Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/V6w0asIVAb0u0o3DV2hY90L8mCc.roa
File: V6w0asIVAb0u0o3DV2hY90L8mCc.roa (raw, json)
Hash identifier: 5cbYuB7x2KhbgcRCflXJsJYRRrgG7Z/bM8U43xl7v+A=
Subject key identifier: 57:AC:34:6A:C2:15:01:BD:2E:D2:8D:C3:57:68:58:F7:42:FC:98:27
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019DDDE6E41FA672684C9FB7874EE4598015
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/V6w0asIVAb0u0o3DV2hY90L8mCc.roa
Signing time: Thu 30 Apr 2026 10:19:49 +0000
ROA not before: Thu 30 Apr 2026 10:19:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209805
IP address blocks: 185.65.200.0/24 maxlen: 24
185.65.201.0/24 maxlen: 24
185.120.56.0/24 maxlen: 24
212.22.70.0/24 maxlen: 24
212.22.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:e6:e4:1f:a6:72:68:4c:9f:b7:87:4e:e4:59:80:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Apr 30 10:19:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57ac346ac21501bd2ed28dc3576858f742fc9827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0d:2e:e9:ee:96:4b:08:45:f4:2b:c2:c2:45:
e9:f8:cc:7f:ce:66:3f:37:a3:52:2c:05:d4:91:4e:
16:ea:eb:6d:b0:5f:85:46:ed:2f:8c:8b:76:26:d5:
bc:98:6b:99:2c:f5:48:b0:dd:c0:24:34:99:b8:5e:
95:0b:9b:5c:89:15:11:8b:00:29:a3:db:a9:90:b3:
6f:8b:4d:af:ae:d5:d8:cb:85:30:2d:c7:6d:a2:b0:
1b:62:74:9a:ce:8f:cb:fc:dc:a9:47:d8:48:90:2b:
60:0b:9f:b4:dd:5f:de:09:34:4b:e9:40:80:9a:24:
e8:2f:22:a0:de:63:ed:2f:fa:3f:aa:40:66:42:42:
d9:28:46:cb:19:03:10:30:86:b7:04:aa:c9:a3:01:
f1:5f:e2:e4:e9:4a:39:c2:65:ec:36:a0:c8:5c:08:
e3:d7:f2:1d:d1:a2:a4:1b:90:f0:b1:4f:79:c8:43:
91:bb:26:cd:ef:16:a0:ef:d2:97:0d:b0:51:6e:71:
51:f3:c4:82:6f:a0:b2:39:b9:15:3d:6e:f6:2b:e3:
f5:5f:db:b5:af:59:f9:b1:a5:fc:9c:f5:04:ec:df:
2c:2c:ce:df:14:88:38:e3:b3:b9:80:90:96:26:93:
48:c3:e8:3a:0a:39:e3:34:e7:42:e6:a5:eb:ae:58:
f3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AC:34:6A:C2:15:01:BD:2E:D2:8D:C3:57:68:58:F7:42:FC:98:27
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/V6w0asIVAb0u0o3DV2hY90L8mCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.200.0/23
185.120.56.0/24
212.22.70.0/24
212.22.94.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:49:e6:57:3f:a4:45:a4:47:0d:46:d2:73:83:b8:21:bd:f8:
c3:9d:41:3e:bc:b2:3e:0d:8e:9a:2b:fa:bc:99:38:81:6b:4c:
02:be:70:b3:9e:a9:6b:d5:dc:24:e1:4f:04:a3:c6:19:19:f5:
6a:ba:ec:b1:1c:d1:b3:f1:b2:5f:2e:9a:eb:0a:98:5c:0e:ce:
fe:9b:33:a4:3e:02:12:36:6a:05:27:75:b6:d7:7e:f1:4f:28:
6e:ca:d2:70:fb:b1:aa:d3:2d:95:71:2b:2d:08:96:60:99:5f:
6f:89:6d:ff:b1:72:7d:f4:cd:49:1a:84:97:92:65:ec:0c:1d:
80:0a:b1:f2:68:b5:a6:16:53:bf:8d:78:8e:8b:c7:89:c4:39:
7e:d4:1f:e7:98:d8:1c:90:00:07:a4:0a:7a:4f:75:c5:42:8d:
05:b0:06:21:3a:52:b1:a0:44:22:09:b9:fa:3a:05:e0:c0:d0:
3d:e7:fe:31:c0:b3:b4:92:37:2e:82:4b:4f:5f:cb:fb:d1:db:
4d:f7:48:d1:57:0b:11:8b:51:55:04:5c:2d:8a:6f:25:f0:fa:
57:6f:87:de:23:e8:89:9a:b6:fa:f1:73:fe:52:87:64:4c:11:
56:c5:6d:a5:23:79:75:fc:02:18:96:be:27:df:ed:ad:b2:2c:
be:0b:fb:45
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ3d5uQfpnJoTJ+3h07kWYAVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm
YmViOWEwHhcNMjYwNDMwMTAxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2FjMzQ2YWMyMTUwMWJkMmVkMjhkYzM1NzY4NThmNzQyZmM5ODI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhg0u6e6WSwhF9CvCwkXp+Mx/zmY/
N6NSLAXUkU4W6uttsF+FRu0vjIt2JtW8mGuZLPVIsN3AJDSZuF6VC5tciRURiwAp
o9upkLNvi02vrtXYy4UwLcdtorAbYnSazo/L/NypR9hIkCtgC5+03V/eCTRL6UCA
miToLyKg3mPtL/o/qkBmQkLZKEbLGQMQMIa3BKrJowHxX+Lk6Uo5wmXsNqDIXAjj
1/Id0aKkG5DwsU95yEORuybN7xag79KXDbBRbnFR88SCb6CyObkVPW72K+P1X9u1
r1n5saX8nPUE7N8sLM7fFIg447O5gJCWJpNIw+g6CjnjNOdC5qXrrljzSwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFesNGrCFQG9LtKNw1doWPdC/JgnMB8GA1UdIwQY
MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt
NmE0ZWNhZjhiM2IxLzEvVjZ3MGFzSVZBYjB1MG8zRFYyaFk5MEw4bUNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix
LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBuUHIAwQA
uXg4AwQA1BZGAwQA1BZeMA0GCSqGSIb3DQEBCwUAA4IBAQCqSeZXP6RFpEcNRtJz
g7ghvfjDnUE+vLI+DY6aK/q8mTiBa0wCvnCznqlr1dwk4U8Eo8YZGfVquuyxHNGz
8bJfLprrCphcDs7+mzOkPgISNmoFJ3W2137xTyhuytJw+7Gq0y2VcSstCJZgmV9v
iW3/sXJ99M1JGoSXkmXsDB2ACrHyaLWmFlO/jXiOi8eJxDl+1B/nmNgckAAHpAp6
T3XFQo0FsAYhOlKxoEQiCbn6OgXgwNA95/4xwLO0kjcugktPX8v70dtN90jRVwsR
i1FVBFwtim8l8PpXb4feI+iJmrb68XP+UodkTBFWxW2lI3l1/AIYlr4n3+2tsiy+
C/tF
-----END CERTIFICATE-----
Generated at Wed May 6 07:14:44 2026 by rpki-client