Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/RHorQ2xcAb-F7Xna9K5af7FEmzs.roa
File: RHorQ2xcAb-F7Xna9K5af7FEmzs.roa (raw, json)
Hash identifier: S44AKUCf5f+EQxBGcjX+XoCjjJ0ey5c7k0eoY9Ekr5g=
Subject key identifier: 44:7A:2B:43:6C:5C:01:BF:85:ED:79:DA:F4:AE:5A:7F:B1:44:9B:3B
Certificate issuer: /CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Certificate serial: 019F2368ACD8814247F1F53BFBFD857AAE6B
Authority key identifier: F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/RHorQ2xcAb-F7Xna9K5af7FEmzs.roa
Signing time: Thu 02 Jul 2026 15:18:10 +0000
ROA not before: Thu 02 Jul 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29177
IP address blocks: 194.20.142.0/23 maxlen: 24
194.20.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ac:d8:81:42:47:f1:f5:3b:fb:fd:85:7a:ae:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Validity
Not Before: Jul 2 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=447a2b436c5c01bf85ed79daf4ae5a7fb1449b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:07:c6:f3:69:c8:78:98:a8:18:5e:0f:9a:7d:
2d:08:8d:8f:57:84:c7:a5:34:f8:da:3b:9f:6f:a4:
ba:88:8f:52:5e:20:12:dc:a9:0e:ca:84:9b:fa:1d:
f2:e0:b7:ab:7f:57:47:30:76:5b:d3:02:52:70:4b:
79:b2:06:3d:25:c4:a3:c9:50:6d:92:2b:f4:06:5b:
22:7f:50:e2:9a:38:2a:18:57:0b:81:92:9b:8f:75:
23:d3:00:19:36:40:a3:6a:51:84:54:de:74:45:b9:
60:72:fb:b0:6f:53:5f:7a:2e:e3:79:5c:c4:09:ac:
f3:08:33:6a:b4:84:94:46:af:91:64:dc:0e:2a:fb:
fb:33:5d:ee:62:80:10:38:5c:9a:24:1c:bb:82:91:
d6:65:45:93:21:1e:4a:b2:69:46:6a:bf:b7:1c:7f:
88:6a:d0:9f:7d:6e:3e:4b:25:4d:aa:75:63:9e:2e:
ce:c6:1e:43:33:e9:c5:59:3f:46:dc:ce:b1:59:59:
0f:1c:0a:ef:a7:fb:3e:71:20:33:0e:43:20:4d:d8:
0e:ea:39:29:8f:8a:df:e4:bf:69:f3:93:66:8a:10:
85:d8:1c:df:19:41:ff:78:29:30:3e:0d:6c:b3:76:
a4:57:e7:d9:70:65:18:b7:98:78:01:c4:07:b4:83:
dd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7A:2B:43:6C:5C:01:BF:85:ED:79:DA:F4:AE:5A:7F:B1:44:9B:3B
X509v3 Authority Key Identifier:
keyid:F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/RHorQ2xcAb-F7Xna9K5af7FEmzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.20.142.0-194.20.145.255
Signature Algorithm: sha256WithRSAEncryption
43:80:26:28:93:ff:4b:b9:5a:f3:65:f2:f3:cc:65:62:a1:ca:
fc:83:f5:37:9e:3c:aa:77:4d:7d:db:fd:13:77:05:2c:4a:7b:
95:f5:63:fe:d1:a7:ee:06:5f:be:06:e1:74:d1:76:cb:f7:ae:
d1:f2:b9:0a:68:82:de:94:85:a0:21:b1:fd:b9:77:9f:49:3e:
06:6b:f3:b4:59:88:63:29:9c:5a:da:8a:61:7a:3f:73:4b:29:
b4:c5:42:ff:07:24:3f:64:1d:0c:b2:5c:86:c9:56:9f:d9:86:
3c:62:28:52:73:a8:d1:0f:d9:92:03:9d:19:2e:99:1a:29:f3:
e8:cb:94:a9:f7:0d:bd:68:12:37:01:8b:2d:b1:14:c9:27:cd:
4d:d7:62:5a:de:bc:23:20:ec:b6:eb:66:b0:c0:fe:fa:5a:e8:
70:05:85:04:ff:85:81:93:47:9e:26:31:7b:d9:23:bd:c7:28:
36:b9:4c:69:5d:a3:e3:2f:a3:ec:28:5c:ef:10:42:0a:3e:d9:
ac:93:e3:49:d4:84:ec:c0:18:29:e4:f2:7d:ed:a6:5e:94:2a:
2f:79:41:01:3a:18:82:5f:f2:fa:a6:4e:84:1f:fa:e8:90:f8:
c9:39:93:83:21:54:9c:ac:71:ae:9b:10:71:0f:9a:dd:e2:f7:
84:dd:5d:c0
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ8jaKzYgUJH8fU7+/2Feq5rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMzk5NTMxNGQ3YzJjNzA1M2IxY2ZmM2UxM2Y5NjUwMmFh
ZWFiY2YwHhcNMjYwNzAyMTUxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDdhMmI0MzZjNWMwMWJmODVlZDc5ZGFmNGFlNWE3ZmIxNDQ5YjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gfG82nIeJioGF4Pmn0tCI2PV4TH
pTT42jufb6S6iI9SXiAS3KkOyoSb+h3y4Lerf1dHMHZb0wJScEt5sgY9JcSjyVBt
kiv0Blsif1DimjgqGFcLgZKbj3Uj0wAZNkCjalGEVN50Rblgcvuwb1Nfei7jeVzE
CazzCDNqtISURq+RZNwOKvv7M13uYoAQOFyaJBy7gpHWZUWTIR5KsmlGar+3HH+I
atCffW4+SyVNqnVjni7Oxh5DM+nFWT9G3M6xWVkPHArvp/s+cSAzDkMgTdgO6jkp
j4rf5L9p85NmihCF2BzfGUH/eCkwPg1ss3akV+fZcGUYt5h4AcQHtIPdOQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFER6K0NsXAG/he152vSuWn+xRJs7MB8GA1UdIwQY
MBaAFPA5lTFNfCxwU7HP8+E/llAqrqvPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOERtVk1VMThMSEJUc2NfejRULVdVQ3F1cTg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjct
NWI1ZTMzY2U3MGFkLzEvUkhvclEyeGNBYi1GN1huYTlLNWFmN0ZFbXpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjctNWI1ZTMzY2U3MGFk
LzEvOERtVk1VMThMSEJUc2NfejRULVdVQ3F1cTg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHCFI4D
BAHCFJAwDQYJKoZIhvcNAQELBQADggEBAEOAJiiT/0u5WvNl8vPMZWKhyvyD9Tee
PKp3TX3b/RN3BSxKe5X1Y/7Rp+4GX74G4XTRdsv3rtHyuQpogt6UhaAhsf25d59J
PgZr87RZiGMpnFraimF6P3NLKbTFQv8HJD9kHQyyXIbJVp/ZhjxiKFJzqNEP2ZID
nRkumRop8+jLlKn3Db1oEjcBiy2xFMknzU3XYlrevCMg7LbrZrDA/vpa6HAFhQT/
hYGTR54mMXvZI73HKDa5TGldo+Mvo+woXO8QQgo+2ayT40nUhOzAGCnk8n3tpl6U
Ki95QQE6GIJf8vqmToQf+uiQ+Mk5k4MhVJysca6bEHEPmt3i94TdXcA=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:11 2026 by rpki-client