Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/AesIsA5zD6TDjr3LqtdVTNdYf3I.roa
File: AesIsA5zD6TDjr3LqtdVTNdYf3I.roa (raw, json)
Hash identifier: vyS4qfd1NHAIdM7TEHjC217Lv2lF89k5Wv6PxPzeJUs=
Subject key identifier: 01:EB:08:B0:0E:73:0F:A4:C3:8E:BD:CB:AA:D7:55:4C:D7:58:7F:72
Certificate issuer: /CN=56c0ff08907a984b8e7763e7aa8a9fc8af51eda6
Certificate serial: 019F236886969F7695B67A25249A5ED37A50
Authority key identifier: 56:C0:FF:08:90:7A:98:4B:8E:77:63:E7:AA:8A:9F:C8:AF:51:ED:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/AesIsA5zD6TDjr3LqtdVTNdYf3I.roa
Signing time: Thu 02 Jul 2026 15:18:00 +0000
ROA not before: Thu 02 Jul 2026 15:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62453
IP address blocks: 82.193.94.0/24 maxlen: 24
82.193.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:86:96:9f:76:95:b6:7a:25:24:9a:5e:d3:7a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56c0ff08907a984b8e7763e7aa8a9fc8af51eda6
Validity
Not Before: Jul 2 15:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01eb08b00e730fa4c38ebdcbaad7554cd7587f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:68:36:97:c9:20:02:39:b7:0f:5a:95:ac:cc:
47:17:4e:60:87:61:00:fc:bd:ec:c8:3d:cc:bf:77:
05:f9:74:7f:68:a2:66:72:2f:83:c4:0d:0b:d4:29:
62:9b:c2:64:14:12:a8:2f:a2:21:5d:e8:cc:c2:f4:
fd:13:c7:66:3b:f3:10:15:ec:9c:12:df:a1:6a:d5:
1b:4b:43:7b:95:96:92:22:95:eb:fb:a4:ff:0a:a8:
ad:35:0f:c5:62:a4:a2:ab:1f:2e:74:d7:68:c7:e8:
48:e2:ad:d9:0c:3a:33:35:7d:66:48:20:18:31:dc:
92:2f:50:33:c1:64:81:00:4c:6e:1e:33:8a:a6:21:
0b:69:16:7f:18:8c:54:44:a7:05:b0:f4:19:70:4e:
cf:7b:6c:72:5b:97:f1:1a:73:f7:8b:70:78:4a:2c:
6e:c2:40:03:ee:01:aa:91:e2:94:97:e7:47:fa:7c:
d8:d8:70:6e:c7:fc:b3:0f:49:6e:59:f2:d0:97:d9:
6e:26:3e:7c:3a:d6:39:9f:75:3b:81:82:99:ed:a1:
da:7a:20:07:48:7a:45:6a:ed:89:29:00:f3:8c:a9:
46:2b:bd:76:00:56:13:51:3f:44:a3:78:70:61:c1:
f0:ff:ef:c1:35:d3:0a:30:29:20:0c:05:49:ea:d9:
30:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EB:08:B0:0E:73:0F:A4:C3:8E:BD:CB:AA:D7:55:4C:D7:58:7F:72
X509v3 Authority Key Identifier:
keyid:56:C0:FF:08:90:7A:98:4B:8E:77:63:E7:AA:8A:9F:C8:AF:51:ED:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/AesIsA5zD6TDjr3LqtdVTNdYf3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.193.94.0/23
Signature Algorithm: sha256WithRSAEncryption
60:17:a1:3b:d1:7c:8d:11:1e:01:66:39:b5:df:a4:11:3c:39:
66:b7:ca:61:24:0f:7c:e1:2d:18:6c:ab:cf:83:28:be:8f:70:
dd:cf:05:87:e8:2e:50:77:c3:a6:78:45:95:0f:aa:64:f1:cc:
9c:21:8e:d9:8a:98:fe:37:c4:34:8e:ef:d4:67:d6:cf:d7:6e:
ec:68:45:6e:70:9e:62:88:75:8f:1e:2f:77:6a:96:2a:12:05:
cb:f6:1f:87:6b:fc:c7:12:c0:e3:0a:b0:60:e4:67:b6:c4:bb:
39:21:65:50:a8:44:1d:cb:ca:a8:e9:f9:b9:27:18:72:96:0f:
e4:be:04:fc:85:de:e8:f5:2f:18:55:10:5a:d7:8d:c5:55:fc:
16:90:69:91:d7:ac:7a:f5:0e:18:87:f0:a1:20:e5:77:36:fe:
96:27:4a:e8:97:7f:06:4d:6e:b5:f5:21:63:93:7f:fd:c5:4e:
33:9b:d9:d4:66:d5:6c:ca:17:80:62:ed:1a:c9:0a:e1:6f:48:
6d:5c:36:75:28:17:0e:95:58:1a:f4:e1:32:2b:b1:b0:4f:a0:
b2:70:07:8e:0e:dd:68:fc:c1:0f:cf:70:2b:ce:9c:ec:27:83:
fa:13:95:89:00:ac:8a:f7:94:83:4b:bc:a2:de:3e:8f:46:c5:
fe:9f:9d:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaIaWn3aVtnolJJpe03pQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YzBmZjA4OTA3YTk4NGI4ZTc3NjNlN2FhOGE5ZmM4YWY1
MWVkYTYwHhcNMjYwNzAyMTUxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWViMDhiMDBlNzMwZmE0YzM4ZWJkY2JhYWQ3NTU0Y2Q3NTg3ZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGg2l8kgAjm3D1qVrMxHF05gh2EA
/L3syD3Mv3cF+XR/aKJmci+DxA0L1Clim8JkFBKoL6IhXejMwvT9E8dmO/MQFeyc
Et+hatUbS0N7lZaSIpXr+6T/CqitNQ/FYqSiqx8udNdox+hI4q3ZDDozNX1mSCAY
MdySL1AzwWSBAExuHjOKpiELaRZ/GIxURKcFsPQZcE7Pe2xyW5fxGnP3i3B4Sixu
wkAD7gGqkeKUl+dH+nzY2HBux/yzD0luWfLQl9luJj58OtY5n3U7gYKZ7aHaeiAH
SHpFau2JKQDzjKlGK712AFYTUT9Eo3hwYcHw/+/BNdMKMCkgDAVJ6tkwAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAHrCLAOcw+kw469y6rXVUzXWH9yMB8GA1UdIwQY
MBaAFFbA/wiQephLjndj56qKn8ivUe2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnNEX0NKQjZtRXVPZDJQbnFvcWZ5SzlSN2FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMt
YzVlNmQyM2Y4YjA5LzEvQWVzSXNBNXpENlREanIzTHF0ZFZUTmRZZjNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMtYzVlNmQyM2Y4YjA5
LzEvVnNEX0NKQjZtRXVPZDJQbnFvcWZ5SzlSN2FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUsFeMA0G
CSqGSIb3DQEBCwUAA4IBAQBgF6E70XyNER4BZjm136QRPDlmt8phJA984S0YbKvP
gyi+j3DdzwWH6C5Qd8OmeEWVD6pk8cycIY7Zipj+N8Q0ju/UZ9bP127saEVucJ5i
iHWPHi93apYqEgXL9h+Ha/zHEsDjCrBg5Ge2xLs5IWVQqEQdy8qo6fm5Jxhylg/k
vgT8hd7o9S8YVRBa143FVfwWkGmR16x69Q4Yh/ChIOV3Nv6WJ0rol38GTW619SFj
k3/9xU4zm9nUZtVsyheAYu0ayQrhb0htXDZ1KBcOlVga9OEyK7GwT6CycAeODt1o
/MEPz3ArzpzsJ4P6E5WJAKyK95SDS7yi3j6PRsX+n51e
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:02:34 2026 by rpki-client