Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/seRKs841Y8g2O1E8xroa_TBrBp8.roa
File: seRKs841Y8g2O1E8xroa_TBrBp8.roa (raw, json)
Hash identifier: kpQ1eLdkxRwIBoKMrppo3GYAbwKTak+O4mFLO99qWYo=
Subject key identifier: B1:E4:4A:B3:CE:35:63:C8:36:3B:51:3C:C6:BA:1A:FD:30:6B:06:9F
Certificate issuer: /CN=7c8c1371dd6afd5fd79ea984da3fbda1b94afe23
Certificate serial: 01A136F3D24F2FA39C60097063AA1AD7E5C7
Authority key identifier: 7C:8C:13:71:DD:6A:FD:5F:D7:9E:A9:84:DA:3F:BD:A1:B9:4A:FE:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/seRKs841Y8g2O1E8xroa_TBrBp8.roa
Signing time: Tue 13 Oct 2026 20:28:31 +0000
ROA not before: Tue 13 Oct 2026 20:28:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 195.137.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:f3:d2:4f:2f:a3:9c:60:09:70:63:aa:1a:d7:e5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8c1371dd6afd5fd79ea984da3fbda1b94afe23
Validity
Not Before: Oct 13 20:28:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1e44ab3ce3563c8363b513cc6ba1afd306b069f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a1:da:63:21:fa:61:ff:e9:3f:ff:05:e6:55:
47:6c:02:a6:43:81:64:2e:d9:b0:bb:4d:2f:51:93:
8d:a1:73:ae:b4:c5:d4:0d:0c:db:36:6e:e9:03:db:
e5:f7:e5:dc:b7:b1:b1:3f:a3:11:14:01:d3:0d:89:
07:ad:85:77:55:dd:0f:1e:03:a1:28:7e:d6:0c:77:
16:97:3a:a1:40:68:07:ce:59:1e:40:37:4f:83:58:
2f:cf:43:26:9f:cd:2a:33:da:61:82:fb:5e:4d:60:
11:c7:ea:e5:d1:b7:16:d2:40:5d:e2:5e:d0:ce:f8:
69:e2:a4:b6:e7:17:0e:87:3d:db:8d:8f:0c:44:7b:
3c:46:63:89:7e:d3:dc:27:33:6d:47:f6:44:2b:70:
df:88:08:3c:14:f7:ef:1b:25:c2:90:cd:b8:f4:39:
74:96:95:07:96:3f:6b:99:c7:c1:0c:17:cf:e9:7c:
47:1f:ea:af:1f:9b:6e:9b:55:50:31:8a:35:5f:93:
7c:08:24:bc:76:58:8c:b1:2d:43:f2:a9:a5:61:c8:
54:05:4b:ab:2d:45:f7:c2:5b:78:59:c6:45:80:64:
46:f2:99:b2:96:2b:95:3a:6e:9f:84:5d:a9:85:f6:
eb:6f:bc:9a:73:d5:cb:03:d5:ed:cd:76:b1:c2:81:
67:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E4:4A:B3:CE:35:63:C8:36:3B:51:3C:C6:BA:1A:FD:30:6B:06:9F
X509v3 Authority Key Identifier:
keyid:7C:8C:13:71:DD:6A:FD:5F:D7:9E:A9:84:DA:3F:BD:A1:B9:4A:FE:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/seRKs841Y8g2O1E8xroa_TBrBp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.137.221.0/24
Signature Algorithm: sha256WithRSAEncryption
10:62:f2:c5:72:62:9b:58:59:06:77:c3:93:da:b9:d0:63:ab:
16:66:cd:e0:da:bf:68:6e:06:49:26:93:60:f0:e9:e7:99:8f:
7d:7a:6c:1b:ba:0b:9c:8b:22:e1:2c:21:b9:f7:1a:16:cc:c3:
65:d4:03:fa:40:1d:b3:18:25:4d:ed:79:88:2a:f9:78:e3:ec:
02:b3:1a:43:4b:89:f8:0e:66:ef:0d:aa:88:4d:d2:5a:13:44:
b1:b3:4e:58:80:6b:a8:89:9c:b1:72:ae:cf:65:e6:c1:c5:6a:
14:2c:9b:94:a7:47:ff:bc:de:a8:10:0e:fd:9c:75:f3:79:45:
bc:2a:d2:16:62:10:a8:6c:03:3c:56:0f:f2:d6:a9:51:ea:fd:
cd:2e:90:9b:16:4d:a7:f8:57:42:3a:18:5a:14:64:bb:04:0c:
bc:59:1c:d8:aa:59:ba:91:b1:79:45:06:15:d9:5f:12:8b:04:
00:0f:21:31:21:49:7f:2c:48:f6:b5:b1:5f:ec:79:dc:98:d1:
e3:0c:1c:5e:84:47:bd:4e:55:b7:7c:8b:06:81:55:70:e4:5f:
43:39:29:f4:35:91:52:c5:62:3f:99:5d:62:0b:71:be:c5:38:
e4:44:ea:b1:79:03:92:64:01:e8:34:1b:fb:9b:f8:6a:83:eb:
97:da:4f:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaE289JPL6OcYAlwY6oa1+XHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjOGMxMzcxZGQ2YWZkNWZkNzllYTk4NGRhM2ZiZGExYjk0
YWZlMjMwHhcNMjYxMDEzMjAyODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWU0NGFiM2NlMzU2M2M4MzYzYjUxM2NjNmJhMWFmZDMwNmIwNjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKHaYyH6Yf/pP/8F5lVHbAKmQ4Fk
Ltmwu00vUZONoXOutMXUDQzbNm7pA9vl9+Xct7GxP6MRFAHTDYkHrYV3Vd0PHgOh
KH7WDHcWlzqhQGgHzlkeQDdPg1gvz0Mmn80qM9phgvteTWARx+rl0bcW0kBd4l7Q
zvhp4qS25xcOhz3bjY8MRHs8RmOJftPcJzNtR/ZEK3DfiAg8FPfvGyXCkM249Dl0
lpUHlj9rmcfBDBfP6XxHH+qvH5tum1VQMYo1X5N8CCS8dliMsS1D8qmlYchUBUur
LUX3wlt4WcZFgGRG8pmyliuVOm6fhF2phfbrb7yac9XLA9XtzXaxwoFn+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLHkSrPONWPINjtRPMa6Gv0wawafMB8GA1UdIwQY
MBaAFHyME3Hdav1f156phNo/vaG5Sv4jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkl3VGNkMXFfVl9YbnFtRTJqLTlvYmxLX2lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lOTQ2NTItMTU2NC00ZDFiLTgxOTgt
MWFjNWQ4ODYzMDgyLzEvc2VSS3M4NDFZOGcyTzFFOHhyb2FfVEJyQnA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lOTQ2NTItMTU2NC00ZDFiLTgxOTgtMWFjNWQ4ODYzMDgy
LzEvZkl3VGNkMXFfVl9YbnFtRTJqLTlvYmxLX2lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4ndMA0G
CSqGSIb3DQEBCwUAA4IBAQAQYvLFcmKbWFkGd8OT2rnQY6sWZs3g2r9obgZJJpNg
8OnnmY99emwbuguciyLhLCG59xoWzMNl1AP6QB2zGCVN7XmIKvl44+wCsxpDS4n4
DmbvDaqITdJaE0Sxs05YgGuoiZyxcq7PZebBxWoULJuUp0f/vN6oEA79nHXzeUW8
KtIWYhCobAM8Vg/y1qlR6v3NLpCbFk2n+FdCOhhaFGS7BAy8WRzYqlm6kbF5RQYV
2V8SiwQADyExIUl/LEj2tbFf7HncmNHjDBxehEe9TlW3fIsGgVVw5F9DOSn0NZFS
xWI/mV1iC3G+xTjkROqxeQOSZAHoNBv7m/hqg+uX2k9S
-----END CERTIFICATE-----
Generated at Sat Oct 24 01:58:26 2026 by rpki-client