Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/X39u8-9nKBEShz-NMa6JOcIhFuQ.roa
File: X39u8-9nKBEShz-NMa6JOcIhFuQ.roa (raw, json)
Hash identifier: YQ/B8p3fFHa4y5b+f+S7RWE/AGybnxVLW5r+tC2DXw8=
Subject key identifier: 5F:7F:6E:F3:EF:67:28:11:12:87:3F:8D:31:AE:89:39:C2:21:16:E4
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 019FCBD9CA2C2388BCEB1B1EEE93DA659BFA
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/X39u8-9nKBEShz-NMa6JOcIhFuQ.roa
Signing time: Tue 04 Aug 2026 08:17:55 +0000
ROA not before: Tue 04 Aug 2026 08:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48806
IP address blocks: 185.82.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:d9:ca:2c:23:88:bc:eb:1b:1e:ee:93:da:65:9b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Aug 4 08:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f7f6ef3ef67281112873f8d31ae8939c22116e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:d1:18:0b:d1:6d:88:76:99:8a:4d:20:4d:
33:26:48:b3:5e:23:82:d8:70:f8:c6:9a:74:b6:78:
10:10:1c:83:9c:be:62:3c:c2:7b:d9:18:34:67:c6:
52:1b:d4:43:08:3d:af:1c:83:c3:b7:f5:16:42:80:
a4:2a:8b:72:ec:85:73:37:65:d3:36:83:37:ab:de:
37:a6:8d:51:02:d2:d3:55:ba:9f:75:2a:f0:9d:78:
9a:13:c4:ab:1d:8a:e8:c3:36:b2:d3:ab:8c:64:e2:
34:e5:59:ec:27:dd:00:99:e5:1a:a1:ad:be:15:43:
bf:79:83:e3:4d:a5:ac:7c:62:3b:be:31:67:a3:5b:
f7:d1:2a:20:65:81:75:86:a1:9b:fc:33:80:75:c4:
7d:c2:88:0a:e7:92:3a:f6:07:10:d5:01:e8:b1:56:
de:49:f1:f9:ac:26:d8:d5:28:d3:2f:a5:85:b0:14:
af:3f:01:94:00:74:ed:ae:94:3d:db:3b:49:7d:68:
e1:45:95:97:66:7b:17:28:bb:da:fb:e9:99:72:c1:
8c:15:e3:7a:84:d6:ce:b3:51:49:e8:1c:ed:db:1a:
ef:c1:c0:4d:1b:3e:0e:e5:34:b1:39:32:f7:69:52:
d9:31:41:09:3f:f2:f7:6e:95:57:52:66:9a:aa:55:
d4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7F:6E:F3:EF:67:28:11:12:87:3F:8D:31:AE:89:39:C2:21:16:E4
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/X39u8-9nKBEShz-NMa6JOcIhFuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.88.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:63:6a:66:2e:5b:1c:a0:88:ba:09:cf:5b:56:a2:75:30:ee:
b1:f2:32:29:ba:08:dd:53:02:6f:79:3f:36:23:01:71:5b:c1:
10:fe:36:2b:66:dc:6e:ec:40:1f:ee:21:98:92:aa:a8:3f:36:
74:e0:72:e9:d1:2b:56:85:2e:10:a3:dd:51:85:46:73:09:0c:
1a:4c:2e:c2:1c:2e:58:26:90:c6:95:55:ab:08:d2:c0:36:d0:
b2:7f:3e:ea:f5:e6:82:cc:eb:e2:d7:64:b2:93:06:cb:57:0d:
c2:b0:24:3b:86:bc:31:b4:9e:86:ca:99:d6:92:bb:26:cd:45:
90:b1:b5:eb:41:46:75:b4:90:2b:99:44:e0:0c:57:c7:f7:40:
cd:0e:97:ad:66:ca:f9:2f:08:fc:00:fd:b5:7b:15:31:40:81:
85:b8:e1:cc:48:54:c6:96:d4:08:10:0c:d6:a1:06:19:c1:b9:
4c:4e:87:92:0e:8b:06:8c:8e:7e:0e:d7:4e:84:85:9e:8e:a8:
0f:cf:37:48:74:a4:17:79:6f:85:b2:0b:da:8b:81:2a:e9:59:
91:97:e2:fd:cc:f6:b6:e1:4e:8c:72:a4:e1:7a:bc:e1:8c:57:
a6:44:a6:e7:68:e4:f4:cd:50:40:5d:bb:31:9b:c1:a9:00:e0:
62:63:75:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/L2cosI4i86xse7pPaZZv6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNmEyOGI3YzYzZWY2YWIyMTRhNTJjZmE3YzNlNzhkYjlh
NDA4MjMwHhcNMjYwODA0MDgxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjdmNmVmM2VmNjcyODExMTI4NzNmOGQzMWFlODkzOWMyMjExNmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs97RGAvRbYh2mYpNIE0zJkizXiOC
2HD4xpp0tngQEByDnL5iPMJ72Rg0Z8ZSG9RDCD2vHIPDt/UWQoCkKoty7IVzN2XT
NoM3q943po1RAtLTVbqfdSrwnXiaE8SrHYrowzay06uMZOI05VnsJ90AmeUaoa2+
FUO/eYPjTaWsfGI7vjFno1v30SogZYF1hqGb/DOAdcR9wogK55I69gcQ1QHosVbe
SfH5rCbY1SjTL6WFsBSvPwGUAHTtrpQ92ztJfWjhRZWXZnsXKLva++mZcsGMFeN6
hNbOs1FJ6Bzt2xrvwcBNGz4O5TSxOTL3aVLZMUEJP/L3bpVXUmaaqlXUOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF9/bvPvZygREoc/jTGuiTnCIRbkMB8GA1UdIwQY
MBaAFGJqKLfGPvarIUpSz6fD5425pAgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUt
ZDJjZDI2YjY5ZGYxLzEvWDM5dTgtOW5LQkVTaHotTk1hNkpPY0loRnVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUtZDJjZDI2YjY5ZGYx
LzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVJYMA0G
CSqGSIb3DQEBCwUAA4IBAQAfY2pmLlscoIi6Cc9bVqJ1MO6x8jIpugjdUwJveT82
IwFxW8EQ/jYrZtxu7EAf7iGYkqqoPzZ04HLp0StWhS4Qo91RhUZzCQwaTC7CHC5Y
JpDGlVWrCNLANtCyfz7q9eaCzOvi12SykwbLVw3CsCQ7hrwxtJ6GypnWkrsmzUWQ
sbXrQUZ1tJArmUTgDFfH90DNDpetZsr5Lwj8AP21exUxQIGFuOHMSFTGltQIEAzW
oQYZwblMToeSDosGjI5+DtdOhIWejqgPzzdIdKQXeW+Fsgvai4Eq6VmRl+L9zPa2
4U6McqTherzhjFemRKbnaOT0zVBAXbsxm8GpAOBiY3Wd
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:36:06 2026 by rpki-client