Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/d3Y5Zfs_t0HF3dEKtsuO5hM7JRs.roa
File: d3Y5Zfs_t0HF3dEKtsuO5hM7JRs.roa (raw, json)
Hash identifier: 3WsI3OSiNVNWkVNRHaoK4+rxZSG+73t75SgvGAii51Y=
Subject key identifier: 77:76:39:65:FB:3F:B7:41:C5:DD:D1:0A:B6:CB:8E:E6:13:3B:25:1B
Certificate issuer: /CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Certificate serial: 01A1A5A150A0A984959474077FECDC28B18C
Authority key identifier: C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/d3Y5Zfs_t0HF3dEKtsuO5hM7JRs.roa
Signing time: Wed 04 Nov 2026 08:16:14 +0000
ROA not before: Wed 04 Nov 2026 08:16:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42020
IP address blocks: 185.111.4.0/24 maxlen: 24
185.111.5.0/24 maxlen: 24
185.111.6.0/24 maxlen: 24
185.111.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a5:a1:50:a0:a9:84:95:94:74:07:7f:ec:dc:28:b1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Validity
Not Before: Nov 4 08:16:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77763965fb3fb741c5ddd10ab6cb8ee6133b251b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d7:08:d3:9b:6f:f0:cd:f8:b2:47:e0:cf:4e:
ae:3d:3c:65:4e:26:dd:ef:b2:80:0e:f6:3f:2b:cb:
82:f7:9f:a3:cc:e3:6a:b4:e9:36:eb:cb:76:f0:c6:
ff:ff:e5:0a:4c:aa:83:7f:0e:9b:7d:f4:a2:4d:d1:
ff:3d:6e:d1:b6:ca:49:61:8d:ec:ea:69:c6:8f:9f:
97:f1:1b:26:a3:c9:fe:4c:7e:f2:c8:50:fd:fe:6e:
37:6c:c9:35:37:72:99:24:85:a0:e7:54:ff:1d:e6:
16:95:a8:73:c4:fc:32:c9:c7:48:45:2a:c7:0e:3f:
0d:10:70:fb:e0:0f:90:a6:de:88:2b:11:3c:93:b6:
97:52:b3:cd:bd:f9:99:f0:b4:15:72:32:fc:34:75:
ac:d4:a5:28:5c:30:2d:a5:6e:ad:11:20:aa:9c:1a:
9c:44:9c:4a:42:d0:aa:d8:f2:11:80:43:40:e6:f8:
a9:d2:3b:9a:d3:0b:e5:65:20:30:63:d9:cc:d6:d6:
70:15:d1:bd:69:5f:c1:0a:a5:b6:aa:83:40:e6:cb:
51:38:e1:5f:31:1c:63:de:40:f4:6b:5b:02:ed:db:
e8:b7:88:fe:a6:b3:b2:a0:b0:37:ad:a5:3e:0e:05:
4d:df:31:b7:7a:e6:87:9d:92:ed:a9:3c:8e:d7:6d:
b0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:76:39:65:FB:3F:B7:41:C5:DD:D1:0A:B6:CB:8E:E6:13:3B:25:1B
X509v3 Authority Key Identifier:
keyid:C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/d3Y5Zfs_t0HF3dEKtsuO5hM7JRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.4.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:8d:a0:45:45:7b:f5:ab:e9:ee:4a:65:4d:ac:e6:7e:0e:3c:
85:d9:46:86:b9:04:a9:67:73:e7:7f:ef:6a:61:b2:c2:41:21:
57:40:0a:ff:73:50:4c:66:d0:c4:93:c6:29:24:62:f7:c7:f7:
99:49:1b:de:ad:d4:e0:99:fe:c5:28:6f:53:23:ad:ab:b1:fe:
bb:49:9a:69:96:29:cf:e7:44:7c:7c:83:8e:23:c4:91:c8:59:
3a:47:1b:9d:ee:56:bd:c9:d3:23:44:83:8f:cb:eb:22:84:d5:
33:54:90:25:80:bf:34:b8:d2:cf:77:47:e5:c3:2e:81:d4:b2:
8f:bf:5f:49:6b:80:c2:13:06:8a:4f:de:71:a6:a6:7d:4e:81:
fb:8d:a4:8e:56:3a:f0:f6:ef:5f:6c:69:4a:c5:cd:57:b9:e2:
51:4b:50:20:0c:e4:45:d8:d2:b8:6a:a4:a1:d1:6f:26:0e:be:
6b:73:4d:7a:c5:d6:6c:7e:51:31:04:a5:40:2f:11:d3:4a:b8:
a8:84:84:93:f8:b3:af:e0:d2:cc:db:ec:ec:89:57:d9:63:f5:
15:b6:8f:7c:5f:c1:42:90:00:45:0f:44:4e:df:bd:47:db:cf:
91:c1:25:3b:ce:b7:9e:9f:7e:d7:a9:04:a9:e8:3a:e4:0a:11:
3d:70:4e:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGloVCgqYSVlHQHf+zcKLGMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5N2VjOWEyYTRkOWQzYTJjMWMwNWRhYmQ0MWE1ZjkyMTJl
MmQ2Y2YwHhcNMjYxMTA0MDgxNjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Nzc2Mzk2NWZiM2ZiNzQxYzVkZGQxMGFiNmNiOGVlNjEzM2IyNTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NcI05tv8M34skfgz06uPTxlTibd
77KADvY/K8uC95+jzONqtOk268t28Mb//+UKTKqDfw6bffSiTdH/PW7RtspJYY3s
6mnGj5+X8Rsmo8n+TH7yyFD9/m43bMk1N3KZJIWg51T/HeYWlahzxPwyycdIRSrH
Dj8NEHD74A+Qpt6IKxE8k7aXUrPNvfmZ8LQVcjL8NHWs1KUoXDAtpW6tESCqnBqc
RJxKQtCq2PIRgENA5vip0jua0wvlZSAwY9nM1tZwFdG9aV/BCqW2qoNA5stROOFf
MRxj3kD0a1sC7dvot4j+prOyoLA3raU+DgVN3zG3euaHnZLtqTyO122wjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHd2OWX7P7dBxd3RCrbLjuYTOyUbMB8GA1UdIwQY
MBaAFMl+yaKk2dOiwcBdq9QaX5IS4tbPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVg3Sm9xVFowNkxCd0YycjFCcGZraExpMXM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8yMTM0NjQtMWRkYi00YzYwLWI1N2Ut
OWM3MjRmN2QxMjY1LzEvZDNZNVpmc190MEhGM2RFS3RzdU81aE03SlJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8yMTM0NjQtMWRkYi00YzYwLWI1N2UtOWM3MjRmN2QxMjY1
LzEveVg3Sm9xVFowNkxCd0YycjFCcGZraExpMXM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuW8EMA0G
CSqGSIb3DQEBCwUAA4IBAQB7jaBFRXv1q+nuSmVNrOZ+DjyF2UaGuQSpZ3Pnf+9q
YbLCQSFXQAr/c1BMZtDEk8YpJGL3x/eZSRverdTgmf7FKG9TI62rsf67SZpplinP
50R8fIOOI8SRyFk6Rxud7la9ydMjRIOPy+sihNUzVJAlgL80uNLPd0flwy6B1LKP
v19Ja4DCEwaKT95xpqZ9ToH7jaSOVjrw9u9fbGlKxc1XueJRS1AgDORF2NK4aqSh
0W8mDr5rc016xdZsflExBKVALxHTSriohIST+LOv4NLM2+zsiVfZY/UVto98X8FC
kABFD0RO371H28+RwSU7zreen37XqQSp6DrkChE9cE50
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:29:32 2026 by rpki-client