Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/E5KdTXgtxdsHLW1Tlm6fA7TQdyU.roa
File: E5KdTXgtxdsHLW1Tlm6fA7TQdyU.roa (raw, json)
Hash identifier: SWyR5eHmyCP1QW40YbfgTf5cb8LLIQWxMpE2tBwF6Tc=
Subject key identifier: 13:92:9D:4D:78:2D:C5:DB:07:2D:6D:53:96:6E:9F:03:B4:D0:77:25
Certificate issuer: /CN=8f0a3df8838cf34e5fa639c86dd0fd58da390fca
Certificate serial: 019F2368E87DC8292C785F01A4B65BBA9300
Authority key identifier: 8F:0A:3D:F8:83:8C:F3:4E:5F:A6:39:C8:6D:D0:FD:58:DA:39:0F:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwo9-IOM805fpjnIbdD9WNo5D8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/E5KdTXgtxdsHLW1Tlm6fA7TQdyU.roa
Signing time: Thu 02 Jul 2026 15:18:25 +0000
ROA not before: Thu 02 Jul 2026 15:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42525
IP address blocks: 185.19.232.0/22 maxlen: 22
213.146.64.0/19 maxlen: 19
2a00:4960::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/jwo9-IOM805fpjnIbdD9WNo5D8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/jwo9-IOM805fpjnIbdD9WNo5D8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwo9-IOM805fpjnIbdD9WNo5D8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e8:7d:c8:29:2c:78:5f:01:a4:b6:5b:ba:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0a3df8838cf34e5fa639c86dd0fd58da390fca
Validity
Not Before: Jul 2 15:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13929d4d782dc5db072d6d53966e9f03b4d07725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:2b:4d:ab:e7:8b:4f:61:05:e9:e0:36:99:
0a:1a:e8:0f:44:7b:6b:86:92:9c:64:09:5e:0d:d0:
c1:ec:4e:7c:21:f3:85:b8:39:59:8b:a7:1f:37:23:
9c:a2:af:8c:c6:05:31:bf:f3:da:58:52:80:f4:64:
47:05:45:e6:c7:d2:5b:2c:ee:3d:a9:af:9c:a1:71:
44:d8:83:2c:c0:6d:45:d8:bc:80:ed:84:44:6f:36:
c0:a5:b9:0a:f8:55:19:b2:39:f3:85:ef:d1:81:ce:
18:ef:a3:ea:42:08:d1:d4:a5:c0:97:bd:ec:ac:45:
25:9a:51:15:4f:ac:dd:50:c8:ca:3e:7a:e6:22:89:
ce:2e:91:7f:c8:84:86:33:bc:18:f8:6a:54:73:41:
12:f8:53:2f:a9:39:f9:ff:51:a1:da:72:05:a0:a5:
64:a8:e9:e2:e2:a3:f1:f7:95:5f:6d:82:3d:4e:68:
d8:bf:a5:bc:ae:b5:aa:78:c9:89:c4:14:9e:4c:e5:
2f:50:ad:c1:61:8c:30:82:41:ee:30:04:41:48:a9:
02:46:58:c0:5e:9e:ec:95:f8:c6:d7:18:21:d1:69:
5f:7d:ac:e8:c9:f2:e8:3c:35:70:94:4a:b8:34:05:
a5:32:ea:12:9a:8d:7e:75:a5:41:f0:12:02:34:ae:
c7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:92:9D:4D:78:2D:C5:DB:07:2D:6D:53:96:6E:9F:03:B4:D0:77:25
X509v3 Authority Key Identifier:
keyid:8F:0A:3D:F8:83:8C:F3:4E:5F:A6:39:C8:6D:D0:FD:58:DA:39:0F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwo9-IOM805fpjnIbdD9WNo5D8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/E5KdTXgtxdsHLW1Tlm6fA7TQdyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/jwo9-IOM805fpjnIbdD9WNo5D8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.232.0/22
213.146.64.0/19
IPv6:
2a00:4960::/32
Signature Algorithm: sha256WithRSAEncryption
7c:ba:b0:4b:d4:5d:eb:7f:10:d5:12:11:ab:ad:40:3d:45:d8:
9e:58:16:39:7e:e0:b7:85:87:fa:41:04:8b:f3:e9:a3:94:bb:
90:59:17:9a:81:62:43:36:96:03:56:71:d3:23:74:fa:6a:81:
2c:3a:b7:14:08:d0:06:82:24:38:82:01:02:7e:26:5c:d4:2a:
f3:5f:97:71:47:f1:da:c3:12:1c:c4:54:dc:6f:ff:6d:9f:17:
d4:01:f4:e1:a7:0b:3f:77:da:18:64:fa:67:26:14:68:81:90:
4a:1d:21:2e:46:d8:86:64:fe:33:ef:30:3f:17:66:01:59:c9:
5b:65:22:ff:15:60:6c:57:79:08:6c:17:46:9b:b2:c2:f0:8f:
1d:d3:f5:58:54:81:9d:0c:7b:6d:b4:54:80:08:b7:e2:2e:1f:
24:5d:85:e3:c5:9b:f7:4f:cc:d8:14:51:ba:6e:ff:22:41:b0:
e7:7e:b0:fe:67:fe:94:ee:da:1b:fc:1f:b7:13:f9:29:24:e2:
02:9b:ed:ae:ca:27:f1:8c:c9:75:dd:6f:27:05:48:66:36:f3:
eb:b0:a6:f1:08:5c:18:e8:79:8a:f3:09:d1:ce:24:a0:57:49:
10:72:3c:49:5e:47:e5:ae:97:ea:33:5c:54:3f:b8:d8:a9:2c:
11:91:7d:b5
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ8jaOh9yCkseF8BpLZbupMAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMGEzZGY4ODM4Y2YzNGU1ZmE2MzljODZkZDBmZDU4ZGEz
OTBmY2EwHhcNMjYwNzAyMTUxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzkyOWQ0ZDc4MmRjNWRiMDcyZDZkNTM5NjZlOWYwM2I0ZDA3NzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXsrTavni09hBengNpkKGugPRHtr
hpKcZAleDdDB7E58IfOFuDlZi6cfNyOcoq+MxgUxv/PaWFKA9GRHBUXmx9JbLO49
qa+coXFE2IMswG1F2LyA7YREbzbApbkK+FUZsjnzhe/Rgc4Y76PqQgjR1KXAl73s
rEUlmlEVT6zdUMjKPnrmIonOLpF/yISGM7wY+GpUc0ES+FMvqTn5/1Gh2nIFoKVk
qOni4qPx95VfbYI9TmjYv6W8rrWqeMmJxBSeTOUvUK3BYYwwgkHuMARBSKkCRljA
Xp7slfjG1xgh0WlffazoyfLoPDVwlEq4NAWlMuoSmo1+daVB8BICNK7HzwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFBOSnU14LcXbBy1tU5ZunwO00HclMB8GA1UdIwQY
MBaAFI8KPfiDjPNOX6Y5yG3Q/VjaOQ/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandvOS1JT004MDVmcGpuSWJkRDlXTm81RDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9iODA1OGUtNGViYS00Y2M0LThjMWQt
OWM4NGYyZmRkOGYwLzEvRTVLZFRYZ3R4ZHNITFcxVGxtNmZBN1RRZHlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9iODA1OGUtNGViYS00Y2M0LThjMWQtOWM4NGYyZmRkOGYw
LzEvandvOS1JT004MDVmcGpuSWJkRDlXTm81RDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuRPoAwQF
1ZJAMA0EAgACMAcDBQAqAElgMA0GCSqGSIb3DQEBCwUAA4IBAQB8urBL1F3rfxDV
EhGrrUA9RdieWBY5fuC3hYf6QQSL8+mjlLuQWReagWJDNpYDVnHTI3T6aoEsOrcU
CNAGgiQ4ggECfiZc1CrzX5dxR/HawxIcxFTcb/9tnxfUAfThpws/d9oYZPpnJhRo
gZBKHSEuRtiGZP4z7zA/F2YBWclbZSL/FWBsV3kIbBdGm7LC8I8d0/VYVIGdDHtt
tFSACLfiLh8kXYXjxZv3T8zYFFG6bv8iQbDnfrD+Z/6U7tob/B+3E/kpJOICm+2u
yifxjMl13W8nBUhmNvPrsKbxCFwY6HmK8wnRziSgV0kQcjxJXkflrpfqM1xUP7jY
qSwRkX21
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:48:57 2026 by rpki-client