Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/fN8blsar4uk3CFDp_6xMSmC4GZ4.roa
File: fN8blsar4uk3CFDp_6xMSmC4GZ4.roa (raw, json)
Hash identifier: Se9bMqfGOKgf+Jc52q2agg90/5A68AwV65YDYKowZso=
Subject key identifier: 7C:DF:1B:96:C6:AB:E2:E9:37:08:50:E9:FF:AC:4C:4A:60:B8:19:9E
Certificate issuer: /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial: 019F63127D192254913AF4B1C5E80EE778F5
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/fN8blsar4uk3CFDp_6xMSmC4GZ4.roa
Signing time: Tue 14 Jul 2026 23:59:43 +0000
ROA not before: Tue 14 Jul 2026 23:59:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8410
IP address blocks: 194.0.120.0/24 maxlen: 24
194.0.122.0/24 maxlen: 24
194.0.123.0/24 maxlen: 24
194.55.161.0/24 maxlen: 24
194.55.163.0/24 maxlen: 24
194.55.168.0/24 maxlen: 24
194.55.171.0/24 maxlen: 24
195.140.180.0/22 maxlen: 22
195.140.180.0/24 maxlen: 24
195.140.181.0/24 maxlen: 24
195.140.182.0/24 maxlen: 24
195.140.183.0/24 maxlen: 24
212.15.32.0/21 maxlen: 21
212.15.32.0/24 maxlen: 24
212.15.33.0/24 maxlen: 24
212.15.34.0/24 maxlen: 24
212.15.35.0/24 maxlen: 24
212.15.36.0/24 maxlen: 24
212.15.37.0/24 maxlen: 24
212.15.38.0/24 maxlen: 24
212.15.39.0/24 maxlen: 24
212.15.40.0/24 maxlen: 24
212.15.41.0/24 maxlen: 24
212.15.45.0/24 maxlen: 24
212.15.46.0/24 maxlen: 24
212.15.48.0/24 maxlen: 24
212.15.52.0/24 maxlen: 24
212.15.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:63:12:7d:19:22:54:91:3a:f4:b1:c5:e8:0e:e7:78:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Validity
Not Before: Jul 14 23:59:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cdf1b96c6abe2e9370850e9ffac4c4a60b8199e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:08:e1:d2:96:71:7b:71:2a:8d:54:9e:f5:
db:8f:4c:42:76:50:7f:e9:53:98:d3:be:f1:00:ce:
8c:93:06:33:c3:e4:28:2d:33:b8:35:d9:52:05:da:
48:33:6d:b1:47:0d:53:a0:bf:42:90:6c:5e:15:c5:
7b:cd:cc:16:12:78:af:e1:cb:6e:c2:de:31:5d:b4:
85:cd:45:19:86:38:f6:b0:0e:10:4e:5f:b6:b5:fd:
ab:08:b8:e2:28:67:f0:e3:80:16:bf:dc:dd:6b:04:
3b:3a:d8:f2:00:b9:6f:0b:39:b8:0d:63:a6:ec:fe:
fc:3d:60:11:7e:f1:85:8a:17:ef:82:c1:2d:cd:7c:
7a:b0:f2:ed:b2:a7:e2:0c:53:94:8a:c6:b5:bd:2b:
6f:79:b9:58:c0:94:d3:48:f5:f4:d3:9e:7d:af:77:
cd:30:f0:ab:30:33:c3:7c:a1:a4:b5:b8:05:14:c0:
e2:31:81:bd:3e:53:24:a9:51:05:8c:b9:ae:36:6b:
2c:95:dd:d5:cf:fc:12:16:ba:fc:9a:92:52:1f:a5:
06:05:fe:56:2b:51:5b:61:dd:41:6c:71:3c:a4:5f:
d8:a4:7b:1c:46:c1:73:99:4f:b8:0a:05:4a:10:85:
a1:0f:31:97:a4:a0:a7:7b:05:e5:9b:f5:11:3b:7b:
9a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DF:1B:96:C6:AB:E2:E9:37:08:50:E9:FF:AC:4C:4A:60:B8:19:9E
X509v3 Authority Key Identifier:
keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/fN8blsar4uk3CFDp_6xMSmC4GZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.120.0/24
194.0.122.0/23
194.55.161.0/24
194.55.163.0/24
194.55.168.0/24
194.55.171.0/24
195.140.180.0/22
212.15.32.0-212.15.41.255
212.15.45.0-212.15.46.255
212.15.48.0/24
212.15.52.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:35:5b:f1:70:8b:2d:19:19:2b:47:1a:7e:ac:b1:d4:25:45:
9a:7c:ce:9b:0f:6e:0f:ad:76:ae:d4:28:3f:48:fe:a8:85:d8:
ab:3f:87:e1:28:b7:34:0a:92:f6:ee:1e:a0:e2:c6:c4:25:da:
00:41:72:39:49:93:dc:30:9b:59:04:29:55:04:16:5b:57:e7:
4e:d5:93:86:71:6e:0d:b6:bf:cb:ea:b0:d1:fb:da:58:de:2d:
46:5c:e0:c5:dc:bf:a5:aa:28:82:fe:f2:c0:31:16:10:b0:97:
dd:32:af:8a:4c:e5:cf:b8:e3:88:3b:7e:c2:f0:3d:1f:1f:1b:
d5:57:63:82:c5:84:ff:32:3b:5f:e7:3a:1c:5b:01:b2:bd:47:
b3:4f:e1:f6:d3:32:44:8d:12:9d:13:65:62:3a:e8:31:a1:e3:
ef:32:5c:da:7e:7e:05:2f:7f:e6:ff:7d:74:25:e0:4c:ed:00:
c1:7d:5d:3d:ac:9b:c3:d8:a1:ef:f3:d8:62:c1:77:cd:61:e6:
d6:15:ec:8b:1e:59:12:4d:74:1c:66:5e:e2:7d:5d:92:3d:df:
a5:da:bd:c6:23:e6:de:e3:5b:ae:93:21:8d:74:74:e0:8a:2b:
74:6a:13:d0:31:4d:a8:3f:32:58:27:6d:4d:61:3a:88:ab:3e:
ce:ab:c1:84
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgISAZ9jEn0ZIlSROvSxxegO53j1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZWFmYWEzMGIzNDBlY2Y4MTBhNGNiOWFmM2I1MWM3MDI1
NjY1OTgwHhcNMjYwNzE0MjM1OTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2RmMWI5NmM2YWJlMmU5MzcwODUwZTlmZmFjNGM0YTYwYjgxOTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq0I4dKWcXtxKo1UnvXbj0xCdlB/
6VOY077xAM6MkwYzw+QoLTO4NdlSBdpIM22xRw1ToL9CkGxeFcV7zcwWEniv4ctu
wt4xXbSFzUUZhjj2sA4QTl+2tf2rCLjiKGfw44AWv9zdawQ7OtjyALlvCzm4DWOm
7P78PWARfvGFihfvgsEtzXx6sPLtsqfiDFOUisa1vStveblYwJTTSPX00559r3fN
MPCrMDPDfKGktbgFFMDiMYG9PlMkqVEFjLmuNmssld3Vz/wSFrr8mpJSH6UGBf5W
K1FbYd1BbHE8pF/YpHscRsFzmU+4CgVKEIWhDzGXpKCnewXlm/URO3uaDwIDAQAB
o4ICVTCCAlEwHQYDVR0OBBYEFHzfG5bGq+LpNwhQ6f+sTEpguBmeMB8GA1UdIwQY
MBaAFMLq+qMLNA7PgQpMua87UccCVmWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3VyNm93czBEcy1CQ2t5NXJ6dFJ4d0pXWlpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hMzRhMTYtZjg4MC00ODczLTg2OGIt
NWVjYWZkYTQ3MWY3LzEvZk44YmxzYXI0dWszQ0ZEcF82eE1TbUM0R1o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9hMzRhMTYtZjg4MC00ODczLTg2OGItNWVjYWZkYTQ3MWY3
LzEvd3VyNm93czBEcy1CQ2t5NXJ6dFJ4d0pXWlpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSAwQAwgB4AwQB
wgB6AwQAwjehAwQAwjejAwQAwjeoAwQAwjerAwQCw4y0MAwDBAXUDyADBAHUDygw
DAMEANQPLQMEANQPLgMEANQPMAMEAdQPNDANBgkqhkiG9w0BAQsFAAOCAQEAazVb
8XCLLRkZK0cafqyx1CVFmnzOmw9uD612rtQoP0j+qIXYqz+H4Si3NAqS9u4eoOLG
xCXaAEFyOUmT3DCbWQQpVQQWW1fnTtWThnFuDba/y+qw0fvaWN4tRlzgxdy/paoo
gv7ywDEWELCX3TKvikzlz7jjiDt+wvA9Hx8b1VdjgsWE/zI7X+c6HFsBsr1Hs0/h
9tMyRI0SnRNlYjroMaHj7zJc2n5+BS9/5v99dCXgTO0AwX1dPaybw9ih7/PYYsF3
zWHm1hXsix5ZEk10HGZe4n1dkj3fpdq9xiPm3uNbrpMhjXR04IordGoT0DFNqD8y
WCdtTWE6iKs+zqvBhA==
-----END CERTIFICATE-----
Generated at Sat Jul 25 03:06:14 2026 by rpki-client