Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/a2QkPtyL0SmdjP5zau-ugnaW-EU.roa
File: a2QkPtyL0SmdjP5zau-ugnaW-EU.roa (raw, json)
Hash identifier: gM4VfQdg6WpZhQD+HowobTuTX+TLbbelKQeacFg1zmA=
Subject key identifier: 6B:64:24:3E:DC:8B:D1:29:9D:8C:FE:73:6A:EF:AE:82:76:96:F8:45
Certificate issuer: /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial: 019FC7374378298CF57CB306B9179445DB64
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/a2QkPtyL0SmdjP5zau-ugnaW-EU.roa
Signing time: Mon 03 Aug 2026 10:41:55 +0000
ROA not before: Mon 03 Aug 2026 10:41:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214292
IP address blocks: 185.176.193.0/24 maxlen: 24
2a02:c50:4000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:37:43:78:29:8c:f5:7c:b3:06:b9:17:94:45:db:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Validity
Not Before: Aug 3 10:41:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b64243edc8bd1299d8cfe736aefae827696f845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e1:31:4e:c4:b3:75:cf:d6:61:5c:54:6a:8a:
8b:6b:a2:eb:12:58:24:b1:2f:5d:7b:c5:4b:6e:df:
06:e4:91:62:2f:00:b5:0b:ed:3a:2d:51:7b:fd:30:
c7:d8:67:ad:84:06:2c:69:c0:69:24:65:0e:ca:cd:
63:87:3a:39:58:c4:c8:32:09:88:96:03:1f:46:70:
f4:76:db:c2:b6:d1:eb:13:e2:f0:08:b0:50:86:ea:
ab:2e:1b:71:30:8c:4e:cb:bf:8d:48:d8:a5:fe:0b:
74:6a:65:57:e6:a5:6f:82:f2:62:57:2d:bf:5c:bb:
ae:b7:dc:8a:23:11:55:31:48:42:a6:87:c2:a7:99:
fb:a5:2f:19:25:55:b2:e0:7e:94:1e:e1:0f:10:1a:
ce:22:a9:cb:78:70:ed:fd:39:ed:fb:75:c4:a2:5b:
f2:85:75:af:e5:4b:41:b0:fb:9f:58:88:4b:87:f0:
87:aa:cc:41:22:92:99:12:9d:5c:87:b1:3d:e5:bb:
19:b8:8b:5b:9d:1f:c5:4e:03:c6:02:35:9b:22:ff:
64:da:bb:42:48:86:2a:3d:50:af:7d:66:eb:38:96:
07:75:e5:08:41:d7:4f:cb:15:5d:a4:54:c6:c4:3b:
85:51:e6:85:7a:b1:d4:76:e4:12:0b:ea:25:1d:4e:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:64:24:3E:DC:8B:D1:29:9D:8C:FE:73:6A:EF:AE:82:76:96:F8:45
X509v3 Authority Key Identifier:
keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/a2QkPtyL0SmdjP5zau-ugnaW-EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.193.0/24
IPv6:
2a02:c50:4000::/48
Signature Algorithm: sha256WithRSAEncryption
4a:56:81:a5:00:5a:6b:02:35:76:92:4c:86:92:91:f3:76:90:
d2:65:9b:ab:70:86:53:0d:3a:0d:fa:18:bc:a3:36:e9:cc:a6:
ce:16:d6:85:fd:7f:98:07:11:7b:93:1f:cd:cb:78:d2:4f:96:
7b:9b:ba:b7:5d:67:34:77:00:5b:96:27:ab:20:bf:cb:22:4a:
fd:04:2c:c2:69:06:0a:59:3a:81:6f:a6:76:ba:3e:e1:af:9a:
9e:3f:cd:85:4e:1c:9a:9f:b5:d0:ab:49:35:e5:6e:9f:24:0e:
0a:85:65:75:29:c4:a9:1a:d5:6f:d9:c7:59:f7:d0:6f:04:c9:
ab:a6:41:40:e2:96:8a:e2:bc:7a:b3:7e:d5:c4:02:5c:89:c9:
0f:8b:a9:63:83:39:2b:57:ae:dc:80:ae:22:b7:7c:d1:26:4f:
a8:a1:ab:34:af:d7:4d:8a:1b:54:87:7a:0b:88:e8:f7:82:90:
e2:1d:b3:f6:f8:ca:f9:85:54:39:bf:ad:2e:cd:01:19:60:7a:
84:82:e6:fe:f5:48:6e:e6:69:20:ab:07:ff:89:21:98:2b:b7:
39:9e:c6:31:86:6f:2e:ab:63:21:6a:97:8b:85:43:dd:e5:e5:
1a:7d:4f:32:ff:70:69:ac:07:a8:e0:b6:2e:56:17:50:49:18:
b2:f8:c5:8e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZ/HN0N4KYz1fLMGuReURdtkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNjlmYzYxMjhiZTU5MTQwMWFjZjgyYmMyNDYxYWY2MzZl
YmU4ZTYwHhcNMjYwODAzMTA0MTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjY0MjQzZWRjOGJkMTI5OWQ4Y2ZlNzM2YWVmYWU4Mjc2OTZmODQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveExTsSzdc/WYVxUaoqLa6LrElgk
sS9de8VLbt8G5JFiLwC1C+06LVF7/TDH2GethAYsacBpJGUOys1jhzo5WMTIMgmI
lgMfRnD0dtvCttHrE+LwCLBQhuqrLhtxMIxOy7+NSNil/gt0amVX5qVvgvJiVy2/
XLuut9yKIxFVMUhCpofCp5n7pS8ZJVWy4H6UHuEPEBrOIqnLeHDt/Tnt+3XEolvy
hXWv5UtBsPufWIhLh/CHqsxBIpKZEp1ch7E95bsZuItbnR/FTgPGAjWbIv9k2rtC
SIYqPVCvfWbrOJYHdeUIQddPyxVdpFTGxDuFUeaFerHUduQSC+olHU74gQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGtkJD7ci9EpnYz+c2rvroJ2lvhFMB8GA1UdIwQY
MBaAFItp/GEovlkUAaz4K8JGGvY26+jmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYWE2ZTYtMzA1NC00ODg4LTg2NWUt
MjY1ZjJiZDBmOGYzLzEvYTJRa1B0eUwwU21kalA1emF1LXVnbmFXLUVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wYWE2ZTYtMzA1NC00ODg4LTg2NWUtMjY1ZjJiZDBmOGYz
LzEvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAubDBMA8E
AgACMAkDBwAqAgxQQAAwDQYJKoZIhvcNAQELBQADggEBAEpWgaUAWmsCNXaSTIaS
kfN2kNJlm6twhlMNOg36GLyjNunMps4W1oX9f5gHEXuTH83LeNJPlnuburddZzR3
AFuWJ6sgv8siSv0ELMJpBgpZOoFvpna6PuGvmp4/zYVOHJqftdCrSTXlbp8kDgqF
ZXUpxKka1W/Zx1n30G8EyaumQUDilorivHqzftXEAlyJyQ+LqWODOStXrtyAriK3
fNEmT6ihqzSv102KG1SHeguI6PeCkOIds/b4yvmFVDm/rS7NARlgeoSC5v71SG7m
aSCrB/+JIZgrtzmexjGGby6rYyFql4uFQ93l5Rp9TzL/cGmsB6jgti5WF1BJGLL4
xY4=
-----END CERTIFICATE-----
Generated at Thu Aug 13 18:11:02 2026 by rpki-client