Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/trpSFTYBfP1Vvg7yfH-5OGH9MeQ.roa
File: trpSFTYBfP1Vvg7yfH-5OGH9MeQ.roa (raw, json)
Hash identifier: VU1m0yBvVvk7PN74r9OfMGcifzfFHUwb4uMDuxPUkZA=
Subject key identifier: B6:BA:52:15:36:01:7C:FD:55:BE:0E:F2:7C:7F:B9:38:61:FD:31:E4
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 019F17FADE093837FBCC7FFDCD1CC539C1AC
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/trpSFTYBfP1Vvg7yfH-5OGH9MeQ.roa
Signing time: Tue 30 Jun 2026 10:02:24 +0000
ROA not before: Tue 30 Jun 2026 10:02:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 94.154.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:fa:de:09:38:37:fb:cc:7f:fd:cd:1c:c5:39:c1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Jun 30 10:02:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6ba521536017cfd55be0ef27c7fb93861fd31e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9d:30:aa:e7:bb:3d:50:7d:5c:5c:22:7a:15:
2b:8e:f5:38:ed:95:6b:b2:1e:35:af:e6:44:1e:e5:
ad:bc:29:ae:8f:0f:b7:c1:4e:b9:97:82:38:6d:3b:
01:8f:2d:5a:48:33:67:33:52:96:03:c6:55:21:83:
56:5b:0e:31:68:db:79:25:01:20:29:6f:82:df:e1:
f4:fa:82:9f:dd:8b:99:6e:c8:56:1c:ac:66:d0:6a:
d7:60:72:5b:29:e0:3f:51:32:b5:74:0d:cc:8f:86:
c5:6c:4f:a7:cb:bc:fd:41:e0:d2:e6:6e:3b:e1:9b:
79:96:eb:d0:9d:26:c1:b6:7f:df:f2:57:21:68:56:
99:3c:82:aa:af:4e:85:6c:21:01:0d:f1:8e:60:4a:
48:86:00:ba:09:58:35:d9:49:ad:54:da:70:e0:f4:
2d:2c:f1:19:1f:f2:d1:d3:f9:7a:35:48:f5:b2:c6:
20:f1:0e:cb:36:f4:1a:21:57:0f:14:8d:e8:c2:af:
db:de:82:0d:c1:cb:47:75:99:1c:0d:9d:0c:a7:55:
c1:d4:cc:8e:50:09:4d:31:23:fb:4e:69:ce:d4:10:
36:69:39:26:12:6f:50:25:92:d1:9c:52:58:db:6c:
54:22:ba:4d:cc:76:76:91:5d:db:0f:11:43:a8:93:
72:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BA:52:15:36:01:7C:FD:55:BE:0E:F2:7C:7F:B9:38:61:FD:31:E4
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/trpSFTYBfP1Vvg7yfH-5OGH9MeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0/24
Signature Algorithm: sha256WithRSAEncryption
02:4b:39:9d:b4:51:34:97:f2:ce:a0:cf:70:7a:ec:5d:eb:0d:
01:23:2f:ef:db:bb:a3:6f:bc:e0:5a:e3:24:09:fc:68:c5:51:
0a:7f:74:01:70:81:06:e3:c5:aa:00:a0:b4:c9:b9:54:5a:eb:
50:91:a2:50:71:cd:17:c3:d4:59:60:f9:25:51:8e:a6:ad:e8:
e9:26:c8:d1:43:26:8f:4c:e6:c4:ac:a7:c2:cc:cb:7d:93:35:
60:8e:b3:86:16:e9:86:e7:2e:27:64:00:2c:ad:d9:35:c6:49:
4d:0e:f9:ec:10:d7:bb:74:be:c0:9e:da:da:4a:6b:ba:2c:01:
9b:73:44:ba:f8:9f:cb:eb:ad:64:8f:fc:95:77:a6:3e:fa:cf:
ea:a8:8a:dd:3b:01:eb:b9:16:29:b3:b5:ee:a9:34:a4:d1:f0:
fa:14:7e:b9:8e:9b:27:55:1d:3a:cc:50:2d:c6:a9:81:d9:d5:
1b:88:cc:47:b0:6d:10:41:1d:6f:8c:d6:36:76:8b:18:f9:61:
a5:98:81:d2:69:ff:10:1f:41:90:8c:22:06:80:c2:f9:5e:46:
c4:1f:02:c2:52:30:c9:97:53:00:b9:6e:f8:51:a2:dc:d2:29:
10:c5:1b:d2:29:3c:e2:9e:d1:79:d1:45:ed:4f:8c:40:16:4b:
1c:60:f9:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8X+t4JODf7zH/9zRzFOcGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk
NzExNTUwHhcNMjYwNjMwMTAwMjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmJhNTIxNTM2MDE3Y2ZkNTViZTBlZjI3YzdmYjkzODYxZmQzMWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp0wque7PVB9XFwiehUrjvU47ZVr
sh41r+ZEHuWtvCmujw+3wU65l4I4bTsBjy1aSDNnM1KWA8ZVIYNWWw4xaNt5JQEg
KW+C3+H0+oKf3YuZbshWHKxm0GrXYHJbKeA/UTK1dA3Mj4bFbE+ny7z9QeDS5m47
4Zt5luvQnSbBtn/f8lchaFaZPIKqr06FbCEBDfGOYEpIhgC6CVg12UmtVNpw4PQt
LPEZH/LR0/l6NUj1ssYg8Q7LNvQaIVcPFI3owq/b3oINwctHdZkcDZ0Mp1XB1MyO
UAlNMSP7TmnO1BA2aTkmEm9QJZLRnFJY22xUIrpNzHZ2kV3bDxFDqJNyzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLa6UhU2AXz9Vb4O8nx/uThh/THkMB8GA1UdIwQY
MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt
NjUyNDljYmM1NzNjLzEvdHJwU0ZUWUJmUDFWdmc3eWZILTVPR0g5TWVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj
LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpooMA0G
CSqGSIb3DQEBCwUAA4IBAQACSzmdtFE0l/LOoM9weuxd6w0BIy/v27ujb7zgWuMk
CfxoxVEKf3QBcIEG48WqAKC0yblUWutQkaJQcc0Xw9RZYPklUY6mrejpJsjRQyaP
TObErKfCzMt9kzVgjrOGFumG5y4nZAAsrdk1xklNDvnsENe7dL7AntraSmu6LAGb
c0S6+J/L661kj/yVd6Y++s/qqIrdOwHruRYps7XuqTSk0fD6FH65jpsnVR06zFAt
xqmB2dUbiMxHsG0QQR1vjNY2dosY+WGlmIHSaf8QH0GQjCIGgML5XkbEHwLCUjDJ
l1MAuW74UaLc0ikQxRvSKTzintF50UXtT4xAFkscYPkF
-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:15 2026 by rpki-client