Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/isTKYtbUnSryrfFZr4-sBY4hH2k.roa
File: isTKYtbUnSryrfFZr4-sBY4hH2k.roa (raw, json)
Hash identifier: YsbVFBRwd8pAe2/JAWEYBxt6vxRupWcftoItlak1zEs=
Subject key identifier: 8A:C4:CA:62:D6:D4:9D:2A:F2:AD:F1:59:AF:8F:AC:05:8E:21:1F:69
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 019F65D1A7314D1F31885A014EEEB2A0BFA8
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/isTKYtbUnSryrfFZr4-sBY4hH2k.roa
Signing time: Wed 15 Jul 2026 12:47:46 +0000
ROA not before: Wed 15 Jul 2026 12:47:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44092
IP address blocks: 176.56.136.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:d1:a7:31:4d:1f:31:88:5a:01:4e:ee:b2:a0:bf:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Jul 15 12:47:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ac4ca62d6d49d2af2adf159af8fac058e211f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a5:a8:ea:6f:18:e6:77:0f:6e:62:81:eb:65:
ea:49:20:fd:f6:25:e8:d8:87:9e:d0:2e:88:bd:1c:
14:3a:aa:0c:20:cc:e5:5a:f4:f5:04:63:03:92:f7:
96:ac:07:1c:e7:cb:d3:a7:b5:e3:46:a3:40:45:34:
84:34:2e:85:cb:f2:d4:a4:8f:f4:cd:0a:09:cd:89:
cd:63:e6:4e:49:a8:00:fc:0b:c6:9c:ad:c3:c7:f7:
c3:c3:c0:f7:3e:06:1e:34:44:f3:0e:ae:a8:23:20:
13:fc:56:0d:19:04:56:70:87:f5:e5:d0:de:da:34:
80:29:fa:26:aa:9e:2b:93:4e:8b:4b:b2:49:e2:19:
4a:9b:35:ad:92:a6:9c:e8:aa:72:be:43:5c:99:ac:
69:f4:f5:8e:7c:01:1f:6e:77:fc:d4:da:80:26:4e:
d3:c6:26:48:98:4b:ca:49:83:35:58:19:59:58:02:
57:57:9c:c3:42:9f:48:3d:09:b2:37:8a:52:cb:64:
f1:72:88:c7:d2:b7:1e:e6:b7:91:3c:2b:1a:67:82:
64:6e:69:f2:36:63:f4:27:56:49:14:67:1a:f0:5f:
ae:ce:c6:39:4c:6a:84:8d:b7:42:f1:4f:93:32:16:
06:dd:cc:2c:0b:f6:f3:0b:f2:f7:85:c1:b7:eb:45:
2f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C4:CA:62:D6:D4:9D:2A:F2:AD:F1:59:AF:8F:AC:05:8E:21:1F:69
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/isTKYtbUnSryrfFZr4-sBY4hH2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.56.136.0/21
Signature Algorithm: sha256WithRSAEncryption
82:b2:7e:46:c3:f1:84:c5:08:4e:56:4b:fc:d0:d1:37:3f:60:
5c:0b:dd:86:c3:2e:5a:11:b0:94:b1:0d:07:33:88:e8:96:f7:
7c:4e:5d:ad:86:74:31:cf:27:d4:41:49:31:c8:1b:e5:c7:f6:
fb:0e:ee:fc:1a:1f:c6:27:5f:b6:d0:57:fd:4a:1c:4a:2a:c9:
b4:c0:c9:74:00:48:a2:59:6f:45:28:9e:38:be:7e:ce:41:17:
87:2c:c2:fb:ad:dd:0b:e8:76:55:91:21:4b:8a:61:46:20:8e:
29:03:6d:13:95:35:82:60:84:53:00:2e:f8:17:53:0a:73:c9:
1a:36:4f:d4:bc:03:b0:be:01:ad:5a:cd:01:33:ff:01:3f:d3:
97:39:55:2c:b3:98:ec:57:f6:72:7e:78:51:4c:33:06:05:30:
7a:4f:1d:59:3a:e0:e9:21:bf:ac:60:19:e0:cf:a0:10:d3:b8:
72:d5:70:bf:19:9c:31:f2:f0:4e:5f:9b:20:db:82:5e:47:04:
8f:8f:ce:84:e6:34:4b:80:94:09:1d:4a:49:5d:8e:e2:b0:1d:
cd:0d:e3:9d:00:ae:01:51:43:e1:7b:98:d0:70:33:cf:58:eb:
e1:de:1c:58:54:47:9f:db:6c:e5:f7:b2:a0:5b:4f:5a:43:11:
4d:cd:a8:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9l0acxTR8xiFoBTu6yoL+oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNWYwZDkxMmI1ZTc0N2FlNTY4ZDgwOGEwNDAyOWI0ZWJj
NjZlNDcwHhcNMjYwNzE1MTI0NzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWM0Y2E2MmQ2ZDQ5ZDJhZjJhZGYxNTlhZjhmYWMwNThlMjExZjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KWo6m8Y5ncPbmKB62XqSSD99iXo
2Iee0C6IvRwUOqoMIMzlWvT1BGMDkveWrAcc58vTp7XjRqNARTSENC6Fy/LUpI/0
zQoJzYnNY+ZOSagA/AvGnK3Dx/fDw8D3PgYeNETzDq6oIyAT/FYNGQRWcIf15dDe
2jSAKfomqp4rk06LS7JJ4hlKmzWtkqac6KpyvkNcmaxp9PWOfAEfbnf81NqAJk7T
xiZImEvKSYM1WBlZWAJXV5zDQp9IPQmyN4pSy2TxcojH0rce5reRPCsaZ4Jkbmny
NmP0J1ZJFGca8F+uzsY5TGqEjbdC8U+TMhYG3cwsC/bzC/L3hcG360UvgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIrEymLW1J0q8q3xWa+PrAWOIR9pMB8GA1UdIwQY
MBaAFJpfDZErXnR65WjYCKBAKbTrxm5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODIt
ZjU0MDQzOWE0YWUyLzEvaXNUS1l0YlVuU3J5cmZGWnI0LXNCWTRoSDJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODItZjU0MDQzOWE0YWUy
LzEvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsDiIMA0G
CSqGSIb3DQEBCwUAA4IBAQCCsn5Gw/GExQhOVkv80NE3P2BcC92Gwy5aEbCUsQ0H
M4jolvd8Tl2thnQxzyfUQUkxyBvlx/b7Du78Gh/GJ1+20Ff9ShxKKsm0wMl0AEii
WW9FKJ44vn7OQReHLML7rd0L6HZVkSFLimFGII4pA20TlTWCYIRTAC74F1MKc8ka
Nk/UvAOwvgGtWs0BM/8BP9OXOVUss5jsV/ZyfnhRTDMGBTB6Tx1ZOuDpIb+sYBng
z6AQ07hy1XC/GZwx8vBOX5sg24JeRwSPj86E5jRLgJQJHUpJXY7isB3NDeOdAK4B
UUPhe5jQcDPPWOvh3hxYVEef22zl97KgW09aQxFNzahB
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:53 2026 by rpki-client