Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/K-Pby2C1ey5Hmw1yKByzvBXih2U.roa
File: K-Pby2C1ey5Hmw1yKByzvBXih2U.roa (raw, json)
Hash identifier: ktjdbh6kCP3XgfCDqDMe5dm3+erjzCc+TQFlq963tyU=
Subject key identifier: 2B:E3:DB:CB:60:B5:7B:2E:47:9B:0D:72:28:1C:B3:BC:15:E2:87:65
Certificate issuer: /CN=78a038f4cc6c21b862bec7aa5c9317e1259d7dac
Certificate serial: 019F23692C8C93E94F7D0FB684A92683D71F
Authority key identifier: 78:A0:38:F4:CC:6C:21:B8:62:BE:C7:AA:5C:93:17:E1:25:9D:7D:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKA49MxsIbhivseqXJMX4SWdfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/K-Pby2C1ey5Hmw1yKByzvBXih2U.roa
Signing time: Thu 02 Jul 2026 15:18:43 +0000
ROA not before: Thu 02 Jul 2026 15:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202701
IP address blocks: 185.156.204.0/22 maxlen: 24
194.5.100.0/22 maxlen: 24
2a07:a100::/29 maxlen: 29
2a07:a104::/32 maxlen: 32
2a07:a105::/32 maxlen: 32
2a07:a106::/32 maxlen: 32
2a07:a107::/32 maxlen: 32
2a0c:e840::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/eKA49MxsIbhivseqXJMX4SWdfaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/eKA49MxsIbhivseqXJMX4SWdfaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eKA49MxsIbhivseqXJMX4SWdfaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2c:8c:93:e9:4f:7d:0f:b6:84:a9:26:83:d7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78a038f4cc6c21b862bec7aa5c9317e1259d7dac
Validity
Not Before: Jul 2 15:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2be3dbcb60b57b2e479b0d72281cb3bc15e28765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ae:66:5a:58:76:45:18:01:a9:2b:7b:8e:d1:
4d:16:e6:7e:61:bc:56:ca:84:d4:b2:84:b3:bf:dc:
de:5a:e9:12:79:c1:90:31:5d:c5:cd:50:a7:60:72:
94:45:69:78:b8:6b:fc:83:2d:ea:a1:d5:27:c3:2a:
f4:04:ab:df:8d:0c:48:42:77:7e:cf:ad:71:b7:ba:
08:e8:18:97:3a:44:04:bf:33:be:6e:72:2b:2e:5e:
44:e8:45:ce:9c:dc:07:24:e5:89:0c:8c:85:94:cf:
f5:f4:16:ff:57:31:c3:3c:6d:f6:f5:57:61:60:04:
f1:78:da:54:3a:97:c5:c3:b2:89:58:09:ad:2b:4c:
97:13:1b:a2:eb:23:46:3b:ca:46:d4:9c:2b:9a:47:
6f:fa:ac:b0:28:5b:06:fc:15:b9:d3:d6:da:2f:8a:
2e:80:cf:c9:50:a5:36:5a:2c:e5:a1:7d:86:35:e8:
ec:16:33:6f:d3:69:5c:2e:21:f0:00:77:ce:be:b0:
62:85:12:08:ce:cf:e6:49:c3:d8:58:f6:ae:97:c9:
fa:44:7c:d1:68:26:f8:a0:1c:9d:a7:8c:92:52:fa:
37:f3:9b:6a:c2:d9:89:79:10:b1:3f:8d:98:99:fd:
9d:0d:d9:38:7a:eb:fd:a8:ba:24:61:1d:d6:f6:55:
e0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E3:DB:CB:60:B5:7B:2E:47:9B:0D:72:28:1C:B3:BC:15:E2:87:65
X509v3 Authority Key Identifier:
keyid:78:A0:38:F4:CC:6C:21:B8:62:BE:C7:AA:5C:93:17:E1:25:9D:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKA49MxsIbhivseqXJMX4SWdfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/K-Pby2C1ey5Hmw1yKByzvBXih2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/eKA49MxsIbhivseqXJMX4SWdfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.204.0/22
194.5.100.0/22
IPv6:
2a07:a100::/29
2a0c:e840::/29
Signature Algorithm: sha256WithRSAEncryption
38:0b:e1:e2:83:14:fb:ee:47:3c:21:63:3d:36:44:cd:9d:5d:
fb:10:82:1f:79:13:d6:e7:83:e9:cc:f4:4a:e1:d8:4b:f1:db:
ef:9e:bd:e2:f9:ca:3f:09:b9:33:54:8a:01:7d:00:1b:46:d5:
8d:46:79:91:81:ff:14:26:10:7d:d3:86:78:33:62:e8:f8:4b:
87:20:d8:8f:e3:02:7a:3b:da:18:c5:bc:59:40:a7:27:0f:61:
0d:6a:31:36:74:a2:3c:c4:17:d4:a3:91:bd:fa:48:75:f1:7b:
23:9c:b1:3b:65:e9:96:a5:4e:88:c3:d6:06:ca:d7:77:86:88:
70:89:cd:38:8f:e0:8e:66:49:48:fd:87:38:36:73:d7:c0:ed:
66:a2:37:4d:4f:8c:91:a7:18:cb:c7:f2:16:6e:2e:68:76:00:
0c:d9:68:d4:f1:22:19:8b:0a:f7:31:ce:6a:f3:cb:a7:d5:81:
69:02:52:9d:33:c1:b1:62:b1:2d:97:d0:28:06:56:02:6c:02:
c4:d7:55:a0:47:33:34:9b:47:a8:fb:cd:f5:e7:d0:d4:71:c1:
87:e5:b4:c0:5e:05:be:2f:a6:4d:82:0a:cb:60:e3:54:9b:3a:
a2:e4:f8:3e:a4:6d:68:71:00:4d:b9:9f:31:1e:6b:59:c5:69:
e4:76:29:df
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ8jaSyMk+lPfQ+2hKkmg9cfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YTAzOGY0Y2M2YzIxYjg2MmJlYzdhYTVjOTMxN2UxMjU5
ZDdkYWMwHhcNMjYwNzAyMTUxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmUzZGJjYjYwYjU3YjJlNDc5YjBkNzIyODFjYjNiYzE1ZTI4NzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK5mWlh2RRgBqSt7jtFNFuZ+YbxW
yoTUsoSzv9zeWukSecGQMV3FzVCnYHKURWl4uGv8gy3qodUnwyr0BKvfjQxIQnd+
z61xt7oI6BiXOkQEvzO+bnIrLl5E6EXOnNwHJOWJDIyFlM/19Bb/VzHDPG329Vdh
YATxeNpUOpfFw7KJWAmtK0yXExui6yNGO8pG1Jwrmkdv+qywKFsG/BW509baL4ou
gM/JUKU2WizloX2GNejsFjNv02lcLiHwAHfOvrBihRIIzs/mScPYWPaul8n6RHzR
aCb4oBydp4ySUvo385tqwtmJeRCxP42Ymf2dDdk4euv9qLokYR3W9lXgtwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCvj28tgtXsuR5sNcigcs7wV4odlMB8GA1UdIwQY
MBaAFHigOPTMbCG4Yr7HqlyTF+ElnX2sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUtBNDlNeHNJYmhpdnNlcVhKTVg0U1dkZmF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8xZjNjNGQtNTllNC00OTM3LWJjMTQt
NmM4OGJmYTdiNTVjLzEvSy1QYnkyQzFleTVIbXcxeUtCeXp2QlhpaDJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8xZjNjNGQtNTllNC00OTM3LWJjMTQtNmM4OGJmYTdiNTVj
LzEvZUtBNDlNeHNJYmhpdnNlcVhKTVg0U1dkZmF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCuZzMAwQC
wgVkMBQEAgACMA4DBQMqB6EAAwUDKgzoQDANBgkqhkiG9w0BAQsFAAOCAQEAOAvh
4oMU++5HPCFjPTZEzZ1d+xCCH3kT1ueD6cz0SuHYS/Hb75694vnKPwm5M1SKAX0A
G0bVjUZ5kYH/FCYQfdOGeDNi6PhLhyDYj+MCejvaGMW8WUCnJw9hDWoxNnSiPMQX
1KORvfpIdfF7I5yxO2XplqVOiMPWBsrXd4aIcInNOI/gjmZJSP2HODZz18DtZqI3
TU+MkacYy8fyFm4uaHYADNlo1PEiGYsK9zHOavPLp9WBaQJSnTPBsWKxLZfQKAZW
AmwCxNdVoEczNJtHqPvN9efQ1HHBh+W0wF4Fvi+mTYIKy2DjVJs6ouT4PqRtaHEA
TbmfMR5rWcVp5HYp3w==
-----END CERTIFICATE-----
Generated at Mon Jul 27 14:16:07 2026 by rpki-client