Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/D9IIvAjUBeonrUuAtA9-LP_kfxg.roa
File: D9IIvAjUBeonrUuAtA9-LP_kfxg.roa (raw, json)
Hash identifier: 2T3Qvn8J8uK4lzJw95imN9pofbDQi2ngOHPWAgyI0Cg=
Subject key identifier: 0F:D2:08:BC:08:D4:05:EA:27:AD:4B:80:B4:0F:7E:2C:FF:E4:7F:18
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 019F395ADCD27E5A20F4081D6E0ED7B6C212
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/D9IIvAjUBeonrUuAtA9-LP_kfxg.roa
Signing time: Mon 06 Jul 2026 21:34:43 +0000
ROA not before: Mon 06 Jul 2026 21:34:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401838
IP address blocks: 195.8.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:39:5a:dc:d2:7e:5a:20:f4:08:1d:6e:0e:d7:b6:c2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jul 6 21:34:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fd208bc08d405ea27ad4b80b40f7e2cffe47f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:db:4b:69:61:70:f9:a3:92:03:fe:ee:54:13:
81:8c:1b:64:53:8a:f6:15:d5:9f:dc:8a:e3:8f:05:
aa:16:d9:21:0c:c3:62:8b:ff:c7:db:38:5c:b6:49:
6a:54:d7:2a:63:13:04:9e:67:16:bc:88:ad:1f:50:
15:6b:1a:a6:82:04:24:da:05:d1:f3:79:31:4e:4d:
d1:19:90:48:b5:3d:61:44:14:1e:fc:f8:d0:d3:38:
04:d8:45:22:e8:05:62:e5:06:d0:3c:b4:a2:af:5e:
b4:18:1f:79:9e:48:bb:01:50:c3:07:fa:21:90:c2:
23:ea:c9:c6:32:aa:20:42:ba:8f:0d:23:46:34:34:
3f:32:0c:85:ba:a7:9f:16:ee:49:28:a8:bc:16:82:
39:60:80:2c:e1:c6:92:17:c2:40:c4:9f:15:25:df:
25:2f:dd:70:17:c7:2f:52:0d:c9:c9:7f:08:1c:99:
e7:dd:e7:4f:47:31:7a:41:42:3b:e0:3e:c5:96:f5:
37:3e:ac:9d:82:1d:17:8e:34:c9:56:72:4c:ec:89:
f7:d5:5b:78:16:1e:58:71:0e:93:f7:b4:95:67:90:
98:d5:aa:e3:73:03:31:1c:3b:91:6b:d8:9a:e8:8d:
0d:29:7c:03:0c:80:78:af:09:27:87:6e:9e:ba:af:
22:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D2:08:BC:08:D4:05:EA:27:AD:4B:80:B4:0F:7E:2C:FF:E4:7F:18
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/D9IIvAjUBeonrUuAtA9-LP_kfxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.200.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:35:b4:b2:10:44:b0:96:83:60:07:06:76:34:94:5f:b5:e7:
f1:ce:ce:71:bc:94:c5:d3:69:3a:f8:ab:b9:d4:06:08:26:15:
2b:49:f5:3b:de:8b:43:87:90:f1:eb:e4:dd:fc:fc:6b:4d:3d:
f6:fb:f6:7a:5c:40:14:5c:d5:d5:9f:d0:1e:1e:1e:33:17:c2:
83:e5:39:4f:c8:d7:34:45:2b:84:88:94:32:8d:e3:c1:ef:28:
67:4e:fd:56:07:9b:f1:5c:ed:09:31:c7:ef:62:cb:23:6d:c8:
6b:7f:51:98:49:06:cb:26:4c:5d:e3:12:94:e4:6b:e9:b9:12:
9f:60:98:10:4f:69:92:eb:ba:0b:b9:fe:17:a4:8e:b1:44:2b:
c3:c7:38:62:49:aa:5a:84:10:8e:e5:a6:b9:2b:74:33:54:0d:
d0:c1:0b:4d:34:fa:ee:eb:81:29:fd:89:21:e7:fd:ed:fa:ab:
11:69:09:1e:5e:2c:df:ce:03:db:7d:e0:a7:bc:6e:db:65:79:
ba:72:f9:0d:86:58:3c:03:c7:b9:50:c2:b3:05:1a:63:27:f0:
76:a1:a0:59:06:96:33:bd:77:11:43:8c:8a:bb:67:8f:e7:93:
a7:bd:cf:a7:3d:b8:5a:9b:21:3b:53:25:d0:e4:36:e4:66:dd:
5a:be:19:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ85WtzSflog9Agdbg7XtsISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy
NTdkYzQwHhcNMjYwNzA2MjEzNDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmQyMDhiYzA4ZDQwNWVhMjdhZDRiODBiNDBmN2UyY2ZmZTQ3ZjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNtLaWFw+aOSA/7uVBOBjBtkU4r2
FdWf3IrjjwWqFtkhDMNii//H2zhctklqVNcqYxMEnmcWvIitH1AVaxqmggQk2gXR
83kxTk3RGZBItT1hRBQe/PjQ0zgE2EUi6AVi5QbQPLSir160GB95nki7AVDDB/oh
kMIj6snGMqogQrqPDSNGNDQ/MgyFuqefFu5JKKi8FoI5YIAs4caSF8JAxJ8VJd8l
L91wF8cvUg3JyX8IHJnn3edPRzF6QUI74D7FlvU3Pqydgh0XjjTJVnJM7In31Vt4
Fh5YcQ6T97SVZ5CY1arjcwMxHDuRa9ia6I0NKXwDDIB4rwknh26euq8ixwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA/SCLwI1AXqJ61LgLQPfiz/5H8YMB8GA1UdIwQY
MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt
OTk5MGUyZDllYWZlLzEvRDlJSXZBalVCZW9uclV1QXRBOS1MUF9rZnhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl
LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwjIMA0G
CSqGSIb3DQEBCwUAA4IBAQDANbSyEESwloNgBwZ2NJRftefxzs5xvJTF02k6+Ku5
1AYIJhUrSfU73otDh5Dx6+Td/PxrTT32+/Z6XEAUXNXVn9AeHh4zF8KD5TlPyNc0
RSuEiJQyjePB7yhnTv1WB5vxXO0JMcfvYssjbchrf1GYSQbLJkxd4xKU5GvpuRKf
YJgQT2mS67oLuf4XpI6xRCvDxzhiSapahBCO5aa5K3QzVA3QwQtNNPru64Ep/Ykh
5/3t+qsRaQkeXizfzgPbfeCnvG7bZXm6cvkNhlg8A8e5UMKzBRpjJ/B2oaBZBpYz
vXcRQ4yKu2eP55Onvc+nPbhamyE7UyXQ5DbkZt1avhly
-----END CERTIFICATE-----
Generated at Mon Jul 20 18:12:54 2026 by rpki-client