Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/pRAcCWn_fFgijpZckIK6_P-WTBU.roa
File: pRAcCWn_fFgijpZckIK6_P-WTBU.roa (raw, json)
Hash identifier: b/mtFfZF9kv7GMGhBSqi+Hu4xeMa58fvE72SvExgJmk=
Subject key identifier: A5:10:1C:09:69:FF:7C:58:22:8E:96:5C:90:82:BA:FC:FF:96:4C:15
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 01A1402D65A666BD653009E44E74893E5937
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/pRAcCWn_fFgijpZckIK6_P-WTBU.roa
Signing time: Thu 15 Oct 2026 15:27:59 +0000
ROA not before: Thu 15 Oct 2026 15:27:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218423
IP address blocks: 185.33.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:2d:65:a6:66:bd:65:30:09:e4:4e:74:89:3e:59:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Oct 15 15:27:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5101c0969ff7c58228e965c9082bafcff964c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:44:41:e0:99:4f:93:3c:a8:d8:46:82:e0:d6:
37:fc:53:ce:7e:54:c5:95:86:7e:fb:50:bd:18:29:
87:78:88:0a:1b:6a:46:48:31:16:d5:11:f4:c1:a4:
a9:f2:99:24:b6:65:71:18:89:bb:3d:c1:4a:90:7d:
88:4f:1e:0a:4d:5c:13:7f:78:2e:47:c4:22:44:70:
76:35:46:8f:bf:2a:46:d2:36:7b:00:d2:8c:35:db:
c1:6d:51:66:08:47:63:45:e7:30:7c:27:52:5a:86:
42:bd:12:4b:11:78:71:c0:38:95:fe:f3:a9:4e:85:
8a:e3:b6:93:29:ed:ce:d1:a7:e6:2f:b0:f9:2b:da:
44:93:1e:86:d1:bc:b8:3d:54:16:3c:1a:07:97:17:
7e:0a:20:90:68:ed:20:e7:dc:62:82:bd:61:bc:c8:
36:9e:55:ac:e1:f8:a1:15:f4:3c:13:42:8d:7d:b2:
68:05:f6:48:38:c4:b2:f5:f4:d5:eb:0a:87:0f:39:
28:b8:e7:51:51:46:82:b1:6e:cb:bb:d2:4b:60:c1:
7a:70:5e:c1:7b:d3:98:ad:d3:60:04:8b:4a:b0:5e:
c1:97:b1:f1:f7:52:2c:04:b6:a1:b0:63:8a:f1:17:
fe:a2:ef:ad:1a:a2:14:39:59:bf:82:1a:43:85:9b:
08:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:10:1C:09:69:FF:7C:58:22:8E:96:5C:90:82:BA:FC:FF:96:4C:15
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/pRAcCWn_fFgijpZckIK6_P-WTBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.63.0/24
Signature Algorithm: sha256WithRSAEncryption
37:32:a9:91:30:10:d1:2e:84:16:d6:65:ca:e7:75:63:a3:d7:
4e:6d:0a:08:92:c4:67:79:09:1b:d2:6a:df:4e:7b:55:f4:ff:
c2:bc:2b:45:43:7a:32:f8:92:45:d3:d4:3a:9d:b5:1d:89:91:
6d:00:d7:92:9a:40:86:84:07:63:3b:49:d6:a4:bc:37:d8:72:
61:d3:10:e6:b8:f5:ff:0e:16:bd:0f:81:23:86:5e:d7:9c:b3:
98:11:12:bf:6b:f1:24:da:dd:d2:eb:fb:c1:22:16:7d:f4:b0:
56:be:0d:ab:1a:7d:ea:86:79:95:be:b6:e1:ea:7f:76:40:e2:
28:11:b8:85:ea:ef:be:a5:a3:5f:d7:58:57:17:c5:a3:e6:c0:
41:15:cf:a9:5b:77:d9:02:84:d4:fc:ff:25:59:7d:27:d7:cf:
95:8a:c1:33:71:23:19:01:90:45:d4:b0:7c:20:12:87:bc:47:
b6:c7:cd:97:57:e3:3e:0e:ca:cd:34:41:d9:a9:2b:c2:53:47:
8e:48:f7:72:c3:5f:be:b6:a9:87:75:a1:35:b9:18:72:7b:0b:
fd:bc:ea:17:0c:f5:3e:60:d9:fd:1a:1d:8c:7d:ae:a7:9a:15:
c7:9f:a4:ba:da:8e:28:a2:81:f5:54:6f:1d:d6:be:c9:71:0c:
e2:37:cd:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFALWWmZr1lMAnkTnSJPlk3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw
ZmM2MmEwHhcNMjYxMDE1MTUyNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTEwMWMwOTY5ZmY3YzU4MjI4ZTk2NWM5MDgyYmFmY2ZmOTY0YzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoURB4JlPkzyo2EaC4NY3/FPOflTF
lYZ++1C9GCmHeIgKG2pGSDEW1RH0waSp8pkktmVxGIm7PcFKkH2ITx4KTVwTf3gu
R8QiRHB2NUaPvypG0jZ7ANKMNdvBbVFmCEdjRecwfCdSWoZCvRJLEXhxwDiV/vOp
ToWK47aTKe3O0afmL7D5K9pEkx6G0by4PVQWPBoHlxd+CiCQaO0g59xigr1hvMg2
nlWs4fihFfQ8E0KNfbJoBfZIOMSy9fTV6wqHDzkouOdRUUaCsW7Lu9JLYMF6cF7B
e9OYrdNgBItKsF7Bl7Hx91IsBLahsGOK8Rf+ou+tGqIUOVm/ghpDhZsIKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKUQHAlp/3xYIo6WXJCCuvz/lkwVMB8GA1UdIwQY
MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt
MjYxNzBkYTRhMGIxLzEvcFJBY0NXbl9mRmdpanBaY2tJSzZfUC1XVEJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx
LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSE/MA0G
CSqGSIb3DQEBCwUAA4IBAQA3MqmRMBDRLoQW1mXK53Vjo9dObQoIksRneQkb0mrf
TntV9P/CvCtFQ3oy+JJF09Q6nbUdiZFtANeSmkCGhAdjO0nWpLw32HJh0xDmuPX/
Dha9D4Ejhl7XnLOYERK/a/Ek2t3S6/vBIhZ99LBWvg2rGn3qhnmVvrbh6n92QOIo
EbiF6u++paNf11hXF8Wj5sBBFc+pW3fZAoTU/P8lWX0n18+VisEzcSMZAZBF1LB8
IBKHvEe2x82XV+M+DsrNNEHZqSvCU0eOSPdyw1++tqmHdaE1uRhyewv9vOoXDPU+
YNn9Gh2Mfa6nmhXHn6S62o4oooH1VG8d1r7JcQziN81w
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:15:06 2026 by rpki-client