Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4cb05d-bbdf-436b-b3c1-2931f27121d7/1/2OlGNlouBfjuJizzg6yWJebm3Hc.roa
File: 2OlGNlouBfjuJizzg6yWJebm3Hc.roa (raw, json)
Hash identifier: Som2SM2UFo8U+53fTNnseKyejHFjr8g8FEdlzQp5yUM=
Subject key identifier: D8:E9:46:36:5A:2E:05:F8:EE:26:2C:F3:83:AC:96:25:E6:E6:DC:77
Certificate issuer: /CN=6ff50cc1c7d066d4881dbf4de739f51024274d6a
Certificate serial: 019DE26A5BD70203555343E18765207EE172
Authority key identifier: 6F:F5:0C:C1:C7:D0:66:D4:88:1D:BF:4D:E7:39:F5:10:24:27:4D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_UMwcfQZtSIHb9N5zn1ECQnTWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4cb05d-bbdf-436b-b3c1-2931f27121d7/1/2OlGNlouBfjuJizzg6yWJebm3Hc.roa
Signing time: Fri 01 May 2026 07:21:54 +0000
ROA not before: Fri 01 May 2026 07:21:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209754
IP address blocks: 185.50.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4cb05d-bbdf-436b-b3c1-2931f27121d7/1/b_UMwcfQZtSIHb9N5zn1ECQnTWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/4cb05d-bbdf-436b-b3c1-2931f27121d7/1/b_UMwcfQZtSIHb9N5zn1ECQnTWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_UMwcfQZtSIHb9N5zn1ECQnTWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e2:6a:5b:d7:02:03:55:53:43:e1:87:65:20:7e:e1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff50cc1c7d066d4881dbf4de739f51024274d6a
Validity
Not Before: May 1 07:21:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8e946365a2e05f8ee262cf383ac9625e6e6dc77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:92:ca:2a:a3:0e:77:aa:e8:cd:e9:c0:23:7a:
02:ea:4e:e1:61:1c:75:88:2e:0c:b0:10:63:f9:55:
e4:eb:73:67:38:b4:e2:d9:d0:bd:4b:27:12:61:00:
07:49:0e:88:9e:46:5c:21:5d:60:17:ab:ea:54:d6:
6c:1d:14:17:f0:0f:38:23:3b:a4:10:0c:16:d3:98:
e9:0d:30:d8:7b:9b:d0:81:ad:da:14:38:59:dd:84:
5b:b0:a5:d2:13:19:23:35:99:4e:af:c3:5e:1b:a3:
9f:51:07:a9:f9:97:e7:9a:44:d4:62:58:6c:81:5f:
7e:97:1b:fc:45:fd:fc:99:8f:72:72:45:cf:55:f6:
aa:34:5d:8c:1c:5d:41:bd:f7:14:b8:42:6c:93:0d:
df:92:13:3e:a4:d7:21:4b:9f:27:c0:c9:76:67:7c:
16:80:e2:aa:ec:c5:af:4e:dc:2e:b6:e7:47:6f:2d:
70:e1:d4:e8:5b:05:c3:80:58:56:e2:58:89:12:73:
84:99:af:89:b3:05:3b:34:0f:d6:aa:bd:71:4a:e3:
d5:64:0d:90:16:b9:f0:16:5c:94:71:b5:c9:c7:01:
bd:27:8d:8f:b1:2a:36:eb:ba:d2:d9:d1:0d:e3:28:
0d:bd:c8:f0:9f:53:ca:66:bd:58:4e:b2:c9:2e:0a:
e4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E9:46:36:5A:2E:05:F8:EE:26:2C:F3:83:AC:96:25:E6:E6:DC:77
X509v3 Authority Key Identifier:
keyid:6F:F5:0C:C1:C7:D0:66:D4:88:1D:BF:4D:E7:39:F5:10:24:27:4D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_UMwcfQZtSIHb9N5zn1ECQnTWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cb05d-bbdf-436b-b3c1-2931f27121d7/1/2OlGNlouBfjuJizzg6yWJebm3Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cb05d-bbdf-436b-b3c1-2931f27121d7/1/b_UMwcfQZtSIHb9N5zn1ECQnTWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.60.0/22
Signature Algorithm: sha256WithRSAEncryption
94:2f:ca:c8:db:4a:6b:61:26:10:8f:85:9b:e3:87:a4:9d:8f:
26:c4:58:a2:69:b2:64:ea:50:cb:4c:80:ec:fd:60:e4:ad:65:
47:1b:98:54:b8:9b:91:2a:bb:3e:9d:d7:32:53:61:a9:f9:38:
11:c6:1f:f6:81:2b:fc:78:4b:e2:3b:41:d3:a4:91:0a:69:e9:
a8:a1:78:08:4f:e7:4d:e9:f7:68:bd:71:14:a4:34:3a:49:8d:
01:66:eb:c9:51:16:14:98:37:b1:cc:46:5a:a6:2f:22:45:bd:
cc:ea:04:33:08:74:e6:32:ba:0f:1a:cc:ab:ed:38:a3:4f:9d:
a3:16:56:6b:95:7d:df:56:85:33:e4:7e:cb:9c:b0:11:f7:4a:
7b:66:44:4b:f0:87:cc:5a:26:47:87:9c:50:15:1a:45:9c:3b:
9a:6e:53:3f:5c:90:3b:97:fb:d4:15:d3:5b:50:7e:98:31:99:
bd:1c:fd:85:6c:10:03:9f:a3:82:1e:ef:7a:50:59:67:d7:e2:
39:24:39:e2:93:bb:f4:81:4f:60:a6:88:aa:af:57:b0:ac:9b:
53:40:77:2f:da:83:d2:cd:b4:13:e8:c5:59:fd:dd:bb:b9:32:
c6:a0:51:af:0c:cc:c5:7e:dc:41:5d:d3:20:27:9c:88:cd:8c:
a3:f6:5b:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3ialvXAgNVU0Phh2UgfuFyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZjUwY2MxYzdkMDY2ZDQ4ODFkYmY0ZGU3MzlmNTEwMjQy
NzRkNmEwHhcNMjYwNTAxMDcyMTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGU5NDYzNjVhMmUwNWY4ZWUyNjJjZjM4M2FjOTYyNWU2ZTZkYzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5LKKqMOd6rozenAI3oC6k7hYRx1
iC4MsBBj+VXk63NnOLTi2dC9SycSYQAHSQ6InkZcIV1gF6vqVNZsHRQX8A84Izuk
EAwW05jpDTDYe5vQga3aFDhZ3YRbsKXSExkjNZlOr8NeG6OfUQep+ZfnmkTUYlhs
gV9+lxv8Rf38mY9yckXPVfaqNF2MHF1BvfcUuEJskw3fkhM+pNchS58nwMl2Z3wW
gOKq7MWvTtwutudHby1w4dToWwXDgFhW4liJEnOEma+JswU7NA/Wqr1xSuPVZA2Q
FrnwFlyUcbXJxwG9J42PsSo267rS2dEN4ygNvcjwn1PKZr1YTrLJLgrkfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNjpRjZaLgX47iYs84OsliXm5tx3MB8GA1UdIwQY
MBaAFG/1DMHH0GbUiB2/Tec59RAkJ01qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYl9VTXdjZlFadFNJSGI5TjV6bjFFQ1FuVFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80Y2IwNWQtYmJkZi00MzZiLWIzYzEt
MjkzMWYyNzEyMWQ3LzEvMk9sR05sb3VCZmp1Sml6emc2eVdKZWJtM0hjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC80Y2IwNWQtYmJkZi00MzZiLWIzYzEtMjkzMWYyNzEyMWQ3
LzEvYl9VTXdjZlFadFNJSGI5TjV6bjFFQ1FuVFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTI8MA0G
CSqGSIb3DQEBCwUAA4IBAQCUL8rI20prYSYQj4Wb44eknY8mxFiiabJk6lDLTIDs
/WDkrWVHG5hUuJuRKrs+ndcyU2Gp+TgRxh/2gSv8eEviO0HTpJEKaemooXgIT+dN
6fdovXEUpDQ6SY0BZuvJURYUmDexzEZapi8iRb3M6gQzCHTmMroPGsyr7TijT52j
FlZrlX3fVoUz5H7LnLAR90p7ZkRL8IfMWiZHh5xQFRpFnDuablM/XJA7l/vUFdNb
UH6YMZm9HP2FbBADn6OCHu96UFln1+I5JDnik7v0gU9gpoiqr1ewrJtTQHcv2oPS
zbQT6MVZ/d27uTLGoFGvDMzFftxBXdMgJ5yIzYyj9lu0
-----END CERTIFICATE-----
Generated at Wed May 6 13:57:10 2026 by rpki-client