Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/RIl4fKhBjK-K5FgduYm10GA1QSQ.roa
File: RIl4fKhBjK-K5FgduYm10GA1QSQ.roa (raw, json)
Hash identifier: Ocyf7nYoVAbV1TQsJ/zEIif5q1NMRReT2mzgTvpzHMc=
Subject key identifier: 44:89:78:7C:A8:41:8C:AF:8A:E4:58:1D:B9:89:B5:D0:60:35:41:24
Certificate issuer: /CN=3972c3a9dd4f8e006b3b5ff891b4a3761edce413
Certificate serial: 019F2369218DE275930AB28B5AB98C9C4057
Authority key identifier: 39:72:C3:A9:DD:4F:8E:00:6B:3B:5F:F8:91:B4:A3:76:1E:DC:E4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXLDqd1PjgBrO1_4kbSjdh7c5BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/RIl4fKhBjK-K5FgduYm10GA1QSQ.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15791
IP address blocks: 185.109.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/OXLDqd1PjgBrO1_4kbSjdh7c5BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/OXLDqd1PjgBrO1_4kbSjdh7c5BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXLDqd1PjgBrO1_4kbSjdh7c5BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:21:8d:e2:75:93:0a:b2:8b:5a:b9:8c:9c:40:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3972c3a9dd4f8e006b3b5ff891b4a3761edce413
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4489787ca8418caf8ae4581db989b5d060354124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:51:7d:8d:17:ac:9a:28:fe:02:b8:c8:9c:9a:
12:a1:38:30:23:06:0f:05:a7:35:99:8e:f6:ea:e9:
65:f9:b8:19:14:71:7d:8a:75:90:ce:cd:07:cb:11:
76:26:fd:ca:47:0c:4a:8a:74:b1:b5:52:e1:66:ee:
6c:51:f9:21:bb:7c:a1:5e:af:80:e8:96:29:68:12:
31:2a:c2:f1:fa:f8:49:76:ed:70:0d:72:b6:49:4c:
ca:a0:c2:fa:6d:fa:83:49:2c:14:6f:02:ca:a3:90:
a3:09:0c:bb:e3:a1:a5:97:eb:6d:f7:da:da:fd:57:
83:f7:5c:73:94:aa:e6:45:bd:2a:ff:d6:be:c0:e2:
59:f8:26:06:d3:16:16:9b:be:f4:bc:1c:20:e5:9b:
c8:32:4f:e0:76:6e:25:4b:a6:24:c4:86:db:c8:f2:
7c:18:e0:cf:0f:cb:e2:d1:cd:01:4d:83:88:0f:80:
c4:a4:bc:6f:04:0c:e6:e4:6d:15:d8:22:8c:de:53:
31:98:6f:94:85:ea:d3:a2:fe:51:fd:69:8e:19:df:
dc:a0:49:16:0a:6c:25:80:19:1e:e6:11:94:b6:17:
48:49:3e:d1:39:80:75:13:c1:a8:59:a3:b7:67:31:
46:87:f8:79:ea:68:e3:e0:ee:46:ab:87:17:4e:45:
c5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:89:78:7C:A8:41:8C:AF:8A:E4:58:1D:B9:89:B5:D0:60:35:41:24
X509v3 Authority Key Identifier:
keyid:39:72:C3:A9:DD:4F:8E:00:6B:3B:5F:F8:91:B4:A3:76:1E:DC:E4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXLDqd1PjgBrO1_4kbSjdh7c5BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/RIl4fKhBjK-K5FgduYm10GA1QSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fa5519-0e35-44cf-9d4f-2aea75c2df78/1/OXLDqd1PjgBrO1_4kbSjdh7c5BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.232.0/22
Signature Algorithm: sha256WithRSAEncryption
93:86:ce:7e:53:76:ae:15:b6:f4:3a:81:54:e0:c0:89:27:96:
e8:1e:6f:61:7c:dc:53:03:2d:96:1c:6e:4f:44:b2:78:41:07:
2b:78:fa:f8:86:8b:a9:9f:32:25:80:8c:bf:5b:12:8c:ea:ea:
db:dc:29:fa:31:64:84:cd:42:da:56:b0:57:19:ef:5f:71:af:
7f:6c:51:67:7e:d1:85:2a:3d:da:ee:a0:dd:cf:ab:ae:f0:3b:
9e:47:4a:3d:5f:c4:21:46:85:77:f7:ea:60:78:27:b0:4d:ce:
ed:62:1d:31:70:c0:46:11:f2:bb:30:b0:07:ac:43:c7:68:e5:
ee:ac:dd:2b:9c:1a:4d:84:9a:b2:ab:ac:46:a2:a7:61:02:06:
4f:9f:8d:c2:f0:d5:1a:f2:d9:c6:40:77:d0:da:5d:b4:f0:a4:
ab:99:5c:97:e6:cb:9b:1c:4a:41:ba:35:72:cb:00:38:9f:90:
fe:1f:47:69:30:57:98:d0:30:17:13:7e:97:e2:ca:0d:c8:f3:
0a:7f:ce:c9:de:45:23:fd:5d:52:fb:17:df:cb:c4:af:14:2d:
44:64:9d:6d:3e:64:a7:94:32:af:bb:54:61:05:e7:77:dc:62:
70:25:c6:6a:81:3f:0e:df:96:0b:dc:49:01:fb:34:00:e8:75:
c1:60:a9:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaSGN4nWTCrKLWrmMnEBXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NzJjM2E5ZGQ0ZjhlMDA2YjNiNWZmODkxYjRhMzc2MWVk
Y2U0MTMwHhcNMjYwNzAyMTUxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDg5Nzg3Y2E4NDE4Y2FmOGFlNDU4MWRiOTg5YjVkMDYwMzU0MTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFF9jResmij+ArjInJoSoTgwIwYP
Bac1mY726ull+bgZFHF9inWQzs0HyxF2Jv3KRwxKinSxtVLhZu5sUfkhu3yhXq+A
6JYpaBIxKsLx+vhJdu1wDXK2SUzKoML6bfqDSSwUbwLKo5CjCQy746Gll+tt99ra
/VeD91xzlKrmRb0q/9a+wOJZ+CYG0xYWm770vBwg5ZvIMk/gdm4lS6YkxIbbyPJ8
GODPD8vi0c0BTYOID4DEpLxvBAzm5G0V2CKM3lMxmG+UherTov5R/WmOGd/coEkW
CmwlgBke5hGUthdIST7ROYB1E8GoWaO3ZzFGh/h56mjj4O5Gq4cXTkXFRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFESJeHyoQYyviuRYHbmJtdBgNUEkMB8GA1UdIwQY
MBaAFDlyw6ndT44Aaztf+JG0o3Ye3OQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1hMRHFkMVBqZ0JyTzFfNGtiU2pkaDdjNUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mYTU1MTktMGUzNS00NGNmLTlkNGYt
MmFlYTc1YzJkZjc4LzEvUklsNGZLaEJqSy1LNUZnZHVZbTEwR0ExUVNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mYTU1MTktMGUzNS00NGNmLTlkNGYtMmFlYTc1YzJkZjc4
LzEvT1hMRHFkMVBqZ0JyTzFfNGtiU2pkaDdjNUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuW3oMA0G
CSqGSIb3DQEBCwUAA4IBAQCThs5+U3auFbb0OoFU4MCJJ5boHm9hfNxTAy2WHG5P
RLJ4QQcrePr4houpnzIlgIy/WxKM6urb3Cn6MWSEzULaVrBXGe9fca9/bFFnftGF
Kj3a7qDdz6uu8DueR0o9X8QhRoV39+pgeCewTc7tYh0xcMBGEfK7MLAHrEPHaOXu
rN0rnBpNhJqyq6xGoqdhAgZPn43C8NUa8tnGQHfQ2l208KSrmVyX5subHEpBujVy
ywA4n5D+H0dpMFeY0DAXE36X4soNyPMKf87J3kUj/V1S+xffy8SvFC1EZJ1tPmSn
lDKvu1RhBed33GJwJcZqgT8O35YL3EkB+zQA6HXBYKk1
-----END CERTIFICATE-----
Generated at Mon Jul 27 15:09:59 2026 by rpki-client