Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/liKRFliJG9HmzqpkhjZr0nxWozg.roa
File: liKRFliJG9HmzqpkhjZr0nxWozg.roa (raw, json)
Hash identifier: /xPWEbs1m0lm+Et8vhC1fCxdl4sfLjj/5sEcemF1W1k=
Subject key identifier: 96:22:91:16:58:89:1B:D1:E6:CE:AA:64:86:36:6B:D2:7C:56:A3:38
Certificate issuer: /CN=958b3a784924ef7995d7af1fbd176788a6c2b754
Certificate serial: 019F2368956AC0B98C53AD22591BDCE28166
Authority key identifier: 95:8B:3A:78:49:24:EF:79:95:D7:AF:1F:BD:17:67:88:A6:C2:B7:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/liKRFliJG9HmzqpkhjZr0nxWozg.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30758
IP address blocks: 185.48.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:95:6a:c0:b9:8c:53:ad:22:59:1b:dc:e2:81:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958b3a784924ef7995d7af1fbd176788a6c2b754
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9622911658891bd1e6ceaa6486366bd27c56a338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4b:b4:48:9a:70:6d:8d:62:bb:d8:9e:5f:64:
0e:b0:64:b3:94:ab:d9:4e:48:4b:0b:0f:90:29:84:
bc:03:07:7d:1d:f0:47:cb:92:f3:c4:8c:2a:fa:72:
32:c2:57:6d:75:a6:24:ea:21:80:09:86:94:f6:fc:
2f:18:18:f7:b4:1c:b4:0c:1f:24:b3:67:9f:4a:87:
3d:b8:67:33:a8:f9:78:5d:98:5f:9b:25:52:9f:68:
54:d9:2d:20:b2:35:b9:27:7a:04:3d:2a:50:c4:30:
9a:8d:25:bb:4b:7d:f8:c9:a0:a7:fd:3c:0b:d7:89:
9d:35:6e:cc:6e:9d:c0:68:65:da:6a:22:7d:7e:30:
a6:59:4e:2a:2f:f2:a6:31:e5:a8:26:35:eb:74:5c:
62:63:bd:4d:88:cb:25:55:15:ae:ac:19:48:a7:af:
57:ec:22:10:01:26:4e:6c:f0:51:f6:71:a8:15:54:
6b:76:5a:0e:39:bb:74:02:e9:79:13:0b:f4:4e:74:
eb:07:04:2a:1a:76:d0:e3:45:d8:21:47:aa:c6:3b:
58:95:fc:7e:50:c6:87:5d:de:15:24:38:4f:42:16:
39:ad:97:a5:17:fc:36:35:a9:14:03:29:3c:d6:2d:
02:42:a0:80:ed:6b:84:c3:ed:ec:df:b5:3c:18:7b:
5d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:22:91:16:58:89:1B:D1:E6:CE:AA:64:86:36:6B:D2:7C:56:A3:38
X509v3 Authority Key Identifier:
keyid:95:8B:3A:78:49:24:EF:79:95:D7:AF:1F:BD:17:67:88:A6:C2:B7:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/liKRFliJG9HmzqpkhjZr0nxWozg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.25.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:86:de:33:09:12:f5:0e:e3:b8:47:55:9a:60:ed:96:2d:76:
4f:72:40:e6:9c:95:29:a0:5e:36:dc:5c:3f:b3:cd:f1:04:48:
53:68:97:f9:15:55:a6:33:fe:b8:07:64:dc:a1:0d:22:e5:c9:
ea:5e:6d:9f:07:14:82:da:e0:f4:62:f7:55:c8:47:2f:e6:a4:
60:82:7a:bd:29:1c:a4:06:6e:ff:b4:38:c2:a4:4c:81:af:2b:
ca:a9:e4:a1:a3:fb:8d:88:c2:bd:d6:60:07:40:d6:14:0d:43:
65:0f:fa:64:13:e5:2d:8a:64:76:82:49:ab:ac:83:a1:70:66:
27:7c:17:ee:34:53:96:5c:fb:24:b0:58:a3:7f:d0:48:17:9d:
4b:55:e3:85:7a:15:c9:94:68:20:7a:d5:43:af:89:07:e4:9b:
d6:a9:36:a3:7f:6f:bc:6c:99:f2:5a:51:86:b2:82:01:75:c0:
9f:c6:bc:2d:5d:a2:5c:a1:91:7d:dd:1f:13:8f:8a:c4:ae:e7:
ed:9f:0a:94:ce:54:1b:fa:3b:2e:4e:b1:da:b0:1b:d8:01:df:
f7:8c:e1:ed:10:04:82:e1:f3:65:d0:c8:fa:1c:01:b3:96:0b:
c1:0b:a0:19:f8:8e:4c:d5:5a:a7:5c:d7:d0:4f:b0:a3:7c:f5:
13:85:9f:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaJVqwLmMU60iWRvc4oFmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1OGIzYTc4NDkyNGVmNzk5NWQ3YWYxZmJkMTc2Nzg4YTZj
MmI3NTQwHhcNMjYwNzAyMTUxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjIyOTExNjU4ODkxYmQxZTZjZWFhNjQ4NjM2NmJkMjdjNTZhMzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUu0SJpwbY1iu9ieX2QOsGSzlKvZ
TkhLCw+QKYS8Awd9HfBHy5LzxIwq+nIywldtdaYk6iGACYaU9vwvGBj3tBy0DB8k
s2efSoc9uGczqPl4XZhfmyVSn2hU2S0gsjW5J3oEPSpQxDCajSW7S334yaCn/TwL
14mdNW7Mbp3AaGXaaiJ9fjCmWU4qL/KmMeWoJjXrdFxiY71NiMslVRWurBlIp69X
7CIQASZObPBR9nGoFVRrdloOObt0Aul5Ewv0TnTrBwQqGnbQ40XYIUeqxjtYlfx+
UMaHXd4VJDhPQhY5rZelF/w2NakUAyk81i0CQqCA7WuEw+3s37U8GHtdmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJYikRZYiRvR5s6qZIY2a9J8VqM4MB8GA1UdIwQY
MBaAFJWLOnhJJO95ldevH70XZ4imwrdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFlzNmVFa2s3M21WMTY4ZnZSZG5pS2JDdDFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9mMTNmOTgtNGU3YS00MzVkLWIxYjAt
ODM4NmU3MGJkYzU4LzEvbGlLUkZsaUpHOUhtenFwa2hqWnIwbnhXb3pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9mMTNmOTgtNGU3YS00MzVkLWIxYjAtODM4NmU3MGJkYzU4
LzEvbFlzNmVFa2s3M21WMTY4ZnZSZG5pS2JDdDFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTAZMA0G
CSqGSIb3DQEBCwUAA4IBAQB7ht4zCRL1DuO4R1WaYO2WLXZPckDmnJUpoF423Fw/
s83xBEhTaJf5FVWmM/64B2TcoQ0i5cnqXm2fBxSC2uD0YvdVyEcv5qRggnq9KRyk
Bm7/tDjCpEyBryvKqeSho/uNiMK91mAHQNYUDUNlD/pkE+UtimR2gkmrrIOhcGYn
fBfuNFOWXPsksFijf9BIF51LVeOFehXJlGggetVDr4kH5JvWqTajf2+8bJnyWlGG
soIBdcCfxrwtXaJcoZF93R8Tj4rEruftnwqUzlQb+jsuTrHasBvYAd/3jOHtEASC
4fNl0Mj6HAGzlgvBC6AZ+I5M1VqnXNfQT7CjfPUThZ81
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:05:48 2026 by rpki-client