Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/16blcDrxWXXcFYSIIriDLlWHwvM.roa
File: 16blcDrxWXXcFYSIIriDLlWHwvM.roa (raw, json)
Hash identifier: TB6Vt7favnjwSE7Js7ZHLijmNl209kYiUYzxe4O5JZ0=
Subject key identifier: D7:A6:E5:70:3A:F1:59:75:DC:15:84:88:22:B8:83:2E:55:87:C2:F3
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019F55A5990E2EAAACB2B1C6F1A2C558EE3D
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/16blcDrxWXXcFYSIIriDLlWHwvM.roa
Signing time: Sun 12 Jul 2026 09:25:43 +0000
ROA not before: Sun 12 Jul 2026 09:25:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48539
IP address blocks: 89.251.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:55:a5:99:0e:2e:aa:ac:b2:b1:c6:f1:a2:c5:58:ee:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jul 12 09:25:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7a6e5703af15975dc15848822b8832e5587c2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:81:52:57:33:2a:16:74:36:1b:f6:06:85:4d:
af:ec:bd:f7:67:7b:5a:05:6b:8d:7d:9e:ee:6c:e9:
49:a2:63:3c:97:11:d6:51:42:d6:50:6f:e7:66:a7:
18:ed:c8:59:db:29:7f:d4:67:32:d2:bc:db:42:b8:
c3:ec:2f:55:9f:1b:15:c9:f0:7b:d4:7e:7f:04:65:
3a:d6:28:3b:0b:93:be:df:c4:d8:2e:d8:44:2f:c1:
9e:ac:a7:8a:3d:4d:a5:47:00:bc:5e:7b:95:be:28:
15:be:14:f4:0e:70:de:b2:cf:99:f8:1c:83:cd:32:
bc:5f:93:8b:21:6a:f0:bd:0c:42:0c:b4:55:ba:1b:
cb:2f:51:31:00:ac:10:f5:12:f5:30:fa:e1:71:6f:
8d:2a:35:de:74:a9:10:17:cf:be:2a:e8:d1:61:00:
50:38:04:2a:c6:70:ea:37:94:a9:4b:9f:3a:50:a7:
31:05:99:7c:a7:40:37:27:8f:26:86:58:b2:cd:32:
ba:bb:87:fd:8a:ee:42:c5:c9:94:a2:df:e7:a7:b2:
03:a2:f1:01:85:d1:82:ab:c5:34:1d:85:19:a6:08:
db:91:3e:16:15:43:fd:df:e2:1f:d9:75:3e:21:9a:
5b:30:5b:7c:d6:e7:c1:ee:1b:5d:47:7f:d3:50:6d:
be:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A6:E5:70:3A:F1:59:75:DC:15:84:88:22:B8:83:2E:55:87:C2:F3
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/16blcDrxWXXcFYSIIriDLlWHwvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.31.0/24
Signature Algorithm: sha256WithRSAEncryption
37:92:47:1a:7d:b1:eb:82:32:3d:80:de:c1:fa:5c:13:9e:5c:
08:04:e0:be:fe:56:ea:fb:fc:c3:84:2f:a1:28:09:4b:a8:a7:
1c:6e:b6:c7:0b:67:60:9b:47:e4:f0:1e:75:58:ac:18:a7:eb:
9c:47:e6:2d:2a:2a:00:96:92:b2:6e:ef:0b:b0:f3:4c:fd:16:
1d:db:36:d5:1e:62:be:43:75:92:0d:3f:c4:06:58:aa:3b:42:
12:cc:f1:d3:bc:a0:cc:61:b9:1b:68:ca:1a:58:eb:1e:8d:58:
47:46:e5:43:1b:7d:51:47:2b:d7:8a:de:2b:5f:c1:dc:c9:47:
ab:eb:83:1b:a9:85:60:52:3d:b4:ca:c8:2c:e8:cf:c8:11:17:
98:3d:e0:92:16:52:49:94:84:01:94:44:28:e7:d9:e8:8a:0b:
1b:1d:06:9f:11:eb:cb:09:2f:df:bf:03:c9:f5:9a:b0:25:f7:
68:81:d1:b4:8c:1c:62:d8:43:fe:12:ca:ef:09:47:5c:97:41:
d3:0d:dd:9d:b4:4c:6f:07:d7:11:ff:d2:b5:41:42:d5:41:f5:
ee:90:5e:19:57:fb:d4:84:07:83:2c:59:cb:0a:40:cc:8b:f2:
41:27:5f:1e:d5:c4:d2:a5:ac:d7:3b:e3:48:32:b6:73:98:68:
2e:55:fb:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9VpZkOLqqssrHG8aLFWO49MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjYwNzEyMDkyNTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2E2ZTU3MDNhZjE1OTc1ZGMxNTg0ODgyMmI4ODMyZTU1ODdjMmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoFSVzMqFnQ2G/YGhU2v7L33Z3ta
BWuNfZ7ubOlJomM8lxHWUULWUG/nZqcY7chZ2yl/1Gcy0rzbQrjD7C9VnxsVyfB7
1H5/BGU61ig7C5O+38TYLthEL8GerKeKPU2lRwC8XnuVvigVvhT0DnDess+Z+ByD
zTK8X5OLIWrwvQxCDLRVuhvLL1ExAKwQ9RL1MPrhcW+NKjXedKkQF8++KujRYQBQ
OAQqxnDqN5SpS586UKcxBZl8p0A3J48mhliyzTK6u4f9iu5CxcmUot/np7IDovEB
hdGCq8U0HYUZpgjbkT4WFUP93+If2XU+IZpbMFt81ufB7htdR3/TUG2+cwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNem5XA68Vl13BWEiCK4gy5Vh8LzMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvMTZibGNEcnhXWFhjRllTSUlyaURMbFdId3ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfsfMA0G
CSqGSIb3DQEBCwUAA4IBAQA3kkcafbHrgjI9gN7B+lwTnlwIBOC+/lbq+/zDhC+h
KAlLqKccbrbHC2dgm0fk8B51WKwYp+ucR+YtKioAlpKybu8LsPNM/RYd2zbVHmK+
Q3WSDT/EBliqO0ISzPHTvKDMYbkbaMoaWOsejVhHRuVDG31RRyvXit4rX8HcyUer
64MbqYVgUj20ysgs6M/IEReYPeCSFlJJlIQBlEQo59noigsbHQafEevLCS/fvwPJ
9ZqwJfdogdG0jBxi2EP+EsrvCUdcl0HTDd2dtExvB9cR/9K1QULVQfXukF4ZV/vU
hAeDLFnLCkDMi/JBJ18e1cTSpazXO+NIMrZzmGguVfvF
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:49:51 2026 by rpki-client