Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/tJdEpKTyQFiB6etKYnTD5TRM42I.roa
File: tJdEpKTyQFiB6etKYnTD5TRM42I.roa (raw, json)
Hash identifier: fkYiQBu5Trdut7tZ/7hqit0Set+zAtJH4HGx3n50MEc=
Subject key identifier: B4:97:44:A4:A4:F2:40:58:81:E9:EB:4A:62:74:C3:E5:34:4C:E3:62
Certificate issuer: /CN=c00ff7c991c15d38bfdffb3ae3cb988356529ec2
Certificate serial: 019F6B31B13F02A38C2BE9813B7A3B836D37
Authority key identifier: C0:0F:F7:C9:91:C1:5D:38:BF:DF:FB:3A:E3:CB:98:83:56:52:9E:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wA_3yZHBXTi_3_s648uYg1ZSnsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/tJdEpKTyQFiB6etKYnTD5TRM42I.roa
Signing time: Thu 16 Jul 2026 13:50:46 +0000
ROA not before: Thu 16 Jul 2026 13:50:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198433
IP address blocks: 203.1.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wA_3yZHBXTi_3_s648uYg1ZSnsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:31:b1:3f:02:a3:8c:2b:e9:81:3b:7a:3b:83:6d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00ff7c991c15d38bfdffb3ae3cb988356529ec2
Validity
Not Before: Jul 16 13:50:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b49744a4a4f2405881e9eb4a6274c3e5344ce362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:76:20:0f:7c:b0:cc:19:24:1d:14:c6:89:
ef:80:fd:5d:69:10:58:b1:79:a2:83:a4:34:4e:82:
12:b2:53:96:2b:ec:f7:fd:98:54:98:73:eb:af:96:
cb:c0:79:0f:61:d3:6b:3f:b6:ff:23:1d:99:eb:ca:
ed:7e:27:97:dd:9f:50:50:d8:08:c2:da:6f:2d:7e:
27:13:2c:53:a9:5a:a0:3d:47:0d:e4:51:b7:1a:11:
0b:62:c4:b0:65:09:12:17:ec:0f:8c:86:04:09:49:
93:49:d4:98:35:ef:e6:94:65:fb:eb:28:ef:60:c9:
bb:ca:60:c7:fe:5c:2d:2f:c8:1f:e0:47:59:86:a8:
7e:7d:a6:47:e3:e0:b5:e2:8b:c2:53:95:50:03:ff:
5e:cd:8e:93:ec:2f:04:bd:a3:f3:d1:0a:4c:30:bc:
16:37:19:e1:4b:37:1d:85:60:07:26:4b:f1:cb:73:
0a:e8:de:03:ec:4e:e6:9d:fb:a0:b0:0d:2b:cb:65:
92:98:95:13:d3:a0:26:12:bb:00:9a:e1:8d:17:f7:
33:23:4d:11:25:6f:29:95:e0:bc:3b:8d:3f:75:b6:
b0:76:28:06:f3:1d:35:98:22:c2:37:ff:6e:24:c7:
39:07:df:a4:fd:7f:53:ce:f9:ff:42:98:43:9f:e2:
d3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:97:44:A4:A4:F2:40:58:81:E9:EB:4A:62:74:C3:E5:34:4C:E3:62
X509v3 Authority Key Identifier:
keyid:C0:0F:F7:C9:91:C1:5D:38:BF:DF:FB:3A:E3:CB:98:83:56:52:9E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wA_3yZHBXTi_3_s648uYg1ZSnsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/tJdEpKTyQFiB6etKYnTD5TRM42I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/029a0c-0e6a-4ac2-9538-afb025676505/1/wA_3yZHBXTi_3_s648uYg1ZSnsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.1.19.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:d3:38:fb:cf:a2:8f:fb:d5:4d:cd:ea:be:97:ad:bb:ee:8a:
5d:7f:27:07:e2:9c:3c:fe:e0:b0:55:ea:72:f3:80:d8:99:d8:
72:31:d7:b4:db:d6:0c:9a:90:58:69:4e:fd:ab:1f:76:1a:50:
3b:62:83:db:89:6c:85:87:72:13:e7:5a:02:eb:c5:df:73:a6:
47:0c:53:78:81:c9:7f:4d:2c:7b:3c:7f:46:f6:38:0b:9b:80:
fe:a6:6c:93:aa:b8:6a:6b:74:f6:35:27:08:25:c3:09:93:58:
4c:94:98:a7:79:29:6e:9a:19:2c:61:b2:c7:ad:43:b3:e9:f9:
36:27:e7:df:1b:88:37:20:f2:36:99:57:7a:54:14:1f:38:06:
7b:b0:f6:64:8c:61:3a:b6:25:2b:eb:42:04:d2:74:14:21:27:
d2:5d:4d:db:f8:c5:4c:2b:93:9e:5d:5e:1b:7d:94:89:46:68:
9a:1a:cb:03:36:a9:c0:b4:f5:3e:d9:06:c5:e2:90:76:9c:50:
58:a4:d6:34:5d:6d:c3:57:1d:a4:4a:4e:5e:ea:bc:f0:2f:06:
9f:43:ed:28:21:88:02:6e:72:94:fa:f8:75:e4:3c:be:ab:32:
94:68:64:57:87:81:39:d0:e9:98:01:69:55:15:a2:35:d3:44:
4c:03:1f:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9rMbE/AqOMK+mBO3o7g203MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMGZmN2M5OTFjMTVkMzhiZmRmZmIzYWUzY2I5ODgzNTY1
MjllYzIwHhcNMjYwNzE2MTM1MDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDk3NDRhNGE0ZjI0MDU4ODFlOWViNGE2Mjc0YzNlNTM0NGNlMzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNp2IA98sMwZJB0UxonvgP1daRBY
sXmig6Q0ToISslOWK+z3/ZhUmHPrr5bLwHkPYdNrP7b/Ix2Z68rtfieX3Z9QUNgI
wtpvLX4nEyxTqVqgPUcN5FG3GhELYsSwZQkSF+wPjIYECUmTSdSYNe/mlGX76yjv
YMm7ymDH/lwtL8gf4EdZhqh+faZH4+C14ovCU5VQA/9ezY6T7C8EvaPz0QpMMLwW
NxnhSzcdhWAHJkvxy3MK6N4D7E7mnfugsA0ry2WSmJUT06AmErsAmuGNF/czI00R
JW8pleC8O40/dbawdigG8x01mCLCN/9uJMc5B9+k/X9Tzvn/QphDn+LTcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLSXRKSk8kBYgenrSmJ0w+U0TONiMB8GA1UdIwQY
MBaAFMAP98mRwV04v9/7OuPLmINWUp7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0FfM3laSEJYVGlfM19zNjQ4dVlnMVpTbnNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wMjlhMGMtMGU2YS00YWMyLTk1Mzgt
YWZiMDI1Njc2NTA1LzEvdEpkRXBLVHlRRmlCNmV0S1luVEQ1VFJNNDJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wMjlhMGMtMGU2YS00YWMyLTk1MzgtYWZiMDI1Njc2NTA1
LzEvd0FfM3laSEJYVGlfM19zNjQ4dVlnMVpTbnNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAywETMA0G
CSqGSIb3DQEBCwUAA4IBAQCk0zj7z6KP+9VNzeq+l6277opdfycH4pw8/uCwVepy
84DYmdhyMde029YMmpBYaU79qx92GlA7YoPbiWyFh3IT51oC68Xfc6ZHDFN4gcl/
TSx7PH9G9jgLm4D+pmyTqrhqa3T2NScIJcMJk1hMlJineSlumhksYbLHrUOz6fk2
J+ffG4g3IPI2mVd6VBQfOAZ7sPZkjGE6tiUr60IE0nQUISfSXU3b+MVMK5OeXV4b
fZSJRmiaGssDNqnAtPU+2QbF4pB2nFBYpNY0XW3DVx2kSk5e6rzwLwafQ+0oIYgC
bnKU+vh15Dy+qzKUaGRXh4E50OmYAWlVFaI100RMAx/x
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:50 2026 by rpki-client