Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/tH8iogWnSl4BdfzNPISKQQzt-Wk.roa
File: tH8iogWnSl4BdfzNPISKQQzt-Wk.roa (raw, json)
Hash identifier: CFoOyClZIttlxfo6s29kWFO4JUkk6mAvIhm58DzApsI=
Subject key identifier: B4:7F:22:A2:05:A7:4A:5E:01:75:FC:CD:3C:84:8A:41:0C:ED:F9:69
Certificate issuer: /CN=dfdfaea913775f18f5f8d03567e5c20d0dcf88b2
Certificate serial: 019F23690E1E09DE9EAC06DEF62706A9808C
Authority key identifier: DF:DF:AE:A9:13:77:5F:18:F5:F8:D0:35:67:E5:C2:0D:0D:CF:88:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/tH8iogWnSl4BdfzNPISKQQzt-Wk.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28849
IP address blocks: 185.15.156.0/22 maxlen: 22
185.15.159.0/24 maxlen: 24
217.23.112.0/20 maxlen: 20
217.23.112.0/24 maxlen: 24
217.23.113.0/24 maxlen: 24
217.23.114.0/24 maxlen: 24
217.23.115.0/24 maxlen: 24
217.23.116.0/24 maxlen: 24
217.23.117.0/24 maxlen: 24
217.23.119.0/24 maxlen: 24
217.23.121.0/24 maxlen: 24
217.23.122.0/24 maxlen: 24
217.23.123.0/24 maxlen: 24
217.23.124.0/24 maxlen: 24
217.23.125.0/24 maxlen: 24
217.23.126.0/24 maxlen: 24
217.23.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0e:1e:09:de:9e:ac:06:de:f6:27:06:a9:80:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfdfaea913775f18f5f8d03567e5c20d0dcf88b2
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b47f22a205a74a5e0175fccd3c848a410cedf969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cc:d3:52:d0:db:77:e9:d0:96:87:31:b8:bc:
e0:42:96:5a:b9:b2:56:1a:20:48:a7:a2:d5:9b:8a:
e6:d4:2e:69:d8:41:40:b0:13:e7:34:4d:9d:69:a0:
4b:9c:8c:bc:52:60:50:64:03:51:bc:a3:21:56:a6:
22:4b:78:5f:33:52:e5:4b:cc:05:a8:98:61:38:ed:
af:71:bc:d2:b6:30:ff:92:88:b1:3e:52:1c:26:6f:
9a:75:40:52:57:b7:44:e0:73:56:40:e0:00:3c:fd:
4b:22:10:9c:ba:3c:20:a2:55:bc:e5:f4:05:39:c8:
4d:e4:f1:b0:03:92:54:87:9a:4f:27:bd:fb:b3:61:
44:67:59:79:fd:31:f0:54:9c:14:f4:19:99:c3:30:
4d:df:7f:6b:58:8d:cf:6a:37:50:a8:90:62:c2:a3:
df:b8:6d:20:24:b0:f6:a1:66:28:96:85:ed:e4:42:
c0:56:0d:f3:16:14:24:56:81:c2:49:70:57:98:d5:
d4:34:4d:bd:0b:32:4e:42:0c:d3:55:4d:ad:45:7f:
18:26:98:c7:b2:ee:ce:ab:b4:2f:c4:5f:d8:8f:3f:
cd:1f:40:fa:35:52:fa:3c:96:ef:02:63:27:6c:a4:
0b:82:c5:21:5a:4e:b1:26:5f:89:c0:b1:03:72:38:
e0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7F:22:A2:05:A7:4A:5E:01:75:FC:CD:3C:84:8A:41:0C:ED:F9:69
X509v3 Authority Key Identifier:
keyid:DF:DF:AE:A9:13:77:5F:18:F5:F8:D0:35:67:E5:C2:0D:0D:CF:88:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/tH8iogWnSl4BdfzNPISKQQzt-Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.156.0/22
217.23.112.0/20
Signature Algorithm: sha256WithRSAEncryption
a1:37:3a:91:b0:1b:40:e7:88:45:dd:06:a4:e7:f6:34:19:3a:
e6:7a:77:c8:96:37:9a:6e:68:bc:d7:13:c0:a5:cb:e7:fa:19:
dc:79:c2:62:dc:d4:74:a8:6a:b4:cd:d7:bb:a6:37:a8:1d:57:
77:0d:32:72:5b:84:8e:5f:f2:0c:17:c7:61:a6:cd:54:5f:f7:
b1:1d:06:b2:fd:0e:a5:e3:d6:21:da:21:df:51:ae:37:6d:e2:
83:2e:7b:10:da:e1:06:53:30:1d:42:42:94:5d:5f:96:a0:f7:
b7:32:29:d5:c1:87:97:7d:a1:18:20:6d:03:e8:b2:60:d5:73:
15:af:fb:3c:1a:d7:5a:91:d8:75:5b:09:63:28:04:63:74:6b:
a3:b7:47:ba:8e:8b:1b:f2:da:0c:fd:17:1f:ec:4e:ed:65:38:
15:dc:1c:ae:7b:20:43:37:e9:e4:88:c7:40:aa:06:d3:6c:bb:
34:b0:0d:7f:b2:76:33:a8:75:7b:04:71:cf:82:bb:b3:b5:c8:
bd:31:39:a6:2c:ae:b0:47:2d:8f:3e:aa:a1:72:3e:49:55:fe:
a3:a0:25:02:d1:ff:cc:42:6a:e4:95:c8:3e:78:84:76:cd:51:
c7:1c:a4:5e:77:32:53:61:6a:ca:64:5e:b5:4f:95:38:50:64:
69:81:7f:9a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8jaQ4eCd6erAbe9icGqYCMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZGZhZWE5MTM3NzVmMThmNWY4ZDAzNTY3ZTVjMjBkMGRj
Zjg4YjIwHhcNMjYwNzAyMTUxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDdmMjJhMjA1YTc0YTVlMDE3NWZjY2QzYzg0OGE0MTBjZWRmOTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8zTUtDbd+nQlocxuLzgQpZaubJW
GiBIp6LVm4rm1C5p2EFAsBPnNE2daaBLnIy8UmBQZANRvKMhVqYiS3hfM1LlS8wF
qJhhOO2vcbzStjD/koixPlIcJm+adUBSV7dE4HNWQOAAPP1LIhCcujwgolW85fQF
OchN5PGwA5JUh5pPJ737s2FEZ1l5/THwVJwU9BmZwzBN339rWI3PajdQqJBiwqPf
uG0gJLD2oWYoloXt5ELAVg3zFhQkVoHCSXBXmNXUNE29CzJOQgzTVU2tRX8YJpjH
su7Oq7QvxF/Yjz/NH0D6NVL6PJbvAmMnbKQLgsUhWk6xJl+JwLEDcjjgfQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLR/IqIFp0peAXX8zTyEikEM7flpMB8GA1UdIwQY
MBaAFN/frqkTd18Y9fjQNWflwg0Nz4iyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzktdXFSTjNYeGoxLU5BMVotWENEUTNQaUxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEt
MGNjODNiMDBmYzU4LzEvdEg4aW9nV25TbDRCZGZ6TlBJU0tRUXp0LVdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEtMGNjODNiMDBmYzU4
LzEvMzktdXFSTjNYeGoxLU5BMVotWENEUTNQaUxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuQ+cAwQE
2RdwMA0GCSqGSIb3DQEBCwUAA4IBAQChNzqRsBtA54hF3Qak5/Y0GTrmenfIljea
bmi81xPApcvn+hncecJi3NR0qGq0zde7pjeoHVd3DTJyW4SOX/IMF8dhps1UX/ex
HQay/Q6l49Yh2iHfUa43beKDLnsQ2uEGUzAdQkKUXV+WoPe3MinVwYeXfaEYIG0D
6LJg1XMVr/s8Gtdakdh1WwljKARjdGujt0e6josb8toM/Rcf7E7tZTgV3ByueyBD
N+nkiMdAqgbTbLs0sA1/snYzqHV7BHHPgruztci9MTmmLK6wRy2PPqqhcj5JVf6j
oCUC0f/MQmrklcg+eIR2zVHHHKRedzJTYWrKZF61T5U4UGRpgX+a
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:19 2026 by rpki-client