Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/8ds30e27s4jEGttTs6YlBQM3z5s.roa
File: 8ds30e27s4jEGttTs6YlBQM3z5s.roa (raw, json)
Hash identifier: fhyuHvz2U+aS6Bex74blw3zMPMfs8rwkJE+Axsibwvc=
Subject key identifier: F1:DB:37:D1:ED:BB:B3:88:C4:1A:DB:53:B3:A6:25:05:03:37:CF:9B
Certificate issuer: /CN=69ced62e698f39cfb36be0c4d1c98405f67ae350
Certificate serial: 019F2368EC411F43BC79EDB519AEB5D474C5
Authority key identifier: 69:CE:D6:2E:69:8F:39:CF:B3:6B:E0:C4:D1:C9:84:05:F6:7A:E3:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ac7WLmmPOc-za-DE0cmEBfZ641A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/8ds30e27s4jEGttTs6YlBQM3z5s.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 185.190.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ac7WLmmPOc-za-DE0cmEBfZ641A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ec:41:1f:43:bc:79:ed:b5:19:ae:b5:d4:74:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ced62e698f39cfb36be0c4d1c98405f67ae350
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1db37d1edbbb388c41adb53b3a625050337cf9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6d:9f:de:46:af:4f:47:33:88:fb:3d:0b:38:
b6:03:88:17:b9:e4:52:ef:c7:07:e7:66:0c:91:44:
f8:84:67:99:7f:a2:fe:2a:a6:aa:bb:ef:7b:43:a1:
47:03:09:67:2f:5f:73:ff:62:55:f9:b0:e7:b9:41:
9a:eb:74:c6:63:cd:fa:8c:59:ec:50:5d:27:fb:be:
7a:e9:97:b2:4e:33:f2:11:b0:d9:e4:49:3d:5a:a3:
a8:71:24:88:d9:08:80:3d:a1:8f:5b:dd:66:77:47:
09:ef:a4:44:bb:7e:9e:38:ac:3e:ca:a2:e6:1b:37:
b5:e6:a5:1d:90:65:72:09:3d:61:6f:80:34:13:45:
65:28:ad:ed:d8:73:59:c6:3f:fd:f2:d7:57:7a:0b:
1a:0e:04:6f:5f:a2:ca:96:85:e5:21:ee:d3:70:c3:
28:08:17:f1:0c:1f:3c:9e:af:29:a0:41:33:eb:63:
1d:15:5a:c0:be:11:47:8b:61:df:e5:91:2d:d5:c0:
70:2d:54:1f:64:48:44:97:fe:47:0b:54:6d:3d:27:
6a:93:c6:ae:35:97:37:b7:9c:b3:13:53:29:4b:71:
fe:43:85:ef:21:b8:fb:c4:8f:db:0e:b7:85:7f:76:
87:b5:f1:a9:24:e3:8a:8c:0a:7f:34:20:b1:b3:0a:
34:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DB:37:D1:ED:BB:B3:88:C4:1A:DB:53:B3:A6:25:05:03:37:CF:9B
X509v3 Authority Key Identifier:
keyid:69:CE:D6:2E:69:8F:39:CF:B3:6B:E0:C4:D1:C9:84:05:F6:7A:E3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac7WLmmPOc-za-DE0cmEBfZ641A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/8ds30e27s4jEGttTs6YlBQM3z5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.37.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:b0:91:03:1e:a9:87:f5:03:a0:37:35:2e:6a:6a:e0:eb:c8:
bb:be:e9:23:4b:ad:77:76:b6:45:d0:09:93:8d:e6:53:b4:c9:
c5:1d:87:8b:70:98:0a:84:ae:0b:08:54:4b:a2:61:9f:ad:c2:
b7:2c:cf:bc:13:13:c1:77:ca:cc:af:54:f4:6e:af:34:4a:5e:
c5:35:92:20:3d:bd:95:18:40:77:2d:da:a7:01:ee:cb:fe:50:
1a:84:19:d3:c5:0a:6a:42:88:54:39:8d:28:c2:94:71:a3:2e:
d7:eb:cd:d4:eb:a4:07:1d:3a:df:cb:58:22:17:7b:9a:9d:b0:
3d:42:be:59:07:b1:d6:9c:41:86:ff:7e:74:b6:1d:72:64:17:
f4:ee:3e:9c:d2:7d:fe:48:fe:78:3c:b1:3a:2e:32:79:1e:de:
f5:36:bd:99:ac:a0:86:da:da:71:c9:e6:2d:02:ab:96:31:3e:
83:f6:89:7b:f3:47:57:dc:4c:f6:c3:f5:1c:81:8f:3f:4a:1c:
32:2f:09:ff:20:ac:f4:5b:19:fa:c6:b5:c9:28:e3:f8:9b:b8:
c4:2e:aa:8d:74:f6:27:25:fc:70:80:24:8f:e7:70:7f:32:29:
72:8e:00:4f:d2:c0:89:6f:b3:76:6b:d6:a3:5f:57:93:44:e5:
db:5d:77:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaOxBH0O8ee21Ga611HTFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5Y2VkNjJlNjk4ZjM5Y2ZiMzZiZTBjNGQxYzk4NDA1ZjY3
YWUzNTAwHhcNMjYwNzAyMTUxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWRiMzdkMWVkYmJiMzg4YzQxYWRiNTNiM2E2MjUwNTAzMzdjZjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom2f3kavT0cziPs9Czi2A4gXueRS
78cH52YMkUT4hGeZf6L+Kqaqu+97Q6FHAwlnL19z/2JV+bDnuUGa63TGY836jFns
UF0n+7566ZeyTjPyEbDZ5Ek9WqOocSSI2QiAPaGPW91md0cJ76REu36eOKw+yqLm
Gze15qUdkGVyCT1hb4A0E0VlKK3t2HNZxj/98tdXegsaDgRvX6LKloXlIe7TcMMo
CBfxDB88nq8poEEz62MdFVrAvhFHi2Hf5ZEt1cBwLVQfZEhEl/5HC1RtPSdqk8au
NZc3t5yzE1MpS3H+Q4XvIbj7xI/bDreFf3aHtfGpJOOKjAp/NCCxswo0gwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPHbN9Htu7OIxBrbU7OmJQUDN8+bMB8GA1UdIwQY
MBaAFGnO1i5pjznPs2vgxNHJhAX2euNQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWM3V0xtbVBPYy16YS1ERTBjbUVCZlo2NDFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85ZmU0OWYtOWVkMC00ZGIzLTliZTUt
NWM2OTA0NDdiYTg5LzEvOGRzMzBlMjdzNGpFR3R0VHM2WWxCUU0zejVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85ZmU0OWYtOWVkMC00ZGIzLTliZTUtNWM2OTA0NDdiYTg5
LzEvYWM3V0xtbVBPYy16YS1ERTBjbUVCZlo2NDFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAub4lMA0G
CSqGSIb3DQEBCwUAA4IBAQAqsJEDHqmH9QOgNzUuamrg68i7vukjS613drZF0AmT
jeZTtMnFHYeLcJgKhK4LCFRLomGfrcK3LM+8ExPBd8rMr1T0bq80Sl7FNZIgPb2V
GEB3LdqnAe7L/lAahBnTxQpqQohUOY0owpRxoy7X683U66QHHTrfy1giF3uanbA9
Qr5ZB7HWnEGG/350th1yZBf07j6c0n3+SP54PLE6LjJ5Ht71Nr2ZrKCG2tpxyeYt
AquWMT6D9ol780dX3Ez2w/UcgY8/ShwyLwn/IKz0Wxn6xrXJKOP4m7jELqqNdPYn
JfxwgCSP53B/MilyjgBP0sCJb7N2a9ajX1eTROXbXXfC
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:30 2026 by rpki-client