Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/dSJlaCjFuYDBOJIJw5vLziFG1uU.roa
File: dSJlaCjFuYDBOJIJw5vLziFG1uU.roa (raw, json)
Hash identifier: nej4liEik7v+gIS3TpTB1V+1cfOzTtgee4Q4bmAbVjg=
Subject key identifier: 75:22:65:68:28:C5:B9:80:C1:38:92:09:C3:9B:CB:CE:21:46:D6:E5
Certificate issuer: /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial: 019F4AF16CADCE64EC69807F62A4862A39FD
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/dSJlaCjFuYDBOJIJw5vLziFG1uU.roa
Signing time: Fri 10 Jul 2026 07:32:43 +0000
ROA not before: Fri 10 Jul 2026 07:32:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208310
IP address blocks: 185.204.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4a:f1:6c:ad:ce:64:ec:69:80:7f:62:a4:86:2a:39:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Validity
Not Before: Jul 10 07:32:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7522656828c5b980c1389209c39bcbce2146d6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:74:1b:e7:87:16:9e:a3:3d:dc:55:7e:49:78:
2d:ab:a1:af:6b:ab:39:d5:76:35:8f:38:65:1f:a0:
24:41:8d:e2:52:52:1e:e9:9a:3f:12:05:80:b0:9a:
60:ca:67:ad:19:dc:aa:31:72:bb:98:99:a8:60:e1:
73:41:c7:79:f1:03:04:37:aa:b4:0a:35:cc:89:b5:
f7:ef:db:df:cd:5d:b7:b2:d2:90:74:4b:19:99:06:
aa:e6:60:43:73:21:c7:bf:3c:18:33:f0:77:35:6c:
1a:19:b1:cb:a9:c6:d0:49:c5:21:8b:73:cb:6f:d6:
b7:d6:9b:f2:e3:84:e3:d6:1f:8c:7a:15:67:13:23:
5f:d5:e1:ab:8e:af:4e:9b:ba:f0:49:59:60:cf:3d:
8b:6d:9b:d2:f8:02:8a:9b:1b:31:25:44:b6:1c:54:
f8:3d:fd:8f:2c:4f:18:f7:43:ce:07:f6:12:99:ad:
eb:99:4d:17:0a:dc:e1:0e:93:f7:de:e2:31:a4:71:
3e:21:4b:3a:72:8e:8a:de:30:87:17:82:3d:43:77:
06:80:b6:6e:a8:cc:d7:13:58:6d:ea:6c:01:32:6b:
0e:63:46:e2:93:92:5e:eb:3b:3a:63:21:b4:d0:73:
65:3d:f8:a7:8a:c1:a5:da:bb:81:94:bd:37:82:ca:
2d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:22:65:68:28:C5:B9:80:C1:38:92:09:C3:9B:CB:CE:21:46:D6:E5
X509v3 Authority Key Identifier:
keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/dSJlaCjFuYDBOJIJw5vLziFG1uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.251.0/24
Signature Algorithm: sha256WithRSAEncryption
89:21:35:0f:f7:c2:5d:38:aa:01:42:38:0e:96:16:33:f7:d8:
59:98:c2:d8:f4:61:8b:3a:16:83:05:67:71:d9:5d:4a:78:1c:
53:23:77:c9:a8:61:54:72:ba:eb:69:8a:23:04:c6:89:a8:05:
7d:d4:18:9a:39:aa:97:25:89:f0:01:a1:e4:01:77:b5:49:50:
f3:71:02:79:e0:6b:8b:83:f5:04:f4:bc:bc:98:8f:c9:59:14:
60:64:be:55:ab:6a:94:6d:95:0f:19:97:da:76:62:41:b9:e7:
ef:e7:2c:72:eb:ee:34:61:01:f5:51:37:52:3a:c2:d1:1f:5b:
76:08:8f:14:b8:7a:92:b2:34:b9:35:9a:ea:ce:3b:41:3e:13:
eb:55:a5:0f:e3:3b:92:31:e5:3d:64:66:3d:15:07:ec:de:a6:
ac:1c:d6:44:13:03:a2:60:1d:30:b6:e2:1e:f6:50:af:66:1b:
79:ba:09:ee:f1:36:9b:7b:df:9e:7f:ce:d1:c2:1e:98:00:ee:
8d:42:0c:40:51:f4:d0:e0:04:39:33:20:ab:7d:10:b5:7b:9b:
7c:89:f0:d5:e0:e4:49:d3:2e:16:60:71:26:6b:b3:af:86:e0:
fe:3c:3a:13:8e:f7:53:da:8c:f6:5c:82:5d:b9:32:0c:0f:8a:
11:bb:60:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9K8WytzmTsaYB/YqSGKjn9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZTcyMDVmNWQ0MTI1N2E2YmI5NWY5MDBlZWMwYTExMjNl
NzUxNjQwHhcNMjYwNzEwMDczMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTIyNjU2ODI4YzViOTgwYzEzODkyMDljMzliY2JjZTIxNDZkNmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3Qb54cWnqM93FV+SXgtq6Gva6s5
1XY1jzhlH6AkQY3iUlIe6Zo/EgWAsJpgymetGdyqMXK7mJmoYOFzQcd58QMEN6q0
CjXMibX379vfzV23stKQdEsZmQaq5mBDcyHHvzwYM/B3NWwaGbHLqcbQScUhi3PL
b9a31pvy44Tj1h+MehVnEyNf1eGrjq9Om7rwSVlgzz2LbZvS+AKKmxsxJUS2HFT4
Pf2PLE8Y90POB/YSma3rmU0XCtzhDpP33uIxpHE+IUs6co6K3jCHF4I9Q3cGgLZu
qMzXE1ht6mwBMmsOY0bik5Je6zs6YyG00HNlPfinisGl2ruBlL03gsotOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHUiZWgoxbmAwTiSCcOby84hRtblMB8GA1UdIwQY
MBaAFKTnIF9dQSV6a7lfkA7sChEj51FkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDkt
M2U1OWNlNDQ1YjFjLzEvZFNKbGFDakZ1WURCT0pJSnc1dkx6aUZHMXVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDktM2U1OWNlNDQ1YjFj
LzEvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucz7MA0G
CSqGSIb3DQEBCwUAA4IBAQCJITUP98JdOKoBQjgOlhYz99hZmMLY9GGLOhaDBWdx
2V1KeBxTI3fJqGFUcrrraYojBMaJqAV91BiaOaqXJYnwAaHkAXe1SVDzcQJ54GuL
g/UE9Ly8mI/JWRRgZL5Vq2qUbZUPGZfadmJBuefv5yxy6+40YQH1UTdSOsLRH1t2
CI8UuHqSsjS5NZrqzjtBPhPrVaUP4zuSMeU9ZGY9FQfs3qasHNZEEwOiYB0wtuIe
9lCvZht5ugnu8Tabe9+ef87Rwh6YAO6NQgxAUfTQ4AQ5MyCrfRC1e5t8ifDV4ORJ
0y4WYHEma7OvhuD+PDoTjvdT2oz2XIJduTIMD4oRu2Ab
-----END CERTIFICATE-----
Generated at Sat Jul 25 01:35:19 2026 by rpki-client