Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/ctQ_pi7dHsaofgQDy3s_3MF0z5c.roa
File: ctQ_pi7dHsaofgQDy3s_3MF0z5c.roa (raw, json)
Hash identifier: LuXSDcOcTzSmFT/Y8M2/v07fi5jciWmvVvQylNBVZ2A=
Subject key identifier: 72:D4:3F:A6:2E:DD:1E:C6:A8:7E:04:03:CB:7B:3F:DC:C1:74:CF:97
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 01A063615CBBAC37305FB8AB73E21792233D
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/ctQ_pi7dHsaofgQDy3s_3MF0z5c.roa
Signing time: Wed 02 Sep 2026 18:28:40 +0000
ROA not before: Wed 02 Sep 2026 18:28:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218955
IP address blocks: 185.251.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 08:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:63:61:5c:bb:ac:37:30:5f:b8:ab:73:e2:17:92:23:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Sep 2 18:28:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72d43fa62edd1ec6a87e0403cb7b3fdcc174cf97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e5:61:f4:e1:52:ff:d0:ee:8c:c7:97:06:3c:
de:ba:53:9d:f0:b4:af:ec:69:78:47:89:92:fc:44:
1e:eb:33:54:80:a8:59:26:7a:b0:95:e2:98:6d:65:
df:af:78:eb:74:99:97:66:50:57:85:24:c7:e4:a4:
2a:8d:37:61:0b:6b:ff:ac:43:d3:78:35:18:aa:42:
d2:08:18:98:c7:7f:e3:60:16:f6:e5:b5:56:72:f1:
54:33:b0:37:10:63:a7:e4:1f:2c:2e:04:52:2e:28:
bc:48:4c:a2:a5:e3:e2:78:9b:0d:2d:52:c9:37:3f:
06:96:73:c5:67:b5:05:aa:62:4e:32:aa:4f:08:a7:
31:53:74:d0:ed:3b:ea:ac:af:58:30:f8:b2:43:2a:
eb:e5:96:08:9d:af:dd:e5:5b:21:63:27:ff:bb:c1:
a4:22:0e:3f:00:8b:88:26:5a:ce:ef:63:50:b9:14:
0b:8a:b2:95:a0:e6:48:fd:3d:82:f2:9f:3e:3a:8e:
bf:02:9c:bf:ef:74:1c:ba:fa:a5:e5:8c:28:84:9c:
db:6b:03:8f:b4:a3:f9:7b:d4:0b:6c:e6:29:58:ee:
29:03:ce:28:b0:86:bd:ee:18:31:79:c7:e2:9c:29:
5d:bb:a2:5c:7d:01:dc:36:e6:7b:92:76:5a:72:b1:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D4:3F:A6:2E:DD:1E:C6:A8:7E:04:03:CB:7B:3F:DC:C1:74:CF:97
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/ctQ_pi7dHsaofgQDy3s_3MF0z5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.83.0/24
Signature Algorithm: sha256WithRSAEncryption
38:cf:73:b8:c2:35:8f:b8:9d:ce:79:7b:f4:0b:cd:44:f6:7e:
cf:b3:b2:af:76:bc:d4:91:bc:d1:9c:65:2f:f5:f0:3e:a4:96:
7a:84:18:81:b5:3c:c7:d0:dc:d7:87:eb:1f:43:05:68:ef:dc:
a4:27:cd:18:25:b4:57:03:2d:28:58:7a:7b:fd:34:77:51:18:
0f:03:48:17:ac:bb:44:be:03:8b:03:be:c4:8a:91:99:28:f5:
d3:f0:a3:b3:67:60:65:7b:ce:00:42:f6:a6:2c:04:cf:a6:8e:
ab:89:72:16:d6:ec:e6:f7:56:b7:a3:32:6d:c6:78:f9:e2:ea:
8d:ba:4c:a0:2c:d5:5f:63:9c:db:71:bf:fe:fe:4d:3e:c3:e5:
57:83:34:19:2b:15:e2:0d:e3:8d:64:a5:be:10:b5:66:a8:69:
81:8e:a9:fe:5a:39:00:09:91:be:a5:47:8a:4a:6f:1b:ae:08:
ba:b4:2b:66:3c:51:3b:5e:f8:86:f5:d9:71:d9:ad:fc:dd:ea:
1e:69:95:e4:1c:71:08:0b:ff:7d:91:45:50:df:59:c2:b1:f7:
8e:91:dd:1b:80:8c:87:b6:ce:25:f3:7f:b2:75:bb:f0:c7:9c:
45:33:24:a0:db:89:59:ce:dc:65:2a:f6:6c:f7:82:9e:0e:6f:
3d:9b:d9:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBjYVy7rDcwX7irc+IXkiM9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj
ZjE2YmUwHhcNMjYwOTAyMTgyODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmQ0M2ZhNjJlZGQxZWM2YTg3ZTA0MDNjYjdiM2ZkY2MxNzRjZjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreVh9OFS/9DujMeXBjzeulOd8LSv
7Gl4R4mS/EQe6zNUgKhZJnqwleKYbWXfr3jrdJmXZlBXhSTH5KQqjTdhC2v/rEPT
eDUYqkLSCBiYx3/jYBb25bVWcvFUM7A3EGOn5B8sLgRSLii8SEyipePieJsNLVLJ
Nz8GlnPFZ7UFqmJOMqpPCKcxU3TQ7TvqrK9YMPiyQyrr5ZYIna/d5VshYyf/u8Gk
Ig4/AIuIJlrO72NQuRQLirKVoOZI/T2C8p8+Oo6/Apy/73Qcuvql5YwohJzbawOP
tKP5e9QLbOYpWO4pA84osIa97hgxecfinCldu6JcfQHcNuZ7knZacrFPhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHLUP6Yu3R7GqH4EA8t7P9zBdM+XMB8GA1UdIwQY
MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt
OTcyNDNlMzE2MjcyLzEvY3RRX3BpN2RIc2FvZmdRRHkzc18zTUYwejVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy
LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuftTMA0G
CSqGSIb3DQEBCwUAA4IBAQA4z3O4wjWPuJ3OeXv0C81E9n7Ps7KvdrzUkbzRnGUv
9fA+pJZ6hBiBtTzH0NzXh+sfQwVo79ykJ80YJbRXAy0oWHp7/TR3URgPA0gXrLtE
vgOLA77EipGZKPXT8KOzZ2Ble84AQvamLATPpo6riXIW1uzm91a3ozJtxnj54uqN
ukygLNVfY5zbcb/+/k0+w+VXgzQZKxXiDeONZKW+ELVmqGmBjqn+WjkACZG+pUeK
Sm8brgi6tCtmPFE7XviG9dlx2a383eoeaZXkHHEIC/99kUVQ31nCsfeOkd0bgIyH
ts4l83+ydbvwx5xFMySg24lZztxlKvZs94KeDm89m9kC
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:43:36 2026 by rpki-client