Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/RsOEMIH24_zjcm5Tb9OM-o4S8HM.roa
File: RsOEMIH24_zjcm5Tb9OM-o4S8HM.roa (raw, json)
Hash identifier: 6XnQ+iDSw/RX0OUv6MFChlZfoWbfa+RL33606GyYig4=
Subject key identifier: 46:C3:84:30:81:F6:E3:FC:E3:72:6E:53:6F:D3:8C:FA:8E:12:F0:73
Certificate issuer: /CN=1af1b50c254bd3247e8b295d585e62066e6bb5d4
Certificate serial: 019F236898C8EE464F690C893537A4CDF0D7
Authority key identifier: 1A:F1:B5:0C:25:4B:D3:24:7E:8B:29:5D:58:5E:62:06:6E:6B:B5:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvG1DCVL0yR-iyldWF5iBm5rtdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/RsOEMIH24_zjcm5Tb9OM-o4S8HM.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41477
IP address blocks: 146.19.127.0/24 maxlen: 24
185.122.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/GvG1DCVL0yR-iyldWF5iBm5rtdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/GvG1DCVL0yR-iyldWF5iBm5rtdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvG1DCVL0yR-iyldWF5iBm5rtdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:98:c8:ee:46:4f:69:0c:89:35:37:a4:cd:f0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1af1b50c254bd3247e8b295d585e62066e6bb5d4
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46c3843081f6e3fce3726e536fd38cfa8e12f073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:36:fd:4c:e7:2a:a3:a4:c7:8e:49:f9:71:6e:
5b:e0:ae:95:76:b0:93:98:2f:12:45:b1:65:e3:4b:
0f:d9:0b:8e:9e:a3:e0:6d:d5:d2:5f:87:10:1d:33:
e1:97:c5:4a:02:b2:e3:ea:67:83:d4:83:aa:48:bc:
c2:5d:71:4b:62:4c:f2:c0:b4:b3:99:e2:31:08:58:
87:41:ba:03:b1:a3:d1:97:d3:95:55:ca:0b:a6:7f:
cb:a7:fd:3c:9a:ea:8a:8f:92:94:8b:01:60:7e:57:
70:84:2f:39:45:8d:ad:94:16:4d:72:a6:4f:d9:68:
63:48:51:c8:54:23:55:bb:e4:7c:20:bd:02:a2:4d:
c8:a0:92:d6:69:70:9c:eb:8e:2c:e7:c2:23:60:6c:
cd:6c:6f:55:6d:34:19:2d:c5:b0:1c:5a:5d:5c:fe:
df:d7:c0:0f:3a:eb:96:8d:d4:25:76:db:95:0f:cb:
1c:1e:1e:9d:ec:6e:76:75:02:42:ba:2c:2b:a1:cf:
6a:98:c3:56:56:e1:d3:bb:e2:6e:56:a2:8c:57:82:
ee:d9:33:0e:c8:dc:8f:54:83:cd:a3:b1:b5:f5:8b:
16:70:e8:92:3e:ad:e3:e8:cd:bd:56:81:7a:6e:00:
b5:b6:50:43:b4:eb:ec:af:86:49:62:01:5f:12:e9:
82:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C3:84:30:81:F6:E3:FC:E3:72:6E:53:6F:D3:8C:FA:8E:12:F0:73
X509v3 Authority Key Identifier:
keyid:1A:F1:B5:0C:25:4B:D3:24:7E:8B:29:5D:58:5E:62:06:6E:6B:B5:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvG1DCVL0yR-iyldWF5iBm5rtdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/RsOEMIH24_zjcm5Tb9OM-o4S8HM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/GvG1DCVL0yR-iyldWF5iBm5rtdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.127.0/24
185.122.244.0/22
Signature Algorithm: sha256WithRSAEncryption
11:c2:34:e9:b7:dd:02:dc:bd:41:4d:e6:85:c5:81:85:d1:ef:
fb:ab:62:f7:c1:5b:16:f4:16:b7:ba:24:6c:12:5a:5c:3c:98:
81:c2:5b:a6:85:8e:8c:99:37:1d:eb:a0:1a:90:1f:96:5b:17:
b8:a8:20:c1:a4:51:0d:1f:37:f8:a1:8a:85:e7:01:13:2a:11:
6a:df:4c:32:5b:a8:14:81:69:ad:57:d6:1b:2b:d5:b5:26:4f:
22:dc:50:73:bd:c7:bf:11:0c:93:10:25:cb:1c:29:e6:ad:8a:
bf:97:af:c9:22:12:ae:22:3e:04:d4:f1:dd:a5:e1:db:09:1e:
12:2b:f2:c4:24:b5:a9:ea:cb:bd:b0:2e:1d:a7:68:2e:10:81:
bc:2c:08:32:f4:5a:fe:5e:aa:43:c3:97:7a:c2:45:0f:33:67:
74:0f:91:b9:5a:fb:b7:07:5d:fd:82:ec:92:f7:80:7e:7c:cb:
e6:88:fd:34:e5:3d:91:14:22:a6:43:78:b4:4d:ca:cc:e0:72:
3f:5b:76:2e:62:80:33:a8:73:8b:d7:b0:97:62:04:e6:cb:7a:
ac:fc:43:86:17:ac:12:33:f5:32:e5:d9:1f:ad:b5:55:9d:d9:
9b:b3:96:2c:5a:b6:80:db:7a:a7:b2:51:1d:87:75:ca:84:71:
fe:26:60:1e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8jaJjI7kZPaQyJNTekzfDXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZjFiNTBjMjU0YmQzMjQ3ZThiMjk1ZDU4NWU2MjA2NmU2
YmI1ZDQwHhcNMjYwNzAyMTUxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmMzODQzMDgxZjZlM2ZjZTM3MjZlNTM2ZmQzOGNmYThlMTJmMDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojb9TOcqo6THjkn5cW5b4K6VdrCT
mC8SRbFl40sP2QuOnqPgbdXSX4cQHTPhl8VKArLj6meD1IOqSLzCXXFLYkzywLSz
meIxCFiHQboDsaPRl9OVVcoLpn/Lp/08muqKj5KUiwFgfldwhC85RY2tlBZNcqZP
2WhjSFHIVCNVu+R8IL0Cok3IoJLWaXCc644s58IjYGzNbG9VbTQZLcWwHFpdXP7f
18APOuuWjdQldtuVD8scHh6d7G52dQJCuiwroc9qmMNWVuHTu+JuVqKMV4Lu2TMO
yNyPVIPNo7G19YsWcOiSPq3j6M29VoF6bgC1tlBDtOvsr4ZJYgFfEumCiwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEbDhDCB9uP843JuU2/TjPqOEvBzMB8GA1UdIwQY
MBaAFBrxtQwlS9MkfospXVheYgZua7XUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3ZHMURDVkwweVItaXlsZFdGNWlCbTVydGRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8yNWI0N2UtNDA3OS00ZjIxLTkxMWIt
ZjM4OWE1MjY5ZmIyLzEvUnNPRU1JSDI0X3pqY201VGI5T00tbzRTOEhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8yNWI0N2UtNDA3OS00ZjIxLTkxMWItZjM4OWE1MjY5ZmIy
LzEvR3ZHMURDVkwweVItaXlsZFdGNWlCbTVydGRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkhN/AwQC
uXr0MA0GCSqGSIb3DQEBCwUAA4IBAQARwjTpt90C3L1BTeaFxYGF0e/7q2L3wVsW
9Ba3uiRsElpcPJiBwlumhY6MmTcd66AakB+WWxe4qCDBpFENHzf4oYqF5wETKhFq
30wyW6gUgWmtV9YbK9W1Jk8i3FBzvce/EQyTECXLHCnmrYq/l6/JIhKuIj4E1PHd
peHbCR4SK/LEJLWp6su9sC4dp2guEIG8LAgy9Fr+XqpDw5d6wkUPM2d0D5G5Wvu3
B139guyS94B+fMvmiP005T2RFCKmQ3i0TcrM4HI/W3YuYoAzqHOL17CXYgTmy3qs
/EOGF6wSM/Uy5dkfrbVVndmbs5YsWraA23qnslEdh3XKhHH+JmAe
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:50:56 2026 by rpki-client