Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/kHcfHQ_Q7qYFE1i5oI94BxcWKSs.roa
File: kHcfHQ_Q7qYFE1i5oI94BxcWKSs.roa (raw, json)
Hash identifier: IqrgWq3K1h3GQVzAuQLHwLlEf6MEibclzogL4CwmRgw=
Subject key identifier: 90:77:1F:1D:0F:D0:EE:A6:05:13:58:B9:A0:8F:78:07:17:16:29:2B
Certificate issuer: /CN=9ba94bc14937bb0b3632374355a446724104a981
Certificate serial: 019FBD6C8CAFD8B212F540E6C73E97C71B60
Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/kHcfHQ_Q7qYFE1i5oI94BxcWKSs.roa
Signing time: Sat 01 Aug 2026 13:03:55 +0000
ROA not before: Sat 01 Aug 2026 13:03:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 185.59.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bd:6c:8c:af:d8:b2:12:f5:40:e6:c7:3e:97:c7:1b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981
Validity
Not Before: Aug 1 13:03:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90771f1d0fd0eea6051358b9a08f78071716292b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:36:54:4a:e5:fc:ef:56:a8:ad:b0:28:62:
5b:73:73:c2:ed:bb:65:a9:04:06:5e:39:84:31:19:
ee:c5:3a:7a:06:94:7f:10:82:6c:8c:88:45:a9:6f:
dd:d0:09:8c:bd:11:63:78:c7:88:d9:3e:76:6d:37:
1f:14:e4:4b:a1:70:83:c7:6f:9d:da:ca:68:bd:92:
04:7d:cc:6e:03:b9:3e:a3:70:29:07:15:0b:e7:e5:
14:df:41:b2:31:e6:c5:26:ad:fe:ab:c6:f2:d0:e1:
49:e8:ae:25:fd:8a:1c:f6:3b:66:61:87:28:55:66:
b7:79:3a:57:ec:23:2a:45:14:90:bd:0f:9a:62:b0:
9f:c7:53:30:eb:64:20:77:f3:b4:91:52:c2:40:b9:
2b:90:46:c4:94:59:b5:d2:fa:45:07:91:d2:c7:53:
c8:92:3c:71:93:c1:30:9f:2d:ca:da:f6:28:3c:83:
ac:f8:a9:96:d4:4d:bf:97:7d:12:49:e2:a9:1e:12:
a4:07:4e:58:cb:59:38:15:dd:4d:b7:62:1d:58:10:
af:53:b4:b3:a4:29:04:b2:aa:0b:6d:81:01:38:69:
42:b5:af:ad:48:b0:45:3e:b5:57:6c:4d:53:d8:33:
6c:78:76:98:f2:1d:74:04:d0:c5:eb:3d:9c:c1:d1:
78:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:77:1F:1D:0F:D0:EE:A6:05:13:58:B9:A0:8F:78:07:17:16:29:2B
X509v3 Authority Key Identifier:
keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/kHcfHQ_Q7qYFE1i5oI94BxcWKSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.59.136.0/24
Signature Algorithm: sha256WithRSAEncryption
75:47:82:6f:54:a8:20:87:32:31:01:b3:43:d4:36:32:fa:0a:
33:da:f9:53:fe:37:b9:1e:f7:0c:52:e2:52:23:db:8f:78:6d:
84:e0:fe:a7:79:37:41:05:4c:41:69:6f:08:01:18:50:65:9d:
38:f3:b1:db:c7:d3:ce:a9:d8:c3:36:1e:5b:7d:54:9a:a8:b9:
4c:61:d8:87:66:40:79:72:37:dd:46:d8:a5:76:be:dd:5f:a6:
06:4e:a4:54:a0:30:22:43:0e:63:2c:bb:46:d6:b1:67:7e:c5:
7d:1d:a8:a2:cc:bf:98:65:33:b4:24:c2:45:30:3d:6f:53:c1:
3d:0f:26:0f:c2:da:fc:4b:71:36:77:65:0a:53:10:02:e7:34:
5b:c2:ac:57:a7:8c:ef:bb:2e:c1:1e:bc:4e:5f:ea:65:97:e6:
d2:73:f0:79:b7:1a:18:16:ca:a5:01:e8:69:79:74:28:e5:7d:
75:02:ac:ea:99:f9:6d:70:98:a0:c5:08:a7:d1:d2:a7:b0:49:
41:df:af:bf:34:a3:fa:71:39:2b:b9:7e:ad:09:9c:49:1e:53:
49:c6:24:fd:dd:6b:6b:86:e2:b5:c0:ef:1b:5a:80:68:9b:21:
2e:32:78:7f:42:62:60:57:23:fb:fa:a1:fd:40:66:2e:36:ca:
c6:29:28:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+9bIyv2LIS9UDmxz6XxxtgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYTk0YmMxNDkzN2JiMGIzNjMyMzc0MzU1YTQ0NjcyNDEw
NGE5ODEwHhcNMjYwODAxMTMwMzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDc3MWYxZDBmZDBlZWE2MDUxMzU4YjlhMDhmNzgwNzE3MTYyOTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQU2VErl/O9WqK2wKGJbc3PC7btl
qQQGXjmEMRnuxTp6BpR/EIJsjIhFqW/d0AmMvRFjeMeI2T52bTcfFORLoXCDx2+d
2spovZIEfcxuA7k+o3ApBxUL5+UU30GyMebFJq3+q8by0OFJ6K4l/Yoc9jtmYYco
VWa3eTpX7CMqRRSQvQ+aYrCfx1Mw62Qgd/O0kVLCQLkrkEbElFm10vpFB5HSx1PI
kjxxk8Ewny3K2vYoPIOs+KmW1E2/l30SSeKpHhKkB05Yy1k4Fd1Nt2IdWBCvU7Sz
pCkEsqoLbYEBOGlCta+tSLBFPrVXbE1T2DNseHaY8h10BNDF6z2cwdF4UwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJB3Hx0P0O6mBRNYuaCPeAcXFikrMB8GA1UdIwQY
MBaAFJupS8FJN7sLNjI3Q1WkRnJBBKmBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jYzc4NDMtZDEzNi00ZmZiLThiOTkt
ODM2YzMxMmFjOGMyLzEva0hjZkhRX1E3cVlGRTFpNW9JOTRCeGNXS1NzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jYzc4NDMtZDEzNi00ZmZiLThiOTktODM2YzMxMmFjOGMy
LzEvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTuIMA0G
CSqGSIb3DQEBCwUAA4IBAQB1R4JvVKgghzIxAbND1DYy+goz2vlT/je5HvcMUuJS
I9uPeG2E4P6neTdBBUxBaW8IARhQZZ0487Hbx9POqdjDNh5bfVSaqLlMYdiHZkB5
cjfdRtildr7dX6YGTqRUoDAiQw5jLLtG1rFnfsV9HaiizL+YZTO0JMJFMD1vU8E9
DyYPwtr8S3E2d2UKUxAC5zRbwqxXp4zvuy7BHrxOX+pll+bSc/B5txoYFsqlAehp
eXQo5X11AqzqmfltcJigxQin0dKnsElB36+/NKP6cTkruX6tCZxJHlNJxiT93Wtr
huK1wO8bWoBomyEuMnh/QmJgVyP7+qH9QGYuNsrGKSjf
-----END CERTIFICATE-----
Generated at Tue Aug 4 07:39:10 2026 by rpki-client