Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sUaZ2S3GN_eVVEvXwJhFEdW6YVE.roa
File: sUaZ2S3GN_eVVEvXwJhFEdW6YVE.roa (raw, json)
Hash identifier: xck/aUvEumdluO8joMgUCMIgX1LJeVdS2Rh7DLgTY84=
Subject key identifier: B1:46:99:D9:2D:C6:37:F7:95:54:4B:D7:C0:98:45:11:D5:BA:61:51
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019E291403B07BB7E6CFD7EE3836668B1E5D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sUaZ2S3GN_eVVEvXwJhFEdW6YVE.roa
Signing time: Fri 15 May 2026 00:40:37 +0000
ROA not before: Fri 15 May 2026 00:40:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400909
IP address blocks: 87.121.114.0/23 maxlen: 23
185.252.162.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 06:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:14:03:b0:7b:b7:e6:cf:d7:ee:38:36:66:8b:1e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 15 00:40:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b14699d92dc637f795544bd7c0984511d5ba6151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:06:96:7e:9c:fd:09:db:ff:65:35:4a:1d:48:
16:d9:dd:cb:4f:39:bc:e2:49:22:9e:f8:54:89:b6:
ea:5c:66:5f:58:40:dc:2a:e7:8c:00:13:fb:03:50:
66:35:81:28:b6:cf:fc:9e:c0:5f:21:0e:52:90:5e:
1d:d5:b7:8e:13:4c:73:18:f7:84:6b:b4:17:c4:f6:
3c:b6:ba:a8:44:43:2c:9b:5e:3e:ce:41:e0:cc:ca:
46:d3:78:c3:b0:fd:ee:92:49:98:f4:66:91:24:ec:
11:91:0a:ee:a2:5d:18:7f:2d:17:9e:d4:60:2d:45:
fa:d6:97:68:20:2f:de:41:f7:ee:82:d0:86:4a:54:
cf:89:cd:de:1d:32:95:cd:91:3f:3f:85:cb:21:05:
29:32:7a:03:fd:8b:7c:65:64:6d:39:73:0b:17:d1:
dc:e9:80:9e:67:85:64:fd:05:ef:48:89:72:8c:63:
8f:77:2b:c1:23:4d:85:ca:69:ba:40:44:7f:2e:6d:
a4:3a:13:f5:12:04:39:c4:30:dc:ab:7a:05:40:a3:
67:8e:5f:71:3c:ff:c5:66:e3:8b:c8:40:56:e1:14:
5c:d6:70:64:e4:c4:54:7e:58:35:77:a1:74:3c:6c:
77:63:79:07:51:00:c1:1f:00:a6:c9:bb:47:a6:dc:
44:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:46:99:D9:2D:C6:37:F7:95:54:4B:D7:C0:98:45:11:D5:BA:61:51
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sUaZ2S3GN_eVVEvXwJhFEdW6YVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.114.0/23
185.252.162.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:19:f7:e2:db:05:58:62:d3:7d:35:2c:fd:da:42:69:e3:bc:
33:2d:bc:96:cf:e5:92:02:cd:06:24:8a:49:5a:a7:0c:5b:41:
b0:b7:19:ee:3b:6a:48:8d:77:ea:2b:24:92:d5:5f:3b:8d:92:
a1:11:a2:f6:fb:f6:88:69:0b:ac:b9:9b:ec:f7:33:0d:0d:fb:
c8:f3:5c:70:b3:0d:18:62:76:f1:fa:be:bf:42:67:b0:77:9b:
36:c7:ad:9d:db:6e:b6:ed:2e:30:75:7b:3a:32:ae:6d:85:22:
65:31:4a:e3:76:42:e6:0a:d2:f5:1b:06:c8:85:bc:bc:91:af:
aa:7a:23:30:7c:4b:ee:5f:94:89:22:1d:39:bf:94:c0:89:c8:
4c:03:10:27:04:3f:7e:0a:33:21:81:b6:69:e1:c3:7d:10:dc:
15:98:04:23:93:9a:a8:d6:a4:9d:71:04:cc:17:a6:88:71:e6:
00:b5:af:17:0b:b3:a3:54:c1:46:14:14:de:1e:ff:b1:de:24:
52:4c:f0:c1:c5:f4:46:65:ab:12:dc:76:6e:7f:8a:37:91:df:
71:3f:58:c7:7f:12:c1:28:b5:77:c5:60:e0:f2:6a:52:0b:8c:
f0:88:0b:bb:56:5e:64:f9:59:77:4c:ff:34:e3:0f:ae:4c:fb:
97:be:e0:f8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ4pFAOwe7fmz9fuODZmix5dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwNTE1MDA0MDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTQ2OTlkOTJkYzYzN2Y3OTU1NDRiZDdjMDk4NDUxMWQ1YmE2MTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AaWfpz9Cdv/ZTVKHUgW2d3LTzm8
4kkinvhUibbqXGZfWEDcKueMABP7A1BmNYEots/8nsBfIQ5SkF4d1beOE0xzGPeE
a7QXxPY8trqoREMsm14+zkHgzMpG03jDsP3ukkmY9GaRJOwRkQruol0Yfy0XntRg
LUX61pdoIC/eQffugtCGSlTPic3eHTKVzZE/P4XLIQUpMnoD/Yt8ZWRtOXMLF9Hc
6YCeZ4Vk/QXvSIlyjGOPdyvBI02Fymm6QER/Lm2kOhP1EgQ5xDDcq3oFQKNnjl9x
PP/FZuOLyEBW4RRc1nBk5MRUflg1d6F0PGx3Y3kHUQDBHwCmybtHptxEDQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLFGmdktxjf3lVRL18CYRRHVumFRMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvc1VhWjJTM0dOX2VWVkV2WHdKaEZFZFc2WVZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBV3lyAwQB
ufyiMA0GCSqGSIb3DQEBCwUAA4IBAQAvGffi2wVYYtN9NSz92kJp47wzLbyWz+WS
As0GJIpJWqcMW0GwtxnuO2pIjXfqKySS1V87jZKhEaL2+/aIaQusuZvs9zMNDfvI
81xwsw0YYnbx+r6/Qmewd5s2x62d22627S4wdXs6Mq5thSJlMUrjdkLmCtL1GwbI
hby8ka+qeiMwfEvuX5SJIh05v5TAichMAxAnBD9+CjMhgbZp4cN9ENwVmAQjk5qo
1qSdcQTMF6aIceYAta8XC7OjVMFGFBTeHv+x3iRSTPDBxfRGZasS3HZuf4o3kd9x
P1jHfxLBKLV3xWDg8mpSC4zwiAu7Vl5k+Vl3TP804w+uTPuXvuD4
-----END CERTIFICATE-----
Generated at Fri May 15 15:28:11 2026 by rpki-client