Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/tmXRQcCYhINr2gZL0cRubH_ch2k.roa
File: tmXRQcCYhINr2gZL0cRubH_ch2k.roa (raw, json)
Hash identifier: j7OzX8w8hg3VPQ17U1GWH4ZU5mHgI9S7cGktHlSkmlc=
Subject key identifier: B6:65:D1:41:C0:98:84:83:6B:DA:06:4B:D1:C4:6E:6C:7F:DC:87:69
Certificate issuer: /CN=ddb182a5dbd1bee871de519002d6018fee213670
Certificate serial: 019F236830D1F0C4139B6002FC608148B0C7
Authority key identifier: DD:B1:82:A5:DB:D1:BE:E8:71:DE:51:90:02:D6:01:8F:EE:21:36:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/tmXRQcCYhINr2gZL0cRubH_ch2k.roa
Signing time: Thu 02 Jul 2026 15:17:38 +0000
ROA not before: Thu 02 Jul 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34916
IP address blocks: 85.204.193.0/24 maxlen: 24
86.104.231.0/24 maxlen: 24
86.105.204.0/23 maxlen: 23
86.105.226.0/24 maxlen: 24
86.106.27.0/24 maxlen: 24
89.44.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:30:d1:f0:c4:13:9b:60:02:fc:60:81:48:b0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb182a5dbd1bee871de519002d6018fee213670
Validity
Not Before: Jul 2 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b665d141c09884836bda064bd1c46e6c7fdc8769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b6:52:b4:7c:ab:1c:25:21:1a:d8:28:c5:6b:
56:db:ba:1d:95:40:bc:44:ce:15:f1:6b:a2:4b:d5:
7c:eb:94:74:90:12:2b:ea:d3:19:50:c1:cf:d8:6a:
4c:90:2e:6a:16:65:7c:aa:91:02:63:ca:fb:38:af:
87:4f:8a:b3:be:86:43:12:dc:33:91:49:3c:a7:31:
51:e2:02:cf:79:93:a2:cf:c3:22:2b:4a:ba:9d:28:
54:55:7b:1b:ca:6f:19:af:b3:6e:a4:34:8e:e7:32:
62:87:64:d3:73:0f:3c:e0:f1:2b:24:72:38:d2:bf:
6c:30:4d:50:e6:83:f2:39:3e:bf:46:66:55:8e:53:
3b:b3:6a:6d:e2:78:60:4f:f0:ab:7a:12:3d:45:e9:
03:c0:c2:df:39:96:a1:f1:4b:bb:c0:d1:5e:4a:12:
fb:fd:67:07:86:43:2c:4d:bd:1b:1c:aa:dc:ea:ae:
e3:a0:5c:0e:41:01:48:13:72:5f:58:64:82:7e:99:
99:b7:1c:79:54:a2:49:74:46:21:b2:f9:69:23:5a:
6b:7d:30:d2:7d:21:4b:18:59:23:67:bd:40:7f:43:
e3:15:c4:50:cd:e2:40:9f:9b:41:c6:a3:4d:26:91:
bb:7c:df:ff:f5:37:11:94:2b:13:25:7e:36:9f:a1:
6c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:65:D1:41:C0:98:84:83:6B:DA:06:4B:D1:C4:6E:6C:7F:DC:87:69
X509v3 Authority Key Identifier:
keyid:DD:B1:82:A5:DB:D1:BE:E8:71:DE:51:90:02:D6:01:8F:EE:21:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/tmXRQcCYhINr2gZL0cRubH_ch2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.193.0/24
86.104.231.0/24
86.105.204.0/23
86.105.226.0/24
86.106.27.0/24
89.44.238.0/23
Signature Algorithm: sha256WithRSAEncryption
06:0d:86:11:24:37:f2:68:db:b0:94:d8:6a:71:ab:27:31:dd:
f6:b2:24:49:83:43:d2:3e:46:09:e1:a3:ec:34:e8:aa:c8:b4:
e1:bc:01:ef:ef:0c:ac:eb:13:d0:5d:59:2f:0d:e0:d4:c1:64:
c8:2e:cc:4d:ea:66:34:ba:c3:29:c2:c9:da:18:3c:cc:6f:09:
b5:2e:0e:2a:4a:1a:94:ee:f8:ba:ce:cc:83:13:bd:99:c6:85:
b1:2a:45:58:9c:ea:72:4d:3a:80:75:a1:a8:1f:63:29:36:37:
73:0b:d8:3e:88:05:8b:e7:b0:65:46:08:e9:65:1f:d5:0b:e9:
5d:67:19:01:7d:a1:e2:e0:71:1c:25:fb:ca:7d:18:90:09:66:
c6:95:16:54:aa:1f:51:a5:21:e1:4d:d4:41:66:c7:ce:de:62:
51:39:ae:ff:07:b2:4e:cd:a1:fb:66:f2:93:6e:e1:b6:bd:2b:
63:b9:5a:b1:03:05:32:53:06:c8:e4:54:2d:58:b5:86:f8:6d:
6c:61:ec:42:e1:87:a5:01:6f:86:ec:92:8d:d5:71:66:d6:ac:
28:00:04:c9:da:5c:99:4a:ae:98:a9:9b:f4:ee:59:35:a2:30:
d1:55:55:a5:1e:a2:c2:05:37:61:7f:57:be:e8:2f:a2:47:b4:
49:e7:57:e9
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ8jaDDR8MQTm2AC/GCBSLDHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYjE4MmE1ZGJkMWJlZTg3MWRlNTE5MDAyZDYwMThmZWUy
MTM2NzAwHhcNMjYwNzAyMTUxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjY1ZDE0MWMwOTg4NDgzNmJkYTA2NGJkMWM0NmU2YzdmZGM4NzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrZStHyrHCUhGtgoxWtW27odlUC8
RM4V8WuiS9V865R0kBIr6tMZUMHP2GpMkC5qFmV8qpECY8r7OK+HT4qzvoZDEtwz
kUk8pzFR4gLPeZOiz8MiK0q6nShUVXsbym8Zr7NupDSO5zJih2TTcw884PErJHI4
0r9sME1Q5oPyOT6/RmZVjlM7s2pt4nhgT/CrehI9RekDwMLfOZah8Uu7wNFeShL7
/WcHhkMsTb0bHKrc6q7joFwOQQFIE3JfWGSCfpmZtxx5VKJJdEYhsvlpI1prfTDS
fSFLGFkjZ71Af0PjFcRQzeJAn5tBxqNNJpG7fN//9TcRlCsTJX42n6FsKwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFLZl0UHAmISDa9oGS9HEbmx/3IdpMB8GA1UdIwQY
MBaAFN2xgqXb0b7ocd5RkALWAY/uITZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2JHQ3BkdlJ2dWh4M2xHUUF0WUJqLTRoTm5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82OTJiMWUtYzlmZS00M2UwLWI3MjIt
NTNhNjA0ODA3NjFkLzEvdG1YUlFjQ1loSU5yMmdaTDBjUnViSF9jaDJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS82OTJiMWUtYzlmZS00M2UwLWI3MjItNTNhNjA0ODA3NjFk
LzEvM2JHQ3BkdlJ2dWh4M2xHUUF0WUJqLTRoTm5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAVczBAwQA
VmjnAwQBVmnMAwQAVmniAwQAVmobAwQBWSzuMA0GCSqGSIb3DQEBCwUAA4IBAQAG
DYYRJDfyaNuwlNhqcasnMd32siRJg0PSPkYJ4aPsNOiqyLThvAHv7wys6xPQXVkv
DeDUwWTILsxN6mY0usMpwsnaGDzMbwm1Lg4qShqU7vi6zsyDE72ZxoWxKkVYnOpy
TTqAdaGoH2MpNjdzC9g+iAWL57BlRgjpZR/VC+ldZxkBfaHi4HEcJfvKfRiQCWbG
lRZUqh9RpSHhTdRBZsfO3mJROa7/B7JOzaH7ZvKTbuG2vStjuVqxAwUyUwbI5FQt
WLWG+G1sYexC4YelAW+G7JKN1XFm1qwoAATJ2lyZSq6YqZv07lk1ojDRVVWlHqLC
BTdhf1e+6C+iR7RJ51fp
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:15 2026 by rpki-client