Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/8f2pZ-X2y_ewfA8UsP_aiBqv6-Y.roa
File: 8f2pZ-X2y_ewfA8UsP_aiBqv6-Y.roa (raw, json)
Hash identifier: jKbJJlR/1E8zbPr4O7EmtXI2miGTVc5tDs0R04lVjsg=
Subject key identifier: F1:FD:A9:67:E5:F6:CB:F7:B0:7C:0F:14:B0:FF:DA:88:1A:AF:EB:E6
Certificate issuer: /CN=474779c802095f6df4b2aacf5dcdc5d33dd7de6d
Certificate serial: 019F854E60DF69139ADD9A795E8C7E1B8F35
Authority key identifier: 47:47:79:C8:02:09:5F:6D:F4:B2:AA:CF:5D:CD:C5:D3:3D:D7:DE:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0d5yAIJX230sqrPXc3F0z3X3m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/8f2pZ-X2y_ewfA8UsP_aiBqv6-Y.roa
Signing time: Tue 21 Jul 2026 15:32:14 +0000
ROA not before: Tue 21 Jul 2026 15:32:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 185.127.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/R0d5yAIJX230sqrPXc3F0z3X3m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/R0d5yAIJX230sqrPXc3F0z3X3m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0d5yAIJX230sqrPXc3F0z3X3m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:4e:60:df:69:13:9a:dd:9a:79:5e:8c:7e:1b:8f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474779c802095f6df4b2aacf5dcdc5d33dd7de6d
Validity
Not Before: Jul 21 15:32:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1fda967e5f6cbf7b07c0f14b0ffda881aafebe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:85:ae:9f:9e:2c:98:90:75:98:df:cb:f6:7a:
66:85:bf:d1:87:6e:2c:b5:e7:0b:0b:90:72:8d:17:
2e:66:41:6b:7f:b5:e2:df:77:c0:ab:90:2f:6e:30:
d9:2d:7d:cb:bc:ea:ee:e2:93:ec:b3:85:f0:e7:bb:
cb:00:17:af:08:51:f7:a3:7a:95:05:88:b3:f3:68:
d2:2a:c2:ff:f3:06:86:7f:c9:e9:9b:1e:30:78:87:
56:4a:6e:aa:86:ab:21:23:b1:a8:29:5d:0f:32:ab:
b6:88:95:16:89:dd:7f:4e:a8:56:43:4e:2c:35:10:
ce:d9:31:04:fb:ef:69:40:00:33:3c:b4:40:94:1d:
0f:a6:0e:c9:8b:1b:d5:2d:dd:f7:ab:6b:9d:a3:8b:
19:71:99:98:76:12:6f:0a:61:9d:99:66:8d:da:5d:
4e:50:1f:bc:92:48:74:1f:8f:1c:fa:92:c4:b9:88:
0c:72:5b:98:fa:33:98:9a:d6:b4:35:f9:b7:41:f2:
82:0a:b9:cc:d6:1f:2f:1b:81:96:aa:5c:65:a1:01:
ee:d3:1f:52:50:3b:7f:09:f1:cb:a9:22:92:68:2b:
38:b5:78:9f:69:38:49:16:25:c7:ee:f5:07:c5:93:
ce:79:a5:7f:83:e9:65:9a:02:98:83:a1:e3:60:ea:
b2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FD:A9:67:E5:F6:CB:F7:B0:7C:0F:14:B0:FF:DA:88:1A:AF:EB:E6
X509v3 Authority Key Identifier:
keyid:47:47:79:C8:02:09:5F:6D:F4:B2:AA:CF:5D:CD:C5:D3:3D:D7:DE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0d5yAIJX230sqrPXc3F0z3X3m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/8f2pZ-X2y_ewfA8UsP_aiBqv6-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b55521-2af9-452d-b290-17ef40d53ce9/1/R0d5yAIJX230sqrPXc3F0z3X3m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.153.0/24
Signature Algorithm: sha256WithRSAEncryption
53:e2:c7:6f:20:68:3b:2e:dd:81:0f:c9:20:df:dd:07:75:a4:
18:2c:19:fc:1c:0c:2a:01:38:7f:cc:50:d0:88:56:29:42:01:
bc:4e:ce:14:56:e0:89:1b:a5:31:4e:2b:fb:7c:d3:52:f8:ac:
e9:49:d0:1c:28:ce:ab:29:c0:65:83:40:c3:96:6b:8b:e0:c5:
74:fa:97:a1:4a:91:5b:d8:34:84:91:9c:f8:df:24:77:9d:15:
a9:06:a5:15:6a:6a:c5:10:cb:b2:f2:5e:47:02:a0:0a:fd:64:
fc:e8:dd:f5:d5:45:84:7c:b0:66:d5:af:da:82:60:69:48:94:
bf:53:12:de:02:b7:dd:d1:39:24:00:ca:9e:dd:12:71:08:7f:
6b:71:9c:51:2c:fd:93:c9:50:1c:d7:14:dd:fa:7b:98:7c:c2:
47:3b:28:93:af:6e:22:58:15:41:8d:c0:9c:5d:25:7a:da:0d:
bc:e2:99:4f:f8:68:df:05:7a:d7:b6:cf:ad:b3:3b:24:c4:68:
f9:4f:fb:fb:2e:61:ff:15:bb:8c:7a:44:57:45:69:fa:ea:4d:
83:ec:61:eb:02:8e:5f:c5:7f:39:5b:86:0a:39:0f:aa:81:89:
ec:16:bb:27:1d:84:77:c1:c8:53:d4:f2:cf:5f:be:ee:65:4c:
d0:a5:d4:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+FTmDfaROa3Zp5Xox+G481MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NDc3OWM4MDIwOTVmNmRmNGIyYWFjZjVkY2RjNWQzM2Rk
N2RlNmQwHhcNMjYwNzIxMTUzMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWZkYTk2N2U1ZjZjYmY3YjA3YzBmMTRiMGZmZGE4ODFhYWZlYmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9YWun54smJB1mN/L9npmhb/Rh24s
tecLC5ByjRcuZkFrf7Xi33fAq5AvbjDZLX3LvOru4pPss4Xw57vLABevCFH3o3qV
BYiz82jSKsL/8waGf8npmx4weIdWSm6qhqshI7GoKV0PMqu2iJUWid1/TqhWQ04s
NRDO2TEE++9pQAAzPLRAlB0Ppg7JixvVLd33q2udo4sZcZmYdhJvCmGdmWaN2l1O
UB+8kkh0H48c+pLEuYgMcluY+jOYmta0Nfm3QfKCCrnM1h8vG4GWqlxloQHu0x9S
UDt/CfHLqSKSaCs4tXifaThJFiXH7vUHxZPOeaV/g+llmgKYg6HjYOqyiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPH9qWfl9sv3sHwPFLD/2ogar+vmMB8GA1UdIwQY
MBaAFEdHecgCCV9t9LKqz13NxdM9195tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjBkNXlBSUpYMjMwc3FyUFhjM0YwejNYM20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iNTU1MjEtMmFmOS00NTJkLWIyOTAt
MTdlZjQwZDUzY2U5LzEvOGYycFotWDJ5X2V3ZkE4VXNQX2FpQnF2Ni1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9iNTU1MjEtMmFmOS00NTJkLWIyOTAtMTdlZjQwZDUzY2U5
LzEvUjBkNXlBSUpYMjMwc3FyUFhjM0YwejNYM20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuX+ZMA0G
CSqGSIb3DQEBCwUAA4IBAQBT4sdvIGg7Lt2BD8kg390HdaQYLBn8HAwqATh/zFDQ
iFYpQgG8Ts4UVuCJG6UxTiv7fNNS+KzpSdAcKM6rKcBlg0DDlmuL4MV0+pehSpFb
2DSEkZz43yR3nRWpBqUVamrFEMuy8l5HAqAK/WT86N311UWEfLBm1a/agmBpSJS/
UxLeArfd0TkkAMqe3RJxCH9rcZxRLP2TyVAc1xTd+nuYfMJHOyiTr24iWBVBjcCc
XSV62g284plP+GjfBXrXts+tszskxGj5T/v7LmH/FbuMekRXRWn66k2D7GHrAo5f
xX85W4YKOQ+qgYnsFrsnHYR3wchT1PLPX77uZUzQpdQ1
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:25:40 2026 by rpki-client