Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/ADSFjd7CdbzaI3rWM5WXzSr78b8.roa
File: ADSFjd7CdbzaI3rWM5WXzSr78b8.roa (raw, json)
Hash identifier: dpJ1bSM5jDKoR+wXRYlGh5z+uNOn0fdbBQpUFJegB00=
Subject key identifier: 00:34:85:8D:DE:C2:75:BC:DA:23:7A:D6:33:95:97:CD:2A:FB:F1:BF
Certificate issuer: /CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Certificate serial: 019F2368A9F18EE5F98889803EC0CE7489EA
Authority key identifier: F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/ADSFjd7CdbzaI3rWM5WXzSr78b8.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6665
IP address blocks: 194.20.232.0/21 maxlen: 24
194.20.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a9:f1:8e:e5:f9:88:89:80:3e:c0:ce:74:89:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0034858ddec275bcda237ad6339597cd2afbf1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:81:0a:19:2e:67:c0:7f:95:ad:e6:e8:3b:
21:06:20:09:eb:4b:9c:39:2d:9e:e4:79:fe:a1:cb:
81:6d:0c:14:b1:ca:c5:85:e9:2f:9e:31:80:7e:73:
fc:de:73:7d:8a:f8:d7:07:e1:32:5a:63:be:b4:64:
31:9f:63:17:59:3f:73:df:e4:78:58:f7:dd:ed:35:
ee:61:aa:f3:e0:41:7d:91:7f:15:05:b3:11:d8:2b:
89:da:1a:db:70:b3:65:d4:a6:98:67:38:31:79:e5:
8d:fd:52:4b:cf:02:3d:2f:17:13:a1:f2:cc:89:76:
b0:2f:db:64:7b:a1:2d:20:79:ce:86:56:b1:83:9f:
83:67:2a:9e:3b:7b:30:1a:ea:48:b9:08:b0:a4:59:
0c:28:64:5d:5d:08:15:12:0d:b3:32:90:5f:c6:08:
04:4c:b9:25:b6:8d:77:7e:03:aa:dc:73:af:c1:ef:
4e:f4:e5:0a:28:c8:2e:63:e0:90:71:c0:fe:ab:f6:
b8:35:b6:bc:41:49:7e:20:1b:94:38:0e:67:12:2f:
e7:49:26:f8:1d:29:7c:f8:1d:77:bd:a8:a1:2d:d8:
4b:04:96:89:39:ef:f6:fb:13:51:02:67:f8:ef:6d:
5b:ab:25:5b:3b:90:72:3b:52:8c:8f:9f:a4:f4:0f:
b0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:34:85:8D:DE:C2:75:BC:DA:23:7A:D6:33:95:97:CD:2A:FB:F1:BF
X509v3 Authority Key Identifier:
keyid:F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/ADSFjd7CdbzaI3rWM5WXzSr78b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.20.232.0-194.20.247.255
Signature Algorithm: sha256WithRSAEncryption
c8:cd:ba:96:f3:12:4a:61:e0:15:48:b4:f3:86:fc:aa:46:92:
67:f8:63:3e:69:2e:83:32:b8:eb:ac:7e:82:9e:8f:15:c0:70:
1f:82:18:26:2a:d5:65:9a:fb:14:7a:67:b7:12:59:1e:df:8b:
0e:54:46:7a:b6:d9:35:57:21:74:1e:2b:9d:c0:ed:40:42:ef:
9b:ba:9b:d9:d5:f7:fd:41:79:f8:34:19:49:e2:1a:5f:09:2f:
c4:90:7b:06:ad:a4:b5:9c:35:a5:77:91:2b:fe:95:1b:5e:12:
31:5c:05:56:ae:6c:7d:fd:c4:65:2b:50:f4:b0:95:80:9a:ef:
4a:d2:34:67:dd:53:78:1d:8b:84:9f:00:58:1f:e6:dc:da:60:
76:5c:c1:b9:b5:75:35:de:9a:5b:c6:85:65:6c:b9:38:e9:f6:
44:f1:49:59:3c:3f:eb:b1:fc:7e:a6:a2:7f:78:f3:2c:03:0e:
e1:7f:8c:82:72:2e:22:6d:ee:61:5e:e0:f2:9a:a9:d3:57:ca:
50:05:b0:be:83:85:6e:e0:2f:fc:03:a3:1a:fc:22:8c:49:31:
f6:6e:d9:9e:60:69:d3:26:fe:00:fa:79:64:72:0d:06:cf:f9:
8c:89:24:9b:9c:ae:f5:b1:cc:3f:5b:97:cb:fa:95:42:39:37:
55:4c:23:3a
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ8jaKnxjuX5iImAPsDOdInqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMzk5NTMxNGQ3YzJjNzA1M2IxY2ZmM2UxM2Y5NjUwMmFh
ZWFiY2YwHhcNMjYwNzAyMTUxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDM0ODU4ZGRlYzI3NWJjZGEyMzdhZDYzMzk1OTdjZDJhZmJmMWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4yBChkuZ8B/la3m6DshBiAJ60uc
OS2e5Hn+ocuBbQwUscrFhekvnjGAfnP83nN9ivjXB+EyWmO+tGQxn2MXWT9z3+R4
WPfd7TXuYarz4EF9kX8VBbMR2CuJ2hrbcLNl1KaYZzgxeeWN/VJLzwI9LxcTofLM
iXawL9tke6EtIHnOhlaxg5+DZyqeO3swGupIuQiwpFkMKGRdXQgVEg2zMpBfxggE
TLklto13fgOq3HOvwe9O9OUKKMguY+CQccD+q/a4Nba8QUl+IBuUOA5nEi/nSSb4
HSl8+B13vaihLdhLBJaJOe/2+xNRAmf4721bqyVbO5ByO1KMj5+k9A+wCwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFAA0hY3ewnW82iN61jOVl80q+/G/MB8GA1UdIwQY
MBaAFPA5lTFNfCxwU7HP8+E/llAqrqvPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOERtVk1VMThMSEJUc2NfejRULVdVQ3F1cTg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjct
NWI1ZTMzY2U3MGFkLzEvQURTRmpkN0NkYnphSTNyV001V1h6U3I3OGI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjctNWI1ZTMzY2U3MGFk
LzEvOERtVk1VMThMSEJUc2NfejRULVdVQ3F1cTg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAPCFOgD
BAPCFPAwDQYJKoZIhvcNAQELBQADggEBAMjNupbzEkph4BVItPOG/KpGkmf4Yz5p
LoMyuOusfoKejxXAcB+CGCYq1WWa+xR6Z7cSWR7fiw5URnq22TVXIXQeK53A7UBC
75u6m9nV9/1Befg0GUniGl8JL8SQewatpLWcNaV3kSv+lRteEjFcBVaubH39xGUr
UPSwlYCa70rSNGfdU3gdi4SfAFgf5tzaYHZcwbm1dTXemlvGhWVsuTjp9kTxSVk8
P+ux/H6mon948ywDDuF/jIJyLiJt7mFe4PKaqdNXylAFsL6DhW7gL/wDoxr8IoxJ
MfZu2Z5gadMm/gD6eWRyDQbP+YyJJJucrvWxzD9bl8v6lUI5N1VMIzo=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:29 2026 by rpki-client