Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/Tj-2zHDfL3Pm8wXS0UwNWI0Hm20.roa
File: Tj-2zHDfL3Pm8wXS0UwNWI0Hm20.roa (raw, json)
Hash identifier: rYP1Gh9xmcWC06XPLj4CF87qroyF6GWHDQDHGo84ucQ=
Subject key identifier: 4E:3F:B6:CC:70:DF:2F:73:E6:F3:05:D2:D1:4C:0D:58:8D:07:9B:6D
Certificate issuer: /CN=8c2bc68c6b1801dc43033f76fca735c7d84679e3
Certificate serial: 019F33B63C4EBEDE59F397662D0FAAE57539
Authority key identifier: 8C:2B:C6:8C:6B:18:01:DC:43:03:3F:76:FC:A7:35:C7:D8:46:79:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCvGjGsYAdxDAz92_Kc1x9hGeeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/Tj-2zHDfL3Pm8wXS0UwNWI0Hm20.roa
Signing time: Sun 05 Jul 2026 19:16:48 +0000
ROA not before: Sun 05 Jul 2026 19:16:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59763
IP address blocks: 185.192.84.0/22 maxlen: 22
2a0a:29c0::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCvGjGsYAdxDAz92_Kc1x9hGeeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:33:b6:3c:4e:be:de:59:f3:97:66:2d:0f:aa:e5:75:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c2bc68c6b1801dc43033f76fca735c7d84679e3
Validity
Not Before: Jul 5 19:16:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e3fb6cc70df2f73e6f305d2d14c0d588d079b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:c7:28:80:f1:bb:8d:bd:d4:fb:2c:1a:2a:
cc:9e:77:30:c5:7b:95:34:32:6b:1b:be:d0:f8:b4:
04:63:35:e9:33:d8:35:77:ff:00:9b:d8:57:27:d2:
ed:88:be:d4:23:59:bd:ad:ce:02:65:4c:b0:d8:70:
44:6c:f4:2e:e7:3b:8c:59:41:75:70:d9:c1:28:1d:
41:87:ca:bb:55:6a:17:36:83:93:5f:61:24:8b:6f:
e5:8b:1d:ce:4c:e5:d2:7b:82:2e:90:fb:7c:db:33:
56:4c:65:00:8c:0b:1c:53:52:0d:f6:f1:dc:1f:fd:
5f:1f:7f:7c:0e:81:69:2f:b2:39:23:8b:30:21:62:
c0:38:8a:c9:4d:79:96:54:11:77:5a:31:ea:1a:a2:
4e:0c:41:f3:c0:78:22:bb:0b:79:a1:8b:5e:ea:62:
0a:56:82:e2:96:aa:63:ee:99:be:08:e3:5b:99:26:
83:be:0c:9a:81:65:8f:95:3a:08:ed:0d:4f:6a:b1:
d2:08:96:3e:4d:84:86:1f:bf:a6:cb:88:6d:ec:1e:
78:68:3d:f8:99:48:e7:7e:7d:e6:72:41:25:0e:4f:
44:cb:50:85:dc:90:9a:df:6a:9c:13:b7:bd:7b:a0:
61:0d:f9:99:d5:46:bb:2b:bc:58:c7:f1:81:62:59:
62:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3F:B6:CC:70:DF:2F:73:E6:F3:05:D2:D1:4C:0D:58:8D:07:9B:6D
X509v3 Authority Key Identifier:
keyid:8C:2B:C6:8C:6B:18:01:DC:43:03:3F:76:FC:A7:35:C7:D8:46:79:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCvGjGsYAdxDAz92_Kc1x9hGeeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/Tj-2zHDfL3Pm8wXS0UwNWI0Hm20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/085ac6-e026-4106-8622-bb99cd28a003/1/jCvGjGsYAdxDAz92_Kc1x9hGeeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.84.0/22
IPv6:
2a0a:29c0::/36
Signature Algorithm: sha256WithRSAEncryption
25:51:86:da:b8:7e:61:2a:3a:84:7b:7a:97:7f:60:13:1a:8e:
b9:80:24:f5:f1:d5:b9:96:04:7c:9b:0b:67:dc:d8:8c:fa:05:
0c:80:ee:55:be:50:52:03:fa:1f:32:82:96:9b:5a:06:f6:8b:
ac:01:d3:c8:57:be:d0:a6:9a:7f:c0:8f:6f:d1:8c:76:fd:64:
3b:30:19:4a:7a:e5:af:74:96:e8:0e:8e:32:73:f6:a5:ba:b9:
8e:01:af:3b:4a:bc:b1:4f:c2:8e:ce:b6:bd:4a:6e:50:ec:f9:
b3:30:a5:1c:da:64:4e:ff:c2:25:4f:21:5c:fe:61:ab:ca:f7:
21:48:39:62:8d:43:77:8d:82:17:72:1f:9c:e4:b2:00:40:96:
a6:45:68:0b:10:8a:19:6b:4b:17:ca:63:5e:08:93:65:c7:ef:
9d:ea:08:96:62:e3:f2:21:93:6d:90:f6:f3:ed:d0:a1:e0:b8:
56:36:5c:f8:0a:1f:0b:18:5a:aa:d8:59:f7:c2:a7:34:f0:fa:
f9:f0:53:a5:78:d7:7b:68:3b:dd:dc:97:e0:2f:e3:02:55:a2:
8e:f4:60:1e:f7:6b:f7:1e:09:3d:0a:4b:57:4f:2f:af:53:a7:
e3:68:a1:aa:fe:a5:44:41:64:ef:46:d4:07:3b:f7:ac:a9:c1:
51:6e:6c:aa
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZ8ztjxOvt5Z85dmLQ+q5XU5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMmJjNjhjNmIxODAxZGM0MzAzM2Y3NmZjYTczNWM3ZDg0
Njc5ZTMwHhcNMjYwNzA1MTkxNjQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTNmYjZjYzcwZGYyZjczZTZmMzA1ZDJkMTRjMGQ1ODhkMDc5YjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6zHKIDxu4291PssGirMnncwxXuV
NDJrG77Q+LQEYzXpM9g1d/8Am9hXJ9LtiL7UI1m9rc4CZUyw2HBEbPQu5zuMWUF1
cNnBKB1Bh8q7VWoXNoOTX2Eki2/lix3OTOXSe4IukPt82zNWTGUAjAscU1IN9vHc
H/1fH398DoFpL7I5I4swIWLAOIrJTXmWVBF3WjHqGqJODEHzwHgiuwt5oYte6mIK
VoLilqpj7pm+CONbmSaDvgyagWWPlToI7Q1ParHSCJY+TYSGH7+my4ht7B54aD34
mUjnfn3mckElDk9Ey1CF3JCa32qcE7e9e6BhDfmZ1Ua7K7xYx/GBYllivwIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFE4/tsxw3y9z5vMF0tFMDViNB5ttMB8GA1UdIwQY
MBaAFIwrxoxrGAHcQwM/dvynNcfYRnnjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakN2R2pHc1lBZHhEQXo5Ml9LYzF4OWhHZWVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wODVhYzYtZTAyNi00MTA2LTg2MjIt
YmI5OWNkMjhhMDAzLzEvVGotMnpIRGZMM1BtOHdYUzBVd05XSTBIbTIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8wODVhYzYtZTAyNi00MTA2LTg2MjItYmI5OWNkMjhhMDAz
LzEvakN2R2pHc1lBZHhEQXo5Ml9LYzF4OWhHZWVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCucBUMA4E
AgACMAgDBgQqCinAADANBgkqhkiG9w0BAQsFAAOCAQEAJVGG2rh+YSo6hHt6l39g
ExqOuYAk9fHVuZYEfJsLZ9zYjPoFDIDuVb5QUgP6HzKClptaBvaLrAHTyFe+0Kaa
f8CPb9GMdv1kOzAZSnrlr3SW6A6OMnP2pbq5jgGvO0q8sU/Cjs62vUpuUOz5szCl
HNpkTv/CJU8hXP5hq8r3IUg5Yo1Dd42CF3IfnOSyAECWpkVoCxCKGWtLF8pjXgiT
ZcfvneoIlmLj8iGTbZD28+3QoeC4VjZc+AofCxhaqthZ98KnNPD6+fBTpXjXe2g7
3dyX4C/jAlWijvRgHvdr9x4JPQpLV08vr1On42ihqv6lREFk70bUBzv3rKnBUW5s
qg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:23 2026 by rpki-client