Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/1-lJzH2rXfTVP7jRY0mzbvnZfL0w.roa
File: 1-lJzH2rXfTVP7jRY0mzbvnZfL0w.roa (raw, json)
Hash identifier: ehYPqtGN6TS3Js5wuNR1zeWO3dD89SMMpjUpkkDnqQs=
Subject key identifier: FA:52:73:1F:6A:D7:7D:35:4F:EE:34:58:D2:6C:DB:BE:76:5F:2F:4C
Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial: 019DEF32602BF91576685ED0DF82D99088CA
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/1-lJzH2rXfTVP7jRY0mzbvnZfL0w.roa
Signing time: Sun 03 May 2026 18:55:49 +0000
ROA not before: Sun 03 May 2026 18:55:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 185.183.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ef:32:60:2b:f9:15:76:68:5e:d0:df:82:d9:90:88:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Validity
Not Before: May 3 18:55:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa52731f6ad77d354fee3458d26cdbbe765f2f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:2b:aa:3f:ca:73:c6:e9:0c:6d:3e:a9:dc:
38:5e:65:ef:16:f3:05:a8:f7:e2:e7:27:e2:e4:72:
25:05:82:70:3f:f1:b8:b1:93:eb:c8:a2:da:ec:e6:
fd:24:81:bb:09:4f:b3:c0:69:02:34:48:7f:ff:38:
ac:08:15:6d:80:f7:7c:c6:bd:f7:a7:89:6f:52:46:
ca:4f:c2:f8:57:d3:f4:6a:50:3f:4e:0a:5e:69:17:
36:8c:5e:b2:5b:c5:e7:99:57:9a:76:a2:a3:3a:06:
05:67:ce:4b:82:b9:77:7e:04:31:c5:44:a9:d0:d0:
a6:9c:6e:70:11:85:35:0e:fb:a3:7e:af:ef:ab:e1:
1b:b4:8e:0d:39:24:ce:d9:cd:14:7c:de:4c:29:61:
8e:2c:3a:e8:0e:04:61:44:f0:56:f1:4a:0a:62:40:
03:8c:4e:fc:d4:77:ba:d9:2f:94:c5:5f:83:3e:19:
b9:b9:6a:51:5a:bb:48:13:92:88:44:50:96:50:d0:
51:a7:36:cb:bb:b2:50:31:88:70:43:82:68:ce:77:
26:38:f2:f3:44:9b:0a:28:25:82:10:0b:08:12:54:
96:cf:fe:5e:ef:97:27:45:a4:bc:d4:9d:c2:de:83:
ba:ce:70:06:82:8d:90:f8:76:99:fc:e2:3d:8c:32:
03:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:52:73:1F:6A:D7:7D:35:4F:EE:34:58:D2:6C:DB:BE:76:5F:2F:4C
X509v3 Authority Key Identifier:
keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/1-lJzH2rXfTVP7jRY0mzbvnZfL0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.244.0/22
Signature Algorithm: sha256WithRSAEncryption
63:29:30:15:58:51:e2:45:8d:66:a5:0f:c5:db:aa:1d:5a:44:
9a:d8:bb:08:3f:26:8c:35:76:51:b0:dd:b0:17:55:f4:77:44:
94:6c:49:7f:8d:1b:83:31:03:19:56:a1:dd:50:18:d1:12:b6:
c4:8a:95:2d:72:a9:88:31:b8:e1:8c:5c:a6:94:c8:d1:d9:bf:
35:83:22:c7:21:05:aa:18:47:03:c1:b9:e3:d7:90:89:b6:57:
2e:8d:a7:e0:6e:48:63:d5:9a:c1:0d:80:d9:64:cb:3e:2e:49:
1e:33:67:ad:db:67:0c:c9:78:83:55:e3:f3:fe:ff:93:62:50:
df:49:ef:0c:20:20:7d:28:53:ec:51:ff:cd:9c:55:a1:89:7f:
dd:2a:cd:40:81:74:bd:1c:c1:a9:93:30:43:ea:86:20:4a:fb:
f2:33:48:71:6e:08:07:30:e5:61:23:86:cb:92:2c:cf:97:b5:
ee:a6:01:da:ce:db:6d:03:a7:71:60:8e:6a:4c:55:ba:88:8d:
d4:a1:11:65:1a:9a:2f:40:f9:51:44:85:50:7a:d5:c0:c7:77:
d6:bd:14:a0:dd:38:33:4e:e5:bf:49:7b:7f:fa:2e:36:d1:26:
e5:eb:42:66:83:c3:ea:1d:5b:57:c2:af:7d:be:02:20:8d:48:
7d:2c:8f:af
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ3vMmAr+RV2aF7Q34LZkIjKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiM2E3MzVkMDlhYWE3OTcwZGVmMTJjNGFjNjBlODI3ZmRi
M2Y4MjUwHhcNMjYwNTAzMTg1NTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTUyNzMxZjZhZDc3ZDM1NGZlZTM0NThkMjZjZGJiZTc2NWYyZjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfMrqj/Kc8bpDG0+qdw4XmXvFvMF
qPfi5yfi5HIlBYJwP/G4sZPryKLa7Ob9JIG7CU+zwGkCNEh//zisCBVtgPd8xr33
p4lvUkbKT8L4V9P0alA/TgpeaRc2jF6yW8XnmVeadqKjOgYFZ85Lgrl3fgQxxUSp
0NCmnG5wEYU1Dvujfq/vq+EbtI4NOSTO2c0UfN5MKWGOLDroDgRhRPBW8UoKYkAD
jE781He62S+UxV+DPhm5uWpRWrtIE5KIRFCWUNBRpzbLu7JQMYhwQ4JozncmOPLz
RJsKKCWCEAsIElSWz/5e75cnRaS81J3C3oO6znAGgo2Q+HaZ/OI9jDID4QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPpScx9q1301T+40WNJs2752Xy9MMB8GA1UdIwQY
MBaAFGs6c10JqqeXDe8SxKxg6Cf9s/glMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXpwelhRbXFwNWNON3hMRXJHRG9KXzJ6LUNVLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jYzcyNDctNmYwYy00Yjc0LTg2OTAt
MDUxMDc2NzQ0YTY1LzEvMS1sSnpIMnJYZlRWUDdqUlkwbXpidm5aZkwwdy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYmYvY2M3MjQ3LTZmMGMtNGI3NC04NjkwLTA1MTA3Njc0NGE2
NS8xL2F6cHpYUW1xcDVjTjd4TEVyR0RvSl8yei1DVS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArm39DAN
BgkqhkiG9w0BAQsFAAOCAQEAYykwFVhR4kWNZqUPxduqHVpEmti7CD8mjDV2UbDd
sBdV9HdElGxJf40bgzEDGVah3VAY0RK2xIqVLXKpiDG44YxcppTI0dm/NYMixyEF
qhhHA8G549eQibZXLo2n4G5IY9WawQ2A2WTLPi5JHjNnrdtnDMl4g1Xj8/7/k2JQ
30nvDCAgfShT7FH/zZxVoYl/3SrNQIF0vRzBqZMwQ+qGIEr78jNIcW4IBzDlYSOG
y5Isz5e17qYB2s7bbQOncWCOakxVuoiN1KERZRqaL0D5UUSFUHrVwMd31r0UoN04
M07lv0l7f/ouNtEm5etCZoPD6h1bV8Kvfb4CII1IfSyPrw==
-----END CERTIFICATE-----
Generated at Wed May 13 14:16:57 2026 by rpki-client