Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/phY9NXnvnB6e0PMrbRa0MvvDzNI.roa
File: phY9NXnvnB6e0PMrbRa0MvvDzNI.roa (raw, json)
Hash identifier: IN3m7S+9B9ojtgzB9za8gBF1vRTwMeSiCq8UhefavsE=
Subject key identifier: A6:16:3D:35:79:EF:9C:1E:9E:D0:F3:2B:6D:16:B4:32:FB:C3:CC:D2
Certificate issuer: /CN=ea146a79f737efff756d48e35a8a05b97022214f
Certificate serial: 019F2369161E24439AF49E1AD12D50CD7F0A
Authority key identifier: EA:14:6A:79:F7:37:EF:FF:75:6D:48:E3:5A:8A:05:B9:70:22:21:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hRqefc37_91bUjjWooFuXAiIU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/phY9NXnvnB6e0PMrbRa0MvvDzNI.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29014
IP address blocks: 88.205.24.0/22 maxlen: 24
88.205.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/6hRqefc37_91bUjjWooFuXAiIU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/6hRqefc37_91bUjjWooFuXAiIU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6hRqefc37_91bUjjWooFuXAiIU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:16:1e:24:43:9a:f4:9e:1a:d1:2d:50:cd:7f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea146a79f737efff756d48e35a8a05b97022214f
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6163d3579ef9c1e9ed0f32b6d16b432fbc3ccd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a9:f1:18:ca:e1:eb:90:61:e1:41:be:e4:89:
d3:6e:58:19:fd:34:86:8d:1f:a2:65:66:7d:c2:cc:
4e:0e:1f:37:8d:41:2e:db:99:d9:1a:b6:1d:b2:fc:
7b:72:cc:b6:a7:95:c2:47:53:ed:69:4e:32:b5:8a:
1e:38:87:bc:bc:e6:6f:4e:d6:ce:9c:f9:2d:6a:d4:
46:c5:c1:85:28:7b:03:6d:52:31:dc:62:e8:20:6c:
2a:80:d8:e0:91:f7:af:74:fb:38:93:72:24:a5:d6:
ac:c9:f4:b8:05:55:7d:25:23:ae:15:c8:07:05:79:
94:a0:e3:bd:90:dc:33:3f:54:15:7b:6d:88:b0:54:
eb:67:f3:c4:83:c4:8f:f9:53:b3:2b:ef:63:75:f0:
18:31:94:66:95:89:3b:ca:cf:2f:f8:90:37:00:f9:
69:8f:90:5f:f1:70:16:9c:f1:65:2d:5a:a7:49:25:
89:2f:5c:13:48:97:8b:54:9f:1e:e6:a0:20:c4:80:
be:ce:66:1e:c3:64:3f:ec:16:b6:f4:e6:4c:ba:77:
c3:33:6b:46:e3:d9:66:fb:22:42:f1:83:92:17:0c:
93:00:75:4b:02:3f:ec:06:93:f4:65:32:bb:87:d9:
6c:76:b8:e7:2a:af:a2:b9:6d:2b:eb:93:2d:52:56:
62:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:16:3D:35:79:EF:9C:1E:9E:D0:F3:2B:6D:16:B4:32:FB:C3:CC:D2
X509v3 Authority Key Identifier:
keyid:EA:14:6A:79:F7:37:EF:FF:75:6D:48:E3:5A:8A:05:B9:70:22:21:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hRqefc37_91bUjjWooFuXAiIU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/phY9NXnvnB6e0PMrbRa0MvvDzNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/6hRqefc37_91bUjjWooFuXAiIU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.205.24.0/21
Signature Algorithm: sha256WithRSAEncryption
12:4f:ca:29:17:d8:ec:cf:77:8b:a6:f2:be:92:84:3a:a1:67:
22:4e:a5:da:c7:aa:65:79:9d:4d:60:14:dd:12:e8:24:46:40:
ec:3a:87:c1:55:e3:6c:45:f0:a8:7b:02:76:b9:73:10:cd:d7:
00:46:a7:4b:3d:f9:d8:33:df:b1:57:ec:52:bb:38:e5:94:4f:
ea:10:1e:db:84:d9:4e:2c:93:77:f7:7a:a3:ab:6d:aa:49:f2:
7a:6a:61:8d:fb:c0:ab:04:08:25:bc:a5:6f:6a:8c:67:18:87:
e0:6a:36:98:05:e6:2f:ae:6a:42:08:6e:ce:3f:19:54:e9:cd:
ed:d0:7f:76:81:73:eb:b0:f5:b4:c0:d4:a6:ae:a6:b0:73:2e:
55:22:9c:18:69:63:94:ef:b8:b3:63:24:9b:65:f6:b6:76:e6:
86:da:a7:90:11:52:90:3b:e4:da:07:65:85:9c:aa:6d:a1:cb:
12:ac:c9:3f:b5:e3:74:4b:dd:ad:dd:ef:11:7c:61:47:1f:48:
10:5a:50:7f:f8:94:be:64:e3:60:ec:c8:09:53:a0:55:bf:b1:
f1:20:3c:b2:50:38:e8:f9:40:68:3c:10:86:b1:a1:b5:78:9d:
15:05:7f:fc:96:62:da:09:db:7e:15:cb:d0:de:7d:93:d2:cc:
c1:4e:bc:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaRYeJEOa9J4a0S1QzX8KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMTQ2YTc5ZjczN2VmZmY3NTZkNDhlMzVhOGEwNWI5NzAy
MjIxNGYwHhcNMjYwNzAyMTUxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjE2M2QzNTc5ZWY5YzFlOWVkMGYzMmI2ZDE2YjQzMmZiYzNjY2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KnxGMrh65Bh4UG+5InTblgZ/TSG
jR+iZWZ9wsxODh83jUEu25nZGrYdsvx7csy2p5XCR1PtaU4ytYoeOIe8vOZvTtbO
nPktatRGxcGFKHsDbVIx3GLoIGwqgNjgkfevdPs4k3IkpdasyfS4BVV9JSOuFcgH
BXmUoOO9kNwzP1QVe22IsFTrZ/PEg8SP+VOzK+9jdfAYMZRmlYk7ys8v+JA3APlp
j5Bf8XAWnPFlLVqnSSWJL1wTSJeLVJ8e5qAgxIC+zmYew2Q/7Ba29OZMunfDM2tG
49lm+yJC8YOSFwyTAHVLAj/sBpP0ZTK7h9lsdrjnKq+iuW0r65MtUlZiwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKYWPTV575wentDzK20WtDL7w8zSMB8GA1UdIwQY
MBaAFOoUann3N+//dW1I41qKBblwIiFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmhScWVmYzM3XzkxYlVqaldvb0Z1WEFpSVU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lMjhiYTYtYWFhZi00ZDMzLWI4ZGMt
MGFlZTM2MGIwYmE0LzEvcGhZOU5YbnZuQjZlMFBNcmJSYTBNdnZEek5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9lMjhiYTYtYWFhZi00ZDMzLWI4ZGMtMGFlZTM2MGIwYmE0
LzEvNmhScWVmYzM3XzkxYlVqaldvb0Z1WEFpSVU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDWM0YMA0G
CSqGSIb3DQEBCwUAA4IBAQAST8opF9jsz3eLpvK+koQ6oWciTqXax6pleZ1NYBTd
EugkRkDsOofBVeNsRfCoewJ2uXMQzdcARqdLPfnYM9+xV+xSuzjllE/qEB7bhNlO
LJN393qjq22qSfJ6amGN+8CrBAglvKVvaoxnGIfgajaYBeYvrmpCCG7OPxlU6c3t
0H92gXPrsPW0wNSmrqawcy5VIpwYaWOU77izYySbZfa2duaG2qeQEVKQO+TaB2WF
nKptocsSrMk/teN0S92t3e8RfGFHH0gQWlB/+JS+ZONg7MgJU6BVv7HxIDyyUDjo
+UBoPBCGsaG1eJ0VBX/8lmLaCdt+FcvQ3n2T0szBTrxx
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:38:06 2026 by rpki-client