Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/aA22ktUWKuCBB4xdudp5rWotMPU.roa
File: aA22ktUWKuCBB4xdudp5rWotMPU.roa (raw, json)
Hash identifier: teC87DRmu0ZyTsL/PfYquNtl4XtzE+z+Q06ZrKW03Pc=
Subject key identifier: 68:0D:B6:92:D5:16:2A:E0:81:07:8C:5D:B9:DA:79:AD:6A:2D:30:F5
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 019F379CFFA0812668AF0E98B3D865008CBC
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/aA22ktUWKuCBB4xdudp5rWotMPU.roa
Signing time: Mon 06 Jul 2026 13:27:43 +0000
ROA not before: Mon 06 Jul 2026 13:27:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 288
IP address blocks: 195.169.140.0/24 maxlen: 24
195.169.142.0/27 maxlen: 27
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:9c:ff:a0:81:26:68:af:0e:98:b3:d8:65:00:8c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jul 6 13:27:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=680db692d5162ae081078c5db9da79ad6a2d30f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:5a:c4:7c:a4:40:9d:09:2c:bc:6b:f3:9e:
dd:c7:18:7c:cb:40:b1:3e:65:9f:50:90:c5:f3:f7:
82:75:16:fc:4b:e0:d5:a2:b6:a0:c8:c7:65:7b:68:
96:19:80:be:39:1a:ae:a2:75:08:59:3c:2d:db:8c:
b1:d9:d7:7a:5e:ab:20:07:10:9a:1d:f4:f4:aa:95:
15:34:18:2d:1a:a3:d7:79:91:01:f5:f7:d2:33:b1:
65:5c:54:e1:c3:bc:7f:b6:71:6b:87:57:79:ea:7e:
03:84:ba:06:89:85:71:8d:05:7d:9d:30:19:c3:83:
cb:c7:13:7c:45:3d:f9:13:a7:dd:4e:5e:3d:73:ae:
70:ab:44:2b:8d:ac:85:a5:e2:64:47:2f:bb:da:c9:
63:15:a2:90:cd:ae:2c:4a:32:2a:23:f8:23:27:50:
5b:f6:0b:e7:f7:28:21:c8:51:51:a7:02:45:57:55:
a1:ab:87:1e:6b:41:73:ef:be:29:68:8b:1d:63:91:
5d:e8:55:83:b2:23:1d:50:92:1a:59:58:3e:7f:9f:
6b:a9:3b:90:56:1a:94:25:48:82:7f:2f:ee:2d:63:
c1:46:12:b8:8f:82:62:5b:ce:48:49:42:ae:4b:9b:
13:32:c8:3d:29:a5:fe:91:be:95:99:65:40:3e:71:
75:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0D:B6:92:D5:16:2A:E0:81:07:8C:5D:B9:DA:79:AD:6A:2D:30:F5
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/aA22ktUWKuCBB4xdudp5rWotMPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.169.140.0/24
195.169.142.0/27
Signature Algorithm: sha256WithRSAEncryption
20:fb:e4:d4:f8:6f:15:6f:23:68:0e:65:50:04:f9:71:59:de:
4e:5c:88:14:90:8f:a3:38:1f:20:53:05:40:03:20:56:55:3a:
4c:9c:c1:f5:cf:49:52:b0:0a:c0:a3:31:d5:06:af:7d:f5:cc:
8b:9f:d1:d0:2f:be:fb:0d:d3:4d:6e:cf:cc:61:55:be:33:23:
f1:aa:54:d0:b7:62:8a:e9:89:a9:fa:a2:ca:35:59:95:7f:40:
dc:bd:9e:54:f0:9c:20:1d:8a:f9:44:a3:b4:fa:06:74:02:a4:
84:b3:5b:d8:7a:09:71:02:1e:b2:1c:be:52:ed:51:27:8c:17:
8a:1c:f2:63:93:34:bd:01:43:54:7a:f4:2b:25:59:89:54:35:
ce:1a:d8:43:e2:d6:34:20:7e:c4:21:4e:76:7e:23:75:92:4d:
84:02:ba:83:f4:11:87:8e:f0:16:0c:02:bb:71:9f:bb:7e:d2:
51:a8:fc:52:86:f6:ef:6e:4f:fe:ad:8f:f4:a8:d9:43:ea:00:
43:2a:80:a1:dd:4c:6b:59:24:df:a5:78:bf:80:a5:66:94:52:
2e:7c:66:7e:4a:d6:85:44:83:61:da:6b:8e:d9:97:70:26:1e:
72:19:89:68:8b:90:c4:da:5e:42:83:d2:99:03:7e:d6:56:c3:
05:55:ba:f6
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAZ83nP+ggSZorw6Ys9hlAIy8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjYwNzA2MTMyNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODBkYjY5MmQ1MTYyYWUwODEwNzhjNWRiOWRhNzlhZDZhMmQzMGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu1axHykQJ0JLLxr857dxxh8y0Cx
PmWfUJDF8/eCdRb8S+DVoragyMdle2iWGYC+ORquonUIWTwt24yx2dd6XqsgBxCa
HfT0qpUVNBgtGqPXeZEB9ffSM7FlXFThw7x/tnFrh1d56n4DhLoGiYVxjQV9nTAZ
w4PLxxN8RT35E6fdTl49c65wq0QrjayFpeJkRy+72sljFaKQza4sSjIqI/gjJ1Bb
9gvn9yghyFFRpwJFV1Whq4cea0Fz774paIsdY5Fd6FWDsiMdUJIaWVg+f59rqTuQ
VhqUJUiCfy/uLWPBRhK4j4JiW85ISUKuS5sTMsg9KaX+kb6VmWVAPnF1yQIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFGgNtpLVFirggQeMXbnaea1qLTD1MB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEvYUEyMmt0VVdLdUNCQjR4ZHVkcDVyV290TVBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANAwQAw6mMAwUF
w6mOADANBgkqhkiG9w0BAQsFAAOCAQEAIPvk1PhvFW8jaA5lUAT5cVneTlyIFJCP
ozgfIFMFQAMgVlU6TJzB9c9JUrAKwKMx1QavffXMi5/R0C+++w3TTW7PzGFVvjMj
8apU0LdiiumJqfqiyjVZlX9A3L2eVPCcIB2K+USjtPoGdAKkhLNb2HoJcQIeshy+
Uu1RJ4wXihzyY5M0vQFDVHr0KyVZiVQ1zhrYQ+LWNCB+xCFOdn4jdZJNhAK6g/QR
h47wFgwCu3Gfu37SUaj8Uob2725P/q2P9KjZQ+oAQyqAod1Ma1kk36V4v4ClZpRS
LnxmfkrWhUSDYdprjtmXcCYechmJaIuQxNpeQoPSmQN+1lbDBVW69g==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:19:38 2026 by rpki-client