Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/Dl8kjWnig9EJLu_V18bsJwWgThI.roa
File: Dl8kjWnig9EJLu_V18bsJwWgThI.roa (raw, json)
Hash identifier: l/ftiedkdOtevwG6rB8zoiK5YC04kv/8SOqTEc+HzIM=
Subject key identifier: 0E:5F:24:8D:69:E2:83:D1:09:2E:EF:D5:D7:C6:EC:27:05:A0:4E:12
Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Certificate serial: 019F4603D395C9F87C6020603ED9A46120D7
Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/Dl8kjWnig9EJLu_V18bsJwWgThI.roa
Signing time: Thu 09 Jul 2026 08:34:43 +0000
ROA not before: Thu 09 Jul 2026 08:34:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219246
IP address blocks: 86.105.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:03:d3:95:c9:f8:7c:60:20:60:3e:d9:a4:61:20:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Validity
Not Before: Jul 9 08:34:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e5f248d69e283d1092eefd5d7c6ec2705a04e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:09:49:6f:a9:f3:5b:70:05:71:cf:f3:56:cb:
1b:7c:df:87:cb:c5:9b:ae:a0:33:e4:f8:82:36:e0:
48:6d:69:b0:d1:fb:84:6f:4a:82:b1:b7:47:1f:fd:
12:6c:77:18:22:fe:f5:03:5c:fb:9a:3f:0a:de:9d:
4f:9e:46:67:98:58:f2:a5:4b:93:87:7d:31:1d:65:
49:10:01:83:12:89:72:21:9d:9b:31:ed:63:66:ae:
da:bc:8c:9c:83:c1:ea:dd:39:f1:b6:c9:14:ef:00:
38:cd:99:86:23:66:9f:0c:27:15:91:89:c6:8f:1f:
ed:67:9a:dc:7d:e1:bf:8b:a1:72:37:33:0a:38:c6:
07:6f:4a:c8:5c:8c:f0:0d:e7:ee:9f:e2:50:2a:bd:
30:87:31:bb:7a:aa:00:c5:8a:d9:24:16:f8:65:a8:
03:ac:81:33:9b:f2:42:a8:d4:af:16:69:7d:70:ff:
37:a4:2a:b3:0b:73:66:03:72:50:3d:27:41:25:62:
2c:66:cb:e3:48:ae:96:fd:9f:b4:9c:2f:50:ba:84:
3b:b2:e7:97:91:a6:52:19:81:af:1e:0e:86:2f:48:
de:11:27:f0:1b:47:de:68:f1:37:a5:6c:32:a5:5c:
84:62:dc:9b:04:ab:7f:bd:4d:a8:4a:68:5d:88:5d:
4e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5F:24:8D:69:E2:83:D1:09:2E:EF:D5:D7:C6:EC:27:05:A0:4E:12
X509v3 Authority Key Identifier:
keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/Dl8kjWnig9EJLu_V18bsJwWgThI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.193.0/24
Signature Algorithm: sha256WithRSAEncryption
03:f5:62:24:2e:aa:d0:eb:80:06:cd:a0:ae:94:22:c7:b0:77:
3e:21:1c:57:d1:a4:aa:8e:68:88:b5:85:92:a4:d1:3f:7e:9e:
b3:a0:31:69:07:61:3f:ca:38:08:72:ca:07:da:69:66:45:7b:
46:f5:70:b1:e9:67:13:ca:24:8c:b7:4c:54:99:18:47:68:34:
55:32:a8:c6:e0:99:e4:c9:dd:65:19:82:cd:20:45:3a:fb:7a:
e5:cf:34:52:25:ea:34:d2:e4:3d:82:43:49:d2:84:7e:83:49:
c8:fa:38:01:b2:f8:c6:86:06:8b:e5:ab:cb:9d:fc:50:b4:42:
0f:21:86:65:4f:de:b6:e7:ac:bf:76:55:42:7c:d9:df:0a:bf:
cd:8d:b8:c7:68:26:3e:03:48:af:bd:89:dd:f8:5e:48:ce:18:
93:9c:21:07:fa:1d:2e:4d:79:43:8f:d0:1f:ca:86:54:f7:8d:
25:66:2f:7e:85:60:92:c8:77:30:fc:18:1e:4b:5f:21:28:1a:
eb:76:70:e0:d0:95:30:fb:8f:fb:60:f7:da:6c:2c:6b:19:81:
56:a3:e5:e7:b1:5e:46:e8:ad:28:47:7e:9c:40:54:20:11:b9:
e4:81:41:01:e2:3a:40:a3:1d:cf:1a:94:9b:65:d4:53:b3:9b:
67:cb:c7:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9GA9OVyfh8YCBgPtmkYSDXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MTMwZTdkM2E3NjA5N2QwMmE5NThiM2YwMzk1ZGZkMTg3
ZDE3ZTIwHhcNMjYwNzA5MDgzNDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTVmMjQ4ZDY5ZTI4M2QxMDkyZWVmZDVkN2M2ZWMyNzA1YTA0ZTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhglJb6nzW3AFcc/zVssbfN+Hy8Wb
rqAz5PiCNuBIbWmw0fuEb0qCsbdHH/0SbHcYIv71A1z7mj8K3p1PnkZnmFjypUuT
h30xHWVJEAGDEolyIZ2bMe1jZq7avIycg8Hq3TnxtskU7wA4zZmGI2afDCcVkYnG
jx/tZ5rcfeG/i6FyNzMKOMYHb0rIXIzwDefun+JQKr0whzG7eqoAxYrZJBb4ZagD
rIEzm/JCqNSvFml9cP83pCqzC3NmA3JQPSdBJWIsZsvjSK6W/Z+0nC9QuoQ7sueX
kaZSGYGvHg6GL0jeESfwG0feaPE3pWwypVyEYtybBKt/vU2oSmhdiF1OwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA5fJI1p4oPRCS7v1dfG7CcFoE4SMB8GA1UdIwQY
MBaAFKcTDn06dgl9AqlYs/A5Xf0YfRfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt
MmVjZTA0ZTE4NWMyLzEvRGw4a2pXbmlnOUVKTHVfVjE4YnNKd1dnVGhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy
LzEvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVmnBMA0G
CSqGSIb3DQEBCwUAA4IBAQAD9WIkLqrQ64AGzaCulCLHsHc+IRxX0aSqjmiItYWS
pNE/fp6zoDFpB2E/yjgIcsoH2mlmRXtG9XCx6WcTyiSMt0xUmRhHaDRVMqjG4Jnk
yd1lGYLNIEU6+3rlzzRSJeo00uQ9gkNJ0oR+g0nI+jgBsvjGhgaL5avLnfxQtEIP
IYZlT96256y/dlVCfNnfCr/NjbjHaCY+A0ivvYnd+F5IzhiTnCEH+h0uTXlDj9Af
yoZU940lZi9+hWCSyHcw/BgeS18hKBrrdnDg0JUw+4/7YPfabCxrGYFWo+XnsV5G
6K0oR36cQFQgEbnkgUEB4jpAox3PGpSbZdRTs5tny8dJ
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:37:47 2026 by rpki-client