Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/b4nTvmfFrpfHvzWajhrVOdOjGBA.roa
File: b4nTvmfFrpfHvzWajhrVOdOjGBA.roa (raw, json)
Hash identifier: fiW9eX2wACaVAXNjx0622JCBbjTikBYV6wVjH6N04yw=
Subject key identifier: 6F:89:D3:BE:67:C5:AE:97:C7:BF:35:9A:8E:1A:D5:39:D3:A3:18:10
Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial: 01A06805B98205B2A959C958DD9C9DC846F5
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/b4nTvmfFrpfHvzWajhrVOdOjGBA.roa
Signing time: Thu 03 Sep 2026 16:06:40 +0000
ROA not before: Thu 03 Sep 2026 16:06:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209207
IP address blocks: 153.80.249.0/24 maxlen: 24
168.113.215.0/24 maxlen: 24
2a05:541:176::/48 maxlen: 48
2a05:541:177::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:05:b9:82:05:b2:a9:59:c9:58:dd:9c:9d:c8:46:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
Validity
Not Before: Sep 3 16:06:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f89d3be67c5ae97c7bf359a8e1ad539d3a31810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3f:cb:a4:29:c5:10:db:3f:db:db:68:c4:7b:
ea:e3:61:63:98:e2:65:ab:5d:5a:4d:1c:40:d8:f3:
5f:34:49:36:17:16:23:dc:9f:2f:06:f2:32:32:a4:
1a:5e:d9:c6:98:1a:b5:4a:3a:52:27:96:97:04:19:
b0:25:5d:79:d9:08:0e:5a:b5:ed:ac:0b:ea:09:f0:
b9:d3:63:37:b0:15:80:60:5e:b8:21:75:7a:f0:57:
a6:31:26:ea:f0:03:15:54:cd:56:20:44:85:91:61:
37:75:ac:9c:a2:5d:27:34:14:6b:47:db:42:9f:27:
1f:96:18:32:b1:44:5f:d0:57:75:1b:87:39:98:66:
f6:80:27:ec:34:17:13:3e:39:a9:62:b6:97:c2:0b:
d0:34:5f:0a:ec:98:1d:f0:d5:47:c2:81:77:e7:b1:
8c:62:f1:06:32:67:64:ed:9b:a4:a7:b8:0d:24:d7:
b7:ff:80:3f:34:25:6a:6c:b3:52:8a:bc:8a:9c:f9:
9f:4d:92:f7:77:11:26:40:0d:68:6e:59:98:60:23:
7b:e8:ed:54:b1:63:1a:8d:e1:40:da:92:c6:13:f8:
10:21:92:53:83:9d:a7:e9:71:ac:dc:9b:46:df:d1:
77:2c:63:52:70:07:ff:02:77:04:8f:48:5d:c2:3b:
05:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:89:D3:BE:67:C5:AE:97:C7:BF:35:9A:8E:1A:D5:39:D3:A3:18:10
X509v3 Authority Key Identifier:
keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/b4nTvmfFrpfHvzWajhrVOdOjGBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.80.249.0/24
168.113.215.0/24
IPv6:
2a05:541:176::/47
Signature Algorithm: sha256WithRSAEncryption
91:e8:93:23:ea:c3:71:d3:74:37:91:c4:bb:b6:c8:d0:34:6f:
4d:7f:de:6d:4c:37:eb:dc:d0:aa:a2:09:40:3b:94:a7:2b:43:
cd:e4:4c:3f:bf:9e:50:31:d9:52:37:f6:ff:4a:b5:5d:a2:bc:
f1:df:8e:a4:82:e4:88:5d:98:e3:3b:f6:7b:e3:77:ce:62:d6:
5f:91:02:a4:fa:0a:0e:6b:e3:cd:38:f6:b8:22:6c:f7:70:4e:
93:a9:e7:a3:47:f7:f0:92:5f:96:ff:0c:5d:bb:ab:9b:94:b9:
d8:c5:6c:f3:54:bf:96:d6:ba:31:d2:b6:5f:9f:db:d2:e9:26:
81:6e:a9:07:32:5e:71:21:0f:70:83:d3:7f:cf:62:4f:5c:1d:
af:b3:a0:3e:59:4a:30:93:c6:d2:71:e0:b7:a6:95:73:10:fd:
fe:c2:1f:63:bc:4d:92:c0:0d:d0:8b:4d:92:c6:f1:2a:69:a2:
09:d3:05:3c:ac:16:31:74:fb:ad:fb:78:6f:8e:a2:52:33:13:
6f:3b:2c:58:42:96:ce:9c:7c:ff:4d:ca:6f:d7:3e:4d:a5:1c:
04:f9:5b:f8:66:46:22:e4:96:b2:10:58:34:c5:22:08:da:d4:
1c:3a:9b:c2:28:d7:22:14:3c:2a:63:1b:7f:4b:64:25:b3:b2:
c3:2a:11:c2
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAaBoBbmCBbKpWclY3ZydyEb1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk
YzY2ZjcwHhcNMjYwOTAzMTYwNjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Zjg5ZDNiZTY3YzVhZTk3YzdiZjM1OWE4ZTFhZDUzOWQzYTMxODEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD/LpCnFENs/29toxHvq42FjmOJl
q11aTRxA2PNfNEk2FxYj3J8vBvIyMqQaXtnGmBq1SjpSJ5aXBBmwJV152QgOWrXt
rAvqCfC502M3sBWAYF64IXV68FemMSbq8AMVVM1WIESFkWE3daycol0nNBRrR9tC
nycflhgysURf0Fd1G4c5mGb2gCfsNBcTPjmpYraXwgvQNF8K7Jgd8NVHwoF357GM
YvEGMmdk7Zukp7gNJNe3/4A/NCVqbLNSiryKnPmfTZL3dxEmQA1oblmYYCN76O1U
sWMajeFA2pLGE/gQIZJTg52n6XGs3JtG39F3LGNScAf/AncEj0hdwjsFoQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFG+J075nxa6Xx781mo4a1TnToxgQMB8GA1UdIwQY
MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt
YmE0ZmMyMzQ2ODNlLzEvYjRuVHZtZkZycGZIdnpXYWpoclZPZE9qR0JBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl
LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAmVD5AwQA
qHHXMA8EAgACMAkDBwEqBQVBAXYwDQYJKoZIhvcNAQELBQADggEBAJHokyPqw3HT
dDeRxLu2yNA0b01/3m1MN+vc0KqiCUA7lKcrQ83kTD+/nlAx2VI39v9KtV2ivPHf
jqSC5IhdmOM79nvjd85i1l+RAqT6Cg5r48049rgibPdwTpOp56NH9/CSX5b/DF27
q5uUudjFbPNUv5bWujHStl+f29LpJoFuqQcyXnEhD3CD03/PYk9cHa+zoD5ZSjCT
xtJx4LemlXMQ/f7CH2O8TZLADdCLTZLG8SppognTBTysFjF0+637eG+OolIzE287
LFhCls6cfP9Nym/XPk2lHAT5W/hmRiLklrIQWDTFIgja1Bw6m8Io1yIUPCpjG39L
ZCWzssMqEcI=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:12 2026 by rpki-client