Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/_E-18Yix5OeOjpkpq4btG5ylqEQ.roa
File: _E-18Yix5OeOjpkpq4btG5ylqEQ.roa (raw, json)
Hash identifier: G5MMNAQN+PyBy79Pw9SL7XUT08jrMuESj9HjH5BbLWA=
Subject key identifier: FC:4F:B5:F1:88:B1:E4:E7:8E:8E:99:29:AB:86:ED:1B:9C:A5:A8:44
Certificate issuer: /CN=b85874095c4c9422b935975a71564f0771cd292e
Certificate serial: 019F1735B38ADB88DF6A6C3DD2C10F68847E
Authority key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/_E-18Yix5OeOjpkpq4btG5ylqEQ.roa
Signing time: Tue 30 Jun 2026 06:27:03 +0000
ROA not before: Tue 30 Jun 2026 06:27:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 192.195.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:35:b3:8a:db:88:df:6a:6c:3d:d2:c1:0f:68:84:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85874095c4c9422b935975a71564f0771cd292e
Validity
Not Before: Jun 30 06:27:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc4fb5f188b1e4e78e8e9929ab86ed1b9ca5a844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e1:88:48:0e:8b:32:43:34:68:47:fa:2f:7b:
d0:cf:94:c7:aa:a9:64:7e:df:39:10:49:56:2e:39:
c8:87:88:1f:fa:8d:a5:a2:8d:a6:00:69:8f:d1:f7:
df:e0:81:c8:f4:ea:a1:dd:50:af:00:00:29:af:54:
53:44:e8:6b:33:95:5d:31:75:1b:21:37:ac:c4:5d:
76:f1:f4:a8:2a:0e:4a:e9:a4:e1:18:e4:71:06:da:
7c:73:47:14:c9:26:6a:87:c3:1b:d0:aa:9a:11:97:
19:a5:19:8c:a4:73:9a:cc:0a:8d:8e:05:0f:0f:71:
ff:db:fc:57:50:91:21:72:b7:c1:64:a0:11:cb:fc:
23:de:fc:ab:9d:69:66:cf:fe:6e:51:28:59:b6:92:
3a:82:a8:ec:39:25:1b:65:0b:18:b8:fd:ff:b8:0e:
21:11:15:a0:19:72:92:90:8d:9f:f3:df:e1:b0:9b:
d3:2b:88:eb:40:e7:5e:5a:62:fc:dd:e1:70:ea:e8:
ce:94:c2:9e:41:7b:eb:d1:43:f1:45:1a:be:d6:28:
dc:79:a2:cf:87:0d:97:08:e8:59:3a:77:38:e4:dc:
fb:b2:54:7b:bf:44:d9:e7:70:16:0d:c4:f6:6c:34:
9f:55:0b:50:92:c0:cd:f1:bd:b1:2b:88:e5:55:23:
5a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4F:B5:F1:88:B1:E4:E7:8E:8E:99:29:AB:86:ED:1B:9C:A5:A8:44
X509v3 Authority Key Identifier:
keyid:B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/_E-18Yix5OeOjpkpq4btG5ylqEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.195.42.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:c4:41:56:5c:cf:bd:5f:f9:dd:e7:84:21:8c:eb:7f:ca:93:
f0:f0:2e:a4:76:e5:7b:bd:ba:d6:4b:03:0e:78:5b:97:e3:7a:
8b:20:49:f8:9f:04:32:72:87:d6:5a:99:ea:7b:5c:4d:4d:dc:
0d:0e:0b:47:6c:b1:83:24:2e:26:cf:33:df:07:f4:f8:e0:dd:
8e:91:c7:3f:29:15:65:bf:79:b5:61:8b:94:8e:52:6b:20:e3:
0b:bf:37:67:39:aa:1c:26:1e:1a:80:d6:af:fc:60:5d:e3:24:
80:e1:90:01:69:08:c1:54:86:79:12:77:63:91:af:ce:29:f7:
05:78:6f:53:99:bc:44:c7:7b:ad:ad:b0:7e:89:ce:89:68:00:
7b:3f:b2:42:25:a7:d4:c5:e3:87:91:e1:cf:89:1e:60:5a:a4:
71:cc:25:a7:ae:ea:2f:e6:46:f4:64:46:e3:76:cb:89:a9:0f:
19:12:5e:57:24:b1:ec:a8:77:15:2d:16:25:9c:cf:09:8f:39:
98:ca:f7:6d:b7:35:e0:47:25:f9:12:d2:97:d5:f9:ce:da:5f:
a6:21:e8:f3:07:3d:84:21:2d:fb:49:86:19:df:55:9f:3f:4e:
cf:4c:27:72:19:51:a2:81:66:5b:fa:31:c9:50:13:d8:7e:a8:
b8:21:63:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8XNbOK24jfamw90sEPaIR+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NTg3NDA5NWM0Yzk0MjJiOTM1OTc1YTcxNTY0ZjA3NzFj
ZDI5MmUwHhcNMjYwNjMwMDYyNzAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzRmYjVmMTg4YjFlNGU3OGU4ZTk5MjlhYjg2ZWQxYjljYTVhODQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueGISA6LMkM0aEf6L3vQz5THqqlk
ft85EElWLjnIh4gf+o2loo2mAGmP0fff4IHI9Oqh3VCvAAApr1RTROhrM5VdMXUb
ITesxF128fSoKg5K6aThGORxBtp8c0cUySZqh8Mb0KqaEZcZpRmMpHOazAqNjgUP
D3H/2/xXUJEhcrfBZKARy/wj3vyrnWlmz/5uUShZtpI6gqjsOSUbZQsYuP3/uA4h
ERWgGXKSkI2f89/hsJvTK4jrQOdeWmL83eFw6ujOlMKeQXvr0UPxRRq+1ijceaLP
hw2XCOhZOnc45Nz7slR7v0TZ53AWDcT2bDSfVQtQksDN8b2xK4jlVSNa8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPxPtfGIseTnjo6ZKauG7RucpahEMB8GA1UdIwQY
MBaAFLhYdAlcTJQiuTWXWnFWTwdxzSkuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUZoMENWeE1sQ0s1TlpkYWNWWlBCM0hOS1M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9kODA4NzctN2YxZS00YTUwLTk5NTct
MDcwYTFmNzE4ODVlLzEvX0UtMThZaXg1T2VPanBrcHE0YnRHNXlscUVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9kODA4NzctN2YxZS00YTUwLTk5NTctMDcwYTFmNzE4ODVl
LzEvdUZoMENWeE1sQ0s1TlpkYWNWWlBCM0hOS1M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwMMqMA0G
CSqGSIb3DQEBCwUAA4IBAQAdxEFWXM+9X/nd54QhjOt/ypPw8C6kduV7vbrWSwMO
eFuX43qLIEn4nwQycofWWpnqe1xNTdwNDgtHbLGDJC4mzzPfB/T44N2Okcc/KRVl
v3m1YYuUjlJrIOMLvzdnOaocJh4agNav/GBd4ySA4ZABaQjBVIZ5Endjka/OKfcF
eG9TmbxEx3utrbB+ic6JaAB7P7JCJafUxeOHkeHPiR5gWqRxzCWnruov5kb0ZEbj
dsuJqQ8ZEl5XJLHsqHcVLRYlnM8JjzmYyvdttzXgRyX5EtKX1fnO2l+mIejzBz2E
IS37SYYZ31WfP07PTCdyGVGigWZb+jHJUBPYfqi4IWPG
-----END CERTIFICATE-----
Generated at Tue Jul 21 15:50:52 2026 by rpki-client