Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/1dXa5tkWoInu3h4FaYx5vYuGYA0.roa
File: 1dXa5tkWoInu3h4FaYx5vYuGYA0.roa (raw, json)
Hash identifier: 9b7WB/pq7Bp5CHCI2z/vInewOBDZyN3RbRsEInhEG7c=
Subject key identifier: D5:D5:DA:E6:D9:16:A0:89:EE:DE:1E:05:69:8C:79:BD:8B:86:60:0D
Certificate issuer: /CN=604e99f2c4bd019eb77315264526dd6ae1d62b4d
Certificate serial: 019B7F834E55E22C16224F71A091637818D3
Authority key identifier: 60:4E:99:F2:C4:BD:01:9E:B7:73:15:26:45:26:DD:6A:E1:D6:2B:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YE6Z8sS9AZ63cxUmRSbdauHWK00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/1dXa5tkWoInu3h4FaYx5vYuGYA0.roa
Signing time: Fri 02 Jan 2026 16:21:10 +0000
ROA not before: Fri 02 Jan 2026 16:21:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35198
IP address blocks: 193.238.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.mft
rsync://rpki.ripe.net/repository/DEFAULT/YE6Z8sS9AZ63cxUmRSbdauHWK00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:4e:55:e2:2c:16:22:4f:71:a0:91:63:78:18:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=604e99f2c4bd019eb77315264526dd6ae1d62b4d
Validity
Not Before: Jan 2 16:21:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5d5dae6d916a089eede1e05698c79bd8b86600d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:82:b6:1d:ff:62:84:7d:3c:21:94:c5:a2:
30:1e:49:9b:ab:70:4e:5c:b0:08:8a:d6:4e:e5:77:
0e:c3:26:e7:bb:62:d9:50:fe:3e:7e:83:5c:40:35:
63:8a:46:b8:49:91:d8:32:6c:76:cf:df:84:4c:7a:
19:ab:82:b8:eb:a7:b3:08:d9:f5:b4:27:73:03:d8:
d6:66:b6:b5:f3:ad:db:99:e7:22:32:83:09:bd:13:
05:94:5c:07:85:68:e7:80:d4:ce:b7:09:2f:0c:1b:
23:f2:20:da:04:92:f8:93:82:d2:e4:9c:2d:61:a2:
c4:e5:57:e0:16:cf:6c:77:61:4f:13:a8:9b:fa:af:
56:2e:1d:fd:68:b2:22:de:77:09:14:17:64:c0:7e:
c3:c0:b5:32:6a:5b:b1:b7:99:cb:89:e3:ce:af:b7:
a9:d7:53:c0:a9:33:15:29:3d:25:0c:df:a1:ed:17:
a0:3d:b1:fc:2f:b9:a3:07:7a:23:b6:38:bc:26:bd:
37:22:44:38:50:43:ba:92:ae:61:d3:fc:6f:25:38:
18:c1:52:a3:ef:60:8c:7a:3e:94:3e:cc:d5:06:40:
b3:4d:41:fd:12:9c:e2:37:56:ba:42:cd:8e:c9:13:
85:38:81:24:45:9f:36:25:8e:9e:c0:68:72:d3:89:
e3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D5:DA:E6:D9:16:A0:89:EE:DE:1E:05:69:8C:79:BD:8B:86:60:0D
X509v3 Authority Key Identifier:
keyid:60:4E:99:F2:C4:BD:01:9E:B7:73:15:26:45:26:DD:6A:E1:D6:2B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YE6Z8sS9AZ63cxUmRSbdauHWK00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/1dXa5tkWoInu3h4FaYx5vYuGYA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76f5c3-e09a-482b-814e-b2560eab150f/1/YE6Z8sS9AZ63cxUmRSbdauHWK00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.200.0/22
Signature Algorithm: sha256WithRSAEncryption
86:36:87:02:45:20:f0:65:31:de:89:35:91:80:ea:dc:78:91:
dc:9a:c0:48:ef:58:d2:3d:de:6c:1a:9d:b6:c3:87:6a:f8:86:
51:11:6f:4e:b2:e4:f0:90:00:4a:6f:db:73:3b:9f:ac:60:3a:
40:15:46:08:af:5b:50:0e:b2:ab:99:b5:18:21:ab:aa:e4:15:
22:82:f6:35:7a:ca:83:dc:7c:4f:d9:23:97:cc:66:cb:4d:c5:
34:e1:83:99:e4:f3:60:d1:6d:ca:57:bc:fd:d9:f6:55:8f:52:
f5:91:68:3d:bb:85:a2:e4:00:20:f5:00:a8:20:48:bf:3f:46:
bf:e1:32:6f:5a:f7:b7:bd:18:82:5e:b8:28:43:31:00:c7:17:
1a:06:06:1d:5b:1a:37:ca:cd:4a:0a:d8:c2:65:1c:b7:25:4d:
99:3d:af:77:3e:22:15:ef:72:33:a2:53:20:13:a6:da:a6:27:
f2:af:ef:e9:18:ed:7c:59:23:2f:3e:e6:f7:d6:b2:c9:70:c7:
9d:52:14:07:4f:86:0f:87:a6:8a:29:6a:09:34:f9:a1:95:75:
f9:bd:fc:a9:90:6f:2f:53:2f:6b:14:00:d5:9c:c3:ce:e0:ca:
6e:0f:4a:9c:89:36:a9:f0:24:a3:41:e2:9f:2a:63:47:4e:a7:
ed:83:70:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/g05V4iwWIk9xoJFjeBjTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNGU5OWYyYzRiZDAxOWViNzczMTUyNjQ1MjZkZDZhZTFk
NjJiNGQwHhcNMjYwMTAyMTYyMTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWQ1ZGFlNmQ5MTZhMDg5ZWVkZTFlMDU2OThjNzliZDhiODY2MDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkGCth3/YoR9PCGUxaIwHkmbq3BO
XLAIitZO5XcOwybnu2LZUP4+foNcQDVjika4SZHYMmx2z9+ETHoZq4K466ezCNn1
tCdzA9jWZra1863bmeciMoMJvRMFlFwHhWjngNTOtwkvDBsj8iDaBJL4k4LS5Jwt
YaLE5VfgFs9sd2FPE6ib+q9WLh39aLIi3ncJFBdkwH7DwLUyaluxt5nLiePOr7ep
11PAqTMVKT0lDN+h7RegPbH8L7mjB3ojtji8Jr03IkQ4UEO6kq5h0/xvJTgYwVKj
72CMej6UPszVBkCzTUH9EpziN1a6Qs2OyROFOIEkRZ82JY6ewGhy04njBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNXV2ubZFqCJ7t4eBWmMeb2LhmANMB8GA1UdIwQY
MBaAFGBOmfLEvQGet3MVJkUm3Wrh1itNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUU2WjhzUzlBWjYzY3hVbVJTYmRhdUhXSzAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC83NmY1YzMtZTA5YS00ODJiLTgxNGUt
YjI1NjBlYWIxNTBmLzEvMWRYYTV0a1dvSW51M2g0RmFZeDV2WXVHWUEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC83NmY1YzMtZTA5YS00ODJiLTgxNGUtYjI1NjBlYWIxNTBm
LzEvWUU2WjhzUzlBWjYzY3hVbVJTYmRhdUhXSzAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwe7IMA0G
CSqGSIb3DQEBCwUAA4IBAQCGNocCRSDwZTHeiTWRgOrceJHcmsBI71jSPd5sGp22
w4dq+IZREW9OsuTwkABKb9tzO5+sYDpAFUYIr1tQDrKrmbUYIauq5BUigvY1esqD
3HxP2SOXzGbLTcU04YOZ5PNg0W3KV7z92fZVj1L1kWg9u4Wi5AAg9QCoIEi/P0a/
4TJvWve3vRiCXrgoQzEAxxcaBgYdWxo3ys1KCtjCZRy3JU2ZPa93PiIV73IzolMg
E6bapifyr+/pGO18WSMvPub31rLJcMedUhQHT4YPh6aKKWoJNPmhlXX5vfypkG8v
Uy9rFADVnMPO4MpuD0qciTap8CSjQeKfKmNHTqftg3DG
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:19:25 2026 by rpki-client