Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/1-oyfhNLyYue13tRFCKo0IPxmM24.roa
File: 1-oyfhNLyYue13tRFCKo0IPxmM24.roa (raw, json)
Hash identifier: oPm09IIbFaa5Ai2vo1N5k2H9XoBpkLq4SkDxgfWP1PU=
Subject key identifier: FA:8C:9F:84:D2:F2:62:E7:B5:DE:D4:45:08:AA:34:20:FC:66:33:6E
Certificate issuer: /CN=1a9bd9c6c128ccd943f7f7722922c66f66b4edd5
Certificate serial: 019ECF5F0D6C12301E8497D84A3F2B7FEB00
Authority key identifier: 1A:9B:D9:C6:C1:28:CC:D9:43:F7:F7:72:29:22:C6:6F:66:B4:ED:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpvZxsEozNlD9_dyKSLGb2a07dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/1-oyfhNLyYue13tRFCKo0IPxmM24.roa
Signing time: Tue 16 Jun 2026 07:39:33 +0000
ROA not before: Tue 16 Jun 2026 07:39:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 195.253.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpvZxsEozNlD9_dyKSLGb2a07dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:5f:0d:6c:12:30:1e:84:97:d8:4a:3f:2b:7f:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a9bd9c6c128ccd943f7f7722922c66f66b4edd5
Validity
Not Before: Jun 16 07:39:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa8c9f84d2f262e7b5ded44508aa3420fc66336e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b6:bb:4f:ba:5c:25:68:c5:c3:a9:ac:df:b1:
84:07:35:c6:4b:a4:6c:cd:33:5d:db:f2:33:1b:3e:
2a:1b:4c:26:31:f1:f1:01:3e:ec:c8:68:15:01:30:
ab:10:94:e5:23:4e:37:e9:8b:52:43:ab:00:33:d4:
db:67:99:16:04:10:85:91:59:7d:e4:59:82:18:35:
db:16:b2:df:6c:da:bf:ea:56:f3:2e:61:7f:29:bd:
2e:69:3f:bc:04:f0:67:b6:aa:dc:5b:1b:00:cc:ed:
e6:16:f1:ce:09:3e:1e:68:3f:0b:de:a5:02:2f:d5:
12:ae:29:bd:ae:9e:ee:9c:34:1c:c6:a2:6a:e7:2b:
9b:d0:34:7a:51:4a:be:9d:e9:36:f7:33:d9:8c:90:
c0:88:98:22:12:3c:81:6c:e5:4b:27:f1:f7:e8:0a:
e0:d1:58:00:a3:5d:58:01:3b:aa:f1:1e:bd:6b:d3:
0b:1a:6e:f0:07:e2:0f:c5:77:54:69:ed:aa:65:8d:
9f:e0:21:a9:3e:0e:2b:6f:00:94:a1:8d:90:0c:1a:
7c:93:07:15:e0:35:4f:e7:16:36:d8:02:b0:5b:e1:
ae:0b:54:7b:1f:3a:26:e9:af:9e:2a:1b:18:e2:91:
3e:7f:0d:e1:cf:92:8c:f7:4b:03:89:bb:78:a1:8d:
d8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8C:9F:84:D2:F2:62:E7:B5:DE:D4:45:08:AA:34:20:FC:66:33:6E
X509v3 Authority Key Identifier:
keyid:1A:9B:D9:C6:C1:28:CC:D9:43:F7:F7:72:29:22:C6:6F:66:B4:ED:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpvZxsEozNlD9_dyKSLGb2a07dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/1-oyfhNLyYue13tRFCKo0IPxmM24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b7b3f5-5c0a-49f8-90db-c9670b2da320/1/GpvZxsEozNlD9_dyKSLGb2a07dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.253.240.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:97:13:c7:8d:7f:57:50:ec:f5:dc:6b:7f:8c:fb:86:3f:1e:
21:19:fb:5d:a5:ed:40:c0:49:0c:7d:fc:c5:86:b9:a3:a7:fc:
c7:2c:32:7c:28:07:07:08:0f:6b:ee:ad:56:0e:8b:4e:65:57:
cf:d9:14:e9:23:ef:2c:a8:b6:88:d2:a2:91:a9:05:9a:f5:3b:
e8:aa:c4:2b:fa:66:60:6b:a2:3c:34:69:b7:32:df:d1:d8:4a:
7d:36:fe:e9:f6:8a:d0:43:5f:e8:30:81:26:2d:32:bc:3f:d5:
26:64:3a:d0:9c:20:a7:cd:5d:5b:26:19:97:04:00:8f:8c:5e:
6a:23:e9:3e:98:41:56:d4:b6:f4:3e:74:ac:5a:b3:64:1d:b3:
d7:08:cc:9c:40:b1:88:75:ae:d7:9b:bd:0d:26:9f:d3:72:10:
26:b4:8b:13:dd:81:bf:35:13:63:ef:ea:b2:d1:aa:68:01:6f:
50:37:75:36:ed:9e:74:df:34:c2:b1:75:97:af:81:97:ba:3d:
0b:8d:aa:a0:8c:97:e3:f9:8f:fc:08:61:15:09:a5:6c:62:42:
84:ff:ba:bb:b7:e8:44:74:01:52:02:86:d4:62:52:b4:44:b9:
a7:86:98:d4:0c:ba:1b:13:9b:45:00:7c:24:94:1a:7f:99:98:
a9:bf:72:3c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ7PXw1sEjAehJfYSj8rf+sAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhOWJkOWM2YzEyOGNjZDk0M2Y3Zjc3MjI5MjJjNjZmNjZi
NGVkZDUwHhcNMjYwNjE2MDczOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYThjOWY4NGQyZjI2MmU3YjVkZWQ0NDUwOGFhMzQyMGZjNjYzMzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxba7T7pcJWjFw6ms37GEBzXGS6Rs
zTNd2/IzGz4qG0wmMfHxAT7syGgVATCrEJTlI0436YtSQ6sAM9TbZ5kWBBCFkVl9
5FmCGDXbFrLfbNq/6lbzLmF/Kb0uaT+8BPBntqrcWxsAzO3mFvHOCT4eaD8L3qUC
L9USrim9rp7unDQcxqJq5yub0DR6UUq+nek29zPZjJDAiJgiEjyBbOVLJ/H36Arg
0VgAo11YATuq8R69a9MLGm7wB+IPxXdUae2qZY2f4CGpPg4rbwCUoY2QDBp8kwcV
4DVP5xY22AKwW+GuC1R7Hzom6a+eKhsY4pE+fw3hz5KM90sDibt4oY3YYwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPqMn4TS8mLntd7URQiqNCD8ZjNuMB8GA1UdIwQY
MBaAFBqb2cbBKMzZQ/f3cikixm9mtO3VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3B2WnhzRW96TmxEOV9keUtTTEdiMmEwN2RVLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iN2IzZjUtNWMwYS00OWY4LTkwZGIt
Yzk2NzBiMmRhMzIwLzEvMS1veWZoTkx5WXVlMTN0UkZDS28wSVB4bU0yNC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTgvYjdiM2Y1LTVjMGEtNDlmOC05MGRiLWM5NjcwYjJkYTMy
MC8xL0dwdlp4c0Vvek5sRDlfZHlLU0xHYjJhMDdkVS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMP98DAN
BgkqhkiG9w0BAQsFAAOCAQEAmpcTx41/V1Ds9dxrf4z7hj8eIRn7XaXtQMBJDH38
xYa5o6f8xywyfCgHBwgPa+6tVg6LTmVXz9kU6SPvLKi2iNKikakFmvU76KrEK/pm
YGuiPDRptzLf0dhKfTb+6faK0ENf6DCBJi0yvD/VJmQ60Jwgp81dWyYZlwQAj4xe
aiPpPphBVtS29D50rFqzZB2z1wjMnECxiHWu15u9DSaf03IQJrSLE92BvzUTY+/q
stGqaAFvUDd1Nu2edN80wrF1l6+Bl7o9C42qoIyX4/mP/AhhFQmlbGJChP+6u7fo
RHQBUgKG1GJStES5p4aY1Ay6GxObRQB8JJQaf5mYqb9yPA==
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:52 2026 by rpki-client