Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/N0qfhIoD2R78tt-S-0BE02w8qdI.roa
File: N0qfhIoD2R78tt-S-0BE02w8qdI.roa (raw, json)
Hash identifier: BbytL5rDaSUla5jzbfMP2OrBKQbWEV4Nh133OWiJSgg=
Subject key identifier: 37:4A:9F:84:8A:03:D9:1E:FC:B6:DF:92:FB:40:44:D3:6C:3C:A9:D2
Certificate issuer: /CN=f32f73f246ef948e1fcaa2d11099a11f0db93cb1
Certificate serial: 019F2369413CB40054F48C83EA7F6EF34278
Authority key identifier: F3:2F:73:F2:46:EF:94:8E:1F:CA:A2:D1:10:99:A1:1F:0D:B9:3C:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8y9z8kbvlI4fyqLREJmhHw25PLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/N0qfhIoD2R78tt-S-0BE02w8qdI.roa
Signing time: Thu 02 Jul 2026 15:18:48 +0000
ROA not before: Thu 02 Jul 2026 15:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212583
IP address blocks: 185.196.60.0/24 maxlen: 24
195.85.2.0/23 maxlen: 23
2a10:7840::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/8y9z8kbvlI4fyqLREJmhHw25PLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/8y9z8kbvlI4fyqLREJmhHw25PLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8y9z8kbvlI4fyqLREJmhHw25PLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:41:3c:b4:00:54:f4:8c:83:ea:7f:6e:f3:42:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32f73f246ef948e1fcaa2d11099a11f0db93cb1
Validity
Not Before: Jul 2 15:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=374a9f848a03d91efcb6df92fb4044d36c3ca9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:77:7d:7e:10:bb:9d:b0:64:6c:b5:19:40:41:
67:3c:85:34:37:b1:7d:23:1e:c8:82:fa:18:3a:e6:
c6:55:ce:f6:a3:a9:0b:65:7b:8b:3d:6d:a0:13:6d:
a3:42:12:8b:bb:28:65:6f:ff:1e:d6:a7:9d:66:6f:
cb:f3:88:1a:80:d1:8c:46:3e:86:69:6a:70:f0:d9:
65:7a:fb:96:e5:ba:b3:3f:7a:8f:71:61:9b:28:8e:
4b:8f:83:3d:86:e8:d8:ff:5c:0d:eb:24:b4:32:90:
62:0e:7d:56:8e:e5:76:37:14:94:96:31:84:8f:91:
d5:b0:2f:a5:1c:5f:8b:e2:e3:58:98:14:79:78:62:
a6:1f:95:c5:b5:1c:32:b0:6c:05:2c:d2:fb:26:14:
d7:c6:7e:f2:54:a2:68:27:92:ca:8b:69:c7:85:90:
4d:0d:4e:f0:4d:e1:70:21:c4:d3:20:a8:de:94:44:
7a:90:da:4c:46:49:08:d8:36:9c:cd:dc:0a:c3:a1:
ef:98:02:dd:c4:55:09:42:ff:db:f9:a9:9e:4f:06:
49:93:af:2f:d8:d6:b2:8a:55:5f:4d:ba:ab:37:df:
a8:a0:1b:c9:6b:fa:5e:6e:e6:08:31:04:1b:48:cb:
b1:8d:e8:d1:02:c2:6a:8a:9b:27:c1:0f:1a:dd:a8:
c2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4A:9F:84:8A:03:D9:1E:FC:B6:DF:92:FB:40:44:D3:6C:3C:A9:D2
X509v3 Authority Key Identifier:
keyid:F3:2F:73:F2:46:EF:94:8E:1F:CA:A2:D1:10:99:A1:1F:0D:B9:3C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8y9z8kbvlI4fyqLREJmhHw25PLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/N0qfhIoD2R78tt-S-0BE02w8qdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/8y9z8kbvlI4fyqLREJmhHw25PLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.60.0/24
195.85.2.0/23
IPv6:
2a10:7840::/31
Signature Algorithm: sha256WithRSAEncryption
6e:f9:12:ac:33:da:5b:4d:5a:53:0b:cb:be:03:22:ad:b5:0f:
09:31:39:bb:ba:11:dd:ed:42:eb:8f:d3:ef:10:53:9d:4a:f2:
03:4a:ae:ae:ec:2b:1c:a1:fd:a7:a4:e8:04:49:d0:c9:fe:ea:
e2:fe:37:cc:91:3b:ae:9b:6a:fc:f8:28:a9:ac:2a:e4:93:5d:
9d:29:a1:df:b6:a5:09:61:77:5b:28:63:6f:2c:93:d9:9f:c4:
f0:c5:07:91:49:68:29:2c:86:27:50:4e:61:77:18:a2:fd:39:
06:08:3a:3d:77:c3:f9:70:08:29:8f:8f:d9:26:bf:ad:de:4d:
eb:79:39:d3:d0:16:64:6e:1c:1f:ad:43:fb:f2:1a:23:b4:b6:
f1:d2:67:a9:a3:72:b6:83:e4:cc:3c:62:51:10:b0:cc:cd:69:
01:0d:81:f9:df:dc:5e:f8:0a:d8:82:c9:8b:64:1a:1d:a1:13:
e3:c8:da:f3:58:ca:3b:04:50:7f:03:2e:f8:ce:79:45:a8:11:
3a:7e:51:80:ef:37:71:a7:d6:ae:9a:3e:7a:09:36:a1:94:98:
bd:d5:9d:d3:b9:5e:2e:e2:66:75:7f:e7:04:74:b5:d4:d8:4b:
17:87:bf:0d:31:72:a9:b8:62:8c:7b:a5:0a:5e:85:8b:00:b2:
00:df:11:5b
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ8jaUE8tABU9IyD6n9u80J4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMmY3M2YyNDZlZjk0OGUxZmNhYTJkMTEwOTlhMTFmMGRi
OTNjYjEwHhcNMjYwNzAyMTUxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzRhOWY4NDhhMDNkOTFlZmNiNmRmOTJmYjQwNDRkMzZjM2NhOWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnd9fhC7nbBkbLUZQEFnPIU0N7F9
Ix7IgvoYOubGVc72o6kLZXuLPW2gE22jQhKLuyhlb/8e1qedZm/L84gagNGMRj6G
aWpw8NllevuW5bqzP3qPcWGbKI5Lj4M9hujY/1wN6yS0MpBiDn1WjuV2NxSUljGE
j5HVsC+lHF+L4uNYmBR5eGKmH5XFtRwysGwFLNL7JhTXxn7yVKJoJ5LKi2nHhZBN
DU7wTeFwIcTTIKjelER6kNpMRkkI2DaczdwKw6HvmALdxFUJQv/b+ameTwZJk68v
2NayilVfTbqrN9+ooBvJa/pebuYIMQQbSMuxjejRAsJqipsnwQ8a3ajC9QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFDdKn4SKA9ke/LbfkvtARNNsPKnSMB8GA1UdIwQY
MBaAFPMvc/JG75SOH8qi0RCZoR8NuTyxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHk5ejhrYnZsSTRmeXFMUkVKbWhIdzI1UExFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZjdkNWMtMDRhNS00OGE3LWI4YzYt
MzdhNDQyZTY1ZjE4LzEvTjBxZmhJb0QyUjc4dHQtUy0wQkUwMnc4cWRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZjdkNWMtMDRhNS00OGE3LWI4YzYtMzdhNDQyZTY1ZjE4
LzEvOHk5ejhrYnZsSTRmeXFMUkVKbWhIdzI1UExFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAucQ8AwQB
w1UCMA0EAgACMAcDBQEqEHhAMA0GCSqGSIb3DQEBCwUAA4IBAQBu+RKsM9pbTVpT
C8u+AyKttQ8JMTm7uhHd7ULrj9PvEFOdSvIDSq6u7Cscof2npOgESdDJ/uri/jfM
kTuum2r8+CiprCrkk12dKaHftqUJYXdbKGNvLJPZn8TwxQeRSWgpLIYnUE5hdxii
/TkGCDo9d8P5cAgpj4/ZJr+t3k3reTnT0BZkbhwfrUP78hojtLbx0mepo3K2g+TM
PGJRELDMzWkBDYH539xe+ArYgsmLZBodoRPjyNrzWMo7BFB/Ay74znlFqBE6flGA
7zdxp9aumj56CTahlJi91Z3TuV4u4mZ1f+cEdLXU2EsXh78NMXKpuGKMe6UKXoWL
ALIA3xFb
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:27 2026 by rpki-client