Jul 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1921
IP address blocks: 185.102.12.0/24 maxlen: 24
193.46.128.0/24 maxlen: 24
193.46.129.0/24 maxlen: 24
193.46.130.0/24 maxlen: 24
193.46.131.0/24 maxlen: 24
193.46.132.0/24 maxlen: 24
193.46.133.0/24 maxlen: 24
193.46.134.0/24 maxlen: 24
193.46.135.0/24 maxlen: 24
194.0.24.0/24 maxlen: 24
194.0.25.0/24 maxlen: 24
194.0.26.0/24 maxlen: 24
2001:678:20::/48 maxlen: 48
2001:678:24::/48 maxlen: 48
2001:67c:1bc::/48 maxlen: 48
2a02:850:ffe0::/48 maxlen: 48
2a02:850:ffe1::/48 maxlen: 48
2a02:850:ffe2::/48 maxlen: 48
2a02:850:ffe3::/48 maxlen: 48
2a02:850:ffe4::/48 maxlen: 48
2a02:850:ffe5::/48 maxlen: 48
2a02:850:ffe6::/48 maxlen: 48
2a02:850:ffe7::/48 maxlen: 48
2a02:850:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFEOIbocnWAFiRMCVaNpKPHI8js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e0:e7:f0:ce:5a:6e:9f:cf:d4:d1:c7:34:61:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c510e21ba1c9d600589130255a36928f1c8f23b
Validity
Not Before: Jul 2 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb5ee4a9d2d2cb226ae54d19c6aaf41178c39a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8f:c5:75:a0:69:9a:07:db:14:b6:e5:d2:2b:
3b:a0:ee:2f:3d:7f:63:72:7f:b0:51:af:7a:bd:3c:
02:6d:e1:9f:b9:4c:29:4e:2f:40:3d:a4:17:e6:60:
75:b8:15:8d:1d:05:61:17:b4:a5:94:91:cc:af:19:
7a:e4:9a:84:e3:78:d6:f1:19:a9:8c:fa:68:12:8e:
ba:20:51:19:2c:65:b6:e8:6f:28:af:7a:66:b9:7b:
33:64:34:e5:85:5b:c0:77:9e:dd:f7:78:e3:3e:25:
14:08:47:75:a0:ec:70:05:69:ba:65:97:87:fc:d2:
96:99:aa:5e:41:40:74:ec:ef:d9:eb:b6:95:17:01:
ca:99:69:7e:1e:84:a6:33:78:f1:9f:df:54:68:25:
dd:41:4e:59:f7:b4:12:f8:0d:08:aa:7b:38:c2:b9:
8d:2a:57:d1:45:17:69:b2:53:be:2d:e3:f9:55:55:
5b:56:d3:76:5a:c1:24:a3:fe:3d:5b:f3:d3:6e:b5:
fc:e1:16:a0:1a:47:82:51:e7:18:6b:99:9a:3e:c3:
99:34:26:45:81:15:19:33:02:d2:87:ad:ea:07:bc:
69:1f:f1:1a:9a:b5:84:1e:ef:28:a9:dd:e6:2b:30:
6d:57:51:6f:5f:a1:70:d3:d8:26:74:a1:4e:30:1e:
19:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5E:E4:A9:D2:D2:CB:22:6A:E5:4D:19:C6:AA:F4:11:78:C3:9A:62
X509v3 Authority Key Identifier:
keyid:3C:51:0E:21:BA:1C:9D:60:05:89:13:02:55:A3:69:28:F1:C8:F2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFEOIbocnWAFiRMCVaNpKPHI8js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/u17kqdLSyyJq5U0Zxqr0EXjDmmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/PFEOIbocnWAFiRMCVaNpKPHI8js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.12.0/24
193.46.128.0/21
194.0.24.0-194.0.26.255
IPv6:
2001:678:20::/48
2001:678:24::/48
2001:67c:1bc::/48
2a02:850:ffe0::/45
2a02:850:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
5f:c7:73:84:c3:32:5e:d7:c5:64:92:d8:0d:07:ae:a9:ff:5e:
a2:66:5d:85:5b:d4:2c:e8:69:de:76:95:22:55:7f:12:84:fd:
79:e2:81:7e:88:54:af:b0:80:16:3f:35:b6:23:20:e0:6f:41:
a7:3f:c5:82:72:95:b0:e2:3b:f9:f3:a4:67:44:b5:a8:54:5c:
62:06:6b:7f:32:cb:d9:3c:ab:79:ec:8d:b9:11:f4:b9:80:7f:
75:28:d9:a3:61:46:dc:b1:af:33:68:62:a3:4c:98:8f:4c:e7:
72:c6:bb:64:26:27:33:6f:96:b1:48:9e:96:10:e4:16:99:71:
fb:7a:cd:5e:bc:f9:16:5a:e6:b5:fb:31:d2:45:d0:41:36:d2:
5d:e4:78:18:03:67:5c:33:96:e8:88:fd:7e:1f:e7:49:ad:d1:
5b:ca:6f:6f:f6:bc:ab:b5:61:a6:29:0b:08:b8:05:45:89:0b:
7a:d8:b7:e3:d9:54:b9:1e:32:bc:0a:02:ac:a4:b5:4a:ab:84:
ef:cf:49:1e:27:7b:e4:0b:43:4d:91:8d:55:d4:07:85:d1:ae:
fe:23:0c:74:2e:cf:fd:b7:f9:a9:e4:8d:4e:ff:19:87:0e:8f:
c3:87:68:15:54:f1:cc:48:82:85:48:aa:01:f3:49:8b:c8:33:
5e:1c:93:4a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgISAZ8jaODn8M5abp/P1NHHNGHvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNTEwZTIxYmExYzlkNjAwNTg5MTMwMjU1YTM2OTI4ZjFj
OGYyM2IwHhcNMjYwNzAyMTUxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjVlZTRhOWQyZDJjYjIyNmFlNTRkMTljNmFhZjQxMTc4YzM5YTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY/FdaBpmgfbFLbl0is7oO4vPX9j
cn+wUa96vTwCbeGfuUwpTi9APaQX5mB1uBWNHQVhF7SllJHMrxl65JqE43jW8Rmp
jPpoEo66IFEZLGW26G8or3pmuXszZDTlhVvAd57d93jjPiUUCEd1oOxwBWm6ZZeH
/NKWmapeQUB07O/Z67aVFwHKmWl+HoSmM3jxn99UaCXdQU5Z97QS+A0Iqns4wrmN
KlfRRRdpslO+LeP5VVVbVtN2WsEko/49W/PTbrX84RagGkeCUecYa5maPsOZNCZF
gRUZMwLSh63qB7xpH/EamrWEHu8oqd3mKzBtV1FvX6Fw09gmdKFOMB4ZUwIDAQAB
o4ICUjCCAk4wHQYDVR0OBBYEFLte5KnS0ssiauVNGcaq9BF4w5piMB8GA1UdIwQY
MBaAFDxRDiG6HJ1gBYkTAlWjaSjxyPI7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEZFT0lib2NuV0FGaVJNQ1ZhTnBLUEhJOGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zNDgxMDQtOGE0MS00OTQ5LTg1NTIt
YTk3NjVlZGM3OTVjLzEvdTE3a3FkTFN5eUpxNVUwWnhxcjBFWGpEbW1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zNDgxMDQtOGE0MS00OTQ5LTg1NTItYTk3NjVlZGM3OTVj
LzEvUEZFT0lib2NuV0FGaVJNQ1ZhTnBLUEhJOGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzAgBAIAATAaAwQAuWYMAwQD
wS6AMAwDBAPCABgDBADCABowMwQCAAIwLQMHACABBngAIAMHACABBngAJAMHACAB
BnwBvAMHAyoCCFD/4AMHACoCCFD//zANBgkqhkiG9w0BAQsFAAOCAQEAX8dzhMMy
XtfFZJLYDQeuqf9eomZdhVvULOhp3naVIlV/EoT9eeKBfohUr7CAFj81tiMg4G9B
pz/FgnKVsOI7+fOkZ0S1qFRcYgZrfzLL2TyreeyNuRH0uYB/dSjZo2FG3LGvM2hi
o0yYj0zncsa7ZCYnM2+WsUielhDkFplx+3rNXrz5Flrmtfsx0kXQQTbSXeR4GANn
XDOW6Ij9fh/nSa3RW8pvb/a8q7VhpikLCLgFRYkLeti349lUuR4yvAoCrKS1SquE
789JHid75AtDTZGNVdQHhdGu/iMMdC7P/bf5qeSNTv8Zhw6Pw4doFVTxzEiChUiq
AfNJi8gzXhyTSg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:47:10 2026 by rpki-client