Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/unxwdf81gpRWB7U0VMJrWq-VwSc.roa
File: unxwdf81gpRWB7U0VMJrWq-VwSc.roa (raw, json)
Hash identifier: kyyuEv5ut2js57ZjOSryT6crB/LNxjqzyJucRjWFp8g=
Subject key identifier: BA:7C:70:75:FF:35:82:94:56:07:B5:34:54:C2:6B:5A:AF:95:C1:27
Certificate issuer: /CN=ebf760c05773c15d73676450344668fefb723447
Certificate serial: 019F8E99D5F4F4100C129809DF547268383E
Authority key identifier: EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/unxwdf81gpRWB7U0VMJrWq-VwSc.roa
Signing time: Thu 23 Jul 2026 10:51:14 +0000
ROA not before: Thu 23 Jul 2026 10:51:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201519
IP address blocks: 185.58.12.0/24 maxlen: 24
185.58.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:99:d5:f4:f4:10:0c:12:98:09:df:54:72:68:38:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf760c05773c15d73676450344668fefb723447
Validity
Not Before: Jul 23 10:51:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba7c7075ff3582945607b53454c26b5aaf95c127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:03:22:a8:62:1c:fb:9e:17:c6:94:92:29:90:
77:b8:66:71:c0:0e:98:d9:4b:1a:9d:45:41:9e:d7:
e7:d5:d6:0d:38:ab:ae:c5:84:43:04:53:ba:8d:81:
09:fb:b1:42:32:4f:26:7a:bf:0c:d8:1f:e5:37:a9:
84:d3:6d:69:0e:6d:53:cc:49:ca:08:cd:5a:3e:17:
64:e8:85:77:db:e2:1e:08:6a:c0:df:b5:77:e0:bb:
ff:42:02:df:d7:04:d4:ae:d7:29:dd:24:3a:da:25:
bb:15:5a:a3:9e:1e:0d:4e:95:17:1e:59:71:3b:a9:
2e:d4:d7:e0:d5:d0:1d:c4:52:56:3c:a4:91:5a:cb:
fc:6c:34:ea:19:04:28:7d:9e:be:de:64:83:a8:0f:
ad:df:16:46:ae:28:aa:94:39:5b:7b:69:05:1d:c8:
43:27:5c:ce:03:8c:fc:10:c8:48:5f:5f:62:15:f7:
31:fb:64:99:bd:99:85:99:00:92:a9:29:97:c6:35:
9b:a2:12:75:e3:b8:80:03:c0:6b:1e:e6:33:23:98:
6b:26:26:64:3c:d9:1e:cd:13:28:0a:41:80:b9:35:
a2:3e:48:7d:7c:a4:fb:d3:b2:a4:e4:5c:30:02:4a:
2d:5f:59:07:93:26:c9:ed:5d:0b:15:3e:3c:94:64:
63:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7C:70:75:FF:35:82:94:56:07:B5:34:54:C2:6B:5A:AF:95:C1:27
X509v3 Authority Key Identifier:
keyid:EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/unxwdf81gpRWB7U0VMJrWq-VwSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.12.0/24
185.58.14.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:79:ef:c4:78:94:af:b9:b7:83:c5:5a:5f:70:de:0c:9d:e5:
12:13:b6:1a:04:fd:0f:8c:b5:fe:2f:e9:3d:10:04:5f:37:93:
d8:b3:56:83:59:39:02:c3:a2:8c:b8:83:3e:05:9c:44:76:01:
e5:f8:35:e5:14:49:dc:24:34:50:14:8b:a9:8d:b1:d9:ac:de:
69:64:a2:d7:5b:7a:16:a9:aa:3f:d8:e6:2e:c9:f3:fb:32:57:
47:db:31:6a:d3:8b:f5:e4:98:13:1f:50:35:b4:8b:fb:a4:9a:
39:28:c6:a2:93:ff:15:81:8b:f1:df:d6:a4:01:6e:d7:ed:23:
e1:f7:85:7e:59:d4:3a:a7:df:dd:d8:b1:0f:81:1b:56:1a:fa:
08:67:43:c1:69:a3:3a:c4:69:13:d6:26:51:6a:01:7a:74:f1:
c7:ff:79:6e:a4:cd:83:14:b8:92:56:39:29:13:ec:ae:bf:04:
96:4d:8e:70:cb:1c:5f:66:8e:ee:f4:8b:35:79:27:22:d8:60:
69:bf:aa:08:86:8f:f7:40:ef:f1:e7:de:5b:21:02:66:3c:54:
49:a2:83:97:12:ea:37:56:a8:8b:eb:c7:bb:ed:0a:60:b1:47:
f6:33:d9:d9:dd:fa:83:ff:91:96:76:d4:9d:bb:2d:b9:5f:e8:
9f:75:52:de
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ+OmdX09BAMEpgJ31RyaDg+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZjc2MGMwNTc3M2MxNWQ3MzY3NjQ1MDM0NDY2OGZlZmI3
MjM0NDcwHhcNMjYwNzIzMTA1MTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTdjNzA3NWZmMzU4Mjk0NTYwN2I1MzQ1NGMyNmI1YWFmOTVjMTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwMiqGIc+54XxpSSKZB3uGZxwA6Y
2UsanUVBntfn1dYNOKuuxYRDBFO6jYEJ+7FCMk8mer8M2B/lN6mE021pDm1TzEnK
CM1aPhdk6IV32+IeCGrA37V34Lv/QgLf1wTUrtcp3SQ62iW7FVqjnh4NTpUXHllx
O6ku1Nfg1dAdxFJWPKSRWsv8bDTqGQQofZ6+3mSDqA+t3xZGriiqlDlbe2kFHchD
J1zOA4z8EMhIX19iFfcx+2SZvZmFmQCSqSmXxjWbohJ147iAA8BrHuYzI5hrJiZk
PNkezRMoCkGAuTWiPkh9fKT707Kk5FwwAkotX1kHkybJ7V0LFT48lGRjkQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLp8cHX/NYKUVge1NFTCa1qvlcEnMB8GA1UdIwQY
MBaAFOv3YMBXc8Fdc2dkUDRGaP77cjRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNl9kZ3dGZHp3VjF6WjJSUU5FWm9fdnR5TkVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85MzFmODEtYzQwOS00ZDNhLTk1ZGYt
NDkwOTg4OTdlZTRhLzEvdW54d2RmODFncFJXQjdVMFZNSnJXcS1Wd1NjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy85MzFmODEtYzQwOS00ZDNhLTk1ZGYtNDkwOTg4OTdlZTRh
LzEvNl9kZ3dGZHp3VjF6WjJSUU5FWm9fdnR5TkVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuToMAwQA
uToOMA0GCSqGSIb3DQEBCwUAA4IBAQCPee/EeJSvubeDxVpfcN4MneUSE7YaBP0P
jLX+L+k9EARfN5PYs1aDWTkCw6KMuIM+BZxEdgHl+DXlFEncJDRQFIupjbHZrN5p
ZKLXW3oWqao/2OYuyfP7MldH2zFq04v15JgTH1A1tIv7pJo5KMaik/8VgYvx39ak
AW7X7SPh94V+WdQ6p9/d2LEPgRtWGvoIZ0PBaaM6xGkT1iZRagF6dPHH/3lupM2D
FLiSVjkpE+yuvwSWTY5wyxxfZo7u9Is1eSci2GBpv6oIho/3QO/x595bIQJmPFRJ
ooOXEuo3VqiL68e77QpgsUf2M9nZ3fqD/5GWdtSduy25X+ifdVLe
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:24:12 2026 by rpki-client