Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/jKeaW7g3-vwDVoHOZK2KpCN1sWA.roa
File: jKeaW7g3-vwDVoHOZK2KpCN1sWA.roa (raw, json)
Hash identifier: sqHWrvNe0MvxI2kDDh6irgL9TZbFavXwZmxBezSbKWU=
Subject key identifier: 8C:A7:9A:5B:B8:37:FA:FC:03:56:81:CE:64:AD:8A:A4:23:75:B1:60
Certificate issuer: /CN=a026cbb9c7e81cdc49d1beb346dbadc91f34aec1
Certificate serial: 019F23691C9803E65873077CB3A402A56877
Authority key identifier: A0:26:CB:B9:C7:E8:1C:DC:49:D1:BE:B3:46:DB:AD:C9:1F:34:AE:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCbLucfoHNxJ0b6zRtutyR80rsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/jKeaW7g3-vwDVoHOZK2KpCN1sWA.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60752
IP address blocks: 185.26.0.0/24 maxlen: 24
185.26.1.0/24 maxlen: 24
185.26.2.0/24 maxlen: 24
185.26.3.0/24 maxlen: 24
193.35.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/oCbLucfoHNxJ0b6zRtutyR80rsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/oCbLucfoHNxJ0b6zRtutyR80rsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCbLucfoHNxJ0b6zRtutyR80rsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1c:98:03:e6:58:73:07:7c:b3:a4:02:a5:68:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a026cbb9c7e81cdc49d1beb346dbadc91f34aec1
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ca79a5bb837fafc035681ce64ad8aa42375b160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:44:e6:97:fe:d9:c7:59:61:68:dd:c7:43:81:
fb:c4:af:f6:dd:3c:fc:c8:99:de:9e:43:f5:1f:f7:
a3:56:70:92:3e:1e:28:ec:07:97:99:b3:ef:33:1a:
d0:13:d2:bb:18:34:e9:18:81:3c:3e:0e:70:3c:97:
db:8a:d7:79:48:0c:4e:f3:6f:7d:48:d4:2a:e5:a8:
81:98:52:f3:7f:84:16:9f:9e:53:69:43:7f:da:6b:
70:72:a6:dd:28:99:dd:cb:02:bd:b1:6f:93:88:24:
02:6b:d7:94:27:b8:6d:4c:c0:53:d5:13:0a:c5:74:
d3:34:82:36:76:e2:46:4c:ab:00:df:3d:0b:ac:55:
d3:5f:69:89:59:bb:b7:cd:a3:48:5d:81:b3:b1:d2:
93:7f:d9:a3:23:0e:00:06:b0:6e:c2:b0:13:04:d6:
c9:58:80:91:f8:fb:08:2c:f3:bd:d0:cc:d8:36:7c:
e7:64:fc:59:1d:79:12:46:6a:5d:0d:8f:c2:5b:32:
4b:3a:7e:ec:13:e1:cc:87:29:cd:e5:a0:d0:f7:de:
5b:40:ef:26:3b:ce:54:73:f8:18:51:1c:48:4e:f1:
bd:7c:ed:b1:11:e1:94:ac:77:9f:c6:40:7e:a4:a5:
f1:ba:be:fd:b5:fd:f4:b1:f1:4b:8b:e0:66:73:32:
4d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A7:9A:5B:B8:37:FA:FC:03:56:81:CE:64:AD:8A:A4:23:75:B1:60
X509v3 Authority Key Identifier:
keyid:A0:26:CB:B9:C7:E8:1C:DC:49:D1:BE:B3:46:DB:AD:C9:1F:34:AE:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCbLucfoHNxJ0b6zRtutyR80rsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/jKeaW7g3-vwDVoHOZK2KpCN1sWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/oCbLucfoHNxJ0b6zRtutyR80rsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.0.0/22
193.35.225.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:15:15:eb:f9:b4:bb:ce:e6:90:a0:1e:16:5f:a2:08:4e:bd:
ac:df:9a:0b:b8:dd:07:23:cd:6b:4b:98:af:ca:5b:f5:b2:fd:
28:15:27:04:4e:dd:25:39:55:a3:e7:06:c5:ab:26:86:6e:48:
6e:b1:6e:a2:90:0b:3f:c8:5b:eb:ec:04:b6:15:f9:3c:9e:89:
47:8a:d7:2e:8e:8f:01:c5:88:fb:a4:07:d8:5f:e2:d0:96:ed:
de:71:7d:68:97:d7:99:3b:a7:dd:0d:c9:9f:ee:ec:70:74:74:
ac:f1:d0:89:a0:69:ad:2a:2b:20:fc:e9:a3:60:72:5b:c8:45:
cb:8b:8f:28:4b:b2:e0:4c:01:ac:93:c1:d5:84:1a:07:63:b5:
ee:1c:23:b1:fc:57:1b:4b:32:27:1a:01:83:78:06:e6:3d:e1:
53:1a:a7:f0:28:99:36:02:9c:ac:13:f2:86:75:66:7f:02:f3:
2a:49:1a:32:94:1d:d9:ec:ee:86:15:15:07:5b:0c:42:6f:66:
b0:66:a3:3a:34:f4:43:6f:89:87:a3:97:7a:35:2b:ab:67:b8:
3b:e4:9e:bb:f6:6e:7b:e2:65:64:22:9b:4d:28:c9:64:46:61:
30:d9:38:ce:8b:d2:d9:d9:68:dc:55:1d:a9:29:f3:73:19:f4:
2a:6c:fa:40
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8jaRyYA+ZYcwd8s6QCpWh3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMjZjYmI5YzdlODFjZGM0OWQxYmViMzQ2ZGJhZGM5MWYz
NGFlYzEwHhcNMjYwNzAyMTUxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2E3OWE1YmI4MzdmYWZjMDM1NjgxY2U2NGFkOGFhNDIzNzViMTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kTml/7Zx1lhaN3HQ4H7xK/23Tz8
yJnenkP1H/ejVnCSPh4o7AeXmbPvMxrQE9K7GDTpGIE8Pg5wPJfbitd5SAxO8299
SNQq5aiBmFLzf4QWn55TaUN/2mtwcqbdKJndywK9sW+TiCQCa9eUJ7htTMBT1RMK
xXTTNII2duJGTKsA3z0LrFXTX2mJWbu3zaNIXYGzsdKTf9mjIw4ABrBuwrATBNbJ
WICR+PsILPO90MzYNnznZPxZHXkSRmpdDY/CWzJLOn7sE+HMhynN5aDQ995bQO8m
O85Uc/gYURxITvG9fO2xEeGUrHefxkB+pKXxur79tf30sfFLi+BmczJNOwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIynmlu4N/r8A1aBzmStiqQjdbFgMB8GA1UdIwQY
MBaAFKAmy7nH6BzcSdG+s0bbrckfNK7BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0NiTHVjZm9ITnhKMGI2elJ0dXR5UjgwcnNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iZDgxZTctMzk3ZS00ZDVkLWE1ZjEt
M2EwZmFhMjhiNWFjLzEvaktlYVc3ZzMtdndEVm9IT1pLMktwQ04xc1dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9iZDgxZTctMzk3ZS00ZDVkLWE1ZjEtM2EwZmFhMjhiNWFj
LzEvb0NiTHVjZm9ITnhKMGI2elJ0dXR5UjgwcnNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuRoAAwQA
wSPhMA0GCSqGSIb3DQEBCwUAA4IBAQB/FRXr+bS7zuaQoB4WX6IITr2s35oLuN0H
I81rS5ivylv1sv0oFScETt0lOVWj5wbFqyaGbkhusW6ikAs/yFvr7AS2Ffk8nolH
itcujo8BxYj7pAfYX+LQlu3ecX1ol9eZO6fdDcmf7uxwdHSs8dCJoGmtKisg/Omj
YHJbyEXLi48oS7LgTAGsk8HVhBoHY7XuHCOx/FcbSzInGgGDeAbmPeFTGqfwKJk2
ApysE/KGdWZ/AvMqSRoylB3Z7O6GFRUHWwxCb2awZqM6NPRDb4mHo5d6NSurZ7g7
5J679m574mVkIptNKMlkRmEw2TjOi9LZ2WjcVR2pKfNzGfQqbPpA
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:17:04 2026 by rpki-client