Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/R8Y7NwZ0Su2ei_m0GxBRPUQ-Dys.roa
File: R8Y7NwZ0Su2ei_m0GxBRPUQ-Dys.roa (raw, json)
Hash identifier: zenFNShckmIAOaun4ZoUOs7+2YwOPciW4C0Re8niBMQ=
Subject key identifier: 47:C6:3B:37:06:74:4A:ED:9E:8B:F9:B4:1B:10:51:3D:44:3E:0F:2B
Certificate issuer: /CN=e0527776674f9baf0bc295ed260f16b0d83b676d
Certificate serial: 019F1A3BF2C71102CCA1A565BC04433186A3
Authority key identifier: E0:52:77:76:67:4F:9B:AF:0B:C2:95:ED:26:0F:16:B0:D8:3B:67:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/R8Y7NwZ0Su2ei_m0GxBRPUQ-Dys.roa
Signing time: Tue 30 Jun 2026 20:32:44 +0000
ROA not before: Tue 30 Jun 2026 20:32:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203024
IP address blocks: 193.201.23.0/24 maxlen: 24
2a0f:9800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:3b:f2:c7:11:02:cc:a1:a5:65:bc:04:43:31:86:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0527776674f9baf0bc295ed260f16b0d83b676d
Validity
Not Before: Jun 30 20:32:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47c63b3706744aed9e8bf9b41b10513d443e0f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:41:18:07:25:a2:3a:1e:29:9e:77:91:f8:f4:
a6:db:0d:f6:ec:d1:a6:43:70:97:45:e5:d7:7d:f2:
65:95:e5:b7:59:a3:14:f5:12:8d:9a:71:0a:6f:f9:
fe:93:14:2f:7e:b9:b6:1b:6b:f4:60:d5:47:34:64:
13:dd:d6:d0:e5:60:da:e2:34:da:97:67:c8:00:c6:
3d:b0:76:46:32:20:79:80:a2:6e:d6:7d:dc:0e:53:
5c:b8:e6:f9:fc:e0:ab:97:31:5e:0a:e6:be:a6:bb:
fa:41:3e:e8:14:18:22:c0:74:27:c8:b1:68:10:69:
03:9e:3f:a0:dd:50:38:df:1e:43:c4:e7:58:6b:3b:
0b:3a:3c:30:bd:c5:3e:ba:fe:5d:1c:54:bd:52:db:
f4:85:40:42:df:c8:b0:0d:b5:7b:2b:e5:6a:01:a6:
4f:c7:21:75:5f:fc:ad:32:d0:bc:29:9e:28:d3:f2:
45:93:4d:71:87:18:35:96:54:0d:99:d3:13:ff:80:
3c:78:f8:a0:be:35:ae:6b:be:4d:66:ff:d2:e2:90:
8c:0a:ac:8b:8a:a8:61:99:c5:25:97:d2:bf:25:45:
fb:00:bc:d0:bb:9e:54:4a:b7:30:ce:24:a8:74:48:
e4:95:f6:da:36:ba:1f:16:c6:31:90:d2:db:ca:cc:
b4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C6:3B:37:06:74:4A:ED:9E:8B:F9:B4:1B:10:51:3D:44:3E:0F:2B
X509v3 Authority Key Identifier:
keyid:E0:52:77:76:67:4F:9B:AF:0B:C2:95:ED:26:0F:16:B0:D8:3B:67:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/R8Y7NwZ0Su2ei_m0GxBRPUQ-Dys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.23.0/24
IPv6:
2a0f:9800::/29
Signature Algorithm: sha256WithRSAEncryption
00:32:e2:56:f1:82:c2:83:3e:4f:fb:33:2e:06:da:5b:bf:fe:
d0:cf:fa:ce:18:26:d5:b5:9e:30:85:60:5e:aa:e0:ae:f1:37:
9c:3e:b5:0e:57:60:60:bb:c2:07:27:4f:f2:c4:fa:f0:72:7b:
73:a3:99:17:a0:4a:a1:88:45:66:5d:9d:9e:c4:10:e0:b9:05:
5e:8a:3e:9d:a4:43:7b:e6:32:f1:8d:2a:9a:80:71:69:5b:fa:
d5:bf:c7:2a:2a:28:0f:e4:aa:09:67:48:99:70:39:1a:42:57:
7c:1b:5a:db:c8:d0:ec:d1:fb:67:be:e6:02:a2:e6:98:4f:71:
97:15:75:61:14:ce:a5:2e:5e:b3:05:fc:a3:18:7d:bd:19:6b:
66:1b:00:36:10:c1:48:62:85:c7:38:95:b2:f5:65:8e:76:af:
6e:de:ec:8e:72:35:35:c3:3e:75:29:72:1e:e3:e2:3a:6b:95:
8f:17:52:98:eb:cd:d4:1f:9b:45:ec:84:5b:38:ff:2c:4a:3a:
aa:bf:ff:fc:d3:5b:dd:d4:0b:98:ae:c3:42:15:74:c5:40:21:
f2:5e:fb:b2:c6:d7:00:b2:ed:a0:ed:d6:61:06:86:f6:37:14:
69:08:7c:ff:c8:5d:82:97:28:c2:0c:72:f5:6a:9b:57:70:be:
29:26:00:9a
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8aO/LHEQLMoaVlvARDMYajMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTI3Nzc2Njc0ZjliYWYwYmMyOTVlZDI2MGYxNmIwZDgz
YjY3NmQwHhcNMjYwNjMwMjAzMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2M2M2IzNzA2NzQ0YWVkOWU4YmY5YjQxYjEwNTEzZDQ0M2UwZjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkEYByWiOh4pnneR+PSm2w327NGm
Q3CXReXXffJlleW3WaMU9RKNmnEKb/n+kxQvfrm2G2v0YNVHNGQT3dbQ5WDa4jTa
l2fIAMY9sHZGMiB5gKJu1n3cDlNcuOb5/OCrlzFeCua+prv6QT7oFBgiwHQnyLFo
EGkDnj+g3VA43x5DxOdYazsLOjwwvcU+uv5dHFS9Utv0hUBC38iwDbV7K+VqAaZP
xyF1X/ytMtC8KZ4o0/JFk01xhxg1llQNmdMT/4A8ePigvjWua75NZv/S4pCMCqyL
iqhhmcUll9K/JUX7ALzQu55USrcwziSodEjklfbaNrofFsYxkNLbysy0cQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEfGOzcGdErtnov5tBsQUT1EPg8rMB8GA1UdIwQY
MBaAFOBSd3ZnT5uvC8KV7SYPFrDYO2dtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZKM2RtZFBtNjhMd3BYdEpnOFdzTmc3WjIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8wNjc2NTAtZGQxMS00NDlmLWFjZTMt
MjBiNmYyY2Q0N2M5LzEvUjhZN053WjBTdTJlaV9tMEd4QlJQVVEtRHlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8wNjc2NTAtZGQxMS00NDlmLWFjZTMtMjBiNmYyY2Q0N2M5
LzEvNEZKM2RtZFBtNjhMd3BYdEpnOFdzTmc3WjIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwckXMA0E
AgACMAcDBQMqD5gAMA0GCSqGSIb3DQEBCwUAA4IBAQAAMuJW8YLCgz5P+zMuBtpb
v/7Qz/rOGCbVtZ4whWBequCu8TecPrUOV2Bgu8IHJ0/yxPrwcntzo5kXoEqhiEVm
XZ2exBDguQVeij6dpEN75jLxjSqagHFpW/rVv8cqKigP5KoJZ0iZcDkaQld8G1rb
yNDs0ftnvuYCouaYT3GXFXVhFM6lLl6zBfyjGH29GWtmGwA2EMFIYoXHOJWy9WWO
dq9u3uyOcjU1wz51KXIe4+I6a5WPF1KY683UH5tF7IRbOP8sSjqqv//801vd1AuY
rsNCFXTFQCHyXvuyxtcAsu2g7dZhBob2NxRpCHz/yF2ClyjCDHL1aptXcL4pJgCa
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:06 2026 by rpki-client