Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/pPdJc_g7J9FjsKbnsWcQjWaRbgQ.roa
File: pPdJc_g7J9FjsKbnsWcQjWaRbgQ.roa (raw, json)
Hash identifier: k6Styv321cogEzOvWQNWhd0ddvtWhbMw7NOEI52o9sI=
Subject key identifier: A4:F7:49:73:F8:3B:27:D1:63:B0:A6:E7:B1:67:10:8D:66:91:6E:04
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A0EF1B5081A2F745961FD31E20CA5FC23C
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/pPdJc_g7J9FjsKbnsWcQjWaRbgQ.roa
Signing time: Tue 29 Sep 2026 21:38:59 +0000
ROA not before: Tue 29 Sep 2026 21:38:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218587
IP address blocks: 185.249.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:1b:50:81:a2:f7:45:96:1f:d3:1e:20:ca:5f:c2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Sep 29 21:38:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4f74973f83b27d163b0a6e7b167108d66916e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:13:c7:c1:74:1d:59:96:bb:9a:92:54:40:01:
39:60:02:aa:db:77:5e:45:fe:59:3d:46:30:59:1e:
aa:78:80:b8:92:d4:20:49:69:c5:ab:9c:3b:90:36:
10:c9:33:73:db:3d:1b:86:88:7f:ef:7b:77:1b:4b:
3e:f4:d5:c1:7d:34:6a:8f:92:84:08:c3:b0:c2:69:
14:cb:66:d2:97:3e:6c:e9:ba:a3:43:3f:25:a1:3d:
43:12:87:e0:a1:78:05:23:54:de:29:6f:d8:9e:12:
1f:a0:be:90:14:aa:8a:92:64:cc:91:ac:85:39:3b:
fd:f6:4f:04:1f:a7:22:b2:b8:40:22:73:85:83:0b:
54:46:e9:6b:58:f2:bc:f9:6b:99:e0:b4:31:f2:f1:
af:09:be:6e:a8:7f:73:63:0f:00:62:d4:04:84:fc:
eb:cc:2f:79:49:39:4a:08:70:63:6c:83:c1:8a:4c:
aa:6e:86:9c:8b:52:cd:e1:38:f3:88:0b:2f:fe:1f:
3d:48:be:95:f1:0c:21:a4:99:6c:89:7b:95:15:a0:
80:2a:0b:76:9a:6d:0e:40:4b:c5:21:10:5a:63:b0:
68:7a:97:4f:5e:d8:78:b2:b7:fe:46:90:92:7e:18:
f2:3f:83:cf:41:d5:61:72:03:8a:e9:f3:3f:85:f1:
bb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F7:49:73:F8:3B:27:D1:63:B0:A6:E7:B1:67:10:8D:66:91:6E:04
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/pPdJc_g7J9FjsKbnsWcQjWaRbgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.200.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:02:f3:02:90:17:e2:6d:8d:63:01:62:2b:13:1a:9e:d2:54:
25:b7:f4:83:8f:a1:5a:0e:dd:cb:c6:09:d6:43:bb:70:11:e4:
d2:4a:81:e3:eb:b0:ed:57:e5:03:be:41:23:85:30:57:aa:31:
04:86:85:c1:66:db:12:07:52:e1:29:7f:bc:17:5c:ed:15:26:
55:2c:8a:94:17:f1:5e:c9:99:a4:82:a0:49:63:5e:6f:d4:34:
0f:a6:cd:fc:c8:5f:49:89:1c:73:bc:6d:66:c0:d0:75:fd:59:
ac:b2:c7:cd:69:a7:20:6f:e2:3e:79:e0:36:bd:3e:12:05:e4:
36:57:df:1d:93:47:6d:91:1e:7e:6e:f2:2d:fb:c5:2e:23:34:
20:d5:1f:fd:7f:5d:10:ac:bb:5b:05:75:48:8a:2b:fe:1a:a1:
4b:d3:24:de:40:24:ae:d8:83:1a:2b:ab:3c:19:25:b5:fa:59:
77:87:7a:b3:99:a2:0d:b9:d2:75:cf:54:f6:2f:d5:44:e8:22:
ac:d3:91:c9:c6:8e:21:d9:c4:3e:b7:fb:e2:8e:91:ae:11:b4:
29:ef:e8:12:6b:f9:fc:e9:61:91:66:79:c6:d8:2e:00:09:4e:
0a:c4:be:3a:ce:74:3d:8c:38:be:d9:09:26:b9:46:e8:9c:4b:
7f:05:39:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDvG1CBovdFlh/THiDKX8I8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjYwOTI5MjEzODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGY3NDk3M2Y4M2IyN2QxNjNiMGE2ZTdiMTY3MTA4ZDY2OTE2ZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhPHwXQdWZa7mpJUQAE5YAKq23de
Rf5ZPUYwWR6qeIC4ktQgSWnFq5w7kDYQyTNz2z0bhoh/73t3G0s+9NXBfTRqj5KE
CMOwwmkUy2bSlz5s6bqjQz8loT1DEofgoXgFI1TeKW/YnhIfoL6QFKqKkmTMkayF
OTv99k8EH6cisrhAInOFgwtURulrWPK8+WuZ4LQx8vGvCb5uqH9zYw8AYtQEhPzr
zC95STlKCHBjbIPBikyqboaci1LN4TjziAsv/h89SL6V8QwhpJlsiXuVFaCAKgt2
mm0OQEvFIRBaY7BoepdPXth4srf+RpCSfhjyP4PPQdVhcgOK6fM/hfG7/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKT3SXP4OyfRY7Cm57FnEI1mkW4EMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvcFBkSmNfZzdKOUZqc0tibnNXY1FqV2FSYmdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufnIMA0G
CSqGSIb3DQEBCwUAA4IBAQClAvMCkBfibY1jAWIrExqe0lQlt/SDj6FaDt3LxgnW
Q7twEeTSSoHj67DtV+UDvkEjhTBXqjEEhoXBZtsSB1LhKX+8F1ztFSZVLIqUF/Fe
yZmkgqBJY15v1DQPps38yF9JiRxzvG1mwNB1/VmsssfNaacgb+I+eeA2vT4SBeQ2
V98dk0dtkR5+bvIt+8UuIzQg1R/9f10QrLtbBXVIiiv+GqFL0yTeQCSu2IMaK6s8
GSW1+ll3h3qzmaINudJ1z1T2L9VE6CKs05HJxo4h2cQ+t/vijpGuEbQp7+gSa/n8
6WGRZnnG2C4ACU4KxL46znQ9jDi+2QkmuUbonEt/BTnU
-----END CERTIFICATE-----
Generated at Wed Oct 14 20:43:17 2026 by rpki-client