Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/kw17cN7O6BZjrXtc0Po7Gnc29_E.roa
File: kw17cN7O6BZjrXtc0Po7Gnc29_E.roa (raw, json)
Hash identifier: 9+glnkrOqAZcUFE880RM58Uxpk29L9aOpV/CKJsAnIY=
Subject key identifier: 93:0D:7B:70:DE:CE:E8:16:63:AD:7B:5C:D0:FA:3B:1A:77:36:F7:F1
Certificate issuer: /CN=4a3a89d6931ba354f84ed3365c741e897bc2b671
Certificate serial: 01A0618BB2BEFC9BFEB175C5BC32D3246F22
Authority key identifier: 4A:3A:89:D6:93:1B:A3:54:F8:4E:D3:36:5C:74:1E:89:7B:C2:B6:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/kw17cN7O6BZjrXtc0Po7Gnc29_E.roa
Signing time: Wed 02 Sep 2026 09:55:40 +0000
ROA not before: Wed 02 Sep 2026 09:55:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 185.253.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:8b:b2:be:fc:9b:fe:b1:75:c5:bc:32:d3:24:6f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3a89d6931ba354f84ed3365c741e897bc2b671
Validity
Not Before: Sep 2 09:55:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=930d7b70decee81663ad7b5cd0fa3b1a7736f7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:ca:9f:35:f3:a4:48:9e:95:cc:d8:45:17:
02:90:86:a9:c0:15:62:99:80:3d:c7:41:bd:34:f5:
42:b7:36:17:a2:67:57:90:0f:6f:d5:05:53:4e:c9:
b0:c3:8b:1f:68:2e:58:d6:a8:19:a2:15:ae:d8:c8:
a2:d0:2e:20:61:5a:a6:67:c6:1f:19:b8:d2:22:fd:
35:6d:a2:96:59:73:0e:40:df:47:53:6e:87:e5:0c:
24:a1:a9:95:b4:6d:89:fc:16:54:5c:f8:fe:47:6d:
70:7b:e5:82:d7:5e:cb:5b:f1:5f:39:38:7b:d1:0a:
ff:ee:0a:a8:f5:c8:47:20:ac:50:f2:5c:49:17:ce:
85:45:92:a2:d9:d9:f1:97:cf:21:58:1b:bf:82:6a:
e6:dc:cf:60:37:76:10:2f:b5:8a:71:8f:94:09:36:
04:33:e3:5d:87:7a:cf:3d:3f:0a:34:3e:07:29:e1:
85:da:fa:fc:52:36:6e:b5:74:21:f7:e5:a3:e5:18:
09:8a:92:a4:1f:f4:71:75:eb:b7:c7:82:ba:93:68:
e4:7a:8b:7b:3d:f7:46:b0:3d:23:41:da:b0:96:32:
8e:99:84:06:6c:e8:29:5b:b5:5a:24:12:ff:3e:1c:
45:95:b9:0f:37:c3:a0:d5:09:b6:08:37:e2:81:a6:
e1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0D:7B:70:DE:CE:E8:16:63:AD:7B:5C:D0:FA:3B:1A:77:36:F7:F1
X509v3 Authority Key Identifier:
keyid:4A:3A:89:D6:93:1B:A3:54:F8:4E:D3:36:5C:74:1E:89:7B:C2:B6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/kw17cN7O6BZjrXtc0Po7Gnc29_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ee8eef-5dcc-4c37-850a-59cb258d9c49/1/SjqJ1pMbo1T4TtM2XHQeiXvCtnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.130.0/24
Signature Algorithm: sha256WithRSAEncryption
33:8d:29:3d:e7:70:20:3e:df:40:17:e1:d8:94:76:31:25:30:
d5:83:7b:1d:d6:36:6c:2e:4d:9e:9f:0d:1e:b9:e0:35:23:24:
ab:f1:4a:b2:60:09:fc:62:29:e9:f4:1d:06:56:69:4c:ab:cd:
42:be:22:0f:ea:e9:f2:3a:0e:ec:86:59:b0:b4:69:88:18:c5:
15:bb:8c:1f:a6:3d:28:6c:58:87:35:d8:b1:fb:99:fd:37:32:
89:71:f0:99:63:ba:72:f5:01:59:b5:dd:48:bd:e2:5f:fd:a8:
f3:a4:b6:71:f4:fb:54:3c:e6:42:0b:c1:85:47:6d:25:e6:21:
32:9f:7c:ef:be:04:75:f4:6c:18:eb:36:c8:9f:67:39:b9:10:
d3:3b:9b:ea:ef:6e:bc:cc:95:bf:eb:33:ca:61:80:37:b7:3a:
5e:a3:b4:9a:b7:f3:6e:a1:20:2c:9a:3f:e4:fb:ea:46:80:70:
9d:da:f1:eb:e9:4c:6f:b1:c3:0f:ee:49:b4:5e:6b:94:6f:a5:
cf:60:a3:a8:6d:89:49:35:6b:09:ad:7d:ed:2f:c5:91:f0:24:
ea:e0:22:67:fa:4a:4a:45:e9:7d:ce:77:a1:86:52:5f:03:20:
25:40:16:06:a1:09:d4:c9:aa:cc:3e:63:ad:b1:91:b9:1b:99:
5c:c6:bb:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBhi7K+/Jv+sXXFvDLTJG8iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhM2E4OWQ2OTMxYmEzNTRmODRlZDMzNjVjNzQxZTg5N2Jj
MmI2NzEwHhcNMjYwOTAyMDk1NTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzBkN2I3MGRlY2VlODE2NjNhZDdiNWNkMGZhM2IxYTc3MzZmN2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg7KnzXzpEielczYRRcCkIapwBVi
mYA9x0G9NPVCtzYXomdXkA9v1QVTTsmww4sfaC5Y1qgZohWu2Mii0C4gYVqmZ8Yf
GbjSIv01baKWWXMOQN9HU26H5QwkoamVtG2J/BZUXPj+R21we+WC117LW/FfOTh7
0Qr/7gqo9chHIKxQ8lxJF86FRZKi2dnxl88hWBu/gmrm3M9gN3YQL7WKcY+UCTYE
M+Ndh3rPPT8KND4HKeGF2vr8UjZutXQh9+Wj5RgJipKkH/Rxdeu3x4K6k2jkeot7
PfdGsD0jQdqwljKOmYQGbOgpW7VaJBL/PhxFlbkPN8Og1Qm2CDfigabhpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJMNe3DezugWY617XND6Oxp3NvfxMB8GA1UdIwQY
MBaAFEo6idaTG6NU+E7TNlx0Hol7wrZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2pxSjFwTWJvMVQ0VHRNMlhIUWVpWHZDdG5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lZThlZWYtNWRjYy00YzM3LTg1MGEt
NTljYjI1OGQ5YzQ5LzEva3cxN2NON082Qlpqclh0YzBQbzdHbmMyOV9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9lZThlZWYtNWRjYy00YzM3LTg1MGEtNTljYjI1OGQ5YzQ5
LzEvU2pxSjFwTWJvMVQ0VHRNMlhIUWVpWHZDdG5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf2CMA0G
CSqGSIb3DQEBCwUAA4IBAQAzjSk953AgPt9AF+HYlHYxJTDVg3sd1jZsLk2enw0e
ueA1IySr8UqyYAn8Yinp9B0GVmlMq81CviIP6unyOg7shlmwtGmIGMUVu4wfpj0o
bFiHNdix+5n9NzKJcfCZY7py9QFZtd1IveJf/ajzpLZx9PtUPOZCC8GFR20l5iEy
n3zvvgR19GwY6zbIn2c5uRDTO5vq7268zJW/6zPKYYA3tzpeo7Sat/NuoSAsmj/k
++pGgHCd2vHr6UxvscMP7km0XmuUb6XPYKOobYlJNWsJrX3tL8WR8CTq4CJn+kpK
Rel9znehhlJfAyAlQBYGoQnUyarMPmOtsZG5G5lcxrsV
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:24 2026 by rpki-client