Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/sTJv0BczOqKeqlhWC3yVmXfKqAQ.roa
File: sTJv0BczOqKeqlhWC3yVmXfKqAQ.roa (raw, json)
Hash identifier: szTWeTLVa/lbCgRM+88z6fU1aZrlAcINrboqeCQYoqw=
Subject key identifier: B1:32:6F:D0:17:33:3A:A2:9E:AA:58:56:0B:7C:95:99:77:CA:A8:04
Certificate issuer: /CN=6a7480b3846f735c98cf9b00e980462a18b06cf6
Certificate serial: 019F2368B48DB3ED9714C8FE74A24E65D41C
Authority key identifier: 6A:74:80:B3:84:6F:73:5C:98:CF:9B:00:E9:80:46:2A:18:B0:6C:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anSAs4Rvc1yYz5sA6YBGKhiwbPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/sTJv0BczOqKeqlhWC3yVmXfKqAQ.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56953
IP address blocks: 31.132.200.0/21 maxlen: 24
91.229.152.0/23 maxlen: 24
2001:67c:2340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/anSAs4Rvc1yYz5sA6YBGKhiwbPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/anSAs4Rvc1yYz5sA6YBGKhiwbPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/anSAs4Rvc1yYz5sA6YBGKhiwbPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b4:8d:b3:ed:97:14:c8:fe:74:a2:4e:65:d4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a7480b3846f735c98cf9b00e980462a18b06cf6
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1326fd017333aa29eaa58560b7c959977caa804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:db:40:1c:7f:39:ba:c3:8a:4f:7a:36:a5:
3a:e1:9e:70:ca:57:ff:f0:16:73:8a:b0:04:a2:2f:
b3:7c:7b:d7:e7:38:fe:a3:97:0f:b6:da:0c:0f:0a:
6a:aa:e4:fc:4f:17:30:0f:bb:1a:b4:c7:cc:a3:8c:
10:b0:6c:25:76:64:09:a6:0f:83:0a:26:08:11:98:
71:88:98:a1:50:08:09:bc:89:d6:59:0d:fe:52:bf:
f2:2d:df:1f:01:2c:cc:32:cf:94:5a:ee:ae:a9:10:
b7:11:fd:ec:9b:7a:0e:0f:27:38:60:b2:fb:c6:74:
36:b2:4b:23:4b:5a:02:57:60:3c:2d:5a:3f:3b:9f:
fb:21:1b:28:e4:90:09:b2:5a:d5:d8:31:9e:24:a9:
b2:1b:19:15:bf:7e:b7:f6:39:2a:f7:b9:d9:fc:dc:
61:29:6f:96:1a:39:b4:db:41:03:c7:cf:3f:22:17:
3f:37:ff:b2:7f:b4:2d:3c:0b:e9:f1:ec:4f:1f:b8:
1b:57:55:c3:c6:f3:5e:5a:d0:53:61:b6:0f:3a:06:
81:02:81:77:f9:58:36:5a:59:56:3b:28:ae:00:5e:
92:66:39:99:05:52:de:88:24:96:f0:ce:c1:78:53:
15:a5:4d:da:2b:37:f0:51:85:6e:2e:16:fb:5e:1c:
86:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:32:6F:D0:17:33:3A:A2:9E:AA:58:56:0B:7C:95:99:77:CA:A8:04
X509v3 Authority Key Identifier:
keyid:6A:74:80:B3:84:6F:73:5C:98:CF:9B:00:E9:80:46:2A:18:B0:6C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anSAs4Rvc1yYz5sA6YBGKhiwbPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/sTJv0BczOqKeqlhWC3yVmXfKqAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/anSAs4Rvc1yYz5sA6YBGKhiwbPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.132.200.0/21
91.229.152.0/23
IPv6:
2001:67c:2340::/48
Signature Algorithm: sha256WithRSAEncryption
31:5b:4d:77:23:23:69:4f:32:43:24:98:3b:fb:af:ad:b9:e8:
ae:fa:33:2a:4b:ea:c6:cc:c0:1f:c7:40:28:de:3c:db:fd:ab:
6b:e4:55:08:09:7b:fa:eb:f5:02:a3:4b:ab:34:ce:0e:d2:80:
80:b1:4f:94:23:b7:3d:12:61:04:30:ad:e6:09:78:31:a2:18:
f1:e5:b3:bb:32:fd:d2:2f:8a:fe:01:16:bd:df:d0:65:f9:5b:
a0:09:b5:d2:93:64:f6:36:e4:c2:71:41:5d:88:8f:e5:1e:10:
e0:77:a7:3c:64:1d:97:c1:c0:17:f3:f8:c2:0a:c4:1b:41:1b:
c6:bb:c2:ec:1a:7a:e6:ab:fa:ef:e5:e8:c7:1e:c1:db:e7:ec:
ac:0e:05:a8:de:a5:bc:96:0d:35:8d:b3:d0:7f:d1:37:79:75:
c2:d2:b2:0e:32:b7:d1:08:43:f1:f1:72:0e:04:65:41:fb:d9:
d3:a6:f7:00:bf:5f:aa:94:51:cc:97:e6:14:87:f1:4c:bf:e5:
66:2a:e2:dd:39:97:af:7a:a2:0f:fd:12:c6:6d:9c:d9:1e:bf:
29:17:69:23:6c:51:e5:55:3b:29:52:c3:d0:63:4f:d0:bb:4e:
46:58:1b:8a:61:80:e2:8d:8a:15:5b:15:f9:63:4c:17:90:05:
eb:b8:42:ba
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZ8jaLSNs+2XFMj+dKJOZdQcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNzQ4MGIzODQ2ZjczNWM5OGNmOWIwMGU5ODA0NjJhMThi
MDZjZjYwHhcNMjYwNzAyMTUxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTMyNmZkMDE3MzMzYWEyOWVhYTU4NTYwYjdjOTU5OTc3Y2FhODA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi7bQBx/ObrDik96NqU64Z5wylf/
8BZzirAEoi+zfHvX5zj+o5cPttoMDwpqquT8TxcwD7satMfMo4wQsGwldmQJpg+D
CiYIEZhxiJihUAgJvInWWQ3+Ur/yLd8fASzMMs+UWu6uqRC3Ef3sm3oODyc4YLL7
xnQ2sksjS1oCV2A8LVo/O5/7IRso5JAJslrV2DGeJKmyGxkVv3639jkq97nZ/Nxh
KW+WGjm020EDx88/Ihc/N/+yf7QtPAvp8exPH7gbV1XDxvNeWtBTYbYPOgaBAoF3
+Vg2WllWOyiuAF6SZjmZBVLeiCSW8M7BeFMVpU3aKzfwUYVuLhb7XhyGGwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFLEyb9AXMzqinqpYVgt8lZl3yqgEMB8GA1UdIwQY
MBaAFGp0gLOEb3NcmM+bAOmARioYsGz2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW5TQXM0UnZjMXlZejVzQTZZQkdLaGl3YlBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMWI1MDAtMzRhNi00MjBhLWFhNDQt
NzQ5OTA1YzMyN2IxLzEvc1RKdjBCY3pPcUtlcWxoV0MzeVZtWGZLcUFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8yMWI1MDAtMzRhNi00MjBhLWFhNDQtNzQ5OTA1YzMyN2Ix
LzEvYW5TQXM0UnZjMXlZejVzQTZZQkdLaGl3YlBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQDH4TIAwQB
W+WYMA8EAgACMAkDBwAgAQZ8I0AwDQYJKoZIhvcNAQELBQADggEBADFbTXcjI2lP
MkMkmDv7r6256K76MypL6sbMwB/HQCjePNv9q2vkVQgJe/rr9QKjS6s0zg7SgICx
T5Qjtz0SYQQwreYJeDGiGPHls7sy/dIviv4BFr3f0GX5W6AJtdKTZPY25MJxQV2I
j+UeEOB3pzxkHZfBwBfz+MIKxBtBG8a7wuwaeuar+u/l6Mcewdvn7KwOBajepbyW
DTWNs9B/0Td5dcLSsg4yt9EIQ/Hxcg4EZUH72dOm9wC/X6qUUcyX5hSH8Uy/5WYq
4t05l696og/9EsZtnNkevykXaSNsUeVVOylSw9BjT9C7TkZYG4phgOKNihVbFflj
TBeQBeu4Qro=
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:09:58 2026 by rpki-client