Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/axX5r8eaQye8To66RIedWeq-294.roa
File: axX5r8eaQye8To66RIedWeq-294.roa (raw, json)
Hash identifier: fUIngIaGdB7VvY50561K9uaMvhKcfZcXxu4SnSzFzxk=
Subject key identifier: 6B:15:F9:AF:C7:9A:43:27:BC:4E:8E:BA:44:87:9D:59:EA:BE:DB:DE
Certificate issuer: /CN=41b88e42f28836df48310dda05636457fa3f70db
Certificate serial: 019F236931B498A00763E5E02808A4CF5FAF
Authority key identifier: 41:B8:8E:42:F2:88:36:DF:48:31:0D:DA:05:63:64:57:FA:3F:70:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbiOQvKINt9IMQ3aBWNkV_o_cNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/axX5r8eaQye8To66RIedWeq-294.roa
Signing time: Thu 02 Jul 2026 15:18:44 +0000
ROA not before: Thu 02 Jul 2026 15:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6453
IP address blocks: 185.150.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbiOQvKINt9IMQ3aBWNkV_o_cNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:31:b4:98:a0:07:63:e5:e0:28:08:a4:cf:5f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b88e42f28836df48310dda05636457fa3f70db
Validity
Not Before: Jul 2 15:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b15f9afc79a4327bc4e8eba44879d59eabedbde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d6:fb:cc:ca:a5:4a:0b:67:d9:b2:0c:62:e8:
4f:3b:76:e3:2b:4e:b7:d8:1a:ad:36:f0:67:83:87:
ef:41:ab:8a:8e:63:b9:90:e4:c6:26:25:1a:d0:7a:
e2:80:30:31:2f:cd:33:62:6c:e9:f8:07:05:63:80:
d9:af:63:7b:0c:a0:21:df:99:c4:95:ce:cb:60:27:
1f:be:a3:7a:ff:58:3e:79:8f:32:b3:17:17:47:79:
04:5e:be:ec:40:0a:4f:63:28:c5:07:41:90:ff:33:
df:89:d7:8c:aa:c0:63:2b:af:fe:9f:65:6f:db:ca:
ea:c8:c9:b9:7c:64:ba:e1:df:22:8a:9b:21:ef:e1:
f5:7f:f7:ad:08:63:66:c5:d6:08:f8:01:5f:06:b1:
90:a1:f5:e7:91:83:06:54:f5:3c:98:e7:1a:ad:5b:
e6:d4:f6:05:cc:ca:69:f9:d0:82:63:ad:66:29:1f:
49:01:df:d7:d8:c4:ed:d7:42:5d:31:a1:7c:bc:18:
af:ee:1e:a7:49:c5:6a:eb:b5:65:8a:b1:a5:df:27:
a3:36:e2:06:22:12:56:b0:17:fd:c7:7e:68:d9:0b:
22:34:6c:06:b4:42:db:94:28:77:5f:1c:f9:e1:03:
a7:7c:cd:31:73:84:6e:ca:ee:d6:5e:c8:c4:f1:6e:
ff:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:15:F9:AF:C7:9A:43:27:BC:4E:8E:BA:44:87:9D:59:EA:BE:DB:DE
X509v3 Authority Key Identifier:
keyid:41:B8:8E:42:F2:88:36:DF:48:31:0D:DA:05:63:64:57:FA:3F:70:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbiOQvKINt9IMQ3aBWNkV_o_cNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/axX5r8eaQye8To66RIedWeq-294.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.216.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:d0:91:2f:75:4c:fd:98:6e:55:60:a5:38:6b:81:32:ba:7b:
1c:05:11:d9:77:65:dd:a0:a7:56:c3:e6:1f:37:70:dc:74:4b:
29:59:66:e5:af:a4:a4:69:a2:33:5e:b7:0a:60:ef:70:1c:ec:
a8:39:03:fc:d9:2d:d4:32:c0:6c:a1:07:e4:df:f9:b0:a2:31:
bc:ca:9a:d0:c0:c0:94:fe:0a:f0:bc:04:e4:5d:ad:49:c9:8a:
7a:b7:7f:98:37:0a:b9:d0:7c:56:08:cc:27:b3:36:12:3a:30:
17:43:af:7d:69:ef:7b:5d:c7:c5:9f:30:9e:de:4a:ae:b6:bf:
3e:80:94:b5:72:5d:8e:fd:b7:98:62:fb:e5:81:4f:99:7d:4e:
27:3e:18:99:98:f1:0d:ff:e4:a1:4c:95:3f:7f:3d:4d:b0:45:
43:82:d7:df:6e:03:00:6e:d5:dd:2a:13:04:ec:69:62:94:23:
95:f0:2f:d8:8e:b2:0b:4e:57:83:b5:c0:12:2d:b1:89:8e:71:
34:b1:92:54:17:fc:5f:6f:3b:0f:6f:f0:38:81:9a:db:43:85:
cc:a4:c3:2b:14:0a:e6:a6:8c:9a:10:aa:75:bc:80:78:40:e8:
b0:56:8f:27:c9:0e:57:66:bd:a6:fe:74:e9:00:c1:d7:e1:d4:
5a:0f:cd:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaTG0mKAHY+XgKAikz1+vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYjg4ZTQyZjI4ODM2ZGY0ODMxMGRkYTA1NjM2NDU3ZmEz
ZjcwZGIwHhcNMjYwNzAyMTUxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjE1ZjlhZmM3OWE0MzI3YmM0ZThlYmE0NDg3OWQ1OWVhYmVkYmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtb7zMqlSgtn2bIMYuhPO3bjK063
2BqtNvBng4fvQauKjmO5kOTGJiUa0HrigDAxL80zYmzp+AcFY4DZr2N7DKAh35nE
lc7LYCcfvqN6/1g+eY8ysxcXR3kEXr7sQApPYyjFB0GQ/zPfideMqsBjK6/+n2Vv
28rqyMm5fGS64d8iipsh7+H1f/etCGNmxdYI+AFfBrGQofXnkYMGVPU8mOcarVvm
1PYFzMpp+dCCY61mKR9JAd/X2MTt10JdMaF8vBiv7h6nScVq67VlirGl3yejNuIG
IhJWsBf9x35o2QsiNGwGtELblCh3Xxz54QOnfM0xc4Ruyu7WXsjE8W7/FQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGsV+a/HmkMnvE6OukSHnVnqvtveMB8GA1UdIwQY
MBaAFEG4jkLyiDbfSDEN2gVjZFf6P3DbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWJpT1F2S0lOdDlJTVEzYUJXTmtWX29fY05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9mNTAxZjYtMTcwMi00OGQzLTgwMjct
OTZiODY5MWY1MjYwLzEvYXhYNXI4ZWFReWU4VG82NlJJZWRXZXEtMjk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9mNTAxZjYtMTcwMi00OGQzLTgwMjctOTZiODY5MWY1MjYw
LzEvUWJpT1F2S0lOdDlJTVEzYUJXTmtWX29fY05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZbYMA0G
CSqGSIb3DQEBCwUAA4IBAQCd0JEvdUz9mG5VYKU4a4EyunscBRHZd2XdoKdWw+Yf
N3DcdEspWWblr6SkaaIzXrcKYO9wHOyoOQP82S3UMsBsoQfk3/mwojG8yprQwMCU
/grwvATkXa1JyYp6t3+YNwq50HxWCMwnszYSOjAXQ699ae97XcfFnzCe3kqutr8+
gJS1cl2O/beYYvvlgU+ZfU4nPhiZmPEN/+ShTJU/fz1NsEVDgtffbgMAbtXdKhME
7GlilCOV8C/YjrILTleDtcASLbGJjnE0sZJUF/xfbzsPb/A4gZrbQ4XMpMMrFArm
poyaEKp1vIB4QOiwVo8nyQ5XZr2m/nTpAMHX4dRaD80r
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:17:43 2026 by rpki-client