Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/RlOtnLB6D9ug7v58UgBexMPDZp8.roa
File: RlOtnLB6D9ug7v58UgBexMPDZp8.roa (raw, json)
Hash identifier: bAu8zeYIe64oBxB0u4S+EjD0aWQvaXPLp/wWNsF677w=
Subject key identifier: 46:53:AD:9C:B0:7A:0F:DB:A0:EE:FE:7C:52:00:5E:C4:C3:C3:66:9F
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 019F7506E6FDA124DF8A21B3264DB719B936
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/RlOtnLB6D9ug7v58UgBexMPDZp8.roa
Signing time: Sat 18 Jul 2026 11:40:14 +0000
ROA not before: Sat 18 Jul 2026 11:40:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6762
IP address blocks: 168.199.0.0/24 maxlen: 24
168.199.4.0/24 maxlen: 24
168.199.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:06:e6:fd:a1:24:df:8a:21:b3:26:4d:b7:19:b9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jul 18 11:40:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4653ad9cb07a0fdba0eefe7c52005ec4c3c3669f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7a:44:fc:bd:7d:25:dd:4d:84:95:48:fc:72:
8c:df:6e:7f:83:5e:a4:18:af:72:30:4c:63:20:a2:
08:39:49:4b:12:f9:86:00:95:e3:66:11:c7:e7:89:
cb:88:6a:42:c3:cc:91:d5:d0:11:19:e2:fe:d3:6a:
28:b9:3a:b7:0c:9f:03:a7:8c:d9:cd:fa:8b:8f:3e:
3b:5f:ae:fd:bd:ab:d5:d7:f0:50:d1:f5:5b:6f:ec:
7e:7e:9b:68:9b:ff:d2:ad:44:5f:5e:7a:6a:15:52:
f8:4f:47:ba:91:55:42:3c:f8:7d:ed:d1:a7:64:ab:
a9:f0:91:62:06:19:e9:63:a0:14:5d:61:ca:6e:e5:
8e:44:b0:4f:c3:ee:2d:a4:79:99:5b:f4:8b:70:41:
e5:99:4b:76:8a:ef:0e:ce:5d:6b:7a:16:81:df:38:
ca:0e:89:f4:43:d8:80:5b:3e:0e:44:57:33:6f:b0:
b9:c6:ff:8a:01:2f:8e:01:94:18:b5:9b:65:65:79:
87:b3:0d:8f:22:ee:27:6d:83:35:13:d1:47:3c:00:
3e:1f:27:42:eb:ce:9a:7b:39:a8:f7:41:00:40:bb:
76:7a:5a:02:66:17:4e:ed:1b:1e:3c:7b:76:96:fa:
f7:bd:4b:34:b5:a2:98:6c:3f:a5:fc:1e:a9:f6:49:
7f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:53:AD:9C:B0:7A:0F:DB:A0:EE:FE:7C:52:00:5E:C4:C3:C3:66:9F
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/RlOtnLB6D9ug7v58UgBexMPDZp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.199.0.0/24
168.199.4.0/24
168.199.126.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:8a:91:f5:1d:e7:91:f2:dd:8a:39:98:44:ce:a2:63:33:e8:
77:22:52:3b:50:e6:d5:77:88:92:4c:58:c8:1b:0c:e4:24:65:
35:07:46:b4:e4:4a:ba:51:f0:77:7a:71:c7:61:ff:0c:f5:9f:
e7:90:da:f7:88:2b:2b:ce:82:c9:36:84:96:fd:13:a8:c5:1d:
92:c2:31:08:ae:27:a6:58:92:0b:8d:af:36:46:72:30:84:fe:
7a:10:6a:37:6e:12:cf:71:dc:cf:18:cf:3f:22:f7:08:1e:49:
60:ea:1d:30:e0:5d:26:8b:03:49:de:d1:49:a3:ff:1f:b5:4d:
68:e9:94:01:87:f4:8f:da:8b:00:ff:8e:8c:27:01:ff:dd:bc:
60:6d:b5:35:bf:08:fb:52:37:dc:57:61:d0:d3:2f:50:73:fc:
cf:6a:ee:ea:7d:1a:d9:0c:9a:f3:c2:be:31:4c:af:94:28:88:
d9:d5:67:f6:b9:ca:18:26:08:26:4f:9b:64:18:ac:aa:05:d6:
33:f3:1b:27:5a:c0:f8:4f:3c:a8:e0:8a:f6:60:46:7e:36:35:
ad:c3:2f:78:7d:5d:4f:43:cf:84:a6:23:0a:3a:02:7a:1a:e2:
ea:82:0d:b6:3b:d6:9e:d2:f9:aa:da:b9:93:68:a7:3e:d3:f5:
9d:30:b5:b6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ91Bub9oSTfiiGzJk23Gbk2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4
ODE3ZDgwHhcNMjYwNzE4MTE0MDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjUzYWQ5Y2IwN2EwZmRiYTBlZWZlN2M1MjAwNWVjNGMzYzM2NjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXpE/L19Jd1NhJVI/HKM325/g16k
GK9yMExjIKIIOUlLEvmGAJXjZhHH54nLiGpCw8yR1dARGeL+02oouTq3DJ8Dp4zZ
zfqLjz47X679vavV1/BQ0fVbb+x+fptom//SrURfXnpqFVL4T0e6kVVCPPh97dGn
ZKup8JFiBhnpY6AUXWHKbuWORLBPw+4tpHmZW/SLcEHlmUt2iu8Ozl1rehaB3zjK
Don0Q9iAWz4ORFczb7C5xv+KAS+OAZQYtZtlZXmHsw2PIu4nbYM1E9FHPAA+HydC
686aezmo90EAQLt2eloCZhdO7RsePHt2lvr3vUs0taKYbD+l/B6p9kl/qQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEZTrZyweg/boO7+fFIAXsTDw2afMB8GA1UdIwQY
MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt
MmQxOTE4YmExYzBlLzEvUmxPdG5MQjZEOXVnN3Y1OFVnQmV4TVBEWnA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl
LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAqMcAAwQA
qMcEAwQAqMd+MA0GCSqGSIb3DQEBCwUAA4IBAQCfipH1HeeR8t2KOZhEzqJjM+h3
IlI7UObVd4iSTFjIGwzkJGU1B0a05Eq6UfB3enHHYf8M9Z/nkNr3iCsrzoLJNoSW
/ROoxR2SwjEIriemWJILja82RnIwhP56EGo3bhLPcdzPGM8/IvcIHklg6h0w4F0m
iwNJ3tFJo/8ftU1o6ZQBh/SP2osA/46MJwH/3bxgbbU1vwj7UjfcV2HQ0y9Qc/zP
au7qfRrZDJrzwr4xTK+UKIjZ1Wf2ucoYJggmT5tkGKyqBdYz8xsnWsD4Tzyo4Ir2
YEZ+NjWtwy94fV1PQ8+EpiMKOgJ6GuLqgg22O9ae0vmq2rmTaKc+0/WdMLW2
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:09:52 2026 by rpki-client