Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/HEx-RsoPSS1-4AEL4nR6cbVjZ7A.roa
File: HEx-RsoPSS1-4AEL4nR6cbVjZ7A.roa (raw, json)
Hash identifier: OBW2Q/LUj4tZid4mlqZd2x7RITBDuxBD4NRaa4u8dMo=
Subject key identifier: 1C:4C:7E:46:CA:0F:49:2D:7E:E0:01:0B:E2:74:7A:71:B5:63:67:B0
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019EE0568C695A25F436D0CC70C146B651EB
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/HEx-RsoPSS1-4AEL4nR6cbVjZ7A.roa
Signing time: Fri 19 Jun 2026 14:43:48 +0000
ROA not before: Fri 19 Jun 2026 14:43:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22295
IP address blocks: 185.147.157.0/24 maxlen: 24
185.147.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e0:56:8c:69:5a:25:f4:36:d0:cc:70:c1:46:b6:51:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Jun 19 14:43:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c4c7e46ca0f492d7ee0010be2747a71b56367b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:2e:6b:ab:66:6f:15:fc:2e:60:15:f2:dc:
74:a8:51:a8:a3:92:cd:4e:1f:19:01:60:98:7f:4d:
33:82:9e:49:9e:55:ae:59:ff:bf:42:bd:99:9f:e7:
db:76:f3:c6:39:42:75:47:2f:d4:82:29:a3:e4:c1:
9e:71:2f:c5:91:69:1b:29:45:6a:4c:ea:6c:de:e1:
65:fe:fd:b6:c4:b8:ee:91:a8:e0:0b:69:4c:a1:6b:
26:ec:66:20:75:ac:6b:7e:40:da:9c:c2:f1:9d:49:
a6:e0:a4:12:8e:81:62:9f:f7:4e:e7:0c:38:a4:64:
42:07:08:6e:ba:f7:9a:c7:b2:62:d6:9e:81:a7:7e:
fd:b7:fe:93:50:c5:b7:22:4d:00:48:28:69:44:76:
d9:80:01:62:39:2c:fd:ef:0d:02:12:7d:27:93:97:
20:34:05:52:b4:f5:74:f1:f5:a6:bd:23:6c:f4:53:
57:9a:c9:da:93:2e:2f:b7:13:39:78:93:5a:7f:74:
2c:28:e1:8b:04:2b:5a:d1:29:ab:73:c4:2a:3b:8d:
99:a7:71:c3:bc:ac:43:c2:3b:48:25:7c:6e:b9:60:
89:cb:7e:2e:ad:53:97:5d:e3:80:58:8d:77:35:08:
d9:4a:72:da:69:c4:6d:f0:9e:5e:d7:98:5d:6d:0c:
dc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4C:7E:46:CA:0F:49:2D:7E:E0:01:0B:E2:74:7A:71:B5:63:67:B0
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/HEx-RsoPSS1-4AEL4nR6cbVjZ7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.157.0/24
185.147.159.0/24
Signature Algorithm: sha256WithRSAEncryption
39:c1:1d:1c:73:4f:c9:20:cb:b6:58:40:7c:41:24:88:a5:25:
cc:75:66:3c:a2:a3:ae:c5:94:95:ef:d5:56:da:c7:b0:a1:45:
b6:4a:36:67:e6:89:94:34:e5:40:5e:01:1e:d1:83:de:98:00:
3a:ce:4a:87:59:c0:d1:32:0a:0a:d9:dd:4b:cc:73:f4:e5:5e:
26:1b:d6:f8:e7:db:48:42:f3:2a:18:d7:1b:ff:76:f8:24:da:
7b:91:23:5d:f3:ad:31:27:18:b7:b1:e3:a0:17:b7:73:94:d4:
55:71:f5:00:f9:0f:94:dc:f1:c3:d6:33:14:a6:92:55:e8:f0:
68:a2:40:f1:79:46:e2:84:3c:ab:a0:22:ba:75:43:17:14:0a:
a5:cc:41:1b:7a:b1:03:51:a2:f0:cf:ad:44:8e:29:3a:66:6f:
ae:5a:73:d9:39:34:3d:00:f8:d1:ba:f3:b0:6a:6c:26:56:d9:
96:ae:bb:55:f5:d0:53:09:ee:2b:d7:b0:d2:33:08:44:66:01:
0c:02:fc:be:95:ee:03:96:38:34:d2:a4:8b:ea:15:3a:c7:76:
d4:20:6b:89:65:c6:68:ac:06:52:86:f0:52:1a:e1:d7:30:e0:
e6:79:78:a6:9b:ed:56:2d:6d:ec:6e:b6:2a:e7:01:8b:a7:0a:
49:c5:fe:8f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ7gVoxpWiX0NtDMcMFGtlHrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTEyNzcyM2VhMGNmZDA3MjQ3MTNiMjkxNzM0Y2FhMzUz
ZTIwZWEwHhcNMjYwNjE5MTQ0MzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzRjN2U0NmNhMGY0OTJkN2VlMDAxMGJlMjc0N2E3MWI1NjM2N2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGgua6tmbxX8LmAV8tx0qFGoo5LN
Th8ZAWCYf00zgp5JnlWuWf+/Qr2Zn+fbdvPGOUJ1Ry/Ugimj5MGecS/FkWkbKUVq
TOps3uFl/v22xLjukajgC2lMoWsm7GYgdaxrfkDanMLxnUmm4KQSjoFin/dO5ww4
pGRCBwhuuveax7Ji1p6Bp379t/6TUMW3Ik0ASChpRHbZgAFiOSz97w0CEn0nk5cg
NAVStPV08fWmvSNs9FNXmsnaky4vtxM5eJNaf3QsKOGLBCta0Smrc8QqO42Zp3HD
vKxDwjtIJXxuuWCJy34urVOXXeOAWI13NQjZSnLaacRt8J5e15hdbQzcRQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBxMfkbKD0ktfuABC+J0enG1Y2ewMB8GA1UdIwQY
MBaAFFBRJ3I+oM/QckcTspFzTKo1PiDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYt
NTU2MDhiNjk0NDU2LzEvSEV4LVJzb1BTUzEtNEFFTDRuUjZjYlZqWjdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYtNTU2MDhiNjk0NDU2
LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuZOdAwQA
uZOfMA0GCSqGSIb3DQEBCwUAA4IBAQA5wR0cc0/JIMu2WEB8QSSIpSXMdWY8oqOu
xZSV79VW2sewoUW2SjZn5omUNOVAXgEe0YPemAA6zkqHWcDRMgoK2d1LzHP05V4m
G9b459tIQvMqGNcb/3b4JNp7kSNd860xJxi3seOgF7dzlNRVcfUA+Q+U3PHD1jMU
ppJV6PBookDxeUbihDyroCK6dUMXFAqlzEEberEDUaLwz61Ejik6Zm+uWnPZOTQ9
APjRuvOwamwmVtmWrrtV9dBTCe4r17DSMwhEZgEMAvy+le4Dljg00qSL6hU6x3bU
IGuJZcZorAZShvBSGuHXMODmeXimm+1WLW3sbrYq5wGLpwpJxf6P
-----END CERTIFICATE-----
Generated at Sun Jun 28 15:10:48 2026 by rpki-client