Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/sS4mUDvAQADOcI7co6k-U_svhdU.roa
File: sS4mUDvAQADOcI7co6k-U_svhdU.roa (raw, json)
Hash identifier: ZSbcQ9uTRVNNZ6TyCXB4TU+niOSeAQPbgVZ0+4WgUcg=
Subject key identifier: B1:2E:26:50:3B:C0:40:00:CE:70:8E:DC:A3:A9:3E:53:FB:2F:85:D5
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019DEC6843F899424B6344CEC25F8ED87A5E
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/sS4mUDvAQADOcI7co6k-U_svhdU.roa
Signing time: Sun 03 May 2026 05:55:49 +0000
ROA not before: Sun 03 May 2026 05:55:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214077
IP address blocks: 194.226.249.0/24 maxlen: 24
195.19.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:68:43:f8:99:42:4b:63:44:ce:c2:5f:8e:d8:7a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: May 3 05:55:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b12e26503bc04000ce708edca3a93e53fb2f85d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:70:a1:6a:8f:c4:b4:29:30:15:e9:bb:96:f0:
39:6a:88:29:fa:d7:1d:27:8b:4e:39:8e:7b:27:9b:
be:83:b6:62:86:62:83:00:4c:1a:be:af:52:eb:a2:
2c:28:70:c6:ac:26:6b:8a:3e:98:2b:d6:af:73:2b:
d2:49:e7:7e:c9:a1:ee:20:f7:a0:fa:09:cf:09:d2:
41:ff:88:c0:06:9a:1c:e6:03:f7:8d:eb:85:65:85:
c4:68:c5:19:eb:36:9e:4c:f6:9c:51:62:06:84:52:
dc:ae:44:76:b1:56:b9:de:6f:c3:c2:ed:f4:66:4a:
22:7e:91:0d:05:3e:a1:51:1f:02:dd:bd:cf:c3:d2:
10:58:ec:26:4a:a9:a1:d0:68:29:5b:8c:2c:f0:bb:
1f:78:ca:5d:6b:d1:98:ef:ef:c1:b8:e9:76:40:1b:
04:cc:80:07:74:dd:00:2e:cd:93:f9:71:48:44:4b:
6b:c0:d8:04:de:c2:b2:68:3d:ab:69:7f:ca:29:94:
25:28:e7:a1:b4:84:4d:d0:e0:ab:d8:2e:18:c7:4f:
25:a4:4e:f6:9b:3a:a2:2b:98:c1:e5:23:95:ff:38:
41:e9:eb:4f:85:48:88:51:77:ff:fa:b9:65:bf:44:
af:22:1d:c7:04:34:23:0c:00:26:8b:87:88:45:5e:
cd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2E:26:50:3B:C0:40:00:CE:70:8E:DC:A3:A9:3E:53:FB:2F:85:D5
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/sS4mUDvAQADOcI7co6k-U_svhdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.226.249.0/24
195.19.143.0/24
Signature Algorithm: sha256WithRSAEncryption
12:7a:98:50:a9:ea:07:7d:1f:f1:e6:91:20:40:d6:7f:5f:ec:
f6:b0:25:65:48:ea:a1:10:40:8f:2a:13:51:a2:89:d7:e5:5e:
aa:57:f0:fa:d7:e4:07:df:a2:04:23:ea:1e:dc:ae:e2:54:d2:
fc:6d:4f:d0:fc:83:8a:10:f3:f7:c9:cb:e9:b1:46:e0:ee:79:
7f:72:d2:d1:1a:48:7a:7f:bd:73:1c:40:1e:86:0c:8f:66:53:
ba:5e:51:20:7b:f0:2d:49:72:3e:58:b0:85:44:55:6e:59:a9:
60:ca:e7:04:5b:d5:a4:e7:65:f9:f9:4e:1e:98:39:37:c5:ee:
65:a3:be:92:22:03:d8:80:a2:44:92:35:64:dc:c8:7e:38:72:
a2:58:23:68:53:ad:47:61:ba:f5:37:04:50:ef:64:dc:76:41:
56:bb:8b:8e:b5:c4:c3:cb:de:53:89:6f:a5:62:2a:ad:b6:7f:
ce:e1:a3:10:b1:cd:27:c7:41:df:ee:df:0a:31:68:65:f3:8d:
ad:cd:45:b5:32:26:ba:24:d6:e9:5c:ec:2f:3e:4f:ba:cc:d4:
1a:b0:62:2c:a4:8a:f9:80:34:f9:e6:82:dd:88:87:29:04:3d:
59:81:ba:0f:d1:0b:b1:99:04:55:90:23:a5:a4:fd:d3:14:96:
5a:fe:2c:86
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ3saEP4mUJLY0TOwl+O2HpeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx
NjQ2NGEwHhcNMjYwNTAzMDU1NTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTJlMjY1MDNiYzA0MDAwY2U3MDhlZGNhM2E5M2U1M2ZiMmY4NWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nChao/EtCkwFem7lvA5aogp+tcd
J4tOOY57J5u+g7ZihmKDAEwavq9S66IsKHDGrCZrij6YK9avcyvSSed+yaHuIPeg
+gnPCdJB/4jABpoc5gP3jeuFZYXEaMUZ6zaeTPacUWIGhFLcrkR2sVa53m/Dwu30
ZkoifpENBT6hUR8C3b3Pw9IQWOwmSqmh0GgpW4ws8LsfeMpda9GY7+/BuOl2QBsE
zIAHdN0ALs2T+XFIREtrwNgE3sKyaD2raX/KKZQlKOehtIRN0OCr2C4Yx08lpE72
mzqiK5jB5SOV/zhB6etPhUiIUXf/+rllv0SvIh3HBDQjDAAmi4eIRV7N2QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLEuJlA7wEAAznCO3KOpPlP7L4XVMB8GA1UdIwQY
MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt
OWU5YTFlMDM3MzhlLzEvc1M0bVVEdkFRQURPY0k3Y282ay1VX3N2aGRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl
LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwuL5AwQA
wxOPMA0GCSqGSIb3DQEBCwUAA4IBAQASephQqeoHfR/x5pEgQNZ/X+z2sCVlSOqh
EECPKhNRoonX5V6qV/D61+QH36IEI+oe3K7iVNL8bU/Q/IOKEPP3ycvpsUbg7nl/
ctLRGkh6f71zHEAehgyPZlO6XlEge/AtSXI+WLCFRFVuWalgyucEW9Wk52X5+U4e
mDk3xe5lo76SIgPYgKJEkjVk3Mh+OHKiWCNoU61HYbr1NwRQ72TcdkFWu4uOtcTD
y95TiW+lYiqttn/O4aMQsc0nx0Hf7t8KMWhl842tzUW1Mia6JNbpXOwvPk+6zNQa
sGIspIr5gDT55oLdiIcpBD1ZgboP0QuxmQRVkCOlpP3TFJZa/iyG
-----END CERTIFICATE-----
Generated at Wed May 13 05:36:27 2026 by rpki-client