Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/_nu4AgdKyCMg5x3LfQVMwvf9JfE.roa
File: _nu4AgdKyCMg5x3LfQVMwvf9JfE.roa (raw, json)
Hash identifier: wZ+QOk95biZDKWTdOhLdR/nTi12VXBXYcUjUw39y42Q=
Subject key identifier: FE:7B:B8:02:07:4A:C8:23:20:E7:1D:CB:7D:05:4C:C2:F7:FD:25:F1
Certificate issuer: /CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Certificate serial: 019FB77113D7DF7EA4C2620CCE368450392F
Authority key identifier: DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/_nu4AgdKyCMg5x3LfQVMwvf9JfE.roa
Signing time: Fri 31 Jul 2026 09:11:08 +0000
ROA not before: Fri 31 Jul 2026 09:11:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204057
IP address blocks: 116.204.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.mft
rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:71:13:d7:df:7e:a4:c2:62:0c:ce:36:84:50:39:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb1f6e00153a4918611b14b6b03f6812ed88a43
Validity
Not Before: Jul 31 09:11:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe7bb802074ac82320e71dcb7d054cc2f7fd25f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e3:04:cc:cf:18:da:17:bb:a6:da:6f:84:29:
71:5f:7b:7d:80:17:4e:e9:c8:71:0f:23:56:78:af:
bb:02:6f:f2:48:c0:30:9c:78:c8:2d:a0:42:9b:24:
84:68:93:66:ab:7e:01:5e:68:a1:89:ab:7b:7e:d1:
36:08:30:8d:43:83:1c:9a:3b:67:29:6a:45:2b:51:
62:13:31:9f:e7:bb:cf:00:d6:6f:4b:65:86:6c:f5:
b2:50:83:ce:38:8a:5e:bb:e1:c6:e4:2a:d1:82:80:
51:16:99:a6:8e:aa:9d:19:2f:05:ae:39:de:3b:65:
96:94:4e:17:76:84:8d:4a:32:35:36:46:90:21:0d:
ab:2d:18:d9:a7:f9:b3:7c:03:01:d1:8a:86:b1:6c:
f4:88:18:5a:30:60:5e:aa:e0:92:0b:4b:94:a6:fa:
77:12:f5:1f:5a:35:b8:90:8e:5a:7e:a5:02:80:e7:
a5:59:9e:28:66:51:bd:a0:09:f7:88:b9:16:85:97:
6e:a8:a0:f0:00:4b:4e:f3:c4:77:f9:95:e8:a5:4f:
0e:9c:6c:73:ae:dc:d6:6c:57:88:bd:8a:1c:9c:19:
02:d2:09:3b:d4:5e:0d:2b:e6:df:67:38:1c:a6:18:
fc:1b:9d:05:dc:d3:dc:22:9d:f5:48:23:3a:95:c2:
08:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7B:B8:02:07:4A:C8:23:20:E7:1D:CB:7D:05:4C:C2:F7:FD:25:F1
X509v3 Authority Key Identifier:
keyid:DF:B1:F6:E0:01:53:A4:91:86:11:B1:4B:6B:03:F6:81:2E:D8:8A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37H24AFTpJGGEbFLawP2gS7YikM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/_nu4AgdKyCMg5x3LfQVMwvf9JfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5379e5-3d85-41b1-9d71-810627fb2671/1/37H24AFTpJGGEbFLawP2gS7YikM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.204.153.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:1c:e4:cd:86:5a:52:bb:46:fb:be:30:a7:33:ed:2c:ca:67:
c9:12:b5:bc:47:eb:c4:e7:93:02:6d:de:92:d3:3c:13:16:b4:
5b:61:a4:73:40:fb:77:37:59:70:90:89:2f:f8:8c:5f:f0:c9:
94:37:e3:9c:a3:c8:18:ee:2c:2b:95:90:57:18:0e:c5:7f:e8:
ae:4f:0a:ec:19:0c:ef:10:ac:d4:0e:55:57:4a:6d:2b:27:23:
70:eb:43:33:a8:b6:62:40:d4:0f:a5:dd:e5:83:b6:9e:1b:5f:
58:ff:35:32:f5:85:50:4b:94:49:60:bd:cd:69:fe:43:2e:04:
34:47:11:bf:77:d7:d8:ce:05:7a:31:16:02:fe:1d:a3:dc:bf:
f4:db:89:3b:62:5d:67:8e:92:2c:b7:ae:df:69:7f:81:79:31:
b1:ed:fe:62:d5:47:00:c1:46:e6:6e:ae:dd:b0:4a:da:3b:e6:
84:b3:0d:8f:b2:14:1c:95:70:c0:ff:08:6b:46:f5:23:ea:1f:
94:bb:f5:0e:db:a2:e9:57:a1:7a:ae:ff:af:67:67:09:4e:fb:
0f:28:24:4d:fc:13:85:07:9e:7c:b6:b1:95:91:76:44:19:43:
45:37:4a:69:f1:0f:5c:88:7e:6b:f2:3d:24:39:55:aa:da:d4:
50:fe:19:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+3cRPX336kwmIMzjaEUDkvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYjFmNmUwMDE1M2E0OTE4NjExYjE0YjZiMDNmNjgxMmVk
ODhhNDMwHhcNMjYwNzMxMDkxMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTdiYjgwMjA3NGFjODIzMjBlNzFkY2I3ZDA1NGNjMmY3ZmQyNWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOMEzM8Y2he7ptpvhClxX3t9gBdO
6chxDyNWeK+7Am/ySMAwnHjILaBCmySEaJNmq34BXmihiat7ftE2CDCNQ4Mcmjtn
KWpFK1FiEzGf57vPANZvS2WGbPWyUIPOOIpeu+HG5CrRgoBRFpmmjqqdGS8Frjne
O2WWlE4XdoSNSjI1NkaQIQ2rLRjZp/mzfAMB0YqGsWz0iBhaMGBequCSC0uUpvp3
EvUfWjW4kI5afqUCgOelWZ4oZlG9oAn3iLkWhZduqKDwAEtO88R3+ZXopU8OnGxz
rtzWbFeIvYocnBkC0gk71F4NK+bfZzgcphj8G50F3NPcIp31SCM6lcIIAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP57uAIHSsgjIOcdy30FTML3/SXxMB8GA1UdIwQY
MBaAFN+x9uABU6SRhhGxS2sD9oEu2IpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzdIMjRBRlRwSkdHRWJGTGF3UDJnUzdZaWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS81Mzc5ZTUtM2Q4NS00MWIxLTlkNzEt
ODEwNjI3ZmIyNjcxLzEvX251NEFnZEt5Q01nNXgzTGZRVk13dmY5SmZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS81Mzc5ZTUtM2Q4NS00MWIxLTlkNzEtODEwNjI3ZmIyNjcx
LzEvMzdIMjRBRlRwSkdHRWJGTGF3UDJnUzdZaWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAdMyZMA0G
CSqGSIb3DQEBCwUAA4IBAQCMHOTNhlpSu0b7vjCnM+0symfJErW8R+vE55MCbd6S
0zwTFrRbYaRzQPt3N1lwkIkv+Ixf8MmUN+Oco8gY7iwrlZBXGA7Ff+iuTwrsGQzv
EKzUDlVXSm0rJyNw60MzqLZiQNQPpd3lg7aeG19Y/zUy9YVQS5RJYL3Naf5DLgQ0
RxG/d9fYzgV6MRYC/h2j3L/024k7Yl1njpIst67faX+BeTGx7f5i1UcAwUbmbq7d
sEraO+aEsw2PshQclXDA/whrRvUj6h+Uu/UO26LpV6F6rv+vZ2cJTvsPKCRN/BOF
B558trGVkXZEGUNFN0pp8Q9ciH5r8j0kOVWq2tRQ/hnW
-----END CERTIFICATE-----
Generated at Sat Aug 15 01:26:37 2026 by rpki-client