Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/idf0hZZENN-4_aae9KN1w6rgM4Q.roa
File: idf0hZZENN-4_aae9KN1w6rgM4Q.roa (raw, json)
Hash identifier: qK834woHIrutz8SD0paYhf0sMnrUCo/j6IC8hJut1/0=
Subject key identifier: 89:D7:F4:85:96:44:34:DF:B8:FD:A6:9E:F4:A3:75:C3:AA:E0:33:84
Certificate issuer: /CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Certificate serial: 019F6765672995CCEA01702F4903FE83726E
Authority key identifier: C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/idf0hZZENN-4_aae9KN1w6rgM4Q.roa
Signing time: Wed 15 Jul 2026 20:08:46 +0000
ROA not before: Wed 15 Jul 2026 20:08:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 194.4.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:67:65:67:29:95:cc:ea:01:70:2f:49:03:fe:83:72:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Validity
Not Before: Jul 15 20:08:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89d7f485964434dfb8fda69ef4a375c3aae03384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5c:18:24:51:7a:c4:82:5f:ba:d4:3d:70:5e:
f2:5f:e2:e3:29:e4:54:82:bc:33:65:04:10:da:d1:
de:32:0d:76:bf:26:4f:96:2d:72:7d:c3:68:38:88:
8a:f2:43:86:fb:5c:17:38:f6:24:8b:65:3d:b1:43:
4a:4b:bd:18:0f:93:41:18:cb:64:83:8b:18:bc:3c:
cc:29:8c:ec:a6:da:5b:b0:6b:55:61:e1:77:ce:34:
08:25:1a:92:e5:5a:bc:c9:72:2a:4a:29:70:06:57:
66:58:eb:57:80:44:43:a6:b7:89:aa:ba:9f:00:19:
80:0e:7f:f7:a5:6c:cb:21:5f:da:c8:3d:3e:ab:a2:
af:a1:d2:d5:ce:1d:cb:da:07:5d:7b:ad:ff:18:8b:
8f:e8:dc:ca:31:1a:5e:38:49:d7:b4:5f:39:ae:94:
8a:eb:6a:93:8e:af:80:7b:92:2d:53:1c:32:80:c1:
11:83:c3:27:fb:3f:5d:ee:2e:c3:99:70:dc:12:3f:
58:32:e3:05:fd:14:0b:63:41:46:15:87:5f:9e:71:
4c:d2:7e:63:52:43:9d:a4:44:30:87:f2:02:68:79:
ac:bd:98:0e:39:58:14:8d:97:a9:a3:74:39:34:68:
a4:cf:10:b2:b8:3a:0e:20:28:88:34:f0:29:a4:0a:
b8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D7:F4:85:96:44:34:DF:B8:FD:A6:9E:F4:A3:75:C3:AA:E0:33:84
X509v3 Authority Key Identifier:
keyid:C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/idf0hZZENN-4_aae9KN1w6rgM4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.4.168.0/22
Signature Algorithm: sha256WithRSAEncryption
33:c2:69:f2:be:52:48:5b:16:9c:72:49:58:a3:c9:a9:68:83:
f0:fa:fe:e2:b3:10:b8:bd:aa:51:60:c3:21:20:23:09:10:2d:
c8:09:bd:5b:76:7f:6e:2f:c8:61:da:c6:94:88:54:0f:b7:2f:
f8:96:f3:f6:33:90:1b:09:5f:67:eb:42:ff:75:d5:72:88:4a:
7d:08:b2:65:87:39:38:7d:d7:76:f8:93:68:61:9f:54:91:bf:
f4:22:a8:a8:01:ea:0a:ad:dc:0f:83:85:1e:5f:2f:19:2a:c8:
5a:da:c3:84:2a:96:55:28:d2:c7:bc:3f:ff:69:d2:b3:63:3d:
de:cc:e5:be:0f:b0:b7:0a:4c:5c:7e:88:25:41:52:6f:ce:51:
28:c6:e6:bb:6c:fa:10:18:5e:29:45:4f:d8:7d:41:34:f7:2a:
cd:ec:54:72:3e:34:e3:9d:3a:d0:f9:98:2f:04:5f:98:3c:d1:
98:6c:9d:5b:98:d4:e8:0b:ac:c2:e2:d8:28:c3:a7:29:b1:eb:
8d:6f:e0:44:70:e1:bd:8c:3c:0d:c9:d2:f8:19:a3:b2:58:74:
e0:15:5d:89:3b:e6:cb:9f:ec:65:86:1a:6d:45:78:86:9c:13:
89:b0:e1:cf:b4:c0:3c:2f:36:ef:8a:68:14:c3:6e:a2:d8:a8:
bb:24:17:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9nZWcplczqAXAvSQP+g3JuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MTc5MWE1ODExYzdmNmVkODFmZDQ0MWI1MDI2NWFmNWU5
YzYxYjAwHhcNMjYwNzE1MjAwODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWQ3ZjQ4NTk2NDQzNGRmYjhmZGE2OWVmNGEzNzVjM2FhZTAzMzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlwYJFF6xIJfutQ9cF7yX+LjKeRU
grwzZQQQ2tHeMg12vyZPli1yfcNoOIiK8kOG+1wXOPYki2U9sUNKS70YD5NBGMtk
g4sYvDzMKYzsptpbsGtVYeF3zjQIJRqS5Vq8yXIqSilwBldmWOtXgERDpreJqrqf
ABmADn/3pWzLIV/ayD0+q6KvodLVzh3L2gdde63/GIuP6NzKMRpeOEnXtF85rpSK
62qTjq+Ae5ItUxwygMERg8Mn+z9d7i7DmXDcEj9YMuMF/RQLY0FGFYdfnnFM0n5j
UkOdpEQwh/ICaHmsvZgOOVgUjZepo3Q5NGikzxCyuDoOICiINPAppAq4owIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFInX9IWWRDTfuP2mnvSjdcOq4DOEMB8GA1UdIwQY
MBaAFMUXkaWBHH9u2B/UQbUCZa9enGGwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFJlUnBZRWNmMjdZSDlSQnRRSmxyMTZjWWJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8wYmYxOTYtNjVhYi00ZTc0LWE2MWEt
ODE5MTY0YjkyYjg4LzEvaWRmMGhaWkVOTi00X2FhZTlLTjF3NnJnTTRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8wYmYxOTYtNjVhYi00ZTc0LWE2MWEtODE5MTY0YjkyYjg4
LzEveFJlUnBZRWNmMjdZSDlSQnRRSmxyMTZjWWJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwgSoMA0G
CSqGSIb3DQEBCwUAA4IBAQAzwmnyvlJIWxaccklYo8mpaIPw+v7isxC4vapRYMMh
ICMJEC3ICb1bdn9uL8hh2saUiFQPty/4lvP2M5AbCV9n60L/ddVyiEp9CLJlhzk4
fdd2+JNoYZ9Ukb/0IqioAeoKrdwPg4UeXy8ZKsha2sOEKpZVKNLHvD//adKzYz3e
zOW+D7C3CkxcfoglQVJvzlEoxua7bPoQGF4pRU/YfUE09yrN7FRyPjTjnTrQ+Zgv
BF+YPNGYbJ1bmNToC6zC4tgow6cpseuNb+BEcOG9jDwNydL4GaOyWHTgFV2JO+bL
n+xlhhptRXiGnBOJsOHPtMA8LzbvimgUw26i2Ki7JBds
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:20 2026 by rpki-client