Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/Sebdq3Z-zI97Q_QmObG2yD2EvOo.roa
File: Sebdq3Z-zI97Q_QmObG2yD2EvOo.roa (raw, json)
Hash identifier: 6XBHsle9CbbB6Dp19ZfuZYsFS8Vr9CEB/OKP2y66uY8=
Subject key identifier: 49:E6:DD:AB:76:7E:CC:8F:7B:43:F4:26:39:B1:B6:C8:3D:84:BC:EA
Certificate issuer: /CN=88ccd4a2168d976ef2552897bfc71920d633bc55
Certificate serial: 019FF5A667D161B32A9646E6127D5B11D0A4
Authority key identifier: 88:CC:D4:A2:16:8D:97:6E:F2:55:28:97:BF:C7:19:20:D6:33:BC:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMzUohaNl27yVSiXv8cZINYzvFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/Sebdq3Z-zI97Q_QmObG2yD2EvOo.roa
Signing time: Wed 12 Aug 2026 11:05:51 +0000
ROA not before: Wed 12 Aug 2026 11:05:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38930
IP address blocks: 185.175.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMzUohaNl27yVSiXv8cZINYzvFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:a6:67:d1:61:b3:2a:96:46:e6:12:7d:5b:11:d0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ccd4a2168d976ef2552897bfc71920d633bc55
Validity
Not Before: Aug 12 11:05:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49e6ddab767ecc8f7b43f42639b1b6c83d84bcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f4:6f:fa:5e:79:d5:88:a6:6d:a4:4b:90:34:
4c:97:ee:c7:20:14:7e:c0:c3:8a:39:6b:9b:37:96:
bb:a9:92:f2:e8:f1:9a:97:67:a9:18:6a:80:25:64:
c8:4d:1a:d3:8a:f4:c8:b2:d2:40:22:d6:b6:d2:30:
50:5f:ed:52:0f:b0:8c:02:2c:fd:44:e2:6d:40:76:
3f:37:fb:50:68:2e:ae:c6:14:f8:89:c4:95:04:11:
61:e4:03:0f:a6:2c:11:07:19:c4:09:b9:93:66:cd:
13:a4:19:ae:6e:c5:9e:c3:43:ca:c2:07:7f:b9:71:
8c:45:ba:38:b1:b3:98:4a:1a:45:14:af:de:55:32:
18:52:8e:82:da:3e:b5:33:6b:f5:ae:71:1b:11:3d:
4e:83:b1:2f:b1:27:33:0a:37:bf:84:09:d0:c9:54:
90:0e:8b:a6:de:a3:e8:64:50:92:e7:7a:19:44:dd:
94:bb:94:00:27:81:d5:26:a8:45:7c:98:44:05:84:
29:09:a8:f8:8e:8d:a0:65:1d:6b:0f:36:d8:51:c5:
93:09:eb:89:9f:fa:77:14:d4:c3:05:08:91:6b:f7:
b0:3e:1f:0c:44:4e:02:00:16:6f:e8:c0:79:50:6c:
1d:a8:74:6b:37:7a:d4:51:a9:62:a8:5a:03:6e:01:
63:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E6:DD:AB:76:7E:CC:8F:7B:43:F4:26:39:B1:B6:C8:3D:84:BC:EA
X509v3 Authority Key Identifier:
keyid:88:CC:D4:A2:16:8D:97:6E:F2:55:28:97:BF:C7:19:20:D6:33:BC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMzUohaNl27yVSiXv8cZINYzvFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/Sebdq3Z-zI97Q_QmObG2yD2EvOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/23d00e-48f9-4a12-b48b-a6dc985039bd/1/iMzUohaNl27yVSiXv8cZINYzvFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.4.0/22
Signature Algorithm: sha256WithRSAEncryption
67:c0:55:c5:29:12:ad:ab:e2:f1:60:1c:61:d4:cb:60:6f:d0:
37:1f:f9:2e:f8:1b:d4:26:58:b4:dc:3b:31:45:06:a3:1b:68:
0f:72:bd:ed:b0:56:b1:16:11:0c:42:4a:1b:9a:1d:b3:63:83:
e5:cf:79:d1:2f:07:b6:3a:d2:8c:01:bd:cd:63:21:b8:82:81:
97:b3:0a:d1:36:bc:44:6e:98:d7:c0:6c:ad:d0:a6:e4:1c:eb:
96:63:fa:a7:f3:93:fc:de:27:92:0a:18:bc:af:21:60:c0:89:
d9:9e:21:47:6a:da:62:e1:1c:a9:50:e9:b1:12:ea:5a:d2:1c:
9c:2e:56:d7:54:44:f3:d6:b9:ea:68:56:38:8e:d1:69:17:f1:
1f:bf:b6:29:5d:d4:8f:35:29:90:83:24:ba:94:e2:12:dc:72:
d5:14:f4:e0:b8:8a:9c:6d:83:f5:21:03:dc:0f:35:90:e3:9e:
89:55:da:fe:41:10:01:be:54:3a:9d:87:20:2c:d9:54:a8:71:
8d:44:06:8b:02:42:3c:28:1c:99:a7:38:5a:b9:52:b5:ae:ec:
e9:26:2b:bf:e9:d7:fd:2d:11:9d:58:a5:3f:a5:9b:a3:a1:ae:
94:10:6f:f7:31:e9:d7:ab:ac:9f:49:cb:f1:b3:4d:64:ba:c5:
b0:61:79:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/1pmfRYbMqlkbmEn1bEdCkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4Y2NkNGEyMTY4ZDk3NmVmMjU1Mjg5N2JmYzcxOTIwZDYz
M2JjNTUwHhcNMjYwODEyMTEwNTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWU2ZGRhYjc2N2VjYzhmN2I0M2Y0MjYzOWIxYjZjODNkODRiY2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/Rv+l551YimbaRLkDRMl+7HIBR+
wMOKOWubN5a7qZLy6PGal2epGGqAJWTITRrTivTIstJAIta20jBQX+1SD7CMAiz9
ROJtQHY/N/tQaC6uxhT4icSVBBFh5AMPpiwRBxnECbmTZs0TpBmubsWew0PKwgd/
uXGMRbo4sbOYShpFFK/eVTIYUo6C2j61M2v1rnEbET1Og7EvsSczCje/hAnQyVSQ
Doum3qPoZFCS53oZRN2Uu5QAJ4HVJqhFfJhEBYQpCaj4jo2gZR1rDzbYUcWTCeuJ
n/p3FNTDBQiRa/ewPh8MRE4CABZv6MB5UGwdqHRrN3rUUaliqFoDbgFjWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEnm3at2fsyPe0P0Jjmxtsg9hLzqMB8GA1UdIwQY
MBaAFIjM1KIWjZdu8lUol7/HGSDWM7xVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU16VW9oYU5sMjd5VlNpWHY4Y1pJTll6dkZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8yM2QwMGUtNDhmOS00YTEyLWI0OGIt
YTZkYzk4NTAzOWJkLzEvU2ViZHEzWi16STk3UV9RbU9iRzJ5RDJFdk9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8yM2QwMGUtNDhmOS00YTEyLWI0OGItYTZkYzk4NTAzOWJk
LzEvaU16VW9oYU5sMjd5VlNpWHY4Y1pJTll6dkZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCua8EMA0G
CSqGSIb3DQEBCwUAA4IBAQBnwFXFKRKtq+LxYBxh1Mtgb9A3H/ku+BvUJli03Dsx
RQajG2gPcr3tsFaxFhEMQkobmh2zY4Plz3nRLwe2OtKMAb3NYyG4goGXswrRNrxE
bpjXwGyt0KbkHOuWY/qn85P83ieSChi8ryFgwInZniFHatpi4RypUOmxEupa0hyc
LlbXVETz1rnqaFY4jtFpF/Efv7YpXdSPNSmQgyS6lOIS3HLVFPTguIqcbYP1IQPc
DzWQ456JVdr+QRABvlQ6nYcgLNlUqHGNRAaLAkI8KByZpzhauVK1ruzpJiu/6df9
LRGdWKU/pZujoa6UEG/3MenXq6yfScvxs01kusWwYXlh
-----END CERTIFICATE-----
Generated at Thu Sep 10 23:26:40 2026 by rpki-client