Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_hdVQ5oaqBeevQgE5JyfGXMrQmw.roa
File: _hdVQ5oaqBeevQgE5JyfGXMrQmw.roa (raw, json)
Hash identifier: rJthp3zbyf/8DZJczdnD+NgXLH17XAeJsqjuRGzzgNE=
Subject key identifier: FE:17:55:43:9A:1A:A8:17:9E:BD:08:04:E4:9C:9F:19:73:2B:42:6C
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019D76D689750574EB1DF6D3D0683676A979
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_hdVQ5oaqBeevQgE5JyfGXMrQmw.roa
Signing time: Fri 10 Apr 2026 10:01:04 +0000
ROA not before: Fri 10 Apr 2026 10:01:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 195.211.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:76:d6:89:75:05:74:eb:1d:f6:d3:d0:68:36:76:a9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 10 10:01:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe1755439a1aa8179ebd0804e49c9f19732b426c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:06:85:33:9d:8f:4f:55:46:7a:be:c3:3a:d6:
1f:53:9f:8f:bc:85:f1:09:a8:15:4b:ba:37:bc:b7:
99:cf:80:bc:13:1d:89:15:e8:35:12:fb:21:7e:10:
cf:1d:cd:c1:e1:23:57:c9:38:22:91:d6:7f:c7:cb:
0e:bb:83:91:15:52:3f:4a:4c:13:18:b8:fe:39:99:
3a:22:42:a2:1f:b8:99:79:23:c5:16:81:1d:61:5e:
a2:d8:36:fe:36:13:ef:ce:44:cd:b8:af:84:5c:64:
a5:c7:e4:cc:37:b1:12:0e:80:67:64:64:b5:ef:ca:
a8:45:57:dc:27:b6:ed:77:98:e7:e8:09:74:ca:ba:
25:eb:6d:d0:5d:d9:49:f8:85:9b:f6:48:5c:59:24:
02:7f:19:54:44:36:16:de:d8:1e:e3:1b:83:60:fc:
c5:ff:da:96:d3:24:ca:88:67:69:60:d4:08:8f:58:
c9:13:e3:ed:2d:59:0b:c6:ad:fa:e3:3e:e1:f2:06:
18:de:ca:41:88:de:16:d9:1a:ab:69:d6:b7:ad:6e:
9c:19:37:c2:c6:0b:39:03:94:e5:af:55:ae:bc:9f:
51:ce:07:90:cf:2b:16:b2:12:09:46:37:40:47:67:
93:c5:c4:75:3a:02:78:04:d4:ce:8b:f6:f6:d7:dd:
8e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:17:55:43:9A:1A:A8:17:9E:BD:08:04:E4:9C:9F:19:73:2B:42:6C
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_hdVQ5oaqBeevQgE5JyfGXMrQmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.190.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:d7:d1:4b:37:07:21:0e:4b:52:99:90:81:73:39:13:1c:27:
fc:aa:29:5f:94:3f:26:8a:47:47:fc:e6:88:44:e2:f1:26:5e:
76:ea:67:65:6b:d6:5c:8a:6c:d6:05:e1:d6:49:24:c1:b1:0f:
f2:f2:06:df:6c:5d:c5:20:0b:77:e0:44:e1:6d:40:89:d1:e3:
23:91:f9:c7:42:3c:dc:bb:9d:68:b4:c4:1c:98:be:67:d7:9d:
da:4e:0a:d9:c5:f6:59:8c:75:72:60:8a:86:cf:6c:27:22:03:
0e:17:fd:2d:e6:cd:d1:bc:7b:35:70:6e:74:d9:8b:3e:53:bd:
66:ff:f2:f7:2d:bb:34:f3:87:8e:8e:00:ab:94:dd:74:44:0b:
c0:e3:61:9d:c1:91:7b:89:d1:b8:f6:90:1a:bd:03:6e:8b:2e:
1a:66:55:20:48:25:9f:0a:47:cc:ea:ca:46:56:fe:08:36:0c:
87:dd:b4:4c:de:ca:37:59:d3:f9:0c:bd:c7:1c:3d:e9:1b:12:
8b:fc:05:58:0f:24:5a:ec:9c:80:6d:a8:76:21:c5:b3:6c:47:
71:81:a4:13:71:5b:cb:f9:ed:3c:af:a8:3a:24:59:5d:87:9d:
e7:c5:fa:83:2e:10:da:50:a4:2f:6f:03:61:14:35:b5:7a:e4:
18:dd:f3:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ121ol1BXTrHfbT0Gg2dql5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjYwNDEwMTAwMTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTE3NTU0MzlhMWFhODE3OWViZDA4MDRlNDljOWYxOTczMmI0MjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gaFM52PT1VGer7DOtYfU5+PvIXx
CagVS7o3vLeZz4C8Ex2JFeg1EvshfhDPHc3B4SNXyTgikdZ/x8sOu4ORFVI/SkwT
GLj+OZk6IkKiH7iZeSPFFoEdYV6i2Db+NhPvzkTNuK+EXGSlx+TMN7ESDoBnZGS1
78qoRVfcJ7btd5jn6Al0yrol623QXdlJ+IWb9khcWSQCfxlURDYW3tge4xuDYPzF
/9qW0yTKiGdpYNQIj1jJE+PtLVkLxq364z7h8gYY3spBiN4W2Rqrada3rW6cGTfC
xgs5A5Tlr1WuvJ9RzgeQzysWshIJRjdAR2eTxcR1OgJ4BNTOi/b2192OtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP4XVUOaGqgXnr0IBOScnxlzK0JsMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvX2hkVlE1b2FxQmVldlFnRTVKeWZHWE1yUW13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9O+MA0G
CSqGSIb3DQEBCwUAA4IBAQA/19FLNwchDktSmZCBczkTHCf8qilflD8mikdH/OaI
ROLxJl526mdla9ZcimzWBeHWSSTBsQ/y8gbfbF3FIAt34EThbUCJ0eMjkfnHQjzc
u51otMQcmL5n153aTgrZxfZZjHVyYIqGz2wnIgMOF/0t5s3RvHs1cG502Ys+U71m
//L3Lbs084eOjgCrlN10RAvA42GdwZF7idG49pAavQNuiy4aZlUgSCWfCkfM6spG
Vv4INgyH3bRM3so3WdP5DL3HHD3pGxKL/AVYDyRa7JyAbah2IcWzbEdxgaQTcVvL
+e08r6g6JFldh53nxfqDLhDaUKQvbwNhFDW1euQY3fM4
-----END CERTIFICATE-----
Generated at Fri Apr 10 15:34:17 2026 by rpki-client