Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/9MFXK73OiqcN6LapwMg5Z8b38i0.roa
File: 9MFXK73OiqcN6LapwMg5Z8b38i0.roa (raw, json)
Hash identifier: WqIbxz6dWrFwqJH0l2f/YrBWMsIoujMuumNHpVLbnyk=
Subject key identifier: F4:C1:57:2B:BD:CE:8A:A7:0D:E8:B6:A9:C0:C8:39:67:C6:F7:F2:2D
Certificate issuer: /CN=821bf6e3743a02cf2ba32af10dfbedf1afd43aa2
Certificate serial: 019F2368E52ADCE6F3F290AA3DB8A1A2E674
Authority key identifier: 82:1B:F6:E3:74:3A:02:CF:2B:A3:2A:F1:0D:FB:ED:F1:AF:D4:3A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ghv243Q6As8royrxDfvt8a_UOqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/9MFXK73OiqcN6LapwMg5Z8b38i0.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12502
IP address blocks: 195.190.145.0/24 maxlen: 24
2001:67c:684::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ghv243Q6As8royrxDfvt8a_UOqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e5:2a:dc:e6:f3:f2:90:aa:3d:b8:a1:a2:e6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821bf6e3743a02cf2ba32af10dfbedf1afd43aa2
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4c1572bbdce8aa70de8b6a9c0c83967c6f7f22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:25:96:74:0a:30:c9:ce:db:15:66:20:9b:52:
fc:f0:fc:b1:45:ba:22:5c:a3:53:7e:48:d9:eb:2e:
e2:c2:f7:8a:53:89:43:2c:06:15:06:58:d4:89:2e:
e9:9b:6d:76:ae:bf:78:55:3b:97:a4:df:ca:bd:ad:
d5:12:32:df:57:11:26:43:61:53:dd:03:25:c2:ad:
93:c0:18:ee:27:cb:d0:dc:32:dd:d3:12:52:21:6e:
b4:7b:4a:20:df:ca:58:12:e5:2f:23:2c:be:04:db:
ca:dc:5a:7a:ce:fb:1b:8d:aa:9d:7f:77:d8:c7:05:
95:2b:83:8e:9e:2a:09:3a:6d:ac:b7:48:cb:d3:98:
b0:7a:a0:c4:39:50:46:42:67:a2:f6:df:79:2c:56:
1c:a9:f9:14:f9:69:96:cf:bd:74:a1:f4:a0:1f:3f:
1a:6a:b1:f9:65:44:be:20:71:9b:29:45:bc:8d:e2:
15:be:0b:14:d0:61:ac:f2:bb:d3:f8:fe:77:6d:f5:
ef:17:08:ea:37:24:b7:39:c4:1e:47:7d:e5:d0:cb:
ab:18:19:d8:a0:f8:a4:d0:e2:a5:2f:d8:a4:2a:5a:
6e:17:cf:5b:91:d0:98:21:a1:28:70:3c:7c:ef:4e:
a5:73:f9:df:28:dd:8b:0d:1c:e8:ec:b7:ea:2e:53:
69:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C1:57:2B:BD:CE:8A:A7:0D:E8:B6:A9:C0:C8:39:67:C6:F7:F2:2D
X509v3 Authority Key Identifier:
keyid:82:1B:F6:E3:74:3A:02:CF:2B:A3:2A:F1:0D:FB:ED:F1:AF:D4:3A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ghv243Q6As8royrxDfvt8a_UOqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/9MFXK73OiqcN6LapwMg5Z8b38i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.145.0/24
IPv6:
2001:67c:684::/48
Signature Algorithm: sha256WithRSAEncryption
47:cc:dc:84:1b:3a:72:62:40:f4:48:41:e6:c2:2b:52:16:c7:
86:1e:4c:3f:2d:e5:db:3f:10:7e:6e:c1:62:39:bd:b7:4e:e6:
d7:82:3c:97:5f:80:24:fc:21:0b:2e:8c:02:87:a3:6f:2e:9a:
c9:de:ff:12:23:1e:61:00:9c:f2:ff:b5:54:e4:72:a0:6b:4d:
af:43:b8:0e:77:34:bf:b3:eb:b6:19:a7:ab:34:b4:ba:ab:b7:
45:04:e4:1a:db:a8:4c:da:54:ea:46:ee:87:7c:41:48:9e:87:
86:07:92:db:26:2f:61:73:10:07:84:f6:8e:21:82:6c:a0:2d:
29:06:f2:84:fe:f7:cb:e1:1e:bb:66:df:01:79:15:20:e1:11:
34:87:1f:b3:5d:07:a5:e9:d4:cf:ba:13:fb:0f:86:f9:4b:58:
5e:2b:ed:54:e7:dd:d6:f9:4a:29:d9:7d:83:0b:9b:ff:4c:51:
30:a2:64:6e:66:18:66:bb:27:e3:67:cf:46:9c:10:2a:59:8c:
49:2e:3b:15:1f:79:1c:6b:b0:71:36:d3:dc:2c:8e:cc:73:5a:
be:1f:05:13:8a:63:ea:31:b4:89:fe:39:49:ae:7b:a2:eb:f6:
43:ab:0a:a4:f0:34:f6:24:06:cd:e0:2a:65:59:71:ad:dd:78:
43:62:c0:a5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZ8jaOUq3Obz8pCqPbihouZ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMWJmNmUzNzQzYTAyY2YyYmEzMmFmMTBkZmJlZGYxYWZk
NDNhYTIwHhcNMjYwNzAyMTUxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGMxNTcyYmJkY2U4YWE3MGRlOGI2YTljMGM4Mzk2N2M2ZjdmMjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCWWdAowyc7bFWYgm1L88PyxRboi
XKNTfkjZ6y7iwveKU4lDLAYVBljUiS7pm212rr94VTuXpN/Kva3VEjLfVxEmQ2FT
3QMlwq2TwBjuJ8vQ3DLd0xJSIW60e0og38pYEuUvIyy+BNvK3Fp6zvsbjaqdf3fY
xwWVK4OOnioJOm2st0jL05iweqDEOVBGQmei9t95LFYcqfkU+WmWz710ofSgHz8a
arH5ZUS+IHGbKUW8jeIVvgsU0GGs8rvT+P53bfXvFwjqNyS3OcQeR33l0MurGBnY
oPik0OKlL9ikKlpuF89bkdCYIaEocDx8706lc/nfKN2LDRzo7LfqLlNp1QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPTBVyu9zoqnDei2qcDIOWfG9/ItMB8GA1UdIwQY
MBaAFIIb9uN0OgLPK6Mq8Q377fGv1DqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2h2MjQzUTZBczhyb3lyeERmdnQ4YV9VT3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wNjBjZWEtZTkyMC00MGRlLTkwZGEt
OGQ0OWViY2FlOWIzLzEvOU1GWEs3M09pcWNONkxhcHdNZzVaOGIzOGkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8wNjBjZWEtZTkyMC00MGRlLTkwZGEtOGQ0OWViY2FlOWIz
LzEvZ2h2MjQzUTZBczhyb3lyeERmdnQ4YV9VT3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAw76RMA8E
AgACMAkDBwAgAQZ8BoQwDQYJKoZIhvcNAQELBQADggEBAEfM3IQbOnJiQPRIQebC
K1IWx4YeTD8t5ds/EH5uwWI5vbdO5teCPJdfgCT8IQsujAKHo28umsne/xIjHmEA
nPL/tVTkcqBrTa9DuA53NL+z67YZp6s0tLqrt0UE5BrbqEzaVOpG7od8QUieh4YH
ktsmL2FzEAeE9o4hgmygLSkG8oT+98vhHrtm3wF5FSDhETSHH7NdB6Xp1M+6E/sP
hvlLWF4r7VTn3db5SinZfYMLm/9MUTCiZG5mGGa7J+Nnz0acECpZjEkuOxUfeRxr
sHE209wsjsxzWr4fBROKY+oxtIn+OUmue6Lr9kOrCqTwNPYkBs3gKmVZca3deENi
wKU=
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:51 2026 by rpki-client