Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/_axzcFhLDGGR4sv8QLqgaVPeZLg.roa
File: _axzcFhLDGGR4sv8QLqgaVPeZLg.roa (raw, json)
Hash identifier: 0ELmAmWAy/TUmV7JbvaRF67zOVFNgHGzya+qArU3iX4=
Subject key identifier: FD:AC:73:70:58:4B:0C:61:91:E2:CB:FC:40:BA:A0:69:53:DE:64:B8
Certificate issuer: /CN=22ffc723d157934043134ceed03424a942859d83
Certificate serial: 019F23683C947BF98D29A12DBBB49C3FB087
Authority key identifier: 22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/_axzcFhLDGGR4sv8QLqgaVPeZLg.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59613
IP address blocks: 185.158.208.0/22 maxlen: 24
185.158.208.0/24 maxlen: 24
185.158.209.0/24 maxlen: 24
185.158.210.0/24 maxlen: 24
185.158.211.0/24 maxlen: 24
195.234.112.0/24 maxlen: 24
195.234.113.0/24 maxlen: 24
195.234.114.0/24 maxlen: 24
195.234.115.0/24 maxlen: 24
2a02:2278:ff00::/40 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3c:94:7b:f9:8d:29:a1:2d:bb:b4:9c:3f:b0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ffc723d157934043134ceed03424a942859d83
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fdac7370584b0c6191e2cbfc40baa06953de64b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:9a:65:17:e7:9c:5b:61:d9:04:b7:b4:8c:
2e:f6:1b:ac:ab:1d:ab:ee:14:32:a5:8b:95:47:41:
ff:d4:d8:b4:42:f5:d5:70:0a:26:6f:9e:e1:82:56:
4c:2a:b8:f1:09:27:20:f1:cc:2a:ee:ce:63:d1:ad:
91:9b:e1:a2:79:07:ba:43:20:a7:c3:15:97:b4:cf:
90:7d:f8:24:bf:01:d6:2e:90:fb:92:78:30:1a:20:
5e:ff:5d:1f:2b:4d:a9:b2:7b:8c:18:92:4b:c7:91:
9d:3b:41:00:8a:44:2e:71:b2:2e:ea:42:d5:09:a9:
b3:e1:06:ae:ae:52:0f:ad:68:62:17:86:78:1b:fd:
46:f8:bd:e7:e4:56:97:f9:73:30:0a:a7:b9:0d:bc:
a0:d0:16:c4:e2:c5:ca:41:b2:dc:72:4f:60:a0:69:
0e:53:0f:7a:fe:f3:53:71:b7:f1:66:8a:a9:6f:d5:
b7:5f:df:9e:a4:fa:e3:76:7e:8c:b2:dd:73:ee:75:
57:14:95:aa:3b:29:a7:94:7e:d7:45:cb:60:47:0d:
9e:a6:44:15:f2:45:f7:ca:f8:c9:23:09:15:c1:13:
1a:ff:b1:20:25:be:db:c8:02:e1:77:6e:33:ce:d1:
a7:64:19:13:87:d0:cf:3c:8e:67:a7:14:cc:69:97:
94:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AC:73:70:58:4B:0C:61:91:E2:CB:FC:40:BA:A0:69:53:DE:64:B8
X509v3 Authority Key Identifier:
keyid:22:FF:C7:23:D1:57:93:40:43:13:4C:EE:D0:34:24:A9:42:85:9D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/_axzcFhLDGGR4sv8QLqgaVPeZLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/Iv_HI9FXk0BDE0zu0DQkqUKFnYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.208.0/22
195.234.112.0/22
IPv6:
2a02:2278:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
81:5a:25:00:15:5a:9c:0e:ba:eb:be:40:f1:7c:65:98:4c:04:
db:2a:ac:fe:3c:a1:aa:64:28:22:2e:5e:3d:f9:c3:c8:5d:8c:
c5:e2:48:bb:33:4b:ef:bd:94:d9:8c:dc:36:dd:ad:36:b3:24:
19:b7:5b:19:14:31:e4:b7:53:3b:14:d9:5a:3a:08:3b:0a:6f:
a6:61:bd:1d:3a:16:a1:cd:c6:8e:ae:be:5d:89:26:0c:44:4d:
8c:3b:db:27:5a:48:db:aa:9a:d7:4e:d0:ac:bb:fb:01:35:46:
d2:62:06:01:a2:34:d5:76:4e:c7:1a:29:d1:95:52:12:a5:49:
73:fb:5d:40:68:03:2d:4b:79:ba:66:56:01:16:3e:f7:d5:ae:
1f:6d:4e:ca:00:6a:ab:ca:d0:b0:b8:4f:79:98:51:0e:76:8c:
d7:83:56:5b:13:20:22:fd:11:8a:80:5d:f0:d2:a6:ad:79:72:
21:74:0b:b1:54:46:18:f7:36:59:c7:ce:f4:29:48:b7:41:5a:
d9:04:23:70:c9:73:ba:d5:4a:60:4a:73:ee:0c:29:5d:20:3c:
fc:d0:81:32:15:93:a8:65:a9:9b:25:b6:55:4a:b7:e6:a1:5b:
fa:78:d8:ba:98:7f:e4:93:4b:79:f5:5c:c1:68:22:df:05:a8:
57:74:5b:e4
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZ8jaDyUe/mNKaEtu7ScP7CHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZmZjNzIzZDE1NzkzNDA0MzEzNGNlZWQwMzQyNGE5NDI4
NTlkODMwHhcNMjYwNzAyMTUxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGFjNzM3MDU4NGIwYzYxOTFlMmNiZmM0MGJhYTA2OTUzZGU2NGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruSaZRfnnFth2QS3tIwu9husqx2r
7hQypYuVR0H/1Ni0QvXVcAomb57hglZMKrjxCScg8cwq7s5j0a2Rm+GieQe6QyCn
wxWXtM+QffgkvwHWLpD7kngwGiBe/10fK02psnuMGJJLx5GdO0EAikQucbIu6kLV
Camz4QaurlIPrWhiF4Z4G/1G+L3n5FaX+XMwCqe5Dbyg0BbE4sXKQbLcck9goGkO
Uw96/vNTcbfxZoqpb9W3X9+epPrjdn6Mst1z7nVXFJWqOymnlH7XRctgRw2epkQV
8kX3yvjJIwkVwRMa/7EgJb7byALhd24zztGnZBkTh9DPPI5npxTMaZeUIwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFP2sc3BYSwxhkeLL/EC6oGlT3mS4MB8GA1UdIwQY
MBaAFCL/xyPRV5NAQxNM7tA0JKlChZ2DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZfSEk5RlhrMEJERTB6dTBEUWtxVUtGbllNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTct
MDYwYWMwODkwOTY2LzEvX2F4emNGaExER0dSNHN2OFFMcWdhVlBlWkxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTctMDYwYWMwODkwOTY2
LzEvSXZfSEk5RlhrMEJERTB6dTBEUWtxVUtGbllNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQCuZ7QAwQC
w+pwMA4EAgACMAgDBgAqAiJ4/zANBgkqhkiG9w0BAQsFAAOCAQEAgVolABVanA66
675A8XxlmEwE2yqs/jyhqmQoIi5ePfnDyF2MxeJIuzNL772U2YzcNt2tNrMkGbdb
GRQx5LdTOxTZWjoIOwpvpmG9HToWoc3Gjq6+XYkmDERNjDvbJ1pI26qa107QrLv7
ATVG0mIGAaI01XZOxxop0ZVSEqVJc/tdQGgDLUt5umZWARY+99WuH21OygBqq8rQ
sLhPeZhRDnaM14NWWxMgIv0RioBd8NKmrXlyIXQLsVRGGPc2WcfO9ClIt0Fa2QQj
cMlzutVKYEpz7gwpXSA8/NCBMhWTqGWpmyW2VUq35qFb+njYuph/5JNLefVcwWgi
3wWoV3Rb5A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:32:21 2026 by rpki-client