Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/1-ztMd_gBTxeC8uA2Q0YdYpsYMeo.roa
File: 1-ztMd_gBTxeC8uA2Q0YdYpsYMeo.roa (raw, json)
Hash identifier: WXcCQ4Yl4FGns7m2jmJSD78rirZ3yMRIuiQENmN/+zw=
Subject key identifier: FB:3B:4C:77:F8:01:4F:17:82:F2:E0:36:43:46:1D:62:9B:18:31:EA
Certificate issuer: /CN=22ffc723d157934043134ceed03424a942859d83
Certificate serial: 019F23683A1E59BB567AD6685000E4CCA7CA
Authority key identifier: 22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/1-ztMd_gBTxeC8uA2Q0YdYpsYMeo.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25521
IP address blocks: 46.30.160.0/21 maxlen: 24
82.193.96.0/19 maxlen: 24
91.224.24.0/23 maxlen: 24
93.188.32.0/21 maxlen: 24
176.115.96.0/21 maxlen: 24
185.223.112.0/22 maxlen: 24
193.0.216.0/22 maxlen: 24
193.106.136.0/22 maxlen: 24
195.64.148.0/23 maxlen: 24
2a02:2610::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3a:1e:59:bb:56:7a:d6:68:50:00:e4:cc:a7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ffc723d157934043134ceed03424a942859d83
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb3b4c77f8014f1782f2e03643461d629b1831ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:8c:f5:55:1a:e9:16:80:ff:f8:02:ab:ea:
da:a8:56:52:5d:87:df:61:1a:82:c6:d2:a3:60:05:
5b:ca:b8:c7:dd:1e:e4:36:65:5b:32:11:82:be:25:
8e:d6:1b:5a:88:8a:f8:ff:97:e3:81:45:e6:db:df:
cc:54:ee:e7:ab:89:2f:fa:3f:b9:29:34:29:c9:5f:
25:17:fb:58:9e:51:3f:16:aa:82:48:b5:52:06:af:
31:6e:64:b6:09:f3:b9:af:5e:72:60:4d:60:f9:89:
41:d2:ae:38:32:ef:da:34:ac:03:74:33:4f:03:21:
41:d5:f1:59:d1:83:f0:5e:d8:6f:2d:c8:52:5e:8f:
11:fa:34:47:7b:92:e1:c1:21:be:19:43:5e:98:ca:
ab:92:b5:a8:11:d1:62:2b:4b:45:a8:56:26:dd:c5:
dc:29:db:5d:5d:72:fb:71:aa:38:c7:5d:f0:11:29:
09:6b:1b:79:de:9e:95:c9:b9:8c:02:41:02:07:60:
a2:63:ee:74:3a:f3:1f:f5:02:b4:00:0c:40:ba:cd:
1d:a1:49:99:58:56:eb:0a:5f:2f:26:a7:3b:43:c2:
06:87:eb:4c:ef:a1:c9:6b:02:50:59:9c:9a:7a:20:
2d:4b:c2:e1:c4:7b:f9:8c:4c:4c:ea:ff:a2:3a:52:
1f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3B:4C:77:F8:01:4F:17:82:F2:E0:36:43:46:1D:62:9B:18:31:EA
X509v3 Authority Key Identifier:
keyid:22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/1-ztMd_gBTxeC8uA2Q0YdYpsYMeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.160.0/21
82.193.96.0/19
91.224.24.0/23
93.188.32.0/21
176.115.96.0/21
185.223.112.0/22
193.0.216.0/22
193.106.136.0/22
195.64.148.0/23
IPv6:
2a02:2610::/32
Signature Algorithm: sha256WithRSAEncryption
25:3f:b6:b7:c2:9f:c8:e1:78:71:f8:08:bd:ba:cd:8c:14:a6:
9e:cc:95:9c:d8:5d:05:55:4e:6d:b1:2d:ba:7e:68:8b:cc:a9:
86:82:17:6b:b8:6c:f3:fd:d9:47:8b:92:01:bd:74:98:aa:75:
c8:11:86:d9:69:c7:ae:1b:17:7b:04:2f:a6:54:54:66:83:5a:
d1:f4:ef:45:62:43:2c:a9:c4:91:bd:a8:8a:4e:27:0c:a9:76:
1d:6f:da:f3:ea:e4:64:ac:ca:21:4a:c8:7d:76:f2:96:95:f1:
9e:72:18:dc:b5:ce:4d:44:96:5d:1e:1f:18:be:8c:4e:99:3f:
52:fc:ca:37:11:dd:0b:09:ce:c5:04:17:a8:56:1a:56:28:be:
9d:11:75:f3:75:eb:39:ae:2d:33:20:ec:7f:bb:99:22:f6:ed:
1a:a2:35:50:10:33:7c:0d:ec:7c:58:11:7c:17:d9:65:49:aa:
bc:27:46:68:36:3a:67:71:a2:15:4d:e5:91:60:1d:b5:67:ee:
99:90:c0:90:60:6a:56:6b:20:10:4c:48:65:bb:db:f3:16:97:
e6:01:8d:bd:b3:c3:d5:f7:09:10:c3:0f:b2:e7:f7:5a:11:89:
d8:9b:b0:0f:19:93:74:81:a3:93:e7:46:be:b8:c9:36:ae:d7:
20:cc:bc:6a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAZ8jaDoeWbtWetZoUADkzKfKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZmZjNzIzZDE1NzkzNDA0MzEzNGNlZWQwMzQyNGE5NDI4
NTlkODMwHhcNMjYwNzAyMTUxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjNiNGM3N2Y4MDE0ZjE3ODJmMmUwMzY0MzQ2MWQ2MjliMTgzMWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxqM9VUa6RaA//gCq+raqFZSXYff
YRqCxtKjYAVbyrjH3R7kNmVbMhGCviWO1htaiIr4/5fjgUXm29/MVO7nq4kv+j+5
KTQpyV8lF/tYnlE/FqqCSLVSBq8xbmS2CfO5r15yYE1g+YlB0q44Mu/aNKwDdDNP
AyFB1fFZ0YPwXthvLchSXo8R+jRHe5LhwSG+GUNemMqrkrWoEdFiK0tFqFYm3cXc
KdtdXXL7cao4x13wESkJaxt53p6VybmMAkECB2CiY+50OvMf9QK0AAxAus0doUmZ
WFbrCl8vJqc7Q8IGh+tM76HJawJQWZyaeiAtS8LhxHv5jExM6v+iOlIfDQIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFPs7THf4AU8XgvLgNkNGHWKbGDHqMB8GA1UdIwQY
MBaAFCL/xyPRV5NAQxNM7tA0JKlChZ2DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZfSEk5RlhrMEJERTB6dTBEUWtxVUtGbllNLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTct
MDYwYWMwODkwOTY2LzEvMS16dE1kX2dCVHhlQzh1QTJRMFlkWXBzWU1lby5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTkvNGE3NTM5LWIxNDktNDhlOS04OGU3LTA2MGFjMDg5MDk2
Ni8xL0l2X0hJOUZYazBCREUwenUwRFFrcVVLRm5ZTS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBeBggrBgEFBQcBBwEB/wRPME0wPAQCAAEwNgMEAy4eoAME
BVLBYAMEAVvgGAMEA128IAMEA7BzYAMEArnfcAMEAsEA2AMEAsFqiAMEAcNAlDAN
BAIAAjAHAwUAKgImEDANBgkqhkiG9w0BAQsFAAOCAQEAJT+2t8KfyOF4cfgIvbrN
jBSmnsyVnNhdBVVObbEtun5oi8yphoIXa7hs8/3ZR4uSAb10mKp1yBGG2WnHrhsX
ewQvplRUZoNa0fTvRWJDLKnEkb2oik4nDKl2HW/a8+rkZKzKIUrIfXbylpXxnnIY
3LXOTUSWXR4fGL6MTpk/UvzKNxHdCwnOxQQXqFYaVii+nRF183XrOa4tMyDsf7uZ
IvbtGqI1UBAzfA3sfFgRfBfZZUmqvCdGaDY6Z3GiFU3lkWAdtWfumZDAkGBqVmsg
EExIZbvb8xaX5gGNvbPD1fcJEMMPsuf3WhGJ2JuwDxmTdIGjk+dGvrjJNq7XIMy8
ag==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:36:28 2026 by rpki-client