Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/1o81zyNcM9MSku-v0xf71Uv_MPw.roa
File: 1o81zyNcM9MSku-v0xf71Uv_MPw.roa (raw, json)
Hash identifier: 6slMk7dzclSOVP1ypShBwVG/J1PJZPJZkfccR+15zhA=
Subject key identifier: D6:8F:35:CF:23:5C:33:D3:12:92:EF:AF:D3:17:FB:D5:4B:FF:30:FC
Certificate issuer: /CN=a20d691ab19cdcf28a9896cbf5a7a0af4b961e98
Certificate serial: 019F236831B0539A317FFB8C214C67B96D7C
Authority key identifier: A2:0D:69:1A:B1:9C:DC:F2:8A:98:96:CB:F5:A7:A0:AF:4B:96:1E:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/1o81zyNcM9MSku-v0xf71Uv_MPw.roa
Signing time: Thu 02 Jul 2026 15:17:38 +0000
ROA not before: Thu 02 Jul 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203217
IP address blocks: 185.194.8.0/22 maxlen: 24
2a0c:3440::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:31:b0:53:9a:31:7f:fb:8c:21:4c:67:b9:6d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20d691ab19cdcf28a9896cbf5a7a0af4b961e98
Validity
Not Before: Jul 2 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d68f35cf235c33d31292efafd317fbd54bff30fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3c:b6:0c:53:77:32:53:6c:99:c4:97:da:4b:
dc:dd:93:ef:2a:b6:1c:7f:bb:b7:35:45:f1:dd:bd:
3f:c3:46:5c:24:43:33:01:bc:3e:a7:98:da:a0:6b:
15:ad:6e:fd:1b:50:f5:ad:32:43:f9:61:af:94:80:
64:d4:60:39:4b:53:85:72:84:b7:87:45:f9:11:f4:
27:d2:e6:ad:d9:35:e4:c4:40:18:1a:45:e4:2f:06:
36:b7:fb:77:d2:37:71:4f:da:21:69:60:64:8f:5e:
94:48:35:d7:63:16:20:0c:0c:fc:31:bb:ed:b4:4d:
f9:2b:c4:e8:0a:2a:fa:33:6e:74:05:06:8a:9c:a7:
da:2d:bb:d0:9a:69:0e:c1:d2:60:38:2b:4e:ad:e5:
c1:d6:47:2a:24:99:44:de:83:d9:41:f4:71:c6:39:
5e:5c:31:d8:64:a4:80:2d:f1:ad:61:0c:9d:fb:f1:
ae:28:e3:d6:09:65:c6:5f:aa:f8:2d:67:ac:82:13:
e9:e1:da:d3:62:95:aa:f1:8d:9d:c9:a9:7d:6c:0a:
51:57:eb:3b:01:a5:2b:57:5c:f8:45:68:d0:f2:0a:
b6:ec:35:99:83:58:9d:89:e6:52:a5:57:de:24:d1:
fe:2a:85:65:df:23:1b:eb:e9:0c:68:07:64:43:a1:
f6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8F:35:CF:23:5C:33:D3:12:92:EF:AF:D3:17:FB:D5:4B:FF:30:FC
X509v3 Authority Key Identifier:
keyid:A2:0D:69:1A:B1:9C:DC:F2:8A:98:96:CB:F5:A7:A0:AF:4B:96:1E:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/1o81zyNcM9MSku-v0xf71Uv_MPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.8.0/22
IPv6:
2a0c:3440::/29
Signature Algorithm: sha256WithRSAEncryption
65:c5:25:d8:c0:88:bd:98:73:68:42:5d:9a:2a:20:88:61:d1:
b7:fa:0d:6e:c9:64:47:a2:3c:05:78:80:e6:45:b1:37:3a:f3:
e1:cc:89:24:4b:e6:c4:76:89:4a:bd:86:2c:6e:55:9e:7b:43:
7e:e7:0c:ac:9b:89:11:8e:7b:1b:e0:c6:fb:cb:6a:b2:15:60:
5a:53:d3:d9:e8:06:6f:42:45:fd:a0:f4:43:b9:c8:47:be:16:
1c:36:b9:cd:01:04:26:94:d2:f6:e0:6b:6b:00:c1:36:a1:9e:
23:06:d0:a8:c7:25:49:7c:bf:9c:72:78:d3:6e:9d:90:ea:47:
4c:54:5b:a6:36:be:3c:5e:3c:14:19:e2:34:f4:d8:26:40:0b:
d5:ce:11:c2:93:1f:ba:3c:81:6c:35:b8:18:d5:cf:69:01:92:
d0:2f:a7:83:a5:97:cc:73:23:9b:4e:89:18:20:2d:27:74:f9:
e4:7d:16:29:25:f2:82:e5:61:4e:a4:cf:c7:07:65:7e:12:fb:
0e:39:25:f8:be:19:40:e5:59:0f:9a:1b:a9:e4:b2:95:8e:63:
53:9f:cb:a6:77:54:fa:c6:bf:89:8c:77:cb:04:f9:be:91:85:
e2:2d:4f:2c:c2:c6:2b:3f:a2:d1:c2:0d:30:ab:1f:75:2b:cc:
1f:28:16:ca
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaDGwU5oxf/uMIUxnuW18MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMGQ2OTFhYjE5Y2RjZjI4YTk4OTZjYmY1YTdhMGFmNGI5
NjFlOTgwHhcNMjYwNzAyMTUxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjhmMzVjZjIzNWMzM2QzMTI5MmVmYWZkMzE3ZmJkNTRiZmYzMGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Dy2DFN3MlNsmcSX2kvc3ZPvKrYc
f7u3NUXx3b0/w0ZcJEMzAbw+p5jaoGsVrW79G1D1rTJD+WGvlIBk1GA5S1OFcoS3
h0X5EfQn0uat2TXkxEAYGkXkLwY2t/t30jdxT9ohaWBkj16USDXXYxYgDAz8Mbvt
tE35K8ToCir6M250BQaKnKfaLbvQmmkOwdJgOCtOreXB1kcqJJlE3oPZQfRxxjle
XDHYZKSALfGtYQyd+/GuKOPWCWXGX6r4LWesghPp4drTYpWq8Y2dyal9bApRV+s7
AaUrV1z4RWjQ8gq27DWZg1idieZSpVfeJNH+KoVl3yMb6+kMaAdkQ6H22QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNaPNc8jXDPTEpLvr9MX+9VL/zD8MB8GA1UdIwQY
MBaAFKINaRqxnNzyipiWy/WnoK9Llh6YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2cxcEdyR2MzUEtLbUpiTDlhZWdyMHVXSHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83MTA5MzQtMzA0Yi00ZjVmLTk1MGUt
MTJlODI3NmZkYWM0LzEvMW84MXp5TmNNOU1Ta3UtdjB4ZjcxVXZfTVB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi83MTA5MzQtMzA0Yi00ZjVmLTk1MGUtMTJlODI3NmZkYWM0
LzEvb2cxcEdyR2MzUEtLbUpiTDlhZWdyMHVXSHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCucIIMA0E
AgACMAcDBQMqDDRAMA0GCSqGSIb3DQEBCwUAA4IBAQBlxSXYwIi9mHNoQl2aKiCI
YdG3+g1uyWRHojwFeIDmRbE3OvPhzIkkS+bEdolKvYYsblWee0N+5wysm4kRjnsb
4Mb7y2qyFWBaU9PZ6AZvQkX9oPRDuchHvhYcNrnNAQQmlNL24GtrAME2oZ4jBtCo
xyVJfL+ccnjTbp2Q6kdMVFumNr48XjwUGeI09NgmQAvVzhHCkx+6PIFsNbgY1c9p
AZLQL6eDpZfMcyObTokYIC0ndPnkfRYpJfKC5WFOpM/HB2V+EvsOOSX4vhlA5VkP
mhup5LKVjmNTn8umd1T6xr+JjHfLBPm+kYXiLU8swsYrP6LRwg0wqx91K8wfKBbK
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:54:33 2026 by rpki-client