Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/N2hdkNTYOGqgW-2z7I2L2W726cg.roa
File: N2hdkNTYOGqgW-2z7I2L2W726cg.roa (raw, json)
Hash identifier: +V63+wGYl8NMUG+4AXEpAFTMSrZt1PqBAvD4BIyWtoc=
Subject key identifier: 37:68:5D:90:D4:D8:38:6A:A0:5B:ED:B3:EC:8D:8B:D9:6E:F6:E9:C8
Certificate issuer: /CN=e5100a621d1fa344107325d3519467eca1145eb9
Certificate serial: 019F23683E8560EEBAFD5452269AB00FC791
Authority key identifier: E5:10:0A:62:1D:1F:A3:44:10:73:25:D3:51:94:67:EC:A1:14:5E:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RAKYh0fo0QQcyXTUZRn7KEUXrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/N2hdkNTYOGqgW-2z7I2L2W726cg.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60205
IP address blocks: 185.25.44.0/22 maxlen: 24
2a00:61a0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5RAKYh0fo0QQcyXTUZRn7KEUXrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3e:85:60:ee:ba:fd:54:52:26:9a:b0:0f:c7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5100a621d1fa344107325d3519467eca1145eb9
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37685d90d4d8386aa05bedb3ec8d8bd96ef6e9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:95:63:40:75:40:11:00:46:96:5d:87:fc:f2:
54:90:9c:5c:e4:29:76:01:01:12:dc:b4:9f:fd:a2:
ee:e1:03:81:e9:e0:16:ae:7b:ae:69:fa:e4:01:f8:
08:d4:c3:19:86:ac:0f:e2:8b:a2:e7:e4:8b:70:4f:
f8:cf:86:91:84:86:dc:f2:c6:d2:81:51:0c:30:70:
f7:22:a6:c3:dc:fc:e7:87:c6:70:58:50:bc:ec:0d:
22:44:6f:91:d5:7a:58:e9:3a:57:13:8b:57:b8:70:
25:49:1a:ec:db:b6:55:6e:42:87:3e:24:c7:5b:96:
f7:28:76:8b:d1:62:88:32:89:4f:21:45:47:6d:85:
44:70:bc:f9:78:f1:1a:94:ad:14:d0:bb:89:e4:05:
f7:ed:a8:b5:fd:e0:5a:5a:e0:8d:5d:b0:89:20:60:
81:c2:5d:a9:13:7e:10:18:af:05:bd:b8:cf:28:df:
a3:74:e4:81:0a:fe:66:db:43:9e:83:e6:f3:d2:87:
3e:e7:87:29:c8:1d:10:db:93:5e:97:e9:e9:b5:37:
99:44:23:1b:fe:74:25:d4:c4:7a:b1:d9:db:ed:41:
d2:47:37:c3:8d:a6:95:b5:7a:de:22:af:23:93:82:
c5:27:5d:92:6a:8b:87:00:3a:e3:1c:e5:ad:18:76:
8e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:68:5D:90:D4:D8:38:6A:A0:5B:ED:B3:EC:8D:8B:D9:6E:F6:E9:C8
X509v3 Authority Key Identifier:
keyid:E5:10:0A:62:1D:1F:A3:44:10:73:25:D3:51:94:67:EC:A1:14:5E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RAKYh0fo0QQcyXTUZRn7KEUXrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/N2hdkNTYOGqgW-2z7I2L2W726cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/5RAKYh0fo0QQcyXTUZRn7KEUXrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.44.0/22
IPv6:
2a00:61a0::/29
Signature Algorithm: sha256WithRSAEncryption
79:37:46:07:df:06:e0:0b:4c:ca:f2:b4:4e:47:ca:3a:6a:06:
c1:08:ca:b2:53:80:97:46:f1:15:66:63:80:ac:c8:44:e6:e1:
7e:86:64:3c:d0:cd:f3:79:72:e1:0d:f1:7a:7c:ce:3d:d6:be:
bc:af:d2:c5:38:5e:41:5c:6b:b6:69:b1:b8:89:80:4e:e6:45:
a3:b0:3d:f3:8b:f8:74:10:f2:a5:95:4d:48:8a:9f:d4:6b:85:
9d:9b:29:c9:ab:93:b4:4f:24:48:5c:0e:99:a0:26:a2:58:aa:
19:08:eb:bb:d7:e5:d6:78:40:8d:ac:13:eb:d8:45:63:8d:72:
9a:93:d3:91:fc:e2:bc:ca:90:dc:ac:92:1e:84:62:9f:b2:30:
d3:e6:8f:c6:99:d5:48:5d:d6:7c:ad:f3:87:72:49:11:1c:08:
e6:c2:15:5d:57:1f:04:e3:eb:ce:d6:bf:96:24:54:ab:ea:64:
0d:05:bd:1c:9c:77:2f:5a:fe:25:a3:06:ae:62:b6:4a:d6:24:
14:c8:2b:28:97:df:df:83:d0:fe:a7:a2:2a:a9:f4:45:46:5b:
07:50:e2:01:77:14:3e:59:e0:60:68:b2:e2:ff:f7:77:6c:e9:
9c:39:9d:61:f4:70:15:35:bb:8e:53:3e:6c:e1:41:ac:c9:84:
47:12:bf:a9
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaD6FYO66/VRSJpqwD8eRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MTAwYTYyMWQxZmEzNDQxMDczMjVkMzUxOTQ2N2VjYTEx
NDVlYjkwHhcNMjYwNzAyMTUxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzY4NWQ5MGQ0ZDgzODZhYTA1YmVkYjNlYzhkOGJkOTZlZjZlOWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpVjQHVAEQBGll2H/PJUkJxc5Cl2
AQES3LSf/aLu4QOB6eAWrnuuafrkAfgI1MMZhqwP4oui5+SLcE/4z4aRhIbc8sbS
gVEMMHD3IqbD3Pznh8ZwWFC87A0iRG+R1XpY6TpXE4tXuHAlSRrs27ZVbkKHPiTH
W5b3KHaL0WKIMolPIUVHbYVEcLz5ePEalK0U0LuJ5AX37ai1/eBaWuCNXbCJIGCB
wl2pE34QGK8FvbjPKN+jdOSBCv5m20Oeg+bz0oc+54cpyB0Q25Nel+nptTeZRCMb
/nQl1MR6sdnb7UHSRzfDjaaVtXreIq8jk4LFJ12SaouHADrjHOWtGHaOxQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDdoXZDU2DhqoFvts+yNi9lu9unIMB8GA1UdIwQY
MBaAFOUQCmIdH6NEEHMl01GUZ+yhFF65MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVJBS1loMGZvMFFRY3lYVFVaUm43S0VVWHJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9mMmRhNzgtMmQ5OC00MDgxLTlkNjct
NDNiZjY1NWYzMzY1LzEvTjJoZGtOVFlPR3FnVy0yejdJMkwyVzcyNmNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9mMmRhNzgtMmQ5OC00MDgxLTlkNjctNDNiZjY1NWYzMzY1
LzEvNVJBS1loMGZvMFFRY3lYVFVaUm43S0VVWHJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuRksMA0E
AgACMAcDBQMqAGGgMA0GCSqGSIb3DQEBCwUAA4IBAQB5N0YH3wbgC0zK8rROR8o6
agbBCMqyU4CXRvEVZmOArMhE5uF+hmQ80M3zeXLhDfF6fM491r68r9LFOF5BXGu2
abG4iYBO5kWjsD3zi/h0EPKllU1Iip/Ua4WdmynJq5O0TyRIXA6ZoCaiWKoZCOu7
1+XWeECNrBPr2EVjjXKak9OR/OK8ypDcrJIehGKfsjDT5o/GmdVIXdZ8rfOHckkR
HAjmwhVdVx8E4+vO1r+WJFSr6mQNBb0cnHcvWv4lowauYrZK1iQUyCsol9/fg9D+
p6IqqfRFRlsHUOIBdxQ+WeBgaLLi//d3bOmcOZ1h9HAVNbuOUz5s4UGsyYRHEr+p
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:13 2026 by rpki-client