Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/rhUkaUS7wsZtel5WXM2aT6dYM6o.roa
File: rhUkaUS7wsZtel5WXM2aT6dYM6o.roa (raw, json)
Hash identifier: VSceswv5RCR9d0CwvEgA9fr7NsXHF8BveeOk7rkmGDA=
Subject key identifier: AE:15:24:69:44:BB:C2:C6:6D:7A:5E:56:5C:CD:9A:4F:A7:58:33:AA
Certificate issuer: /CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Certificate serial: 019F23689753ECD9E20D7C792B013DAC4B45
Authority key identifier: 9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/rhUkaUS7wsZtel5WXM2aT6dYM6o.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213006
IP address blocks: 185.21.135.0/24 maxlen: 24
195.182.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:97:53:ec:d9:e2:0d:7c:79:2b:01:3d:ac:4b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae15246944bbc2c66d7a5e565ccd9a4fa75833aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:58:3b:35:10:79:c1:15:af:54:b0:af:90:c8:
fb:42:3a:df:54:f3:54:4f:7b:50:97:25:6d:e4:fe:
89:45:44:e0:51:15:36:d8:31:91:58:a9:d7:39:7a:
4b:fe:b7:f4:f4:0f:05:df:10:f5:51:28:fe:d8:71:
87:48:cf:c7:46:ad:5f:bb:57:7b:36:69:f8:99:0d:
39:31:ee:fc:16:02:75:e4:22:60:76:5e:9b:f7:14:
aa:e9:25:27:a8:64:e8:a6:12:e7:d5:13:8f:0b:ca:
fd:36:46:c8:96:b4:35:92:94:be:90:95:4d:e5:51:
86:89:74:6b:ec:c7:64:d2:91:cb:6e:30:7e:37:05:
d2:d4:9f:7b:44:65:06:da:99:dc:13:3f:77:4c:00:
39:f3:25:ef:6f:f7:48:b6:5d:a9:93:c5:7b:92:12:
df:b9:64:2d:b7:b2:31:ee:d3:f0:30:a2:1b:af:4b:
6e:c2:32:1b:4f:8a:83:79:3a:0e:0e:53:ca:c9:19:
5b:15:a0:f9:a7:ed:ab:c8:5e:5a:07:89:9a:e2:1b:
b5:22:d0:b9:93:89:04:34:6d:87:f7:18:cb:9c:03:
ea:71:38:0d:cb:fd:88:57:8f:cc:fc:d7:97:cf:96:
fb:3c:bb:fc:b6:f6:c9:a0:5e:7a:fd:05:51:0f:98:
fe:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:15:24:69:44:BB:C2:C6:6D:7A:5E:56:5C:CD:9A:4F:A7:58:33:AA
X509v3 Authority Key Identifier:
keyid:9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/rhUkaUS7wsZtel5WXM2aT6dYM6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.135.0/24
195.182.204.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:21:32:1a:9b:21:08:1f:8d:95:49:5d:c2:d7:1d:3a:8c:b7:
d5:e5:ad:18:a5:6b:f9:43:35:00:49:51:d1:4a:01:f6:32:00:
22:7a:12:dd:d8:0a:b6:77:7f:b0:a9:18:fa:0c:c6:e4:dc:e3:
71:ec:7a:c8:98:78:ee:72:80:c0:2e:60:40:e0:ab:63:d4:78:
1b:26:92:76:7d:38:df:3c:a5:df:bc:6e:ef:50:57:39:42:24:
e9:2f:55:18:49:49:ba:b2:05:22:dc:c4:1d:75:39:7c:d4:70:
8f:6b:8f:e9:84:51:4b:4f:85:8f:f7:87:39:2c:c0:bf:a8:dd:
83:ec:b6:ff:3c:ab:7e:72:1f:ba:d6:d2:19:0f:56:3a:09:96:
53:df:1f:ba:ec:d3:d8:5e:5d:76:8f:63:af:34:db:58:02:75:
0d:e6:63:ca:c2:f1:a8:d0:d6:bc:09:65:18:78:1f:7f:26:14:
b7:b6:c3:c9:4c:20:7b:a6:1f:45:50:07:20:6a:34:f0:56:d4:
e4:2c:bb:96:92:a4:51:f6:e7:bb:28:f3:28:d4:15:6c:6d:66:
7a:b0:4e:fa:22:5b:2a:38:b8:6e:12:4e:87:dd:68:3f:c6:98:
63:9f:fd:f7:a9:41:bc:3e:e9:f9:1f:ed:38:b2:cd:85:de:92:
16:94:58:51
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8jaJdT7NniDXx5KwE9rEtFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYWYzZjk4MDUwNzJiNjJhNjVmYmViYmU4ZmY5YzdmM2Rj
NGM2NDgwHhcNMjYwNzAyMTUxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTE1MjQ2OTQ0YmJjMmM2NmQ3YTVlNTY1Y2NkOWE0ZmE3NTgzM2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFg7NRB5wRWvVLCvkMj7QjrfVPNU
T3tQlyVt5P6JRUTgURU22DGRWKnXOXpL/rf09A8F3xD1USj+2HGHSM/HRq1fu1d7
Nmn4mQ05Me78FgJ15CJgdl6b9xSq6SUnqGTophLn1ROPC8r9NkbIlrQ1kpS+kJVN
5VGGiXRr7Mdk0pHLbjB+NwXS1J97RGUG2pncEz93TAA58yXvb/dItl2pk8V7khLf
uWQtt7Ix7tPwMKIbr0tuwjIbT4qDeToODlPKyRlbFaD5p+2ryF5aB4ma4hu1ItC5
k4kENG2H9xjLnAPqcTgNy/2IV4/M/NeXz5b7PLv8tvbJoF56/QVRD5j+8QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK4VJGlEu8LGbXpeVlzNmk+nWDOqMB8GA1UdIwQY
MBaAFJuvP5gFBytipl++u+j/nH89xMZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTY4X21BVUhLMkttWDc2NzZQLWNmejNFeGtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt
NGRkMDQzNDZhYmMzLzEvcmhVa2FVUzd3c1p0ZWw1V1hNMmFUNmRZTTZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz
LzEvbTY4X21BVUhLMkttWDc2NzZQLWNmejNFeGtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuRWHAwQA
w7bMMA0GCSqGSIb3DQEBCwUAA4IBAQBqITIamyEIH42VSV3C1x06jLfV5a0YpWv5
QzUASVHRSgH2MgAiehLd2Aq2d3+wqRj6DMbk3ONx7HrImHjucoDALmBA4Ktj1Hgb
JpJ2fTjfPKXfvG7vUFc5QiTpL1UYSUm6sgUi3MQddTl81HCPa4/phFFLT4WP94c5
LMC/qN2D7Lb/PKt+ch+61tIZD1Y6CZZT3x+67NPYXl12j2OvNNtYAnUN5mPKwvGo
0Na8CWUYeB9/JhS3tsPJTCB7ph9FUAcgajTwVtTkLLuWkqRR9ue7KPMo1BVsbWZ6
sE76IlsqOLhuEk6H3Wg/xphjn/33qUG8Pun5H+04ss2F3pIWlFhR
-----END CERTIFICATE-----
Generated at Tue Jul 7 08:44:39 2026 by rpki-client