Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/CH4cB5wInBV4cwxI5w3P2wuRLI0.roa
File: CH4cB5wInBV4cwxI5w3P2wuRLI0.roa (raw, json)
Hash identifier: 22NNWmSGS7QrfggnbNY17T1GU9k5KhX54GUORhCR+2Y=
Subject key identifier: 08:7E:1C:07:9C:08:9C:15:78:73:0C:48:E7:0D:CF:DB:0B:91:2C:8D
Certificate issuer: /CN=7f7113febddba1e06b953083b6648efaa031f1f5
Certificate serial: 019F2369318BAD01CB97AB0C0CDC41D770AE
Authority key identifier: 7F:71:13:FE:BD:DB:A1:E0:6B:95:30:83:B6:64:8E:FA:A0:31:F1:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3ET_r3boeBrlTCDtmSO-qAx8fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/CH4cB5wInBV4cwxI5w3P2wuRLI0.roa
Signing time: Thu 02 Jul 2026 15:18:44 +0000
ROA not before: Thu 02 Jul 2026 15:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216054
IP address blocks: 185.154.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/f3ET_r3boeBrlTCDtmSO-qAx8fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:31:8b:ad:01:cb:97:ab:0c:0c:dc:41:d7:70:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7113febddba1e06b953083b6648efaa031f1f5
Validity
Not Before: Jul 2 15:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=087e1c079c089c1578730c48e70dcfdb0b912c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:49:4a:e5:a7:fc:da:15:b8:74:de:25:48:67:
cb:70:16:86:cc:28:1b:e8:ee:ba:2f:03:ec:dd:8f:
f4:8d:0e:f4:0e:97:43:92:49:f9:2a:0d:a0:12:10:
f1:41:20:cc:34:63:f0:4f:5b:ca:a5:69:b3:90:aa:
b9:4c:53:1e:53:d6:33:35:8b:77:26:a8:d3:1b:91:
6f:09:43:8e:27:5a:06:31:04:d4:a7:5f:1b:2e:6b:
5e:61:03:8f:7c:70:5e:1b:f5:09:18:58:b2:67:c3:
f2:90:f8:e3:26:14:14:db:86:7c:c3:7d:39:0c:88:
e6:4e:d3:af:bb:86:81:67:35:e7:ea:37:7a:1a:0c:
7f:11:4e:ca:86:2e:f6:2b:1f:fc:ab:8d:7f:16:35:
eb:2c:6f:d3:81:08:5c:2e:38:d3:f9:4b:ba:2e:b4:
1e:b9:52:79:fe:81:30:fa:19:4f:48:9c:37:49:25:
13:58:87:cc:61:4b:ef:f7:73:a0:fa:a2:a1:c9:ba:
71:b8:f9:92:78:20:8c:40:31:38:b4:c3:57:fe:1d:
22:c0:33:31:6f:b8:fa:1a:89:e9:e6:63:25:47:78:
75:f4:08:66:9c:15:53:4b:7b:c2:8a:a2:84:7e:dd:
21:d0:08:0a:1b:8b:2b:78:68:f8:09:a6:18:7f:05:
ec:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7E:1C:07:9C:08:9C:15:78:73:0C:48:E7:0D:CF:DB:0B:91:2C:8D
X509v3 Authority Key Identifier:
keyid:7F:71:13:FE:BD:DB:A1:E0:6B:95:30:83:B6:64:8E:FA:A0:31:F1:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3ET_r3boeBrlTCDtmSO-qAx8fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/CH4cB5wInBV4cwxI5w3P2wuRLI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.190.0/24
Signature Algorithm: sha256WithRSAEncryption
15:0e:f0:6d:34:8e:3f:47:6b:4c:2b:70:e8:1f:03:53:8a:24:
38:ea:1f:18:01:be:ed:6a:68:a6:5e:e8:78:50:af:bd:0a:f6:
ee:70:0a:52:8f:48:e9:00:51:96:01:a2:0b:eb:75:fe:51:33:
28:b2:a4:3b:30:b9:32:82:37:8c:f1:3f:94:e1:39:15:2a:3c:
d6:73:cb:02:20:f5:3e:13:bd:3a:3d:e5:1f:01:b4:35:a8:2c:
59:2e:30:f3:3f:53:e7:bf:28:da:77:29:86:19:fa:7f:20:c9:
93:1d:4d:4e:95:71:64:10:7b:73:ee:b7:fc:13:75:57:dc:8f:
b9:3e:55:05:6e:50:06:a7:3c:8f:d9:e9:1c:52:5f:c5:54:fd:
7c:34:85:bc:3a:85:f5:4f:29:7f:8b:f4:b3:7a:76:4d:5e:07:
01:ee:a1:c1:f1:22:39:de:e3:45:2c:63:e4:c1:ae:e9:65:54:
00:c9:4f:24:76:8c:43:68:4a:15:c6:8a:d0:93:b2:35:ef:56:
57:07:24:b2:09:72:35:4f:cf:8b:d7:c1:d9:04:ff:de:3a:ba:
29:9a:f4:a7:4b:f1:d8:43:9d:8b:cd:e1:c3:5e:08:44:c2:84:
80:43:48:2f:14:c8:5c:af:4b:ec:6e:31:1c:1c:b6:65:2c:cb:
d3:d5:d9:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaTGLrQHLl6sMDNxB13CuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNzExM2ZlYmRkYmExZTA2Yjk1MzA4M2I2NjQ4ZWZhYTAz
MWYxZjUwHhcNMjYwNzAyMTUxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODdlMWMwNzljMDg5YzE1Nzg3MzBjNDhlNzBkY2ZkYjBiOTEyYzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0lK5af82hW4dN4lSGfLcBaGzCgb
6O66LwPs3Y/0jQ70DpdDkkn5Kg2gEhDxQSDMNGPwT1vKpWmzkKq5TFMeU9YzNYt3
JqjTG5FvCUOOJ1oGMQTUp18bLmteYQOPfHBeG/UJGFiyZ8PykPjjJhQU24Z8w305
DIjmTtOvu4aBZzXn6jd6Ggx/EU7Khi72Kx/8q41/FjXrLG/TgQhcLjjT+Uu6LrQe
uVJ5/oEw+hlPSJw3SSUTWIfMYUvv93Og+qKhybpxuPmSeCCMQDE4tMNX/h0iwDMx
b7j6Gonp5mMlR3h19AhmnBVTS3vCiqKEft0h0AgKG4sreGj4CaYYfwXsNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAh+HAecCJwVeHMMSOcNz9sLkSyNMB8GA1UdIwQY
MBaAFH9xE/6926Hga5Uwg7ZkjvqgMfH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjNFVF9yM2JvZUJybFRDRHRtU08tcUF4OGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8xNGYyYzUtNDZmZS00NjcwLTlkZDYt
MjFjNTg0NzBiOGQyLzEvQ0g0Y0I1d0luQlY0Y3d4STV3M1Ayd3VSTEkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8xNGYyYzUtNDZmZS00NjcwLTlkZDYtMjFjNTg0NzBiOGQy
LzEvZjNFVF9yM2JvZUJybFRDRHRtU08tcUF4OGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZq+MA0G
CSqGSIb3DQEBCwUAA4IBAQAVDvBtNI4/R2tMK3DoHwNTiiQ46h8YAb7tamimXuh4
UK+9CvbucApSj0jpAFGWAaIL63X+UTMosqQ7MLkygjeM8T+U4TkVKjzWc8sCIPU+
E706PeUfAbQ1qCxZLjDzP1PnvyjadymGGfp/IMmTHU1OlXFkEHtz7rf8E3VX3I+5
PlUFblAGpzyP2ekcUl/FVP18NIW8OoX1Tyl/i/SzenZNXgcB7qHB8SI53uNFLGPk
wa7pZVQAyU8kdoxDaEoVxorQk7I171ZXBySyCXI1T8+L18HZBP/eOropmvSnS/HY
Q52LzeHDXghEwoSAQ0gvFMhcr0vsbjEcHLZlLMvT1dlx
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:23 2026 by rpki-client