Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/1JOaqNM9A3nCFLqF-iNDuqob3ts.roa
File: 1JOaqNM9A3nCFLqF-iNDuqob3ts.roa (raw, json)
Hash identifier: qr9TO0T1nkwwLSyPbZ6XdvaujTVE8opngK+YtQym/kk=
Subject key identifier: D4:93:9A:A8:D3:3D:03:79:C2:14:BA:85:FA:23:43:BA:AA:1B:DE:DB
Certificate issuer: /CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Certificate serial: 019F69EBC399D55A1A15DF96968B49DA80E2
Authority key identifier: BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/1JOaqNM9A3nCFLqF-iNDuqob3ts.roa
Signing time: Thu 16 Jul 2026 07:54:46 +0000
ROA not before: Thu 16 Jul 2026 07:54:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44309
IP address blocks: 185.229.136.0/24 maxlen: 24
185.229.137.0/24 maxlen: 24
185.229.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:69:eb:c3:99:d5:5a:1a:15:df:96:96:8b:49:da:80:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Validity
Not Before: Jul 16 07:54:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4939aa8d33d0379c214ba85fa2343baaa1bdedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:52:d0:02:7e:f6:81:71:41:64:c6:79:ed:b1:
9a:dc:4c:de:62:2a:2d:45:1c:f9:c9:81:af:6f:98:
e4:00:2a:30:38:64:fa:5b:63:37:25:ef:07:df:49:
16:6f:4c:78:52:ba:43:ae:f2:c8:b2:b3:85:3d:fb:
52:ba:80:2a:39:3d:fa:dd:4e:10:d1:c2:59:61:83:
3d:c5:be:60:1f:aa:4e:d5:38:4f:e9:5c:00:c4:f5:
4b:1a:79:c2:6d:e3:b8:e3:ac:da:71:25:7b:cf:8d:
4e:83:4d:59:c0:fc:c7:e4:36:e8:34:39:36:b3:2d:
70:e9:fe:56:aa:7e:5c:04:7d:9a:45:3f:f6:7b:04:
ad:52:b5:3c:4d:47:cb:24:30:3d:8b:e0:d8:36:18:
23:84:57:51:5b:b3:66:5d:f6:1e:0b:c9:c8:0b:69:
94:a6:ae:5f:61:6b:26:be:45:fb:93:38:24:eb:8c:
35:3e:d2:78:7a:49:1a:e0:91:09:d4:be:96:fc:b2:
75:ba:c4:ed:5e:b9:4f:24:2a:fe:bf:23:9f:5c:f5:
7b:20:52:f0:2e:39:68:ad:02:d7:66:44:44:c3:82:
56:f9:e7:21:1d:2b:9d:68:53:a9:aa:7e:9e:7b:eb:
3a:63:79:0a:c0:53:5d:27:12:6e:2a:49:5b:15:69:
8d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:93:9A:A8:D3:3D:03:79:C2:14:BA:85:FA:23:43:BA:AA:1B:DE:DB
X509v3 Authority Key Identifier:
keyid:BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/1JOaqNM9A3nCFLqF-iNDuqob3ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.136.0/23
185.229.139.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:2e:1f:0f:e0:51:26:27:59:2b:ae:bd:b9:92:3d:c0:42:2a:
20:f0:d4:c9:9b:0d:47:e4:ab:15:c1:33:4f:e4:df:8d:37:9e:
1e:3f:a0:45:9c:df:6e:ea:bd:96:e7:92:79:a8:2a:8d:7e:53:
bd:c5:61:f6:ea:3d:b1:dc:ba:15:91:e0:2b:5a:9c:3d:45:2d:
e3:c2:ff:3b:e9:04:cf:ec:c4:1d:62:3d:14:b6:76:4f:60:74:
05:2f:5b:8b:53:70:65:36:e3:63:34:8f:16:c2:89:6a:2f:b0:
aa:a5:80:b5:37:51:ed:9c:0f:e2:d9:00:a7:04:3f:be:5a:97:
75:29:50:27:3c:29:ff:63:09:4d:b7:7f:43:ee:85:45:14:4b:
15:67:f7:d7:7a:a9:1a:ed:4c:06:43:99:79:ec:58:e3:f6:65:
ad:30:44:20:b5:04:ff:20:f3:4e:1c:4b:88:59:ef:ae:cc:ea:
29:78:99:76:db:4d:7e:06:06:34:79:ed:4c:b4:4f:81:3b:75:
c8:55:e6:c8:c3:5f:02:07:82:c0:3d:a1:0b:1e:86:0b:d4:0a:
d8:84:95:f0:2e:1e:22:2a:f1:a9:99:da:e8:7c:4f:26:67:bd:
86:54:f7:08:31:0b:b1:08:80:5f:9b:3f:99:94:dd:50:4b:60:
28:5e:c7:26
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ9p68OZ1VoaFd+WlotJ2oDiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjODdiOWNmYzNlZTBjNDQ5NjVlYTIwOWMwNGZkOGU4ZjQ4
ZmE0MmYwHhcNMjYwNzE2MDc1NDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDkzOWFhOGQzM2QwMzc5YzIxNGJhODVmYTIzNDNiYWFhMWJkZWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFLQAn72gXFBZMZ57bGa3EzeYiot
RRz5yYGvb5jkACowOGT6W2M3Je8H30kWb0x4UrpDrvLIsrOFPftSuoAqOT363U4Q
0cJZYYM9xb5gH6pO1ThP6VwAxPVLGnnCbeO446zacSV7z41Og01ZwPzH5DboNDk2
sy1w6f5Wqn5cBH2aRT/2ewStUrU8TUfLJDA9i+DYNhgjhFdRW7NmXfYeC8nIC2mU
pq5fYWsmvkX7kzgk64w1PtJ4ekka4JEJ1L6W/LJ1usTtXrlPJCr+vyOfXPV7IFLw
LjlorQLXZkREw4JW+echHSudaFOpqn6ee+s6Y3kKwFNdJxJuKklbFWmNGwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNSTmqjTPQN5whS6hfojQ7qqG97bMB8GA1UdIwQY
MBaAFLyHuc/D7gxEll6iCcBP2Oj0j6QvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkllNXo4UHVERVNXWHFJSndFX1k2UFNQcEM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS81N2U4ZDctNDlhYi00ZDFlLWE4MDgt
NDVmYWJlM2Y5ZjMzLzEvMUpPYXFOTTlBM25DRkxxRi1pTkR1cW9iM3RzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS81N2U4ZDctNDlhYi00ZDFlLWE4MDgtNDVmYWJlM2Y5ZjMz
LzEvdkllNXo4UHVERVNXWHFJSndFX1k2UFNQcEM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBueWIAwQA
ueWLMA0GCSqGSIb3DQEBCwUAA4IBAQA9Lh8P4FEmJ1krrr25kj3AQiog8NTJmw1H
5KsVwTNP5N+NN54eP6BFnN9u6r2W55J5qCqNflO9xWH26j2x3LoVkeArWpw9RS3j
wv876QTP7MQdYj0UtnZPYHQFL1uLU3BlNuNjNI8WwolqL7CqpYC1N1HtnA/i2QCn
BD++Wpd1KVAnPCn/YwlNt39D7oVFFEsVZ/fXeqka7UwGQ5l57Fjj9mWtMEQgtQT/
IPNOHEuIWe+uzOopeJl2201+BgY0ee1MtE+BO3XIVebIw18CB4LAPaELHoYL1ArY
hJXwLh4iKvGpmdrofE8mZ72GVPcIMQuxCIBfmz+ZlN1QS2AoXscm
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:17:05 2026 by rpki-client