Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/tVmxzUAxVXy4qWT2LiFbf_CGLYs.roa
File: tVmxzUAxVXy4qWT2LiFbf_CGLYs.roa (raw, json)
Hash identifier: Ga9D1Kj+eOQFH1ST/P7sI0dH985uIKk/1LYCPBqpD78=
Subject key identifier: B5:59:B1:CD:40:31:55:7C:B8:A9:64:F6:2E:21:5B:7F:F0:86:2D:8B
Certificate issuer: /CN=1592e7e2beba5bcd8d429d9bee5376b0810475ab
Certificate serial: 019F2368AF550F25F5710BFF9A6513FD582A
Authority key identifier: 15:92:E7:E2:BE:BA:5B:CD:8D:42:9D:9B:EE:53:76:B0:81:04:75:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZLn4r66W82NQp2b7lN2sIEEdas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/tVmxzUAxVXy4qWT2LiFbf_CGLYs.roa
Signing time: Thu 02 Jul 2026 15:18:10 +0000
ROA not before: Thu 02 Jul 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41690
IP address blocks: 185.223.156.0/22 maxlen: 24
188.65.120.0/21 maxlen: 24
195.8.214.0/23 maxlen: 24
2a03:d1c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/FZLn4r66W82NQp2b7lN2sIEEdas.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/FZLn4r66W82NQp2b7lN2sIEEdas.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZLn4r66W82NQp2b7lN2sIEEdas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:af:55:0f:25:f5:71:0b:ff:9a:65:13:fd:58:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1592e7e2beba5bcd8d429d9bee5376b0810475ab
Validity
Not Before: Jul 2 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b559b1cd4031557cb8a964f62e215b7ff0862d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:12:be:7d:39:6a:74:7a:75:43:2b:8e:9e:
44:f4:b4:cd:14:80:1f:25:4f:5a:7c:28:e3:51:2b:
77:29:8e:d5:fd:c8:41:15:fa:2c:ef:07:ec:c7:10:
9b:ca:d6:33:07:8d:0d:ea:1a:cf:d9:e4:fc:db:bc:
6b:e9:3c:8c:24:f6:a5:dc:3a:cc:0b:b5:a6:4a:e5:
54:1d:bb:70:26:5e:c2:32:c7:17:dc:b7:99:4a:1c:
07:c5:9e:a4:39:e6:12:ac:09:65:61:42:9b:56:2d:
6c:4f:c3:9a:98:e3:46:7c:81:a9:3d:3d:1b:7e:be:
7b:41:63:4e:69:8c:7c:ff:c0:7e:26:82:b7:37:8c:
2a:4f:4d:66:dc:44:95:be:ad:75:57:30:48:3a:42:
1a:1d:68:15:2c:ce:7d:c8:47:e8:62:31:8d:45:a2:
10:06:67:36:36:4a:32:97:f2:71:e7:ea:2c:81:5d:
54:7a:80:60:01:00:dc:05:96:fb:13:c4:a8:fd:23:
2c:14:f9:4d:2f:af:6c:37:2a:f2:69:f1:7d:3a:69:
ed:a0:34:7d:e4:59:48:72:99:09:e3:e6:1e:3a:40:
28:42:10:84:07:de:25:4c:b0:43:66:ad:f4:1f:48:
c1:a7:5b:d5:af:3b:2c:ca:a1:aa:ac:98:9a:36:6a:
72:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:59:B1:CD:40:31:55:7C:B8:A9:64:F6:2E:21:5B:7F:F0:86:2D:8B
X509v3 Authority Key Identifier:
keyid:15:92:E7:E2:BE:BA:5B:CD:8D:42:9D:9B:EE:53:76:B0:81:04:75:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZLn4r66W82NQp2b7lN2sIEEdas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/tVmxzUAxVXy4qWT2LiFbf_CGLYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/FZLn4r66W82NQp2b7lN2sIEEdas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.156.0/22
188.65.120.0/21
195.8.214.0/23
IPv6:
2a03:d1c0::/29
Signature Algorithm: sha256WithRSAEncryption
2f:a1:60:75:19:bc:ef:02:cf:26:85:00:53:eb:59:b4:88:e7:
c8:e4:db:5a:c3:5e:70:1e:f6:d4:3f:5a:bf:1d:42:48:a3:eb:
c0:7d:87:d0:7c:c5:11:6d:91:e2:19:0e:17:0a:b6:0e:c6:af:
ef:be:4c:12:62:6c:34:16:2f:f7:cc:77:56:04:a9:3c:41:47:
59:79:c0:3d:83:f9:16:6b:2f:57:d2:6c:f9:e0:00:09:f6:f9:
9b:79:b0:8b:d3:1b:b6:41:8a:58:5d:dc:b8:8c:90:d1:2f:6f:
fa:4f:c5:c2:38:db:f9:de:9a:03:59:0c:b5:44:2a:cc:72:65:
67:83:31:21:86:e4:1d:7c:3f:1e:c0:e8:f4:f3:63:e4:bd:6d:
a3:0e:47:b2:0e:07:dc:fb:03:08:6f:e9:35:c7:c8:2d:06:3a:
24:b8:aa:4e:0e:9c:fb:bf:6c:25:df:4d:09:83:e2:82:a6:0f:
4b:80:ae:29:bc:f5:e3:23:38:18:5a:1e:46:66:c5:2c:69:98:
62:3c:51:54:d5:89:7d:00:22:d7:2d:bb:8d:1b:18:8b:6c:86:
14:72:ce:4c:d5:43:5d:28:14:ad:71:fd:81:fe:55:45:29:e3:
32:69:67:cf:4a:2f:eb:27:74:e2:aa:67:fe:4f:ea:cf:cf:41:
d2:09:9a:ab
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZ8jaK9VDyX1cQv/mmUT/VgqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1OTJlN2UyYmViYTViY2Q4ZDQyOWQ5YmVlNTM3NmIwODEw
NDc1YWIwHhcNMjYwNzAyMTUxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTU5YjFjZDQwMzE1NTdjYjhhOTY0ZjYyZTIxNWI3ZmYwODYyZDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAESvn05anR6dUMrjp5E9LTNFIAf
JU9afCjjUSt3KY7V/chBFfos7wfsxxCbytYzB40N6hrP2eT827xr6TyMJPal3DrM
C7WmSuVUHbtwJl7CMscX3LeZShwHxZ6kOeYSrAllYUKbVi1sT8OamONGfIGpPT0b
fr57QWNOaYx8/8B+JoK3N4wqT01m3ESVvq11VzBIOkIaHWgVLM59yEfoYjGNRaIQ
Bmc2Nkoyl/Jx5+osgV1UeoBgAQDcBZb7E8So/SMsFPlNL69sNyryafF9OmntoDR9
5FlIcpkJ4+YeOkAoQhCEB94lTLBDZq30H0jBp1vVrzssyqGqrJiaNmpy0QIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFLVZsc1AMVV8uKlk9i4hW3/whi2LMB8GA1UdIwQY
MBaAFBWS5+K+ulvNjUKdm+5TdrCBBHWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlpMbjRyNjZXODJOUXAyYjdsTjJzSUVFZGFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yZjMzOWItZjE5Zi00NTJmLTg4YmUt
MjlmZmM0NDQzOTAxLzEvdFZteHpVQXhWWHk0cVdUMkxpRmJmX0NHTFlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yZjMzOWItZjE5Zi00NTJmLTg4YmUtMjlmZmM0NDQzOTAx
LzEvRlpMbjRyNjZXODJOUXAyYjdsTjJzSUVFZGFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCud+cAwQD
vEF4AwQBwwjWMA0EAgACMAcDBQMqA9HAMA0GCSqGSIb3DQEBCwUAA4IBAQAvoWB1
GbzvAs8mhQBT61m0iOfI5Ntaw15wHvbUP1q/HUJIo+vAfYfQfMURbZHiGQ4XCrYO
xq/vvkwSYmw0Fi/3zHdWBKk8QUdZecA9g/kWay9X0mz54AAJ9vmbebCL0xu2QYpY
Xdy4jJDRL2/6T8XCONv53poDWQy1RCrMcmVngzEhhuQdfD8ewOj082PkvW2jDkey
Dgfc+wMIb+k1x8gtBjokuKpODpz7v2wl300Jg+KCpg9LgK4pvPXjIzgYWh5GZsUs
aZhiPFFU1Yl9ACLXLbuNGxiLbIYUcs5M1UNdKBStcf2B/lVFKeMyaWfPSi/rJ3Ti
qmf+T+rPz0HSCZqr
-----END CERTIFICATE-----
Generated at Mon Jul 6 23:12:13 2026 by rpki-client