Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/p_aeHI6dPvbsOjwGFyLYuNcLZ3U.roa
File: p_aeHI6dPvbsOjwGFyLYuNcLZ3U.roa (raw, json)
Hash identifier: +fN67tjMuhF62rvJ3yJ+5m6jiCBffohGv6YIDhdtBG0=
Subject key identifier: A7:F6:9E:1C:8E:9D:3E:F6:EC:3A:3C:06:17:22:D8:B8:D7:0B:67:75
Certificate issuer: /CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Certificate serial: 019E3F35EDACEDB2A69DDD780E949E9F911D
Authority key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/p_aeHI6dPvbsOjwGFyLYuNcLZ3U.roa
Signing time: Tue 19 May 2026 07:49:19 +0000
ROA not before: Tue 19 May 2026 07:49:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 185.34.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:35:ed:ac:ed:b2:a6:9d:dd:78:0e:94:9e:9f:91:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Validity
Not Before: May 19 07:49:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7f69e1c8e9d3ef6ec3a3c061722d8b8d70b6775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:93:4f:dc:2f:fe:b5:3f:56:56:bc:60:99:02:
88:9c:1a:6f:7e:3e:0e:87:06:8a:c1:7c:a0:27:33:
73:b0:38:12:f0:08:53:6a:57:ea:ee:79:53:62:02:
c6:c6:82:96:5a:82:82:10:5b:a3:3d:3b:1d:c8:5b:
9e:f3:1d:8b:7e:cf:03:1d:22:7c:40:fa:d0:45:a0:
e7:23:2b:30:58:e5:42:db:20:2f:9a:b2:4f:9a:4d:
02:09:12:5c:6c:c3:76:22:20:5d:c0:64:38:f3:d3:
b1:09:41:33:99:c2:7f:11:a6:cb:70:c4:11:83:f9:
29:e7:b0:45:75:97:57:e7:0d:cc:5a:30:9d:02:c9:
1d:01:91:dd:22:6f:85:25:d1:11:37:89:1b:b0:c5:
dd:83:6d:ad:03:a7:01:1e:0b:7c:fa:df:5b:23:40:
3b:7c:63:d4:c2:cb:fa:c0:b3:38:b1:b6:cd:b1:90:
34:d6:f2:4f:cd:2d:0e:e3:b6:c8:7f:1a:88:94:ac:
f0:83:ec:22:d6:b4:dd:ad:d8:72:83:37:cc:3a:a3:
5e:ac:86:a9:64:c1:fe:e1:50:40:da:f1:04:72:4e:
ca:ff:fb:34:24:5d:83:24:19:d0:d1:f2:6c:5f:d6:
59:50:93:9a:6e:4e:98:6f:bc:84:47:00:4d:9b:36:
cc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F6:9E:1C:8E:9D:3E:F6:EC:3A:3C:06:17:22:D8:B8:D7:0B:67:75
X509v3 Authority Key Identifier:
keyid:BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/p_aeHI6dPvbsOjwGFyLYuNcLZ3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.85.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:96:6a:a6:2a:c6:0f:a6:c0:09:de:ff:fe:c7:d6:3c:ae:a4:
90:48:0f:5c:c1:7d:7a:68:a9:69:39:d9:87:bf:74:ee:09:0a:
7f:53:59:be:4f:45:68:7c:40:1a:a3:17:53:f7:75:fe:ba:33:
da:e3:c1:f5:3d:13:1e:43:2c:04:cf:97:21:fb:c0:63:98:50:
b0:d1:45:05:da:03:03:cc:80:93:16:85:35:1a:46:d2:84:e3:
7c:ed:d2:c1:ae:86:ec:32:70:b0:3a:83:07:ae:60:d5:19:b1:
7a:a2:be:d9:33:42:9e:26:5a:2e:f4:73:e7:f1:6d:34:82:12:
7b:6e:53:f8:ba:b6:da:3a:96:27:48:d0:c6:f0:45:1d:87:74:
ff:5c:09:d9:1f:9d:af:59:04:05:07:ec:33:99:6b:69:74:fd:
49:ed:f4:21:2b:87:3a:88:ad:23:85:2b:28:15:d1:a6:b3:f1:
b2:ea:08:2c:45:ed:5e:4b:85:08:1f:4e:6c:1c:a3:fc:7b:52:
30:d0:1f:8c:fd:f7:ff:d2:da:97:9e:32:4e:52:60:f7:9e:38:
3c:37:0d:51:64:4c:d5:4b:56:1f:4b:ca:4b:79:9b:66:b2:c7:
ef:b5:0c:c6:7e:34:f4:b6:0b:f5:99:cc:83:64:f8:2b:65:8e:
c0:60:e7:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ4/Ne2s7bKmnd14DpSen5EdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODg4NDlhMmViNWU5ZGQ1NzFhOGU3NDNiZWQ3Yjk1MTNk
N2ExMjEwHhcNMjYwNTE5MDc0OTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2Y2OWUxYzhlOWQzZWY2ZWMzYTNjMDYxNzIyZDhiOGQ3MGI2Nzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZNP3C/+tT9WVrxgmQKInBpvfj4O
hwaKwXygJzNzsDgS8AhTalfq7nlTYgLGxoKWWoKCEFujPTsdyFue8x2Lfs8DHSJ8
QPrQRaDnIyswWOVC2yAvmrJPmk0CCRJcbMN2IiBdwGQ489OxCUEzmcJ/EabLcMQR
g/kp57BFdZdX5w3MWjCdAskdAZHdIm+FJdERN4kbsMXdg22tA6cBHgt8+t9bI0A7
fGPUwsv6wLM4sbbNsZA01vJPzS0O47bIfxqIlKzwg+wi1rTdrdhygzfMOqNerIap
ZMH+4VBA2vEEck7K//s0JF2DJBnQ0fJsX9ZZUJOabk6Yb7yERwBNmzbMfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKf2nhyOnT727Do8Bhci2LjXC2d1MB8GA1UdIwQY
MBaAFL+IhJoutendVxqOdDvte5UT16EhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRpRW1pNjE2ZDFYR281ME8tMTdsUlBYb1NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9kYmM1OGUtMDI3Yi00YWFjLTlkZTYt
MjM3MzliNWZkODRjLzEvcF9hZUhJNmRQdmJzT2p3R0Z5TFl1TmNMWjNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9kYmM1OGUtMDI3Yi00YWFjLTlkZTYtMjM3MzliNWZkODRj
LzEvdjRpRW1pNjE2ZDFYR281ME8tMTdsUlBYb1NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSJVMA0G
CSqGSIb3DQEBCwUAA4IBAQB7lmqmKsYPpsAJ3v/+x9Y8rqSQSA9cwX16aKlpOdmH
v3TuCQp/U1m+T0VofEAaoxdT93X+ujPa48H1PRMeQywEz5ch+8BjmFCw0UUF2gMD
zICTFoU1GkbShON87dLBrobsMnCwOoMHrmDVGbF6or7ZM0KeJlou9HPn8W00ghJ7
blP4urbaOpYnSNDG8EUdh3T/XAnZH52vWQQFB+wzmWtpdP1J7fQhK4c6iK0jhSso
FdGms/Gy6ggsRe1eS4UIH05sHKP8e1Iw0B+M/ff/0tqXnjJOUmD3njg8Nw1RZEzV
S1YfS8pLeZtmssfvtQzGfjT0tgv1mcyDZPgrZY7AYOcq
-----END CERTIFICATE-----
Generated at Fri May 22 14:18:35 2026 by rpki-client