Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/8SSXBbJAmh2M2VamgGPNaaqs-GY.roa
File: 8SSXBbJAmh2M2VamgGPNaaqs-GY.roa (raw, json)
Hash identifier: SNkG8Uti9KHLJ03Y/sW0/JYA5jvGANqmsDmL+13iGPs=
Subject key identifier: F1:24:97:05:B2:40:9A:1D:8C:D9:56:A6:80:63:CD:69:AA:AC:F8:66
Certificate issuer: /CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Certificate serial: 019F23687E72298DD40A4EE9A47D99E7B22B
Authority key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/8SSXBbJAmh2M2VamgGPNaaqs-GY.roa
Signing time: Thu 02 Jul 2026 15:17:58 +0000
ROA not before: Thu 02 Jul 2026 15:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214785
IP address blocks: 185.202.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7e:72:29:8d:d4:0a:4e:e9:a4:7d:99:e7:b2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Validity
Not Before: Jul 2 15:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1249705b2409a1d8cd956a68063cd69aaacf866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8f:d8:b7:bd:42:2d:94:20:1d:15:aa:0a:7b:
c8:d0:e7:2d:6e:92:63:a5:85:1b:01:24:8a:9a:d6:
2d:db:63:fc:b8:be:f0:e4:f4:28:2c:12:4a:6c:3f:
2c:7c:82:3e:da:39:4a:0b:14:dc:b1:a8:cd:a6:80:
50:37:70:e5:cf:14:a6:fa:83:28:8a:34:31:17:c3:
8d:d7:e1:ef:91:9a:61:00:fc:6d:31:9c:92:58:b1:
d0:3a:3d:00:dd:47:48:f0:33:b6:2a:41:37:46:92:
ac:ca:83:f2:26:71:6f:64:8d:5f:ef:52:65:79:6f:
f7:39:18:ea:8b:ce:3a:ad:7e:1b:f3:97:2b:95:d6:
6c:26:e5:9c:d7:a6:17:87:c0:df:45:28:da:0f:f3:
d9:ce:ee:3a:d9:4f:04:fd:bb:a2:1c:80:3e:aa:15:
0d:a4:2a:37:2d:58:a7:07:8c:89:73:fa:cf:31:72:
5e:f8:7a:d3:37:f3:d0:01:a2:ba:8f:f7:b0:0b:6e:
46:ca:73:c6:11:f6:ed:d1:cf:5d:1c:12:67:e9:10:
15:36:23:de:e2:ea:82:c5:df:05:47:73:92:e8:e4:
92:58:34:ef:2d:31:48:9e:b2:1c:09:ef:57:d0:26:
b9:0a:ca:3d:5d:41:21:a6:f9:06:ae:f3:e2:5a:0f:
78:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:24:97:05:B2:40:9A:1D:8C:D9:56:A6:80:63:CD:69:AA:AC:F8:66
X509v3 Authority Key Identifier:
keyid:D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/8SSXBbJAmh2M2VamgGPNaaqs-GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.100.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:32:b7:8e:96:aa:c0:b9:8e:d2:d6:8d:cb:0e:23:14:cf:c6:
51:72:3d:3c:44:39:f5:cc:cd:a9:ed:35:b9:64:a4:9c:1d:b6:
d6:ee:ec:35:1f:48:ac:6a:e4:49:dc:fa:ff:b6:53:64:0d:62:
3b:89:aa:75:1d:c2:b1:1b:96:01:40:f7:b9:e9:1e:44:37:34:
09:37:ea:0e:96:c3:ca:26:96:d2:ce:ba:83:93:8f:46:83:b3:
62:dc:bf:21:a7:e5:dc:bc:78:18:b2:43:38:65:ff:90:e3:99:
4c:1a:e4:b7:d3:35:84:26:03:24:66:64:a3:dc:f0:37:a6:9a:
2e:3d:c2:57:90:52:07:bb:9d:3a:3f:99:80:6e:4c:41:00:41:
62:8f:2a:58:03:e2:8b:ca:2b:4d:5f:9b:e9:2f:8a:8d:2b:dd:
dc:74:38:7b:46:46:d9:f5:db:7a:09:da:15:86:68:12:79:c3:
df:3c:f6:87:31:21:5b:4d:31:03:48:59:95:6f:f9:c9:95:d2:
c3:90:ec:5c:7a:a9:fe:6c:2b:ab:f8:4b:a8:26:5f:9d:47:1f:
fb:93:a8:3d:7e:9b:c8:33:42:3b:0c:6f:23:64:99:52:65:75:
66:af:5b:66:d8:4f:f0:ca:7e:3b:d5:d7:99:d0:fc:7a:06:76:
86:eb:53:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaH5yKY3UCk7ppH2Z57IrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNDQ1NmUxMWI3N2JmMmU0ODIwZGZiNjk1NDFkNGJlMGVh
OTRlN2MwHhcNMjYwNzAyMTUxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTI0OTcwNWIyNDA5YTFkOGNkOTU2YTY4MDYzY2Q2OWFhYWNmODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5o/Yt71CLZQgHRWqCnvI0OctbpJj
pYUbASSKmtYt22P8uL7w5PQoLBJKbD8sfII+2jlKCxTcsajNpoBQN3DlzxSm+oMo
ijQxF8ON1+HvkZphAPxtMZySWLHQOj0A3UdI8DO2KkE3RpKsyoPyJnFvZI1f71Jl
eW/3ORjqi846rX4b85crldZsJuWc16YXh8DfRSjaD/PZzu462U8E/buiHIA+qhUN
pCo3LVinB4yJc/rPMXJe+HrTN/PQAaK6j/ewC25GynPGEfbt0c9dHBJn6RAVNiPe
4uqCxd8FR3OS6OSSWDTvLTFInrIcCe9X0Ca5Cso9XUEhpvkGrvPiWg94QwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPEklwWyQJodjNlWpoBjzWmqrPhmMB8GA1UdIwQY
MBaAFNNEVuEbd78uSCDftpVB1L4OqU58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDBSVzRSdDN2eTVJSU4tMmxVSFV2ZzZwVG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt
YWU1MDI3MzY4MWE3LzEvOFNTWEJiSkFtaDJNMlZhbWdHUE5hYXFzLUdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3
LzEvMDBSVzRSdDN2eTVJSU4tMmxVSFV2ZzZwVG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucpkMA0G
CSqGSIb3DQEBCwUAA4IBAQCLMreOlqrAuY7S1o3LDiMUz8ZRcj08RDn1zM2p7TW5
ZKScHbbW7uw1H0isauRJ3Pr/tlNkDWI7iap1HcKxG5YBQPe56R5ENzQJN+oOlsPK
JpbSzrqDk49Gg7Ni3L8hp+XcvHgYskM4Zf+Q45lMGuS30zWEJgMkZmSj3PA3ppou
PcJXkFIHu506P5mAbkxBAEFijypYA+KLyitNX5vpL4qNK93cdDh7RkbZ9dt6CdoV
hmgSecPfPPaHMSFbTTEDSFmVb/nJldLDkOxceqn+bCur+EuoJl+dRx/7k6g9fpvI
M0I7DG8jZJlSZXVmr1tm2E/wyn471deZ0Px6BnaG61NX
-----END CERTIFICATE-----
Generated at Wed Jul 8 17:46:20 2026 by rpki-client