Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/gy7rlJxxVRn0ruQudZypKsohRZQ.roa
File: gy7rlJxxVRn0ruQudZypKsohRZQ.roa (raw, json)
Hash identifier: v00o1sImpKjVCO5RKOF/dkSMZU/2cdcLFSxQQgLDRbw=
Subject key identifier: 83:2E:EB:94:9C:71:55:19:F4:AE:E4:2E:75:9C:A9:2A:CA:21:45:94
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 019E1BD7A1DF14848BA7B586114D53420275
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/gy7rlJxxVRn0ruQudZypKsohRZQ.roa
Signing time: Tue 12 May 2026 10:59:36 +0000
ROA not before: Tue 12 May 2026 10:59:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58349
IP address blocks: 194.143.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d7:a1:df:14:84:8b:a7:b5:86:11:4d:53:42:02:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: May 12 10:59:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=832eeb949c715519f4aee42e759ca92aca214594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:eb:2b:0a:d1:89:92:20:76:d0:43:43:5c:c8:
1f:af:64:3a:fe:e6:d7:5e:7a:0d:73:a6:7b:c8:1b:
2f:fe:aa:71:9e:63:8a:3f:c7:44:d5:98:3e:e8:de:
61:ba:b7:70:0b:5f:91:05:28:56:5c:14:4c:c9:8f:
c7:c1:e6:bf:02:50:41:40:5a:b9:cc:e9:ff:5d:fe:
a7:54:21:b7:d1:19:02:dc:b6:1d:3e:03:7f:0e:27:
47:0f:e1:fc:d0:fe:79:4e:3d:ee:fe:fd:83:bd:79:
ea:dd:63:e2:dd:51:9b:b6:44:d9:dc:7b:02:ad:37:
f7:c4:d5:d6:fb:7d:88:23:97:04:bf:ba:75:fa:c8:
05:df:75:a0:1d:59:30:37:cd:a9:27:72:4e:6c:29:
22:b5:3a:52:88:4c:05:2d:b8:26:82:78:15:46:56:
fe:99:d7:ab:02:35:55:90:0d:64:b1:65:51:7c:79:
51:68:28:0a:bb:86:6f:ce:46:d5:81:0f:54:f3:03:
be:33:6f:9e:92:7f:e4:2e:95:c8:fc:f8:3d:84:9f:
1e:08:f1:79:4a:54:6d:ea:fe:28:b7:f7:8f:af:c9:
f4:2c:7a:3b:6f:34:16:36:5f:7c:e0:9c:66:2e:d8:
b1:3e:b5:17:5f:c1:68:dc:0e:84:69:53:90:38:e9:
24:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2E:EB:94:9C:71:55:19:F4:AE:E4:2E:75:9C:A9:2A:CA:21:45:94
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/gy7rlJxxVRn0ruQudZypKsohRZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.209.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:c1:fa:35:ae:75:b7:9a:56:59:39:5c:96:ce:dd:e0:c1:1c:
27:e2:80:58:71:36:c9:bb:c2:4f:28:78:6d:51:e6:f1:fa:c3:
45:a6:4f:a2:3b:e9:00:cc:81:3c:ce:f4:06:8c:fe:48:3e:ef:
24:35:37:3f:b5:30:e2:24:19:41:13:c4:cd:f6:5a:ba:69:90:
f2:54:ca:eb:f3:c1:d4:de:86:a4:b0:ad:ff:fe:1f:01:33:6f:
03:b0:86:dd:c9:1a:41:20:0f:06:cf:63:a1:52:e4:b2:7e:85:
e2:74:09:0c:9b:6a:09:05:84:15:4f:60:e2:0f:54:1e:7e:91:
51:ae:04:37:31:96:56:73:6f:f2:73:f7:b6:b4:7f:a1:ab:02:
e6:7f:3a:e2:1a:58:2f:d0:7d:9f:c8:ac:09:ef:a0:a5:c7:f1:
e1:ad:54:51:61:a8:ea:01:b9:b5:43:c7:3a:01:7c:8a:24:4d:
98:3d:65:f9:2c:1b:ea:80:33:53:56:5a:de:f9:f2:4e:f1:7d:
80:83:4d:ae:17:14:d2:ba:26:f2:24:87:48:89:d6:a9:a2:71:
02:1c:37:74:67:f8:65:e9:d3:89:6b:bd:9a:b8:6c:ce:23:f3:
59:4d:e2:e1:41:98:fa:a1:d1:1a:29:4e:14:20:f8:80:37:fa:
72:20:3e:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ4b16HfFISLp7WGEU1TQgJ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjYwNTEyMTA1OTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzJlZWI5NDljNzE1NTE5ZjRhZWU0MmU3NTljYTkyYWNhMjE0NTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOsrCtGJkiB20ENDXMgfr2Q6/ubX
XnoNc6Z7yBsv/qpxnmOKP8dE1Zg+6N5hurdwC1+RBShWXBRMyY/Hwea/AlBBQFq5
zOn/Xf6nVCG30RkC3LYdPgN/DidHD+H80P55Tj3u/v2DvXnq3WPi3VGbtkTZ3HsC
rTf3xNXW+32II5cEv7p1+sgF33WgHVkwN82pJ3JObCkitTpSiEwFLbgmgngVRlb+
mderAjVVkA1ksWVRfHlRaCgKu4ZvzkbVgQ9U8wO+M2+ekn/kLpXI/Pg9hJ8eCPF5
SlRt6v4ot/ePr8n0LHo7bzQWNl984JxmLtixPrUXX8Fo3A6EaVOQOOkkVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIMu65SccVUZ9K7kLnWcqSrKIUWUMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvZ3k3cmxKeHhWUm4wcnVRdWRaeXBLc29oUlpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwo/RMA0G
CSqGSIb3DQEBCwUAA4IBAQCqwfo1rnW3mlZZOVyWzt3gwRwn4oBYcTbJu8JPKHht
Uebx+sNFpk+iO+kAzIE8zvQGjP5IPu8kNTc/tTDiJBlBE8TN9lq6aZDyVMrr88HU
3oaksK3//h8BM28DsIbdyRpBIA8Gz2OhUuSyfoXidAkMm2oJBYQVT2DiD1QefpFR
rgQ3MZZWc2/yc/e2tH+hqwLmfzriGlgv0H2fyKwJ76Clx/HhrVRRYajqAbm1Q8c6
AXyKJE2YPWX5LBvqgDNTVlre+fJO8X2Ag02uFxTSuibyJIdIidaponECHDd0Z/hl
6dOJa72auGzOI/NZTeLhQZj6odEaKU4UIPiAN/pyID6d
-----END CERTIFICATE-----
Generated at Tue May 12 21:32:21 2026 by rpki-client