Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/Y3J2ud7jTrX4_kZX_16f1uueVbg.roa
File: Y3J2ud7jTrX4_kZX_16f1uueVbg.roa (raw, json)
Hash identifier: phuOOyFdkRfonnOS6jbXwYKqxA0Iu7gFVN1SwrhDuJ4=
Subject key identifier: 63:72:76:B9:DE:E3:4E:B5:F8:FE:46:57:FF:5E:9F:D6:EB:9E:55:B8
Certificate issuer: /CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Certificate serial: 019F1F4241317EED6803E401D1E9E03D4C98
Authority key identifier: 85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/Y3J2ud7jTrX4_kZX_16f1uueVbg.roa
Signing time: Wed 01 Jul 2026 19:57:43 +0000
ROA not before: Wed 01 Jul 2026 19:57:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39402
IP address blocks: 185.176.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1f:42:41:31:7e:ed:68:03:e4:01:d1:e9:e0:3d:4c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Validity
Not Before: Jul 1 19:57:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=637276b9dee34eb5f8fe4657ff5e9fd6eb9e55b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8d:c6:1b:b6:e6:b9:dc:16:9b:68:c3:00:bd:
da:17:7e:7e:c0:ac:9d:f7:2e:b6:c4:f5:06:ef:11:
29:3d:3b:8f:06:02:40:7a:69:a2:80:bd:43:8f:5f:
9e:40:40:e4:6e:4c:03:3d:9b:9a:e4:de:ff:5c:fb:
4a:d4:b2:cd:f6:d1:3d:af:6a:d5:1c:cc:35:7a:ed:
bd:3e:d6:22:7f:5c:15:12:70:b7:2e:74:b2:82:39:
78:be:e8:40:16:89:05:76:a3:c6:c4:c5:06:bf:49:
5b:80:03:92:90:02:9c:d2:c5:30:45:da:5c:f9:fe:
a7:e7:7c:00:a3:6b:fa:ee:dd:65:e8:f5:9b:53:85:
ac:a3:83:11:81:34:60:1c:08:3a:e3:d3:37:ac:7c:
96:05:f8:df:d2:52:07:a8:81:61:5d:47:c9:57:af:
89:7d:17:0e:39:04:f6:55:eb:9a:d9:3a:85:0b:ea:
c3:eb:1b:2b:7d:04:a0:b7:ba:03:dd:de:b4:3b:e5:
07:9d:b0:e6:3b:a1:84:8c:ea:9d:7e:05:a6:74:60:
f7:59:3f:a7:6c:55:8d:28:48:a4:b8:ce:d6:30:bd:
7d:cf:39:da:b4:b6:41:38:60:24:07:45:c5:d8:ae:
ee:27:1f:5e:eb:a4:cc:59:79:d7:ff:e2:68:8e:6c:
5a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:72:76:B9:DE:E3:4E:B5:F8:FE:46:57:FF:5E:9F:D6:EB:9E:55:B8
X509v3 Authority Key Identifier:
keyid:85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/Y3J2ud7jTrX4_kZX_16f1uueVbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.145.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:a3:10:7e:9e:a1:99:d4:05:0f:28:cf:b2:59:61:6c:98:ab:
9c:38:fd:90:f1:dd:32:c0:3c:4b:23:19:9e:c1:65:90:21:73:
18:2c:37:79:de:2b:fe:8c:c2:56:ef:78:ab:e4:c0:b7:10:db:
19:8b:2c:02:b6:47:68:ab:09:dd:7a:d0:31:71:e6:be:d5:93:
cd:fa:13:86:b1:ad:be:9c:49:b3:a2:8a:dd:c4:a2:28:fb:5c:
90:1d:85:e9:89:73:35:95:55:4f:b3:f8:87:18:a0:52:aa:57:
ad:f2:a2:fb:bf:28:ad:e2:54:e0:52:98:ac:48:ff:99:34:c5:
d8:d7:89:52:3f:51:bf:a1:59:d6:f9:0d:6f:08:8a:5f:78:2e:
1b:54:75:1e:5e:3e:1d:b9:f0:fd:55:13:77:87:65:32:e1:a5:
18:69:51:ac:dd:22:36:a4:cf:dd:a7:3d:6a:d7:6d:a4:1a:81:
13:cc:10:c3:4c:3e:56:9e:a0:cc:60:36:67:b9:af:0f:01:45:
b6:7e:8e:09:2a:38:2e:a7:c6:32:79:e8:d3:f9:6f:1b:01:3a:
45:13:d9:c9:37:3a:76:c1:7f:a9:af:36:c2:bb:f6:e0:62:94:
5c:b4:e4:ee:df:60:69:9d:9d:93:75:61:f9:01:89:01:26:24:
2a:26:7b:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8fQkExfu1oA+QB0engPUyYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NjlmMjEwMGMyZmM0NTRhZDA3YWRlYzc5NmI5ZTZmNjM2
NmYwNzEwHhcNMjYwNzAxMTk1NzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzcyNzZiOWRlZTM0ZWI1ZjhmZTQ2NTdmZjVlOWZkNmViOWU1NWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr43GG7bmudwWm2jDAL3aF35+wKyd
9y62xPUG7xEpPTuPBgJAemmigL1Dj1+eQEDkbkwDPZua5N7/XPtK1LLN9tE9r2rV
HMw1eu29PtYif1wVEnC3LnSygjl4vuhAFokFdqPGxMUGv0lbgAOSkAKc0sUwRdpc
+f6n53wAo2v67t1l6PWbU4Wso4MRgTRgHAg649M3rHyWBfjf0lIHqIFhXUfJV6+J
fRcOOQT2Veua2TqFC+rD6xsrfQSgt7oD3d60O+UHnbDmO6GEjOqdfgWmdGD3WT+n
bFWNKEikuM7WML19zznatLZBOGAkB0XF2K7uJx9e66TMWXnX/+Jojmxa5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGNydrne4061+P5GV/9en9brnlW4MB8GA1UdIwQY
MBaAFIVp8hAML8RUrQet7Hlrnm9jZvBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MjY1NmYtZWIzMi00MDJhLWEzMzEt
MjMzNmNkYjliYTlmLzEvWTNKMnVkN2pUclg0X2taWF8xNmYxdXVlVmJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85MjY1NmYtZWIzMi00MDJhLWEzMzEtMjMzNmNkYjliYTlm
LzEvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubCRMA0G
CSqGSIb3DQEBCwUAA4IBAQBdoxB+nqGZ1AUPKM+yWWFsmKucOP2Q8d0ywDxLIxme
wWWQIXMYLDd53iv+jMJW73ir5MC3ENsZiywCtkdoqwndetAxcea+1ZPN+hOGsa2+
nEmzoordxKIo+1yQHYXpiXM1lVVPs/iHGKBSqlet8qL7vyit4lTgUpisSP+ZNMXY
14lSP1G/oVnW+Q1vCIpfeC4bVHUeXj4dufD9VRN3h2Uy4aUYaVGs3SI2pM/dpz1q
122kGoETzBDDTD5WnqDMYDZnua8PAUW2fo4JKjgup8YyeejT+W8bATpFE9nJNzp2
wX+przbCu/bgYpRctOTu32BpnZ2TdWH5AYkBJiQqJntm
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:24 2026 by rpki-client