Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/P-RJvOmpvYO0dFLhiA5cZu2_-80.roa
File: P-RJvOmpvYO0dFLhiA5cZu2_-80.roa (raw, json)
Hash identifier: mofslfkSbsZHnkehkGW2DT11ckBTZLlQswOwkS2bhAg=
Subject key identifier: 3F:E4:49:BC:E9:A9:BD:83:B4:74:52:E1:88:0E:5C:66:ED:BF:FB:CD
Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Certificate serial: 01A019B8F8F25C48422CA4DF06A7321B3754
Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/P-RJvOmpvYO0dFLhiA5cZu2_-80.roa
Signing time: Wed 19 Aug 2026 11:12:27 +0000
ROA not before: Wed 19 Aug 2026 11:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44592
IP address blocks: 176.65.141.0/24 maxlen: 24
176.65.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:b8:f8:f2:5c:48:42:2c:a4:df:06:a7:32:1b:37:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Validity
Not Before: Aug 19 11:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3fe449bce9a9bd83b47452e1880e5c66edbffbcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3f:53:9c:09:f0:2e:37:33:b7:e4:f0:36:9b:
72:ce:6f:e8:58:4f:5e:67:2c:aa:68:55:f3:d2:38:
0d:0a:d5:e2:50:6e:78:99:aa:a4:2a:d8:ca:5c:d1:
0b:4d:89:ac:e8:e0:73:9e:de:3c:0d:b7:87:81:d6:
30:f9:b5:c7:66:f1:f7:5c:3d:39:3d:ed:8d:95:76:
62:2d:2e:b1:89:81:9d:23:8a:df:a4:12:7d:05:be:
2e:3c:95:8e:f4:78:4e:ad:c2:ae:fb:57:f0:2b:6e:
fb:a0:68:c8:8b:9c:b2:9e:c2:92:55:b1:81:63:9b:
86:bd:f5:3e:65:b5:27:5c:f1:0a:3f:9b:1f:5f:30:
e9:20:e5:b4:c1:73:44:19:39:b8:26:b1:18:bd:ec:
b7:87:ba:cf:01:08:9a:8a:ad:9e:8a:eb:b7:37:39:
d9:2c:bb:63:d5:2a:ab:02:fa:18:72:3c:dd:ed:8e:
41:aa:20:0b:89:bb:b8:b2:da:99:e4:5d:26:6f:ed:
f5:e6:96:01:63:a7:f4:86:81:b4:2e:fa:16:3c:6c:
ed:ea:00:57:75:42:88:f2:cc:12:57:81:9c:33:c1:
5c:ea:ed:25:4c:6c:a9:fe:e0:77:0b:31:7f:ca:6a:
9b:d6:a7:7f:c3:d3:93:39:e9:d6:04:06:51:fc:42:
a6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E4:49:BC:E9:A9:BD:83:B4:74:52:E1:88:0E:5C:66:ED:BF:FB:CD
X509v3 Authority Key Identifier:
keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/P-RJvOmpvYO0dFLhiA5cZu2_-80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.65.141.0-176.65.142.255
Signature Algorithm: sha256WithRSAEncryption
23:81:32:30:15:ed:4c:05:39:38:3b:27:4e:f2:4a:0e:be:b4:
1d:6d:33:e8:0a:10:5c:cd:9e:ee:af:ce:ea:dd:77:13:0f:5f:
e5:d7:e2:72:62:b8:35:a0:64:31:5c:61:dc:81:85:84:13:03:
00:38:2b:8e:0c:f4:6c:9b:49:1f:c2:d2:5e:af:28:6e:93:b2:
01:2c:09:ef:80:a7:37:62:92:b3:50:71:5e:d1:45:65:f9:04:
db:77:16:a1:44:44:7d:b2:00:b2:0c:8b:ff:9b:ac:a7:9f:3e:
67:29:89:44:25:26:94:90:35:cd:89:0e:41:b0:f3:66:73:1d:
3a:d0:79:eb:65:b2:91:5c:59:a7:2c:99:c1:8d:c4:d8:6c:b7:
d3:65:ec:fb:a5:55:9c:87:d2:fc:d6:2f:0d:0d:c2:f4:2c:ee:
42:91:4c:e5:72:ed:fe:4d:4d:7a:65:12:9d:85:59:69:d1:4d:
82:05:75:cd:52:63:a9:00:09:78:8c:73:93:ec:cc:a6:6d:e6:
e1:a3:af:66:4a:5f:2c:a4:59:cf:d3:c0:de:23:24:f1:69:58:
d8:4f:0e:43:9f:98:f3:bc:74:1d:b6:a5:85:36:94:dc:f5:58:
92:e9:05:22:2c:f0:50:13:a6:33:67:74:4a:08:c8:e5:b8:0c:
85:e1:5c:7f
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAaAZuPjyXEhCLKTfBqcyGzdUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYTY2ZjNjMGYyNTc3NGU2OTZkMmE0NjcyMzI3N2ViOTYx
MTI4YzMwHhcNMjYwODE5MTExMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmU0NDliY2U5YTliZDgzYjQ3NDUyZTE4ODBlNWM2NmVkYmZmYmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz9TnAnwLjczt+TwNptyzm/oWE9e
ZyyqaFXz0jgNCtXiUG54maqkKtjKXNELTYms6OBznt48DbeHgdYw+bXHZvH3XD05
Pe2NlXZiLS6xiYGdI4rfpBJ9Bb4uPJWO9HhOrcKu+1fwK277oGjIi5yynsKSVbGB
Y5uGvfU+ZbUnXPEKP5sfXzDpIOW0wXNEGTm4JrEYvey3h7rPAQiaiq2eiuu3NznZ
LLtj1SqrAvoYcjzd7Y5BqiALibu4stqZ5F0mb+315pYBY6f0hoG0LvoWPGzt6gBX
dUKI8swSV4GcM8Fc6u0lTGyp/uB3CzF/ymqb1qd/w9OTOenWBAZR/EKmDQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFD/kSbzpqb2DtHRS4YgOXGbtv/vNMB8GA1UdIwQY
MBaAFEymbzwPJXdOaW0qRnIyd+uWESjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUt
MzE5YjBjODc0NDQwLzEvUC1SSnZPbXB2WU8wZEZMaGlBNWNadTJfLTgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUtMzE5YjBjODc0NDQw
LzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACwQY0D
BACwQY4wDQYJKoZIhvcNAQELBQADggEBACOBMjAV7UwFOTg7J07ySg6+tB1tM+gK
EFzNnu6vzurddxMPX+XX4nJiuDWgZDFcYdyBhYQTAwA4K44M9GybSR/C0l6vKG6T
sgEsCe+ApzdikrNQcV7RRWX5BNt3FqFERH2yALIMi/+brKefPmcpiUQlJpSQNc2J
DkGw82ZzHTrQeetlspFcWacsmcGNxNhst9Nl7PulVZyH0vzWLw0NwvQs7kKRTOVy
7f5NTXplEp2FWWnRTYIFdc1SY6kACXiMc5PszKZt5uGjr2ZKXyykWc/TwN4jJPFp
WNhPDkOfmPO8dB22pYU2lNz1WJLpBSIs8FATpjNndEoIyOW4DIXhXH8=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:37 2026 by rpki-client