Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/AU8OktUluDemDAVdWC4o1rs1CnY.roa
File: AU8OktUluDemDAVdWC4o1rs1CnY.roa (raw, json)
Hash identifier: RjEeTRpnG44Tfxlx6Pp88uWbFbQRVFzej/AZva1uDPU=
Subject key identifier: 01:4F:0E:92:D5:25:B8:37:A6:0C:05:5D:58:2E:28:D6:BB:35:0A:76
Certificate issuer: /CN=bd73232047e9f9701d81f711bc73d5da7bfa1352
Certificate serial: 019F9343E3BA275ADE11D1966A0CEFEEF9F0
Authority key identifier: BD:73:23:20:47:E9:F9:70:1D:81:F7:11:BC:73:D5:DA:7B:FA:13:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXMjIEfp-XAdgfcRvHPV2nv6E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/AU8OktUluDemDAVdWC4o1rs1CnY.roa
Signing time: Fri 24 Jul 2026 08:35:27 +0000
ROA not before: Fri 24 Jul 2026 08:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38923
IP address blocks: 83.142.136.0/21 maxlen: 24
193.218.148.0/22 maxlen: 24
194.54.16.0/22 maxlen: 24
195.206.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXMjIEfp-XAdgfcRvHPV2nv6E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:43:e3:ba:27:5a:de:11:d1:96:6a:0c:ef:ee:f9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd73232047e9f9701d81f711bc73d5da7bfa1352
Validity
Not Before: Jul 24 08:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=014f0e92d525b837a60c055d582e28d6bb350a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:de:77:a8:b0:55:78:95:33:d3:84:71:27:3f:
d5:cf:60:a1:48:ab:f4:98:65:8e:91:3a:b7:54:a8:
41:57:c9:19:aa:7f:a5:04:a5:ae:ed:24:97:fe:ad:
2f:bc:2f:55:6a:38:27:9f:94:aa:e3:32:8b:34:c9:
12:d8:3d:06:10:32:54:14:5a:5c:2c:06:4a:96:72:
38:ec:c1:3a:06:e9:b0:b9:80:67:6a:c3:10:c1:74:
d3:a6:e6:82:0e:4d:51:f0:29:34:93:12:4e:cd:86:
e2:73:a7:1f:4c:e1:fd:55:43:f6:cf:2e:7d:e2:f7:
73:8f:2c:95:82:97:01:91:0c:bb:7c:f3:d4:c9:00:
d7:71:ba:ef:14:f1:aa:49:84:1e:dc:4f:b3:be:1f:
dd:2c:2d:6c:65:65:1c:b5:b2:02:20:2f:42:b6:15:
02:ab:0e:5c:e1:8a:bb:f4:54:e1:a8:58:fb:fa:88:
84:75:b2:e4:3b:33:31:95:95:02:7c:ea:6a:d0:7d:
2c:ba:3e:ce:74:e3:8e:83:b1:ca:ee:83:2d:ab:18:
5d:19:02:50:78:33:6c:71:6e:0d:08:e5:88:66:c9:
7f:f3:c0:79:de:09:75:4f:83:6d:11:e2:e2:68:5c:
ef:04:e6:fd:69:f4:ed:4c:c6:a4:64:b0:43:f1:0d:
0d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4F:0E:92:D5:25:B8:37:A6:0C:05:5D:58:2E:28:D6:BB:35:0A:76
X509v3 Authority Key Identifier:
keyid:BD:73:23:20:47:E9:F9:70:1D:81:F7:11:BC:73:D5:DA:7B:FA:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXMjIEfp-XAdgfcRvHPV2nv6E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/AU8OktUluDemDAVdWC4o1rs1CnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.136.0/21
193.218.148.0/22
194.54.16.0/22
195.206.112.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:d4:81:0d:f3:19:e5:3c:9e:4a:91:a7:5f:d6:e3:78:ef:45:
c1:62:ba:e0:24:f7:90:cb:c3:6d:94:ae:8c:7b:d0:64:0b:64:
dc:81:58:62:51:a0:3c:45:90:e0:f8:90:5b:3c:33:27:a7:da:
8e:89:49:a2:fc:5b:9e:22:7b:fd:45:d4:d8:b8:9e:63:da:9a:
52:b7:ae:21:7f:2e:fa:44:17:8c:ef:58:7c:6f:ba:4c:e3:72:
ad:91:0a:03:c9:db:84:20:ea:fb:fb:aa:65:99:17:7f:83:cc:
f0:7f:97:17:ea:90:17:af:8d:a3:bf:27:65:c4:52:93:99:2c:
27:fc:b2:f2:25:46:37:a2:4b:75:8b:02:71:9e:a9:cc:d9:2e:
b7:d4:bc:f2:b8:7e:c7:02:69:e8:8c:5f:5b:e8:55:89:11:ee:
53:db:c9:d8:23:26:bf:e8:22:23:92:b8:08:83:65:bf:2d:87:
0b:40:39:f4:8c:1b:29:71:38:57:46:62:6e:d1:54:af:6c:0e:
41:fb:39:bb:9c:c4:e7:02:9c:df:fd:88:b0:e7:e3:ca:04:41:
23:3c:3e:5a:40:65:7e:33:15:b2:e9:5f:fc:eb:d1:4b:2a:d6:
c5:94:7d:25:7a:92:c0:d4:5d:65:75:54:1b:db:4a:3f:c7:12:
e2:26:fa:f1
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ+TQ+O6J1reEdGWagzv7vnwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNzMyMzIwNDdlOWY5NzAxZDgxZjcxMWJjNzNkNWRhN2Jm
YTEzNTIwHhcNMjYwNzI0MDgzNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTRmMGU5MmQ1MjViODM3YTYwYzA1NWQ1ODJlMjhkNmJiMzUwYTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd53qLBVeJUz04RxJz/Vz2ChSKv0
mGWOkTq3VKhBV8kZqn+lBKWu7SSX/q0vvC9Vajgnn5Sq4zKLNMkS2D0GEDJUFFpc
LAZKlnI47ME6BumwuYBnasMQwXTTpuaCDk1R8Ck0kxJOzYbic6cfTOH9VUP2zy59
4vdzjyyVgpcBkQy7fPPUyQDXcbrvFPGqSYQe3E+zvh/dLC1sZWUctbICIC9CthUC
qw5c4Yq79FThqFj7+oiEdbLkOzMxlZUCfOpq0H0suj7OdOOOg7HK7oMtqxhdGQJQ
eDNscW4NCOWIZsl/88B53gl1T4NtEeLiaFzvBOb9afTtTMakZLBD8Q0NrwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFAFPDpLVJbg3pgwFXVguKNa7NQp2MB8GA1UdIwQY
MBaAFL1zIyBH6flwHYH3Ebxz1dp7+hNSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlhNaklFZnAtWEFkZ2ZjUnZIUFYybnY2RTFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zZjIzNTUtNjZmZi00MGI3LTk4ZDYt
ZDk1YTM4ZjBjMDZlLzEvQVU4T2t0VWx1RGVtREFWZFdDNG8xcnMxQ25ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zZjIzNTUtNjZmZi00MGI3LTk4ZDYtZDk1YTM4ZjBjMDZl
LzEvdlhNaklFZnAtWEFkZ2ZjUnZIUFYybnY2RTFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDU46IAwQC
wdqUAwQCwjYQAwQCw85wMA0GCSqGSIb3DQEBCwUAA4IBAQDK1IEN8xnlPJ5Kkadf
1uN470XBYrrgJPeQy8NtlK6Me9BkC2TcgVhiUaA8RZDg+JBbPDMnp9qOiUmi/Fue
Inv9RdTYuJ5j2ppSt64hfy76RBeM71h8b7pM43KtkQoDyduEIOr7+6plmRd/g8zw
f5cX6pAXr42jvydlxFKTmSwn/LLyJUY3okt1iwJxnqnM2S631LzyuH7HAmnojF9b
6FWJEe5T28nYIya/6CIjkrgIg2W/LYcLQDn0jBspcThXRmJu0VSvbA5B+zm7nMTn
Apzf/Yiw5+PKBEEjPD5aQGV+MxWy6V/869FLKtbFlH0lepLA1F1ldVQb20o/xxLi
Jvrx
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:35 2026 by rpki-client