Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/IIzVxtmDhdZdhpAbkL-ndC6CsU4.roa
File: IIzVxtmDhdZdhpAbkL-ndC6CsU4.roa (raw, json)
Hash identifier: CQ228xdqWMGw11CGwR9Uzvgy1Q7ztTnBAHC18ATjAq4=
Subject key identifier: 20:8C:D5:C6:D9:83:85:D6:5D:86:90:1B:90:BF:A7:74:2E:82:B1:4E
Certificate issuer: /CN=49f933fc732d42128c3c88b3de0e48ca94acdd7e
Certificate serial: 019F2368FCC5849E02C93FBF733BAEAC430B
Authority key identifier: 49:F9:33:FC:73:2D:42:12:8C:3C:88:B3:DE:0E:48:CA:94:AC:DD:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/IIzVxtmDhdZdhpAbkL-ndC6CsU4.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206309
IP address blocks: 185.179.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fc:c5:84:9e:02:c9:3f:bf:73:3b:ae:ac:43:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f933fc732d42128c3c88b3de0e48ca94acdd7e
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=208cd5c6d98385d65d86901b90bfa7742e82b14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:66:89:95:f5:4d:77:8d:b8:d0:dd:c3:b9:c7:
2e:35:67:ba:fc:24:14:f6:9b:9a:b0:80:2a:99:9a:
a2:72:be:33:12:f7:a6:c1:e1:e2:c0:11:d7:58:de:
e3:59:06:1d:d3:3e:48:77:e9:e9:e9:0e:5e:c8:04:
dd:1b:11:07:9f:17:72:d6:8d:b7:11:6d:1b:d0:86:
6d:6c:fe:3c:07:a3:7c:b5:db:48:75:58:a8:6a:ed:
f9:a6:ee:b9:91:ea:e7:8a:ab:0b:3b:fa:22:cd:4d:
64:9a:57:4c:ef:f0:f9:12:32:2d:e6:90:a2:a9:f1:
57:47:91:8c:5a:dd:c4:02:9f:39:42:cd:76:fb:27:
4e:8a:46:2b:e6:c0:05:eb:cc:47:3e:71:d0:0a:e6:
83:4d:90:e9:2f:d0:08:61:ad:af:f7:1a:9e:05:80:
85:07:04:2f:f4:83:a0:bd:e8:a2:38:91:df:8f:a3:
06:f9:d5:a7:0f:07:76:34:0f:7e:6e:64:a8:0f:42:
0a:24:a9:73:99:3b:20:83:79:9d:6f:c1:f2:18:65:
91:12:43:6d:c2:29:bc:56:df:da:82:05:79:e5:24:
f7:15:6c:a5:a1:c1:5d:a5:5c:2b:4d:ca:a3:84:46:
09:28:13:23:a9:28:a3:10:72:a8:bc:4e:6b:c6:43:
ed:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8C:D5:C6:D9:83:85:D6:5D:86:90:1B:90:BF:A7:74:2E:82:B1:4E
X509v3 Authority Key Identifier:
keyid:49:F9:33:FC:73:2D:42:12:8C:3C:88:B3:DE:0E:48:CA:94:AC:DD:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/IIzVxtmDhdZdhpAbkL-ndC6CsU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.43.0/24
Signature Algorithm: sha256WithRSAEncryption
41:78:bb:97:f8:f0:b4:9d:32:1a:a0:5c:92:a5:ea:ab:4a:c0:
02:05:d4:87:9f:54:aa:a0:da:c2:ab:f1:22:57:48:2b:67:e1:
94:4f:74:99:86:bb:b7:8a:ac:75:7a:cf:4f:7b:0c:8e:b2:d5:
28:cc:4d:30:b2:9c:f9:b3:25:e9:05:47:7f:cd:86:09:44:3e:
18:49:69:89:bc:df:e8:9c:54:07:3e:81:c3:12:98:d8:c7:e1:
15:cb:72:ff:ef:21:4c:60:39:9e:de:27:ad:7e:6d:99:37:9c:
6b:0b:0f:20:dd:a7:6f:73:66:89:e0:4c:f3:48:ed:b5:48:ba:
59:9b:9f:66:49:ce:e0:aa:8b:33:5a:30:bf:b8:67:fa:85:59:
9f:19:5e:92:0c:64:92:41:90:00:e4:86:37:c0:88:6b:53:4e:
e0:b1:76:d6:1d:f9:4c:c7:a2:87:a9:19:ad:9c:fc:f6:cb:28:
ff:2e:06:17:29:e0:fc:d7:d3:0e:8a:36:1d:8b:ee:97:fc:0b:
e4:67:6b:56:ae:d4:9e:64:63:6a:96:06:e1:30:fc:03:ee:8e:
cb:e5:c5:b7:87:37:15:cc:83:84:9c:00:1c:16:be:18:c7:6b:
8c:c1:87:f8:ac:f7:2a:df:35:f0:11:fd:84:10:04:ad:f3:53:
53:c7:9a:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaPzFhJ4CyT+/czuurEMLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZjkzM2ZjNzMyZDQyMTI4YzNjODhiM2RlMGU0OGNhOTRh
Y2RkN2UwHhcNMjYwNzAyMTUxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDhjZDVjNmQ5ODM4NWQ2NWQ4NjkwMWI5MGJmYTc3NDJlODJiMTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmaJlfVNd4240N3DuccuNWe6/CQU
9puasIAqmZqicr4zEvemweHiwBHXWN7jWQYd0z5Id+np6Q5eyATdGxEHnxdy1o23
EW0b0IZtbP48B6N8tdtIdVioau35pu65kerniqsLO/oizU1kmldM7/D5EjIt5pCi
qfFXR5GMWt3EAp85Qs12+ydOikYr5sAF68xHPnHQCuaDTZDpL9AIYa2v9xqeBYCF
BwQv9IOgveiiOJHfj6MG+dWnDwd2NA9+bmSoD0IKJKlzmTsgg3mdb8HyGGWREkNt
wim8Vt/aggV55ST3FWylocFdpVwrTcqjhEYJKBMjqSijEHKovE5rxkPtLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCCM1cbZg4XWXYaQG5C/p3QugrFOMB8GA1UdIwQY
MBaAFEn5M/xzLUISjDyIs94OSMqUrN1+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2Zrel9ITXRRaEtNUElpejNnNUl5cFNzM1g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEt
MTgyMjg2N2UxNTk2LzEvSUl6Vnh0bURoZFpkaHBBYmtMLW5kQzZDc1U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEtMTgyMjg2N2UxNTk2
LzEvU2Zrel9ITXRRaEtNUElpejNnNUl5cFNzM1g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubMrMA0G
CSqGSIb3DQEBCwUAA4IBAQBBeLuX+PC0nTIaoFySpeqrSsACBdSHn1SqoNrCq/Ei
V0grZ+GUT3SZhru3iqx1es9PewyOstUozE0wspz5syXpBUd/zYYJRD4YSWmJvN/o
nFQHPoHDEpjYx+EVy3L/7yFMYDme3ietfm2ZN5xrCw8g3advc2aJ4EzzSO21SLpZ
m59mSc7gqoszWjC/uGf6hVmfGV6SDGSSQZAA5IY3wIhrU07gsXbWHflMx6KHqRmt
nPz2yyj/LgYXKeD819MOijYdi+6X/AvkZ2tWrtSeZGNqlgbhMPwD7o7L5cW3hzcV
zIOEnAAcFr4Yx2uMwYf4rPcq3zXwEf2EEASt81NTx5qj
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:30 2026 by rpki-client