Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/0Il0hGQus6JFrI28dhOelMSkxAo.roa
File: 0Il0hGQus6JFrI28dhOelMSkxAo.roa (raw, json)
Hash identifier: 229pizDgAWKKq44Ig1yRqRrjbGCQ9KdVQEjYQSFdDNw=
Subject key identifier: D0:89:74:84:64:2E:B3:A2:45:AC:8D:BC:76:13:9E:94:C4:A4:C4:0A
Certificate issuer: /CN=0b1f41f96c58b25b634dec7d2aa5f516d2d85594
Certificate serial: 019F236885C11A2490388F31D8E0336F4227
Authority key identifier: 0B:1F:41:F9:6C:58:B2:5B:63:4D:EC:7D:2A:A5:F5:16:D2:D8:55:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx9B-WxYsltjTex9KqX1FtLYVZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/0Il0hGQus6JFrI28dhOelMSkxAo.roa
Signing time: Thu 02 Jul 2026 15:18:00 +0000
ROA not before: Thu 02 Jul 2026 15:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196816
IP address blocks: 94.143.24.0/21 maxlen: 24
185.21.32.0/22 maxlen: 24
2a01:4480::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/Cx9B-WxYsltjTex9KqX1FtLYVZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/Cx9B-WxYsltjTex9KqX1FtLYVZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cx9B-WxYsltjTex9KqX1FtLYVZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:85:c1:1a:24:90:38:8f:31:d8:e0:33:6f:42:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1f41f96c58b25b634dec7d2aa5f516d2d85594
Validity
Not Before: Jul 2 15:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0897484642eb3a245ac8dbc76139e94c4a4c40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:99:c8:dd:4f:1e:f2:31:88:97:38:79:8e:3c:
8c:ba:e6:c4:f7:fd:2a:57:9e:ed:a8:34:a0:ef:51:
a0:a8:86:59:8e:36:ca:1f:6b:39:73:03:38:8a:ca:
83:f8:d1:01:4b:8d:5f:88:22:8d:6b:e9:c7:11:42:
30:77:f1:02:14:8b:9c:5f:26:55:5c:32:82:02:4e:
08:de:0e:71:97:ae:7b:4a:52:54:62:d1:8b:53:7f:
a3:3c:e5:96:68:3c:36:96:6b:bb:86:7f:88:ff:ca:
9e:b0:e4:ab:12:2d:41:42:2c:ca:bf:21:7d:e2:1f:
60:89:55:27:5b:df:d7:97:8a:92:fe:16:ce:bb:24:
7a:b3:f4:07:1b:02:f7:fc:c4:1c:b3:54:d9:76:66:
d4:c1:07:fe:a8:d8:20:c3:e3:2b:e3:7e:3d:89:81:
22:ff:24:74:b0:86:6e:71:87:a5:33:71:e2:39:13:
62:56:f7:bc:75:73:b1:ca:b1:b9:58:59:51:42:32:
63:8a:3c:7e:b9:f4:f4:db:9d:9b:7f:fe:0d:c6:b6:
36:3b:45:4d:9e:3d:43:58:81:76:7c:f0:ef:25:28:
6c:cb:a5:a6:54:9e:9e:97:21:88:82:cf:d3:6c:c2:
aa:da:1d:4f:f5:6d:a8:24:32:13:93:3a:ec:5e:1a:
81:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:89:74:84:64:2E:B3:A2:45:AC:8D:BC:76:13:9E:94:C4:A4:C4:0A
X509v3 Authority Key Identifier:
keyid:0B:1F:41:F9:6C:58:B2:5B:63:4D:EC:7D:2A:A5:F5:16:D2:D8:55:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx9B-WxYsltjTex9KqX1FtLYVZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/0Il0hGQus6JFrI28dhOelMSkxAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/Cx9B-WxYsltjTex9KqX1FtLYVZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.24.0/21
185.21.32.0/22
IPv6:
2a01:4480::/32
Signature Algorithm: sha256WithRSAEncryption
10:83:25:4d:54:62:86:8c:ab:c4:27:fe:a7:ab:24:e3:86:d2:
ce:4d:5a:54:72:23:e2:87:fc:fb:a7:1f:08:5c:68:15:4f:d8:
d7:70:38:49:a8:35:e6:e4:1f:b8:5f:f5:17:62:ff:df:ca:54:
04:11:83:cf:b9:1f:12:09:df:b4:cc:98:96:07:e5:ef:b4:46:
8b:7e:9d:3f:70:8c:a7:dc:86:27:b7:b8:ec:a0:21:27:38:64:
fc:8b:5f:79:f0:04:b2:2c:a5:91:23:e7:45:c7:fb:29:32:93:
56:6a:6e:0c:55:53:af:8e:1d:77:7f:d1:73:08:83:6d:ef:13:
39:7a:ff:6a:b4:62:24:9d:88:62:6c:45:a8:cc:91:6b:15:19:
64:f9:c3:b3:bd:46:7c:39:db:79:89:8a:b0:a7:fe:2b:62:4b:
2a:2b:5d:ca:b7:ce:71:4f:94:c2:66:93:fb:da:e8:3e:d0:e3:
27:c9:49:07:a6:33:92:55:d8:55:99:5b:b4:bf:81:c7:1c:6f:
dc:81:4d:0a:a0:5b:fb:a3:a3:28:33:2f:26:63:f7:ca:9f:1e:
c1:fe:c4:9d:11:ed:a9:5e:ac:25:9c:1b:4a:b5:1d:dc:b3:1c:
06:6e:bf:c2:7b:d0:75:09:51:8b:45:8d:3f:9e:d8:4f:83:b3:
48:57:b9:e8
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ8jaIXBGiSQOI8x2OAzb0InMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMWY0MWY5NmM1OGIyNWI2MzRkZWM3ZDJhYTVmNTE2ZDJk
ODU1OTQwHhcNMjYwNzAyMTUxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDg5NzQ4NDY0MmViM2EyNDVhYzhkYmM3NjEzOWU5NGM0YTRjNDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZnI3U8e8jGIlzh5jjyMuubE9/0q
V57tqDSg71GgqIZZjjbKH2s5cwM4isqD+NEBS41fiCKNa+nHEUIwd/ECFIucXyZV
XDKCAk4I3g5xl657SlJUYtGLU3+jPOWWaDw2lmu7hn+I/8qesOSrEi1BQizKvyF9
4h9giVUnW9/Xl4qS/hbOuyR6s/QHGwL3/MQcs1TZdmbUwQf+qNggw+Mr4349iYEi
/yR0sIZucYelM3HiORNiVve8dXOxyrG5WFlRQjJjijx+ufT0252bf/4NxrY2O0VN
nj1DWIF2fPDvJShsy6WmVJ6elyGIgs/TbMKq2h1P9W2oJDITkzrsXhqBMwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFNCJdIRkLrOiRayNvHYTnpTEpMQKMB8GA1UdIwQY
MBaAFAsfQflsWLJbY03sfSql9RbS2FWUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3g5Qi1XeFlzbHRqVGV4OUtxWDFGdExZVlpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zYjNkY2YtY2JhYi00NjViLThlOTAt
ZGE3MzhhMzkwZjZlLzEvMElsMGhHUXVzNkpGckkyOGRoT2VsTVNreEFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8zYjNkY2YtY2JhYi00NjViLThlOTAtZGE3MzhhMzkwZjZl
LzEvQ3g5Qi1XeFlzbHRqVGV4OUtxWDFGdExZVlpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDXo8YAwQC
uRUgMA0EAgACMAcDBQAqAUSAMA0GCSqGSIb3DQEBCwUAA4IBAQAQgyVNVGKGjKvE
J/6nqyTjhtLOTVpUciPih/z7px8IXGgVT9jXcDhJqDXm5B+4X/UXYv/fylQEEYPP
uR8SCd+0zJiWB+XvtEaLfp0/cIyn3IYnt7jsoCEnOGT8i1958ASyLKWRI+dFx/sp
MpNWam4MVVOvjh13f9FzCINt7xM5ev9qtGIknYhibEWozJFrFRlk+cOzvUZ8Odt5
iYqwp/4rYksqK13Kt85xT5TCZpP72ug+0OMnyUkHpjOSVdhVmVu0v4HHHG/cgU0K
oFv7o6MoMy8mY/fKnx7B/sSdEe2pXqwlnBtKtR3csxwGbr/Ce9B1CVGLRY0/nthP
g7NIV7no
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:25 2026 by rpki-client