Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/L-mOuZ8QI7UU1nUFmDP22HfR9Ow.roa
File: L-mOuZ8QI7UU1nUFmDP22HfR9Ow.roa (raw, json)
Hash identifier: 7Al0u5Q3YV7dlLeAcQ+RUgnxhwI9m0WFEsG/SLzqm0U=
Subject key identifier: 2F:E9:8E:B9:9F:10:23:B5:14:D6:75:05:98:33:F6:D8:77:D1:F4:EC
Certificate issuer: /CN=011ccd009b2a6eabc5418574b637c6c402219c68
Certificate serial: 019F2368ABF2E754C724901DE92C03A1EE2F
Authority key identifier: 01:1C:CD:00:9B:2A:6E:AB:C5:41:85:74:B6:37:C6:C4:02:21:9C:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARzNAJsqbqvFQYV0tjfGxAIhnGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/L-mOuZ8QI7UU1nUFmDP22HfR9Ow.roa
Signing time: Thu 02 Jul 2026 15:18:10 +0000
ROA not before: Thu 02 Jul 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16418
IP address blocks: 185.8.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARzNAJsqbqvFQYV0tjfGxAIhnGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ab:f2:e7:54:c7:24:90:1d:e9:2c:03:a1:ee:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011ccd009b2a6eabc5418574b637c6c402219c68
Validity
Not Before: Jul 2 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fe98eb99f1023b514d675059833f6d877d1f4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9a:0d:60:70:77:60:a6:08:84:79:fd:0f:f7:
c3:87:e2:10:24:be:f1:8f:e2:7f:60:9c:cb:25:fc:
bd:29:b3:12:48:fd:de:c5:a3:9c:5b:83:40:73:dd:
76:2f:e8:cc:1c:28:29:65:1d:f1:1e:59:69:e8:0c:
65:55:81:28:28:da:fa:96:1c:a0:0e:03:4b:cd:1c:
b5:92:47:b8:78:73:0c:5d:61:15:ea:6a:87:9f:5c:
53:b2:a0:a1:e9:c1:ec:7f:97:54:28:ac:25:80:48:
0d:7b:ae:41:1e:76:8d:31:c6:43:87:ab:88:5e:65:
f5:3a:12:4d:31:37:11:4e:f8:6d:26:a0:70:80:cf:
3f:f9:ed:ff:a1:f1:c4:ef:fb:e9:41:da:fe:b6:55:
4f:c1:0c:88:e2:91:ae:47:d8:8f:19:e6:2c:b7:0e:
7e:fa:00:45:2e:1f:32:ea:84:73:85:60:74:93:89:
a9:c7:30:e5:af:8a:0f:db:48:97:7f:70:b3:91:fa:
05:bf:94:fe:2f:c3:30:10:c1:ba:26:be:0a:38:64:
bb:3d:30:3d:fb:97:7f:64:76:9f:06:0d:f1:94:34:
eb:3f:2e:81:8c:e0:ba:bf:93:6a:15:a7:28:9d:bc:
db:7b:31:66:55:f9:74:f9:e7:d4:46:c2:a4:ea:af:
39:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E9:8E:B9:9F:10:23:B5:14:D6:75:05:98:33:F6:D8:77:D1:F4:EC
X509v3 Authority Key Identifier:
keyid:01:1C:CD:00:9B:2A:6E:AB:C5:41:85:74:B6:37:C6:C4:02:21:9C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARzNAJsqbqvFQYV0tjfGxAIhnGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/L-mOuZ8QI7UU1nUFmDP22HfR9Ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.134.0/24
Signature Algorithm: sha256WithRSAEncryption
96:04:1a:1c:2b:52:c1:9b:39:a3:7d:be:c6:95:2a:9e:e2:f1:
2f:af:98:10:2a:15:42:d8:d0:55:9b:d8:ff:a4:98:29:80:ce:
4d:7d:bd:d4:3d:4e:76:cf:97:b3:61:1b:8e:20:97:07:c5:53:
13:04:75:9a:50:f1:47:ec:8a:58:fb:d0:6e:f2:77:4e:76:f1:
04:44:ec:44:d6:e9:0a:1a:de:b3:34:0d:a6:94:99:12:f9:de:
db:3c:f3:4f:34:1a:b0:55:21:13:66:bb:d6:b5:e9:f5:35:07:
45:98:04:c9:22:5b:fe:28:57:ad:52:bd:2f:f7:ed:d7:13:f1:
3a:87:33:62:f6:2b:72:ba:c7:13:1c:af:aa:a9:62:97:e3:04:
f9:0b:57:ca:e6:1d:8c:18:fc:1f:36:23:a7:2a:56:e6:48:32:
d9:7b:cd:3b:bd:90:71:69:43:db:ce:04:37:86:d8:8d:35:e7:
e0:af:13:fa:6e:ee:bd:37:ea:42:99:e5:93:b0:c3:1f:f7:61:
5e:23:51:2c:bb:72:d4:8b:36:d0:6a:f1:9f:a9:ce:41:96:45:
af:ef:1e:39:c7:de:52:25:7d:5a:bb:30:de:a0:d7:04:48:05:
91:e9:a0:84:a8:73:e0:46:a0:6c:60:1e:4b:00:8c:f5:26:d8:
c2:e4:ef:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaKvy51THJJAd6SwDoe4vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMWNjZDAwOWIyYTZlYWJjNTQxODU3NGI2MzdjNmM0MDIy
MTljNjgwHhcNMjYwNzAyMTUxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmU5OGViOTlmMTAyM2I1MTRkNjc1MDU5ODMzZjZkODc3ZDFmNGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5oNYHB3YKYIhHn9D/fDh+IQJL7x
j+J/YJzLJfy9KbMSSP3exaOcW4NAc912L+jMHCgpZR3xHllp6AxlVYEoKNr6lhyg
DgNLzRy1kke4eHMMXWEV6mqHn1xTsqCh6cHsf5dUKKwlgEgNe65BHnaNMcZDh6uI
XmX1OhJNMTcRTvhtJqBwgM8/+e3/ofHE7/vpQdr+tlVPwQyI4pGuR9iPGeYstw5+
+gBFLh8y6oRzhWB0k4mpxzDlr4oP20iXf3CzkfoFv5T+L8MwEMG6Jr4KOGS7PTA9
+5d/ZHafBg3xlDTrPy6BjOC6v5NqFaconbzbezFmVfl0+efURsKk6q85uQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC/pjrmfECO1FNZ1BZgz9th30fTsMB8GA1UdIwQY
MBaAFAEczQCbKm6rxUGFdLY3xsQCIZxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVJ6TkFKc3FicXZGUVlWMHRqZkd4QUlobkdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jMTc2NWItZTNhNS00MTBjLTljZDMt
NmNhMzQwZmE3NDkzLzEvTC1tT3VaOFFJN1VVMW5VRm1EUDIySGZSOU93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9jMTc2NWItZTNhNS00MTBjLTljZDMtNmNhMzQwZmE3NDkz
LzEvQVJ6TkFKc3FicXZGUVlWMHRqZkd4QUlobkdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQiGMA0G
CSqGSIb3DQEBCwUAA4IBAQCWBBocK1LBmzmjfb7GlSqe4vEvr5gQKhVC2NBVm9j/
pJgpgM5Nfb3UPU52z5ezYRuOIJcHxVMTBHWaUPFH7IpY+9Bu8ndOdvEEROxE1ukK
Gt6zNA2mlJkS+d7bPPNPNBqwVSETZrvWten1NQdFmATJIlv+KFetUr0v9+3XE/E6
hzNi9ityuscTHK+qqWKX4wT5C1fK5h2MGPwfNiOnKlbmSDLZe807vZBxaUPbzgQ3
htiNNefgrxP6bu69N+pCmeWTsMMf92FeI1Esu3LUizbQavGfqc5BlkWv7x45x95S
JX1auzDeoNcESAWR6aCEqHPgRqBsYB5LAIz1JtjC5O9S
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:59:06 2026 by rpki-client