Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/E7Rm0aUdHrYBhOFVzUfIL2fIx1g.roa
File: E7Rm0aUdHrYBhOFVzUfIL2fIx1g.roa (raw, json)
Hash identifier: r3HZ3F7FXoFuLxCixJgEocAqMUN20PxmzrQVGnHd8Uc=
Subject key identifier: 13:B4:66:D1:A5:1D:1E:B6:01:84:E1:55:CD:47:C8:2F:67:C8:C7:58
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 01A05BF44DDA00B6160D4CBD0E9354942CC6
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/E7Rm0aUdHrYBhOFVzUfIL2fIx1g.roa
Signing time: Tue 01 Sep 2026 07:52:12 +0000
ROA not before: Tue 01 Sep 2026 07:52:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219182
IP address blocks: 185.251.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:f4:4d:da:00:b6:16:0d:4c:bd:0e:93:54:94:2c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Sep 1 07:52:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13b466d1a51d1eb60184e155cd47c82f67c8c758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:de:eb:d5:a1:c0:0f:0d:80:d5:d7:f5:92:e3:
ff:fd:88:af:4a:ad:d1:57:50:60:f5:e1:ec:35:c4:
1a:e3:0c:33:a1:3d:e9:b3:1c:ac:50:61:c8:d1:b5:
d3:c1:fa:45:ac:e9:d8:05:ca:72:5c:35:45:78:1c:
a2:2a:c1:4a:cf:03:3d:92:06:4b:41:3b:06:7d:fd:
fe:57:ae:c5:ab:db:a7:82:42:05:28:8b:59:91:f1:
a7:62:b1:2a:12:cd:80:77:a3:96:48:d6:3a:85:46:
70:15:db:e3:ff:d7:16:33:39:53:be:cf:56:0c:0f:
db:ac:4a:70:7c:f2:52:78:f3:f2:80:6c:5a:5f:55:
d4:3a:be:c3:be:bd:87:95:37:6b:7d:e1:8d:16:27:
8a:34:61:e6:2f:f3:55:5c:30:ed:45:e1:ee:e5:6d:
a5:bc:71:97:05:1f:bf:d3:58:5c:64:d0:d9:4d:f8:
6e:1f:c3:e8:84:d2:ee:55:42:29:5c:33:00:c9:91:
25:f8:10:44:f3:a8:1e:1d:94:8e:d0:0e:62:f3:a5:
ba:38:eb:76:81:58:e5:4d:f0:39:51:df:f7:6c:94:
12:d0:ec:91:fa:7a:4f:b3:e8:d3:58:53:41:e6:e9:
d1:2b:f8:67:84:f4:3d:a2:7f:fc:8d:8f:bc:34:3a:
ee:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B4:66:D1:A5:1D:1E:B6:01:84:E1:55:CD:47:C8:2F:67:C8:C7:58
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/E7Rm0aUdHrYBhOFVzUfIL2fIx1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.83.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:23:42:4c:22:75:ca:25:d1:15:94:71:bf:ed:77:67:b7:53:
64:d8:d9:83:61:32:c6:f7:08:05:bf:6c:9e:a3:90:b2:90:10:
4a:dc:db:60:89:6f:a2:32:1d:b0:d7:4d:30:fc:a6:58:06:46:
09:ed:5d:50:62:99:2f:b6:ae:fa:3a:cd:e0:91:5b:3e:25:f9:
72:aa:8f:6d:d6:d2:6c:eb:c7:94:a3:e8:33:d3:e1:24:09:1a:
e8:fd:58:ee:5d:04:19:7a:b9:d6:a3:b4:9a:d1:5b:3a:50:c8:
01:36:a3:e9:76:63:fd:d0:3b:12:32:71:34:a5:72:4a:6a:2f:
fa:86:04:3b:90:dd:7f:82:94:6e:f8:c2:8d:2d:af:41:69:bf:
a9:f3:82:63:13:05:fd:e7:02:0f:cf:de:7b:6c:b1:6c:fc:89:
8b:72:64:88:2b:07:d6:f2:c8:0e:96:0b:82:5d:27:e9:7e:f2:
f5:08:32:c4:8b:4d:70:4e:ea:35:c2:63:42:94:0c:72:4c:ad:
ef:f8:5e:7d:35:a7:d2:84:bb:f7:f7:01:06:2c:c4:5e:c0:f2:
2d:9d:22:1f:7c:c6:a3:49:72:de:80:7c:54:4d:92:7d:98:4b:
18:76:5f:16:c2:07:fe:29:cf:a9:ad:e6:73:27:f4:2f:a1:54:
19:19:10:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBb9E3aALYWDUy9DpNUlCzGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj
ZjE2YmUwHhcNMjYwOTAxMDc1MjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2I0NjZkMWE1MWQxZWI2MDE4NGUxNTVjZDQ3YzgyZjY3YzhjNzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA597r1aHADw2A1df1kuP//YivSq3R
V1Bg9eHsNcQa4wwzoT3psxysUGHI0bXTwfpFrOnYBcpyXDVFeByiKsFKzwM9kgZL
QTsGff3+V67Fq9ungkIFKItZkfGnYrEqEs2Ad6OWSNY6hUZwFdvj/9cWMzlTvs9W
DA/brEpwfPJSePPygGxaX1XUOr7Dvr2HlTdrfeGNFieKNGHmL/NVXDDtReHu5W2l
vHGXBR+/01hcZNDZTfhuH8PohNLuVUIpXDMAyZEl+BBE86geHZSO0A5i86W6OOt2
gVjlTfA5Ud/3bJQS0OyR+npPs+jTWFNB5unRK/hnhPQ9on/8jY+8NDruiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBO0ZtGlHR62AYThVc1HyC9nyMdYMB8GA1UdIwQY
MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt
OTcyNDNlMzE2MjcyLzEvRTdSbTBhVWRIcllCaE9GVnpVZklMMmZJeDFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy
LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuftTMA0G
CSqGSIb3DQEBCwUAA4IBAQCmI0JMInXKJdEVlHG/7Xdnt1Nk2NmDYTLG9wgFv2ye
o5CykBBK3NtgiW+iMh2w100w/KZYBkYJ7V1QYpkvtq76Os3gkVs+Jflyqo9t1tJs
68eUo+gz0+EkCRro/VjuXQQZernWo7Sa0Vs6UMgBNqPpdmP90DsSMnE0pXJKai/6
hgQ7kN1/gpRu+MKNLa9Bab+p84JjEwX95wIPz957bLFs/ImLcmSIKwfW8sgOlguC
XSfpfvL1CDLEi01wTuo1wmNClAxyTK3v+F59NafShLv39wEGLMRewPItnSIffMaj
SXLegHxUTZJ9mEsYdl8Wwgf+Kc+preZzJ/QvoVQZGRBC
-----END CERTIFICATE-----
Generated at Wed Sep 2 11:03:48 2026 by rpki-client