Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/j4Fd2DjxWr_xPGcMiuUhdZLMc30.roa
File: j4Fd2DjxWr_xPGcMiuUhdZLMc30.roa (raw, json)
Hash identifier: KhwmTUHddEmqeMPHDyYX5yKpCm2bT7FKBk70Iu6qVsU=
Subject key identifier: 8F:81:5D:D8:38:F1:5A:BF:F1:3C:67:0C:8A:E5:21:75:92:CC:73:7D
Certificate issuer: /CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Certificate serial: 019F236912934ADDE0342CD84F9C6F08579B
Authority key identifier: 29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/j4Fd2DjxWr_xPGcMiuUhdZLMc30.roa
Signing time: Thu 02 Jul 2026 15:18:36 +0000
ROA not before: Thu 02 Jul 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206270
IP address blocks: 185.188.100.0/22 maxlen: 32
185.188.103.0/24 maxlen: 24
2a0a:10c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:12:93:4a:dd:e0:34:2c:d8:4f:9c:6f:08:57:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Validity
Not Before: Jul 2 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f815dd838f15abff13c670c8ae5217592cc737d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c7:64:7c:b8:db:7d:91:88:45:b3:d3:9e:a4:
ff:8c:20:5a:7a:33:09:f2:37:b6:ae:4c:8e:9b:1a:
8c:d6:3f:d0:cc:a0:52:f0:5b:c3:a5:b4:a6:95:2d:
af:96:bc:de:03:e3:70:28:9a:82:d5:82:40:71:96:
28:1a:80:0a:ad:45:99:2f:d5:c5:be:13:50:8a:65:
8e:d1:cf:71:ad:66:38:d2:e7:78:05:40:08:b0:75:
3e:3f:fd:7c:94:28:da:3c:a3:25:d7:71:5d:38:4f:
95:3f:a3:97:c5:c5:7b:5f:da:b6:14:91:26:64:fd:
f0:67:ef:23:c3:74:d2:93:29:22:da:fd:da:2c:59:
04:47:90:d2:e6:73:25:bb:66:cb:a7:2f:2e:9d:fa:
8e:83:9e:08:8c:10:ec:59:2a:7d:03:08:5a:56:a1:
d8:a1:e3:7e:d5:07:14:e3:bc:a8:71:f5:53:33:c8:
bb:88:4b:3e:49:88:23:13:b3:6e:ec:a8:4a:7f:c6:
32:7f:49:dd:3e:fa:67:77:5a:d0:91:e3:1b:bb:f2:
f9:53:e5:34:38:f2:0b:99:8e:e9:93:e3:95:50:78:
7b:da:e2:ca:27:50:1e:03:92:63:4f:be:72:ea:15:
e7:8b:ad:1b:bd:e0:d2:c5:78:c3:8d:68:aa:63:c1:
a1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:81:5D:D8:38:F1:5A:BF:F1:3C:67:0C:8A:E5:21:75:92:CC:73:7D
X509v3 Authority Key Identifier:
keyid:29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/j4Fd2DjxWr_xPGcMiuUhdZLMc30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.100.0/22
IPv6:
2a0a:10c0::/29
Signature Algorithm: sha256WithRSAEncryption
5e:56:0a:3e:99:e8:ac:c8:25:3b:00:73:58:be:2a:a4:02:8e:
d1:0d:15:e6:54:f7:b9:95:c3:20:7f:2e:9b:71:37:1f:cd:99:
92:b1:e7:1b:88:9b:99:0a:17:11:4b:87:22:b2:53:59:98:32:
f5:1d:c2:e0:2a:4f:41:31:9e:6c:89:7c:11:ce:ea:e6:72:80:
28:c4:16:af:89:3e:d5:9c:3e:e6:eb:e7:bf:a8:00:53:ea:41:
3c:04:d4:f9:48:bf:23:35:49:8f:01:52:3c:90:9f:e6:f7:03:
b8:a7:98:74:21:2a:0d:a6:24:79:0c:59:5c:15:9b:c1:19:b1:
2e:9e:fd:b7:55:56:45:7c:13:d7:3a:21:c1:3b:4e:63:3a:9e:
6f:d2:71:e8:3d:e3:49:4d:6d:2e:9b:9f:8c:e8:0c:ef:0c:2f:
4b:86:d3:7a:c4:33:f0:d6:7f:ae:8d:24:bf:97:bf:ca:86:37:
d4:e1:f4:79:2a:68:30:ef:1c:b7:37:de:09:b9:b1:fc:67:fc:
7a:fc:ab:88:c9:45:75:da:cf:01:4a:57:bc:e8:cc:e9:68:a8:
a4:0c:ca:9c:97:7b:af:f6:66:5d:b5:84:f2:6f:cf:04:f5:a5:
13:9f:c8:ab:5c:8e:be:06:ee:04:02:5a:51:cb:46:93:c5:03:
a2:d5:40:ed
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaRKTSt3gNCzYT5xvCFebMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YWVlY2E4YWZmMDk5YjJiYWUwNTc4MWRjYThkZDkwMjdm
MGRhMmIwHhcNMjYwNzAyMTUxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjgxNWRkODM4ZjE1YWJmZjEzYzY3MGM4YWU1MjE3NTkyY2M3MzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcdkfLjbfZGIRbPTnqT/jCBaejMJ
8je2rkyOmxqM1j/QzKBS8FvDpbSmlS2vlrzeA+NwKJqC1YJAcZYoGoAKrUWZL9XF
vhNQimWO0c9xrWY40ud4BUAIsHU+P/18lCjaPKMl13FdOE+VP6OXxcV7X9q2FJEm
ZP3wZ+8jw3TSkyki2v3aLFkER5DS5nMlu2bLpy8unfqOg54IjBDsWSp9AwhaVqHY
oeN+1QcU47yocfVTM8i7iEs+SYgjE7Nu7KhKf8Yyf0ndPvpnd1rQkeMbu/L5U+U0
OPILmY7pk+OVUHh72uLKJ1AeA5JjT75y6hXni60bveDSxXjDjWiqY8GhLQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFI+BXdg48Vq/8TxnDIrlIXWSzHN9MB8GA1UdIwQY
MBaAFCmu7Kiv8JmyuuBXgdyo3ZAn8NorMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It
ZDFhYmY0ZWUzMmNiLzEvajRGZDJEanhXcl94UEdjTWl1VWhkWkxNYzMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi
LzEvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubxkMA0E
AgACMAcDBQMqChDAMA0GCSqGSIb3DQEBCwUAA4IBAQBeVgo+meisyCU7AHNYviqk
Ao7RDRXmVPe5lcMgfy6bcTcfzZmSsecbiJuZChcRS4cislNZmDL1HcLgKk9BMZ5s
iXwRzurmcoAoxBaviT7VnD7m6+e/qABT6kE8BNT5SL8jNUmPAVI8kJ/m9wO4p5h0
ISoNpiR5DFlcFZvBGbEunv23VVZFfBPXOiHBO05jOp5v0nHoPeNJTW0um5+M6Azv
DC9LhtN6xDPw1n+ujSS/l7/KhjfU4fR5Kmgw7xy3N94JubH8Z/x6/KuIyUV12s8B
Sle86MzpaKikDMqcl3uv9mZdtYTyb88E9aUTn8irXI6+Bu4EAlpRy0aTxQOi1UDt
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:36 2026 by rpki-client