Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/H7BooEdH7pGN2Xwo9YCOFmNvgQE.roa
File: H7BooEdH7pGN2Xwo9YCOFmNvgQE.roa (raw, json)
Hash identifier: x9lq9TZ8d9AJh1ukxrBbxQpkG7M8rCAHXmSmUA8oD+A=
Subject key identifier: 1F:B0:68:A0:47:47:EE:91:8D:D9:7C:28:F5:80:8E:16:63:6F:81:01
Certificate issuer: /CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Certificate serial: 019FB268B9FA100A80D61C6B34F6FD707992
Authority key identifier: BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/H7BooEdH7pGN2Xwo9YCOFmNvgQE.roa
Signing time: Thu 30 Jul 2026 09:43:55 +0000
ROA not before: Thu 30 Jul 2026 09:43:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 137.250.0.0/16 maxlen: 16
194.39.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:68:b9:fa:10:0a:80:d6:1c:6b:34:f6:fd:70:79:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Validity
Not Before: Jul 30 09:43:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1fb068a04747ee918dd97c28f5808e16636f8101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:67:07:70:f4:39:10:88:24:44:ac:55:16:45:
99:f3:26:78:b3:06:f7:03:83:9c:64:ab:2b:c9:31:
8e:ae:b2:18:25:03:f8:75:28:06:eb:08:be:00:f5:
4a:dd:57:cb:a8:6c:3b:35:70:a2:49:7a:de:27:01:
4c:e4:fa:6d:82:88:37:3c:cf:83:57:85:a8:50:5b:
c7:b7:12:40:9a:e4:1c:75:bb:ff:e1:c5:ab:73:9f:
9f:3b:4c:f0:74:e6:f8:4f:a3:c2:40:70:8c:d3:4f:
ba:4d:07:36:95:bc:a4:83:a6:81:e5:a6:a9:ac:c2:
b2:43:d8:ba:da:c9:e0:15:52:b6:22:5c:22:38:1e:
db:73:b5:ff:f9:5c:27:f9:91:47:1e:03:7a:d2:e4:
27:22:3b:bb:42:9f:70:69:f0:3c:6e:a5:ed:b6:0a:
fc:f5:7e:54:9d:dd:2f:ad:9b:55:e7:4d:c9:3c:75:
8a:87:a4:bb:23:69:7e:26:0a:8c:ce:ad:1b:22:cf:
f8:ed:ef:4a:4e:20:f1:f1:e3:2f:83:1f:87:7d:b3:
42:5f:24:75:bf:61:60:4c:83:5c:4c:08:9f:62:6d:
9c:df:b8:33:d7:11:e1:ab:b3:79:11:39:47:2e:7f:
64:7d:6c:29:cf:d3:82:4e:34:63:80:9e:12:aa:97:
bb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B0:68:A0:47:47:EE:91:8D:D9:7C:28:F5:80:8E:16:63:6F:81:01
X509v3 Authority Key Identifier:
keyid:BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/H7BooEdH7pGN2Xwo9YCOFmNvgQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.250.0.0/16
194.39.180.0/22
Signature Algorithm: sha256WithRSAEncryption
90:ef:5e:95:a4:f7:c5:1c:5f:dd:99:d6:7e:17:76:82:50:08:
25:da:a2:88:b9:fd:18:d8:cf:18:2b:da:0d:55:e7:28:d2:3e:
a1:e9:db:df:51:a7:d2:02:b8:cd:6e:bd:e9:12:c4:b6:6c:0b:
6f:59:38:9f:69:76:29:2b:8c:6c:c8:21:43:33:b0:c0:54:5d:
53:4a:3e:3b:c1:de:9f:fd:74:51:f4:03:0b:62:e3:21:8b:af:
ec:61:a2:83:bf:e0:8c:bd:bc:10:d4:08:cd:40:8b:90:e5:61:
76:80:bd:b2:6a:df:79:c4:f9:01:e2:a1:cd:b9:89:1a:b6:57:
a3:91:8f:2b:19:77:ee:8a:8f:28:25:43:6d:8b:de:47:a5:a5:
9c:55:01:42:43:68:71:eb:33:88:fd:a5:a1:e1:d3:07:2e:b2:
d0:62:11:99:1f:f6:21:33:ff:8a:92:27:79:70:a4:a9:6f:9e:
ce:f3:8e:dd:c7:a2:67:75:73:93:32:5a:4b:c1:cb:d9:44:82:
6a:bb:88:36:93:ba:a8:f1:fa:5e:41:e9:2f:16:97:2e:d2:99:
2e:34:00:91:0b:82:ec:0c:97:0f:4f:6c:22:2c:e9:1b:2e:16:
ee:76:43:86:f4:e3:35:32:70:af:8a:e3:37:ef:1e:cf:6c:1d:
1c:b2:12:ad
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgISAZ+yaLn6EAqA1hxrNPb9cHmSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMmQ1ZmQzMDlkZDZjYzZjZjc4ODYwNDFlNWU5YzJjMWEy
NmNlYWIwHhcNMjYwNzMwMDk0MzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmIwNjhhMDQ3NDdlZTkxOGRkOTdjMjhmNTgwOGUxNjYzNmY4MTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWcHcPQ5EIgkRKxVFkWZ8yZ4swb3
A4OcZKsryTGOrrIYJQP4dSgG6wi+APVK3VfLqGw7NXCiSXreJwFM5Pptgog3PM+D
V4WoUFvHtxJAmuQcdbv/4cWrc5+fO0zwdOb4T6PCQHCM00+6TQc2lbykg6aB5aap
rMKyQ9i62sngFVK2IlwiOB7bc7X/+Vwn+ZFHHgN60uQnIju7Qp9wafA8bqXttgr8
9X5Und0vrZtV503JPHWKh6S7I2l+JgqMzq0bIs/47e9KTiDx8eMvgx+HfbNCXyR1
v2FgTINcTAifYm2c37gz1xHhq7N5ETlHLn9kfWwpz9OCTjRjgJ4Sqpe7TwIDAQAB
o4ICDjCCAgowHQYDVR0OBBYEFB+waKBHR+6Rjdl8KPWAjhZjb4EBMB8GA1UdIwQY
MBaAFLotX9MJ3WzGz3iGBB5enCwaJs6rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWkxZjB3bmRiTWJQZUlZRUhsNmNMQm9tenFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yY2JkZTktODQ4MC00NDBkLWFiY2Yt
NmQ3NTUwNTJiYjI0LzEvSDdCb29FZEg3cEdOMlh3bzlZQ09GbU52Z1FFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yY2JkZTktODQ4MC00NDBkLWFiY2YtNmQ3NTUwNTJiYjI0
LzEvdWkxZjB3bmRiTWJQZUlZRUhsNmNMQm9tenFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAifoDBALC
J7QwDQYJKoZIhvcNAQELBQADggEBAJDvXpWk98UcX92Z1n4XdoJQCCXaooi5/RjY
zxgr2g1V5yjSPqHp299Rp9ICuM1uvekSxLZsC29ZOJ9pdikrjGzIIUMzsMBUXVNK
PjvB3p/9dFH0Awti4yGLr+xhooO/4Iy9vBDUCM1Ai5DlYXaAvbJq33nE+QHioc25
iRq2V6ORjysZd+6KjyglQ22L3kelpZxVAUJDaHHrM4j9paHh0wcustBiEZkf9iEz
/4qSJ3lwpKlvns7zjt3Homd1c5MyWkvBy9lEgmq7iDaTuqjx+l5B6S8Wly7SmS40
AJELguwMlw9PbCIs6RsuFu52Q4b04zUycK+K4zfvHs9sHRyyEq0=
-----END CERTIFICATE-----
Generated at Thu Sep 10 12:24:24 2026 by rpki-client