Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/k1G-ykD0OAkoPUX0XDL8yDHCwio.roa
File: k1G-ykD0OAkoPUX0XDL8yDHCwio.roa (raw, json)
Hash identifier: iX3GG/ciraWGUSr7DYcxb8VboOS5RkGHRmAmAaiWqWk=
Subject key identifier: 93:51:BE:CA:40:F4:38:09:28:3D:45:F4:5C:32:FC:C8:31:C2:C2:2A
Certificate issuer: /CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb
Certificate serial: 01A1449234864BE07ED35065F0D5FC464567
Authority key identifier: 7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/k1G-ykD0OAkoPUX0XDL8yDHCwio.roa
Signing time: Fri 16 Oct 2026 11:56:34 +0000
ROA not before: Fri 16 Oct 2026 11:56:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35197
IP address blocks: 185.177.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:92:34:86:4b:e0:7e:d3:50:65:f0:d5:fc:46:45:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb
Validity
Not Before: Oct 16 11:56:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9351beca40f43809283d45f45c32fcc831c2c22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:40:6d:8f:ba:73:cc:ed:d2:e3:ad:51:6f:5c:
3f:22:c2:fd:74:e4:94:32:01:7c:75:22:fc:cf:5a:
82:56:aa:e5:d2:e6:72:90:12:ab:b7:bb:48:2b:fd:
ab:19:8b:29:02:0d:46:b2:fc:a1:af:79:64:5e:9b:
b7:cb:3b:4e:0e:56:fe:87:4e:70:72:57:c7:fb:e7:
0f:41:c4:1a:ef:c2:6e:a4:53:ec:1e:35:ec:0b:ae:
73:a1:3c:a0:5c:9b:0a:89:9c:c0:12:e8:81:d6:35:
1a:9d:94:03:a2:65:98:f9:c6:05:cd:b2:1c:75:6b:
9a:59:01:c4:07:df:ae:ee:b1:87:80:89:99:2d:79:
c8:ac:30:32:1e:08:e3:35:78:6e:e1:92:a0:57:27:
26:09:3f:ab:cf:0e:00:f6:e8:48:f7:86:7b:27:88:
58:e9:84:60:93:db:82:b7:3d:63:80:e7:0e:77:27:
1a:f2:c1:2e:60:68:6b:57:e7:32:1c:dc:66:d5:7f:
01:90:75:b7:23:58:e6:12:fa:63:fe:ee:84:ab:0c:
3f:b1:98:10:42:fc:ac:0e:7e:ed:2d:e7:f2:39:30:
17:e3:df:8d:a5:2c:67:e4:37:16:90:d9:ef:49:47:
d4:8a:7b:f8:c3:c7:05:01:13:bd:e8:4e:a2:6f:89:
c2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:51:BE:CA:40:F4:38:09:28:3D:45:F4:5C:32:FC:C8:31:C2:C2:2A
X509v3 Authority Key Identifier:
keyid:7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/k1G-ykD0OAkoPUX0XDL8yDHCwio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.211.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:04:f2:7e:4d:60:99:7c:d7:16:65:0e:11:3b:46:f0:dd:00:
07:c0:d8:18:8f:23:a3:66:64:76:5c:8b:5d:36:45:7c:85:cb:
f7:b6:61:46:7c:c5:66:67:3a:33:fd:df:f7:19:94:96:90:00:
7c:69:8e:93:bb:2e:e5:5b:18:56:51:b3:d0:b8:7c:35:2a:57:
f3:51:44:33:d6:7c:70:95:37:95:18:92:74:43:52:55:bb:14:
a6:6a:30:84:82:66:19:42:a6:79:e7:0b:7f:8b:bc:bf:fb:87:
b1:51:79:26:4b:07:a6:93:04:7c:fa:1b:c6:91:b0:04:2f:1b:
70:0e:e7:4d:97:e9:95:e4:cc:09:ef:f2:70:91:63:38:46:56:
7b:5f:5f:f3:6a:6c:52:df:81:4e:92:f3:49:f7:35:58:e8:b3:
74:28:3e:47:fd:ec:ab:fc:1b:0b:5a:9b:18:0a:ad:24:33:04:
95:06:ee:90:22:85:b4:97:72:cf:81:77:9d:f5:19:66:7a:4d:
f9:84:3b:13:f2:e3:7f:fd:79:12:42:06:c9:6a:36:fc:d5:2f:
07:a7:a6:93:d4:c0:de:d8:1d:26:73:19:e1:9b:e2:dc:71:64:
51:9d:56:1a:fc:90:82:a5:87:e9:1a:ae:44:a5:d0:0e:e7:db:
67:d9:bc:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFEkjSGS+B+01Bl8NX8RkVnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMjk3MzQ3YTQwZDNiZGY1Nzg3Y2M3NTNhYzI0MDJkMDgy
NGJmY2IwHhcNMjYxMDE2MTE1NjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzUxYmVjYTQwZjQzODA5MjgzZDQ1ZjQ1YzMyZmNjODMxYzJjMjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkBtj7pzzO3S461Rb1w/IsL9dOSU
MgF8dSL8z1qCVqrl0uZykBKrt7tIK/2rGYspAg1Gsvyhr3lkXpu3yztODlb+h05w
clfH++cPQcQa78JupFPsHjXsC65zoTygXJsKiZzAEuiB1jUanZQDomWY+cYFzbIc
dWuaWQHEB9+u7rGHgImZLXnIrDAyHgjjNXhu4ZKgVycmCT+rzw4A9uhI94Z7J4hY
6YRgk9uCtz1jgOcOdyca8sEuYGhrV+cyHNxm1X8BkHW3I1jmEvpj/u6Eqww/sZgQ
QvysDn7tLefyOTAX49+NpSxn5DcWkNnvSUfUinv4w8cFARO96E6ib4nCAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJNRvspA9DgJKD1F9Fwy/MgxwsIqMB8GA1UdIwQY
MBaAFHopc0ekDTvfV4fMdTrCQC0IJL/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWlselI2UU5POTlYaDh4MU9zSkFMUWdrdjhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jMjAwYjQtOTQ4MS00ZTY3LWFlMTQt
ZjhiNDM5ZDA2NjQ1LzEvazFHLXlrRDBPQWtvUFVYMFhETDh5REhDd2lvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9jMjAwYjQtOTQ4MS00ZTY3LWFlMTQtZjhiNDM5ZDA2NjQ1
LzEvZWlselI2UU5POTlYaDh4MU9zSkFMUWdrdjhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubHTMA0G
CSqGSIb3DQEBCwUAA4IBAQC3BPJ+TWCZfNcWZQ4RO0bw3QAHwNgYjyOjZmR2XItd
NkV8hcv3tmFGfMVmZzoz/d/3GZSWkAB8aY6Tuy7lWxhWUbPQuHw1KlfzUUQz1nxw
lTeVGJJ0Q1JVuxSmajCEgmYZQqZ55wt/i7y/+4exUXkmSwemkwR8+hvGkbAELxtw
DudNl+mV5MwJ7/JwkWM4RlZ7X1/zamxS34FOkvNJ9zVY6LN0KD5H/eyr/BsLWpsY
Cq0kMwSVBu6QIoW0l3LPgXed9Rlmek35hDsT8uN//XkSQgbJajb81S8Hp6aT1MDe
2B0mcxnhm+LccWRRnVYa/JCCpYfpGq5EpdAO59tn2bz7
-----END CERTIFICATE-----
Generated at Wed Oct 28 03:12:47 2026 by rpki-client