Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/goUYjVN9eA9hOtcAQmjZX70QYKA.roa
File: goUYjVN9eA9hOtcAQmjZX70QYKA.roa (raw, json)
Hash identifier: iDLkhfcqRbUYt0a62+IvDPgXD8OoY7M/CdVSl1IowLw=
Subject key identifier: 82:85:18:8D:53:7D:78:0F:61:3A:D7:00:42:68:D9:5F:BD:10:60:A0
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01A0CA4A154DABCE636B84842955FA8148F3
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/goUYjVN9eA9hOtcAQmjZX70QYKA.roa
Signing time: Tue 22 Sep 2026 18:04:07 +0000
ROA not before: Tue 22 Sep 2026 18:04:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198178
IP address blocks: 195.246.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:4a:15:4d:ab:ce:63:6b:84:84:29:55:fa:81:48:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Sep 22 18:04:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8285188d537d780f613ad7004268d95fbd1060a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7c:78:6b:47:e2:ad:3d:f4:d9:20:da:d2:2d:
68:9c:1e:7a:20:c3:2a:e7:d2:5d:02:14:27:43:46:
0e:1a:f7:fb:18:d2:c6:11:b5:1a:00:06:a9:2e:b7:
ae:a4:15:5e:8f:5a:f5:76:54:9a:d8:0d:fb:77:96:
3c:00:8c:a5:96:98:fd:9f:c5:ed:47:83:6d:e0:fd:
42:4e:ad:c5:15:02:cf:86:a6:2e:23:42:37:20:07:
24:84:76:aa:47:a7:e3:ad:5e:77:d1:3c:cf:01:4b:
74:12:88:00:bd:87:d0:55:04:e5:1b:cd:9e:bf:69:
f3:9c:85:ad:a6:73:9f:e8:aa:cd:d8:6d:7d:08:21:
2b:e7:00:a1:c9:1c:97:5e:19:c6:2c:64:26:01:c1:
62:19:3e:a9:b6:3c:be:b0:df:32:76:c7:f8:a7:16:
37:ce:d2:f6:ca:c0:92:2c:fc:51:ac:ac:9d:fc:45:
49:19:fc:38:4f:0b:80:1c:58:e7:cf:fa:ef:19:4d:
40:4d:75:18:7a:8f:de:72:c6:52:37:08:49:f1:ed:
eb:35:4c:4f:7b:42:46:a0:9a:44:c5:22:ae:d2:de:
b6:a7:44:7f:08:70:ae:42:6f:62:06:60:eb:ac:05:
91:4e:20:4f:87:b7:81:be:9c:f6:01:63:27:b6:98:
f2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:85:18:8D:53:7D:78:0F:61:3A:D7:00:42:68:D9:5F:BD:10:60:A0
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/goUYjVN9eA9hOtcAQmjZX70QYKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.246.110.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:c3:93:ce:6b:4f:53:58:ba:49:b5:c3:a5:64:d5:52:a5:db:
e5:5a:5d:b0:bc:b1:d7:f8:21:62:3f:0a:52:96:0e:e6:93:52:
90:79:0d:e6:38:24:76:6d:ea:c9:44:a9:55:36:07:f0:69:c4:
2f:9f:62:ec:06:49:55:7f:03:4a:f4:f8:de:34:65:85:bb:1a:
de:de:e7:03:66:d9:c0:1c:4f:b3:9b:38:1e:83:03:f4:78:d9:
90:ec:48:62:38:e3:45:c7:53:92:28:58:9d:9b:98:01:76:a9:
a0:c7:21:d2:f8:c4:91:a2:1a:cc:2e:1b:0a:9e:bc:d4:7c:24:
f0:0d:20:2e:a1:97:a5:eb:f7:a0:39:ed:16:74:21:b7:ab:24:
95:1a:f7:30:f5:c5:5c:bf:fc:62:e5:a8:36:47:d9:b4:91:10:
99:d1:16:11:9c:60:1f:e6:e1:8f:27:1f:2f:52:78:3a:19:fa:
e9:f4:6e:ce:2d:04:e4:68:57:64:d8:ac:b5:71:92:ae:71:ae:
47:44:b1:d2:a2:06:1f:45:9f:da:40:27:48:b5:cf:48:cd:44:
97:0a:ba:01:e2:0c:3e:bd:68:c0:da:33:95:01:32:0b:aa:b4:
2d:f8:4f:a4:1c:54:15:b9:72:06:30:da:0f:c5:28:e9:5e:8e:
cf:68:f2:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDKShVNq85ja4SEKVX6gUjzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjYwOTIyMTgwNDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Mjg1MTg4ZDUzN2Q3ODBmNjEzYWQ3MDA0MjY4ZDk1ZmJkMTA2MGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnx4a0firT302SDa0i1onB56IMMq
59JdAhQnQ0YOGvf7GNLGEbUaAAapLreupBVej1r1dlSa2A37d5Y8AIyllpj9n8Xt
R4Nt4P1CTq3FFQLPhqYuI0I3IAckhHaqR6fjrV530TzPAUt0EogAvYfQVQTlG82e
v2nznIWtpnOf6KrN2G19CCEr5wChyRyXXhnGLGQmAcFiGT6ptjy+sN8ydsf4pxY3
ztL2ysCSLPxRrKyd/EVJGfw4TwuAHFjnz/rvGU1ATXUYeo/ecsZSNwhJ8e3rNUxP
e0JGoJpExSKu0t62p0R/CHCuQm9iBmDrrAWRTiBPh7eBvpz2AWMntpjyDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIKFGI1TfXgPYTrXAEJo2V+9EGCgMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvZ29VWWpWTjllQTloT3RjQVFtalpYNzBRWUtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/ZuMA0G
CSqGSIb3DQEBCwUAA4IBAQCMw5POa09TWLpJtcOlZNVSpdvlWl2wvLHX+CFiPwpS
lg7mk1KQeQ3mOCR2berJRKlVNgfwacQvn2LsBklVfwNK9PjeNGWFuxre3ucDZtnA
HE+zmzgegwP0eNmQ7EhiOONFx1OSKFidm5gBdqmgxyHS+MSRohrMLhsKnrzUfCTw
DSAuoZel6/egOe0WdCG3qySVGvcw9cVcv/xi5ag2R9m0kRCZ0RYRnGAf5uGPJx8v
Ung6Gfrp9G7OLQTkaFdk2Ky1cZKuca5HRLHSogYfRZ/aQCdItc9IzUSXCroB4gw+
vWjA2jOVATILqrQt+E+kHFQVuXIGMNoPxSjpXo7PaPJH
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:01:32 2026 by rpki-client