Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/phKbTl9jfdL9suNl9YTmbf4vDwg.roa
File: phKbTl9jfdL9suNl9YTmbf4vDwg.roa (raw, json)
Hash identifier: 5ZxT0IsatUdiV5ZDYhZaf+6bRly3kDzKrl6zHwbf7cc=
Subject key identifier: A6:12:9B:4E:5F:63:7D:D2:FD:B2:E3:65:F5:84:E6:6D:FE:2F:0F:08
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019EC51ED151579BB068506236E4897DC5F4
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/phKbTl9jfdL9suNl9YTmbf4vDwg.roa
Signing time: Sun 14 Jun 2026 07:53:11 +0000
ROA not before: Sun 14 Jun 2026 07:53:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50049
IP address blocks: 194.61.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c5:1e:d1:51:57:9b:b0:68:50:62:36:e4:89:7d:c5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 14 07:53:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6129b4e5f637dd2fdb2e365f584e66dfe2f0f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:ea:37:62:2e:8c:e8:2e:19:91:f6:34:ed:
46:7b:9e:5a:87:3b:a3:4d:57:87:f6:68:1b:d5:4a:
42:c7:a6:0d:18:83:9c:dc:37:c8:9a:5b:75:d4:3a:
85:de:c1:fc:3b:30:0d:b5:e6:a8:eb:60:bb:98:50:
48:20:3b:b4:16:14:9c:30:30:af:07:72:ee:6b:6e:
2b:f8:b5:42:68:d6:f4:39:b2:8b:22:49:6e:72:ca:
60:c9:14:6c:83:66:99:2d:2b:ea:6c:eb:87:fe:2e:
a4:97:b2:a9:52:c9:2e:f1:98:3b:31:13:63:37:bb:
b6:81:40:bd:51:26:f0:50:1f:81:ab:11:87:f4:cf:
0e:e5:60:5d:c6:19:7c:e5:7e:a7:94:5a:91:ec:27:
98:e7:74:6d:35:2d:dc:ba:f4:62:61:48:28:a4:9b:
0c:e3:d3:75:08:35:76:6a:92:f7:9d:b2:78:18:b4:
1d:da:c7:18:03:88:26:3c:d5:30:25:d3:d6:1c:e0:
54:45:dc:f8:81:23:de:ab:c9:18:ec:08:43:e1:4c:
da:ae:8d:6e:98:89:85:05:d5:43:a4:ac:97:3e:c2:
0a:03:dc:0d:57:ee:71:7c:48:3b:d8:ab:b8:be:55:
b0:78:3a:08:c7:f6:1d:d7:52:ad:75:7d:10:c6:bb:
e0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:12:9B:4E:5F:63:7D:D2:FD:B2:E3:65:F5:84:E6:6D:FE:2F:0F:08
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/phKbTl9jfdL9suNl9YTmbf4vDwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.73.0/24
Signature Algorithm: sha256WithRSAEncryption
34:58:35:8c:cd:d2:b6:a3:82:37:d8:c3:27:be:3c:9b:69:b0:
86:9e:e2:5a:41:8a:be:a9:1f:05:e6:51:21:50:18:b4:c5:03:
92:92:a3:ee:04:0e:16:99:ed:e2:e8:1f:7b:30:1a:d4:8f:19:
8c:7c:1e:7f:4a:78:4d:54:0f:0f:32:f4:ae:70:ff:df:80:43:
b4:df:c0:53:66:57:72:65:fb:9a:c4:41:79:8a:8d:36:b4:8d:
10:d3:e6:a1:02:ce:2f:f2:bb:bb:3c:5d:9c:54:ae:20:d7:26:
18:ba:33:5e:be:1b:3b:12:db:57:10:6f:e2:b4:0e:4b:d8:d8:
2d:38:e2:f6:f5:ae:78:01:5c:a6:cf:43:80:63:cf:0e:a1:d0:
f0:ed:58:53:fc:60:ff:aa:e4:8d:8e:92:40:7a:6c:34:74:fd:
e7:e3:8c:e2:f4:e5:db:fd:21:5a:08:e6:be:f7:13:4c:a3:67:
63:c1:9d:35:b0:0d:2b:01:7d:1d:84:11:ee:0c:41:f7:ac:68:
2d:c6:e8:34:1c:fc:0b:33:7a:66:64:58:b2:ec:c2:c0:6e:74:
a8:62:33:a3:8e:26:d4:12:63:a5:43:fc:28:8c:81:8d:65:35:
6e:7d:0f:47:ce:0f:ea:81:c7:37:64:59:a3:20:41:d4:04:7c:
2e:d0:32:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7FHtFRV5uwaFBiNuSJfcX0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjYwNjE0MDc1MzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjEyOWI0ZTVmNjM3ZGQyZmRiMmUzNjVmNTg0ZTY2ZGZlMmYwZjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrnqN2IujOguGZH2NO1Ge55ahzuj
TVeH9mgb1UpCx6YNGIOc3DfImlt11DqF3sH8OzANteao62C7mFBIIDu0FhScMDCv
B3Lua24r+LVCaNb0ObKLIklucspgyRRsg2aZLSvqbOuH/i6kl7KpUsku8Zg7MRNj
N7u2gUC9USbwUB+BqxGH9M8O5WBdxhl85X6nlFqR7CeY53RtNS3cuvRiYUgopJsM
49N1CDV2apL3nbJ4GLQd2scYA4gmPNUwJdPWHOBURdz4gSPeq8kY7AhD4Uzaro1u
mImFBdVDpKyXPsIKA9wNV+5xfEg72Ku4vlWweDoIx/Yd11KtdX0QxrvgzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKYSm05fY33S/bLjZfWE5m3+Lw8IMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvcGhLYlRsOWpmZEw5c3VObDlZVG1iZjR2RHdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj1JMA0G
CSqGSIb3DQEBCwUAA4IBAQA0WDWMzdK2o4I32MMnvjybabCGnuJaQYq+qR8F5lEh
UBi0xQOSkqPuBA4Wme3i6B97MBrUjxmMfB5/SnhNVA8PMvSucP/fgEO038BTZldy
ZfuaxEF5io02tI0Q0+ahAs4v8ru7PF2cVK4g1yYYujNevhs7EttXEG/itA5L2Ngt
OOL29a54AVymz0OAY88OodDw7VhT/GD/quSNjpJAemw0dP3n44zi9OXb/SFaCOa+
9xNMo2djwZ01sA0rAX0dhBHuDEH3rGgtxug0HPwLM3pmZFiy7MLAbnSoYjOjjibU
EmOlQ/wojIGNZTVufQ9Hzg/qgcc3ZFmjIEHUBHwu0DJO
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:17 2026 by rpki-client