Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/l6h8cEy3vy8eHGUMk9ccO_E31gg.roa
File: l6h8cEy3vy8eHGUMk9ccO_E31gg.roa (raw, json)
Hash identifier: /rkHav/nq0FmDVvv83fpzsLSholUDtzomJfCggVqF3I=
Subject key identifier: 97:A8:7C:70:4C:B7:BF:2F:1E:1C:65:0C:93:D7:1C:3B:F1:37:D6:08
Certificate issuer: /CN=87b92ad37317c330a0eb590a170d14f519b752b3
Certificate serial: 019F23686F00B9E84DA2F7865A5C391112C0
Authority key identifier: 87:B9:2A:D3:73:17:C3:30:A0:EB:59:0A:17:0D:14:F5:19:B7:52:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7kq03MXwzCg61kKFw0U9Rm3UrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/l6h8cEy3vy8eHGUMk9ccO_E31gg.roa
Signing time: Thu 02 Jul 2026 15:17:54 +0000
ROA not before: Thu 02 Jul 2026 15:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39337
IP address blocks: 194.126.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7kq03MXwzCg61kKFw0U9Rm3UrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6f:00:b9:e8:4d:a2:f7:86:5a:5c:39:11:12:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b92ad37317c330a0eb590a170d14f519b752b3
Validity
Not Before: Jul 2 15:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97a87c704cb7bf2f1e1c650c93d71c3bf137d608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d7:4c:8f:8b:d8:12:45:cd:e5:a6:45:ba:1b:
78:a3:fa:24:84:d7:0c:f6:6f:d3:ab:24:6e:3b:8c:
63:d7:50:62:27:56:07:95:22:1d:1e:f0:2e:70:8c:
f0:2b:71:5f:5e:a1:9c:b7:da:65:93:42:f7:98:c8:
2f:02:9b:f8:1a:f1:3a:6b:0d:d9:12:6f:5d:e7:7d:
30:41:39:87:3a:04:3e:92:6e:e7:96:31:4e:5c:2d:
6f:9f:53:d0:19:ab:97:dc:7b:5e:03:fc:6e:da:19:
4f:f1:e6:d1:11:05:8f:b9:d2:e0:91:b6:31:b2:e1:
3a:b6:ac:d0:9f:b5:13:14:00:09:9c:47:5f:c4:de:
bf:3f:60:80:40:e6:53:bd:2f:ac:b7:e2:e8:bf:5e:
3e:91:0c:4a:93:1b:08:09:56:01:d1:62:eb:99:2f:
51:a0:a5:08:98:90:a9:b0:92:b5:ea:58:6c:72:49:
f0:49:f7:e6:79:21:75:4e:35:ff:23:15:47:45:eb:
76:7d:e8:1d:50:0a:2b:f1:0e:ac:95:9a:97:93:51:
1f:93:e3:80:ce:29:c8:b8:98:a4:9b:97:d4:a9:d4:
94:64:33:f2:1d:d8:fd:4b:3c:31:4d:90:9e:8b:28:
0a:8b:4b:7a:4b:0a:3c:40:ce:8e:ee:90:32:a9:a8:
53:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A8:7C:70:4C:B7:BF:2F:1E:1C:65:0C:93:D7:1C:3B:F1:37:D6:08
X509v3 Authority Key Identifier:
keyid:87:B9:2A:D3:73:17:C3:30:A0:EB:59:0A:17:0D:14:F5:19:B7:52:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7kq03MXwzCg61kKFw0U9Rm3UrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/l6h8cEy3vy8eHGUMk9ccO_E31gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.160.0/22
Signature Algorithm: sha256WithRSAEncryption
82:00:56:df:13:c2:df:c3:23:d0:d5:36:0b:54:24:14:2e:c0:
de:b7:54:9b:69:fb:6c:56:b2:24:9c:25:dc:90:40:dd:34:f0:
b1:0d:e6:cf:77:e8:4c:ae:b7:85:5c:40:53:8e:f8:c0:e6:fe:
7d:58:0f:df:34:f8:d9:82:24:39:4f:a1:2b:b2:a1:78:e8:b0:
01:cd:3a:a9:c5:28:01:20:e8:c0:d9:1a:dd:a5:9c:9d:6f:d0:
dd:4d:5c:02:ab:0e:39:d0:a5:1d:a7:94:03:a6:04:2d:a3:a8:
8e:ed:e5:4a:5f:47:08:06:10:7f:4b:a5:2c:1c:7a:33:3e:5c:
a3:6a:8c:76:89:d6:c8:50:81:6b:d9:a4:cb:06:a1:20:58:ff:
86:26:23:c0:fc:63:74:3f:f0:2a:62:60:d8:b3:12:08:b0:6a:
80:07:90:0f:a4:2a:b1:6f:c8:c5:7a:7d:53:53:b7:4d:e0:22:
d4:2a:aa:25:2d:2f:e6:ce:83:6a:8c:65:c2:bd:39:51:50:c0:
e6:21:82:3a:65:19:a6:a2:92:43:2c:de:8a:91:3f:49:20:47:
32:39:dc:11:6e:f9:5a:1c:20:7b:df:62:67:1c:6f:73:f6:21:
8b:20:b4:5d:24:39:a8:0f:8d:cd:f7:0c:9e:9a:08:02:ae:fe:
ca:54:24:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaG8AuehNoveGWlw5ERLAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YjkyYWQzNzMxN2MzMzBhMGViNTkwYTE3MGQxNGY1MTli
NzUyYjMwHhcNMjYwNzAyMTUxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2E4N2M3MDRjYjdiZjJmMWUxYzY1MGM5M2Q3MWMzYmYxMzdkNjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtdMj4vYEkXN5aZFuht4o/okhNcM
9m/TqyRuO4xj11BiJ1YHlSIdHvAucIzwK3FfXqGct9plk0L3mMgvApv4GvE6aw3Z
Em9d530wQTmHOgQ+km7nljFOXC1vn1PQGauX3HteA/xu2hlP8ebREQWPudLgkbYx
suE6tqzQn7UTFAAJnEdfxN6/P2CAQOZTvS+st+Lov14+kQxKkxsICVYB0WLrmS9R
oKUImJCpsJK16lhscknwSffmeSF1TjX/IxVHRet2fegdUAor8Q6slZqXk1Efk+OA
zinIuJikm5fUqdSUZDPyHdj9SzwxTZCeiygKi0t6Swo8QM6O7pAyqahTYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJeofHBMt78vHhxlDJPXHDvxN9YIMB8GA1UdIwQY
MBaAFIe5KtNzF8MwoOtZChcNFPUZt1KzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDdrcTAzTVh3ekNnNjFrS0Z3MFU5Um0zVXJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC83MjA1MzktZDM2YS00NGRjLTkzZTct
NWE1Mzc2MjlhNDM5LzEvbDZoOGNFeTN2eThlSEdVTWs5Y2NPX0UzMWdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC83MjA1MzktZDM2YS00NGRjLTkzZTctNWE1Mzc2MjlhNDM5
LzEvaDdrcTAzTVh3ekNnNjFrS0Z3MFU5Um0zVXJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwn6gMA0G
CSqGSIb3DQEBCwUAA4IBAQCCAFbfE8LfwyPQ1TYLVCQULsDet1SbaftsVrIknCXc
kEDdNPCxDebPd+hMrreFXEBTjvjA5v59WA/fNPjZgiQ5T6ErsqF46LABzTqpxSgB
IOjA2RrdpZydb9DdTVwCqw450KUdp5QDpgQto6iO7eVKX0cIBhB/S6UsHHozPlyj
aox2idbIUIFr2aTLBqEgWP+GJiPA/GN0P/AqYmDYsxIIsGqAB5APpCqxb8jFen1T
U7dN4CLUKqolLS/mzoNqjGXCvTlRUMDmIYI6ZRmmopJDLN6KkT9JIEcyOdwRbvla
HCB732JnHG9z9iGLILRdJDmoD43N9wyemggCrv7KVCSH
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:34:02 2026 by rpki-client