Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/931dcb-360b-459a-9bef-03dc1f1ff408/1/1-tg3HHPldAFMM0LHjAGjj2b5W-Y.roa
File: 1-tg3HHPldAFMM0LHjAGjj2b5W-Y.roa (raw, json)
Hash identifier: QOdgPXJXqMKhICPocmC5X2w4xSms330H0IB/Mg7h87k=
Subject key identifier: FA:D8:37:1C:73:E5:74:01:4C:33:42:C7:8C:01:A3:8F:66:F9:5B:E6
Certificate issuer: /CN=da58ecdc42b8c84fa1cab98748eb40b029f5bd5a
Certificate serial: 019FB7B6B09FBB3B29C37F8BD2EBD825B8B3
Authority key identifier: DA:58:EC:DC:42:B8:C8:4F:A1:CA:B9:87:48:EB:40:B0:29:F5:BD:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ljs3EK4yE-hyrmHSOtAsCn1vVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/931dcb-360b-459a-9bef-03dc1f1ff408/1/1-tg3HHPldAFMM0LHjAGjj2b5W-Y.roa
Signing time: Fri 31 Jul 2026 10:27:11 +0000
ROA not before: Fri 31 Jul 2026 10:27:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204057
IP address blocks: 178.23.189.0/24 maxlen: 24
185.255.96.0/24 maxlen: 24
185.255.97.0/24 maxlen: 24
217.28.140.0/24 maxlen: 24
2a0d:6241::/32 maxlen: 32
2a0d:6242::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/931dcb-360b-459a-9bef-03dc1f1ff408/1/2ljs3EK4yE-hyrmHSOtAsCn1vVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/931dcb-360b-459a-9bef-03dc1f1ff408/1/2ljs3EK4yE-hyrmHSOtAsCn1vVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ljs3EK4yE-hyrmHSOtAsCn1vVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:b6:b0:9f:bb:3b:29:c3:7f:8b:d2:eb:d8:25:b8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da58ecdc42b8c84fa1cab98748eb40b029f5bd5a
Validity
Not Before: Jul 31 10:27:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fad8371c73e574014c3342c78c01a38f66f95be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:0f:89:21:29:b8:da:00:1d:a2:c2:9a:a3:
ee:b0:b5:57:f0:ba:07:a0:1e:44:d5:18:10:f2:13:
6f:c2:6a:6b:54:d5:85:74:bf:16:9f:f9:c6:30:f8:
ee:70:29:87:ea:05:5d:54:a3:a3:91:36:61:a4:78:
e8:29:35:a1:cf:bf:07:77:da:d7:2a:17:36:09:e2:
bf:be:69:01:6b:0b:75:35:a7:0b:09:d5:e2:d3:54:
18:bb:fb:d2:54:2c:a6:0e:06:c5:04:c9:eb:63:68:
d7:a5:71:0f:aa:b3:e5:f3:36:50:38:de:f8:d9:57:
93:02:40:e6:ec:62:7d:26:1f:8c:3a:7a:76:62:b6:
4c:13:81:64:e2:1f:e0:ed:a8:e1:00:d6:2b:dc:87:
73:1f:8c:f9:27:76:ab:4d:4e:58:03:ef:0a:4b:fb:
97:97:81:95:7f:c7:3b:5c:94:6a:ff:55:6d:1a:98:
10:64:ed:3c:ca:0b:bb:63:37:ea:b1:e8:66:3b:9e:
65:84:54:6a:38:00:42:7a:47:00:c1:97:cb:07:f7:
7c:bc:c9:61:bf:19:43:53:23:0e:25:0c:4d:c6:35:
f7:27:a3:d1:2f:f1:08:31:99:f1:7f:3e:82:93:ec:
d8:72:1b:69:b7:d0:12:b8:e6:2f:89:6a:a9:56:ca:
b5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D8:37:1C:73:E5:74:01:4C:33:42:C7:8C:01:A3:8F:66:F9:5B:E6
X509v3 Authority Key Identifier:
keyid:DA:58:EC:DC:42:B8:C8:4F:A1:CA:B9:87:48:EB:40:B0:29:F5:BD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ljs3EK4yE-hyrmHSOtAsCn1vVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/931dcb-360b-459a-9bef-03dc1f1ff408/1/1-tg3HHPldAFMM0LHjAGjj2b5W-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/931dcb-360b-459a-9bef-03dc1f1ff408/1/2ljs3EK4yE-hyrmHSOtAsCn1vVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.23.189.0/24
185.255.96.0/23
217.28.140.0/24
IPv6:
2a0d:6241::-2a0d:6242:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
87:36:84:eb:4a:df:b2:1d:1f:de:8d:f3:0e:a9:15:81:33:da:
2a:e1:a2:8b:25:5a:94:b3:c3:9e:33:a3:4c:8f:ee:e9:d7:3c:
2f:94:d0:0d:8d:ff:c3:e8:23:b5:77:04:4c:99:e4:7b:dd:3d:
37:d2:fc:ed:32:4d:39:5d:43:2e:63:5f:a8:3b:fa:1c:01:c2:
d6:53:29:f9:cc:ab:94:3a:3f:91:b4:a1:38:53:f4:82:46:5b:
de:e1:6a:cd:46:c3:1d:9a:b1:9c:ba:93:74:33:7b:9d:62:fb:
20:88:17:b6:c2:e4:c1:dd:6f:d6:21:ae:51:a5:18:5d:96:82:
c8:6b:7c:2d:52:fb:a4:95:a4:47:e5:43:0a:e2:58:6d:a9:74:
28:03:92:ab:e2:70:96:0b:c8:a5:6d:6f:8f:58:70:0f:0b:65:
f2:de:fd:98:41:9d:71:25:28:fb:a2:5e:d8:fd:9d:ef:60:a3:
9b:81:c7:2b:03:d8:3c:95:66:2d:93:88:a1:32:bb:a5:1b:d4:
69:b0:ec:3d:c0:b1:52:3f:5e:ff:4f:e3:7b:09:5c:43:75:2e:
22:7f:f4:f8:74:7d:cb:4d:88:ab:90:16:e2:12:c6:b5:91:a7:
32:42:1f:62:b3:d1:be:1a:4e:47:d1:a6:06:b8:f1:3c:d7:5f:
3a:00:28:84
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgISAZ+3trCfuzspw3+L0uvYJbizMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNThlY2RjNDJiOGM4NGZhMWNhYjk4NzQ4ZWI0MGIwMjlm
NWJkNWEwHhcNMjYwNzMxMTAyNzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWQ4MzcxYzczZTU3NDAxNGMzMzQyYzc4YzAxYTM4ZjY2Zjk1YmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua8PiSEpuNoAHaLCmqPusLVX8LoH
oB5E1RgQ8hNvwmprVNWFdL8Wn/nGMPjucCmH6gVdVKOjkTZhpHjoKTWhz78Hd9rX
Khc2CeK/vmkBawt1NacLCdXi01QYu/vSVCymDgbFBMnrY2jXpXEPqrPl8zZQON74
2VeTAkDm7GJ9Jh+MOnp2YrZME4Fk4h/g7ajhANYr3IdzH4z5J3arTU5YA+8KS/uX
l4GVf8c7XJRq/1VtGpgQZO08ygu7YzfqsehmO55lhFRqOABCekcAwZfLB/d8vMlh
vxlDUyMOJQxNxjX3J6PRL/EIMZnxfz6Ck+zYchtpt9ASuOYviWqpVsq1jQIDAQAB
o4ICLjCCAiowHQYDVR0OBBYEFPrYNxxz5XQBTDNCx4wBo49m+VvmMB8GA1UdIwQY
MBaAFNpY7NxCuMhPocq5h0jrQLAp9b1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmxqczNFSzR5RS1oeXJtSFNPdEFzQ24xdlZvLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85MzFkY2ItMzYwYi00NTlhLTliZWYt
MDNkYzFmMWZmNDA4LzEvMS10ZzNISFBsZEFGTU0wTEhqQUdqajJiNVctWS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODYvOTMxZGNiLTM2MGItNDU5YS05YmVmLTAzZGMxZjFmZjQw
OC8xLzJsanMzRUs0eUUtaHlybUhTT3RBc0NuMXZWby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBDBggrBgEFBQcBBwEB/wQ0MDIwGAQCAAEwEgMEALIXvQME
Abn/YAMEANkcjDAWBAIAAjAQMA4DBQAqDWJBAwUAKg1iQjANBgkqhkiG9w0BAQsF
AAOCAQEAhzaE60rfsh0f3o3zDqkVgTPaKuGiiyValLPDnjOjTI/u6dc8L5TQDY3/
w+gjtXcETJnke909N9L87TJNOV1DLmNfqDv6HAHC1lMp+cyrlDo/kbShOFP0gkZb
3uFqzUbDHZqxnLqTdDN7nWL7IIgXtsLkwd1v1iGuUaUYXZaCyGt8LVL7pJWkR+VD
CuJYbal0KAOSq+JwlgvIpW1vj1hwDwtl8t79mEGdcSUo+6Je2P2d72Cjm4HHKwPY
PJVmLZOIoTK7pRvUabDsPcCxUj9e/0/jewlcQ3UuIn/0+HR9y02Iq5AW4hLGtZGn
MkIfYrPRvhpOR9GmBrjxPNdfOgAohA==
-----END CERTIFICATE-----
Generated at Thu Aug 13 08:45:58 2026 by rpki-client