Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/dEbVTN2r1iVU0vlJFVbgSQfZgU4.roa
File: dEbVTN2r1iVU0vlJFVbgSQfZgU4.roa (raw, json)
Hash identifier: oKxpE18UxVFz/NR8SH5U/uN8ItAcXG91uB69vr2729I=
Subject key identifier: 74:46:D5:4C:DD:AB:D6:25:54:D2:F9:49:15:56:E0:49:07:D9:81:4E
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01A0473A7BB08EA40584908AFEB13BA54393
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/dEbVTN2r1iVU0vlJFVbgSQfZgU4.roa
Signing time: Fri 28 Aug 2026 07:16:50 +0000
ROA not before: Fri 28 Aug 2026 07:16:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218851
IP address blocks: 80.96.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:3a:7b:b0:8e:a4:05:84:90:8a:fe:b1:3b:a5:43:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Aug 28 07:16:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7446d54cddabd62554d2f9491556e04907d9814e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:51:bb:53:c4:42:82:25:0d:a6:56:5c:6e:63:
2e:1d:e2:ba:cc:8b:1f:8e:de:c5:18:ee:e9:95:06:
43:da:b2:5b:cd:f2:c4:ce:ca:cd:09:99:19:7c:12:
22:d8:a1:cb:26:8c:10:6f:3d:f9:4d:40:85:3e:e8:
f0:51:e2:3f:b6:61:b2:42:c9:19:42:4e:af:3f:12:
2c:d6:8e:95:5f:ea:94:6a:7f:a5:3c:ba:11:e9:99:
a4:a1:cd:5d:c3:b8:80:35:a7:2b:21:1f:67:21:9b:
e1:a4:12:af:57:fe:4d:5a:df:40:55:4d:f6:c2:79:
0f:8b:2e:f1:25:14:73:83:e4:60:31:3d:f0:60:2c:
d5:34:7e:ca:00:1b:02:92:ec:a4:0d:17:93:a5:47:
34:a3:f2:14:ef:dc:a4:90:96:2c:d3:d2:ae:11:f2:
c8:27:e0:ee:b4:b5:ee:e3:52:82:29:00:5d:3a:1b:
69:bf:d7:83:4f:4c:12:66:12:d3:95:cd:80:52:ca:
69:90:91:74:49:19:b2:8a:13:75:d8:e1:52:21:94:
40:8f:d6:d5:79:0e:ac:35:57:36:08:be:39:85:c4:
8d:56:9c:76:97:e7:90:20:9d:42:1d:45:c0:00:f6:
57:9b:aa:63:f9:f9:4e:3b:ee:e1:c8:7f:44:8c:db:
7b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:46:D5:4C:DD:AB:D6:25:54:D2:F9:49:15:56:E0:49:07:D9:81:4E
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/dEbVTN2r1iVU0vlJFVbgSQfZgU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.57.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:4a:04:14:a6:65:ce:aa:c1:6f:c2:f4:9b:60:11:24:c5:99:
7d:df:2c:f2:48:fd:29:2b:87:b4:3c:49:28:d1:25:fe:7c:e1:
7b:0c:82:7e:a2:e3:9e:fc:26:f6:93:24:cf:da:9c:56:fc:59:
f5:57:a2:ec:f8:9e:db:94:6c:31:45:2a:ba:30:30:54:92:9c:
b0:c1:ef:0e:58:1b:f1:d1:a9:23:bf:22:ea:c1:e6:e3:1c:86:
99:6d:c3:f4:28:e7:07:2f:0f:24:9b:c0:95:2f:4b:81:37:68:
f1:f1:cb:14:96:c1:b6:b4:e0:67:10:18:3e:60:4c:92:ad:92:
f9:14:e8:12:5c:d7:2d:95:77:cb:bb:f8:10:4f:31:b3:5c:93:
20:19:3f:38:00:29:31:c1:6c:11:f1:d2:02:3d:b2:07:5b:ea:
a7:1c:c5:3d:62:e6:24:49:d2:91:66:5e:4a:64:e3:8b:9b:14:
c5:d9:5c:f3:6a:03:35:54:95:7e:0e:51:a2:cb:dd:0b:8c:2f:
c1:f5:f3:cc:c1:e3:c7:6c:3d:29:aa:9a:cc:8f:68:bb:b3:9e:
2f:27:89:ad:ed:c5:f6:b7:ec:37:f8:27:99:83:fb:aa:05:7a:
32:25:de:7f:b5:65:47:6b:e1:82:3e:a0:3e:d7:18:f7:67:4f:
36:22:e0:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBHOnuwjqQFhJCK/rE7pUOTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjYwODI4MDcxNjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDQ2ZDU0Y2RkYWJkNjI1NTRkMmY5NDkxNTU2ZTA0OTA3ZDk4MTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1G7U8RCgiUNplZcbmMuHeK6zIsf
jt7FGO7plQZD2rJbzfLEzsrNCZkZfBIi2KHLJowQbz35TUCFPujwUeI/tmGyQskZ
Qk6vPxIs1o6VX+qUan+lPLoR6Zmkoc1dw7iANacrIR9nIZvhpBKvV/5NWt9AVU32
wnkPiy7xJRRzg+RgMT3wYCzVNH7KABsCkuykDReTpUc0o/IU79ykkJYs09KuEfLI
J+DutLXu41KCKQBdOhtpv9eDT0wSZhLTlc2AUsppkJF0SRmyihN12OFSIZRAj9bV
eQ6sNVc2CL45hcSNVpx2l+eQIJ1CHUXAAPZXm6pj+flOO+7hyH9EjNt7XQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHRG1Uzdq9YlVNL5SRVW4EkH2YFOMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvZEViVlROMnIxaVZVMHZsSkZWYmdTUWZaZ1U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUGA5MA0G
CSqGSIb3DQEBCwUAA4IBAQC3SgQUpmXOqsFvwvSbYBEkxZl93yzySP0pK4e0PEko
0SX+fOF7DIJ+ouOe/Cb2kyTP2pxW/Fn1V6Ls+J7blGwxRSq6MDBUkpywwe8OWBvx
0akjvyLqwebjHIaZbcP0KOcHLw8km8CVL0uBN2jx8csUlsG2tOBnEBg+YEySrZL5
FOgSXNctlXfLu/gQTzGzXJMgGT84ACkxwWwR8dICPbIHW+qnHMU9YuYkSdKRZl5K
ZOOLmxTF2VzzagM1VJV+DlGiy90LjC/B9fPMwePHbD0pqprMj2i7s54vJ4mt7cX2
t+w3+CeZg/uqBXoyJd5/tWVHa+GCPqA+1xj3Z082IuBX
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:13:50 2026 by rpki-client