Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/_dst1Xn6SlUI8nUoQkjpnLlhahc.roa
File: _dst1Xn6SlUI8nUoQkjpnLlhahc.roa (raw, json)
Hash identifier: BiPvKLoz5HOyAuWJJP0IXnbLHFFchqo6uteOhXIPeKs=
Subject key identifier: FD:DB:2D:D5:79:FA:4A:55:08:F2:75:28:42:48:E9:9C:B9:61:6A:17
Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Certificate serial: 019DF1DD8963DE6D85F03475ADFD58524AEF
Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/_dst1Xn6SlUI8nUoQkjpnLlhahc.roa
Signing time: Mon 04 May 2026 07:22:00 +0000
ROA not before: Mon 04 May 2026 07:22:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 185.239.178.0/24 maxlen: 24
185.239.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f1:dd:89:63:de:6d:85:f0:34:75:ad:fd:58:52:4a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Validity
Not Before: May 4 07:22:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fddb2dd579fa4a5508f275284248e99cb9616a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0e:e7:61:db:5d:1f:5f:57:42:d1:c7:c0:f2:
a0:f3:d2:53:a0:b0:65:59:fd:52:8d:a7:31:2c:65:
f5:a0:1b:06:71:39:e1:73:e7:36:f3:19:9b:ba:20:
04:af:d4:11:47:d6:70:5d:8c:ef:a2:4e:1b:14:0d:
a0:21:7c:c7:76:f4:a9:f9:4e:c7:a1:89:77:60:2e:
a2:8c:a4:7a:1b:e2:4c:cb:42:b1:04:2a:60:be:e7:
7d:da:f6:af:bd:b7:fc:c1:50:57:e7:a0:83:ad:61:
4e:4b:5e:fd:6e:87:c6:ba:2d:d9:4d:47:e3:e6:d4:
a8:88:f7:e7:9b:eb:18:1b:7a:4f:59:83:04:81:21:
89:da:56:80:a7:46:99:c1:72:d9:cc:bb:29:d4:00:
1b:a7:0e:33:18:ca:8c:f9:b5:58:b3:26:d7:ee:bd:
72:3c:38:e7:54:c2:66:16:82:64:34:77:9e:5f:20:
4e:e7:b2:d2:91:ec:00:1b:5b:a2:80:5b:39:b5:59:
22:48:be:ef:07:19:a0:56:48:51:41:fc:9a:ff:21:
46:e0:ac:e0:e3:0d:66:71:1a:94:2a:30:c7:9d:69:
ee:9a:87:d6:0a:f7:cf:18:eb:14:14:7d:e4:17:cf:
d1:0f:7c:d7:01:68:68:74:2a:82:30:73:28:9b:16:
c1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DB:2D:D5:79:FA:4A:55:08:F2:75:28:42:48:E9:9C:B9:61:6A:17
X509v3 Authority Key Identifier:
keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/_dst1Xn6SlUI8nUoQkjpnLlhahc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.178.0/23
Signature Algorithm: sha256WithRSAEncryption
77:7e:62:95:87:af:64:e5:78:35:93:b9:01:75:06:d3:d1:08:
cb:09:da:52:4f:20:47:b3:d3:51:52:fa:38:74:31:4c:d4:73:
21:5b:d5:41:e5:fc:fc:a7:d4:f3:cb:98:89:1c:7d:c2:b3:ae:
f0:47:7d:f4:44:b7:c7:2d:1e:04:47:2b:04:86:15:2e:03:a9:
86:36:00:f4:2c:69:62:8d:90:26:cc:d1:ce:e5:74:42:71:70:
a9:06:64:6a:e8:64:b0:b7:c3:37:af:44:17:d7:86:0e:c8:73:
f6:22:cd:5f:9d:e0:86:22:e2:0e:a2:0a:17:e1:4b:a7:85:9a:
2a:b4:10:a0:d1:6b:2b:c0:73:d2:e9:b0:13:5b:df:0f:83:ac:
0a:4a:6b:41:87:a3:07:e4:34:95:cf:7b:0d:45:89:d2:70:21:
65:a0:07:58:61:0f:74:e1:2f:4a:16:6a:8c:b0:01:68:b0:07:
d1:c7:1f:3e:d8:0d:90:5b:00:a7:9e:71:da:23:a3:e3:56:d3:
e0:f1:43:8e:27:d4:37:ed:f5:d3:6f:55:ba:b9:4b:ba:c7:ae:
89:20:7e:2d:d2:ca:7e:67:b0:49:51:f6:ef:2b:59:ba:ec:30:
dc:e4:18:77:91:5d:04:86:18:10:06:37:39:66:38:48:f9:c8:
fe:d6:a1:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3x3Ylj3m2F8DR1rf1YUkrvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2Nzg1NzczZGYzMTNiOTE3MTFiZjZiYzViMTQ5ZWNjMjQ2
YjllODkwHhcNMjYwNTA0MDcyMjAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGRiMmRkNTc5ZmE0YTU1MDhmMjc1Mjg0MjQ4ZTk5Y2I5NjE2YTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2A7nYdtdH19XQtHHwPKg89JToLBl
Wf1SjacxLGX1oBsGcTnhc+c28xmbuiAEr9QRR9ZwXYzvok4bFA2gIXzHdvSp+U7H
oYl3YC6ijKR6G+JMy0KxBCpgvud92vavvbf8wVBX56CDrWFOS179bofGui3ZTUfj
5tSoiPfnm+sYG3pPWYMEgSGJ2laAp0aZwXLZzLsp1AAbpw4zGMqM+bVYsybX7r1y
PDjnVMJmFoJkNHeeXyBO57LSkewAG1uigFs5tVkiSL7vBxmgVkhRQfya/yFG4Kzg
4w1mcRqUKjDHnWnumofWCvfPGOsUFH3kF8/RD3zXAWhodCqCMHMomxbBfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP3bLdV5+kpVCPJ1KEJI6Zy5YWoXMB8GA1UdIwQY
MBaAFKZ4V3PfMTuRcRv2vFsUnswka56JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEt
ZDc1ODY5YzBjNzFlLzEvX2RzdDFYbjZTbFVJOG5Vb1FranBuTGxoYWhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEtZDc1ODY5YzBjNzFl
LzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBue+yMA0G
CSqGSIb3DQEBCwUAA4IBAQB3fmKVh69k5Xg1k7kBdQbT0QjLCdpSTyBHs9NRUvo4
dDFM1HMhW9VB5fz8p9Tzy5iJHH3Cs67wR330RLfHLR4ERysEhhUuA6mGNgD0LGli
jZAmzNHO5XRCcXCpBmRq6GSwt8M3r0QX14YOyHP2Is1fneCGIuIOogoX4UunhZoq
tBCg0WsrwHPS6bATW98Pg6wKSmtBh6MH5DSVz3sNRYnScCFloAdYYQ904S9KFmqM
sAFosAfRxx8+2A2QWwCnnnHaI6PjVtPg8UOOJ9Q37fXTb1W6uUu6x66JIH4t0sp+
Z7BJUfbvK1m67DDc5Bh3kV0EhhgQBjc5ZjhI+cj+1qEv
-----END CERTIFICATE-----
Generated at Tue May 12 21:44:59 2026 by rpki-client