Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/dfMJsRYPaWYegojrV6JhI297OJk.roa
File: dfMJsRYPaWYegojrV6JhI297OJk.roa (raw, json)
Hash identifier: 5QAF9n/yTZCGuoA1daWoYwy/+VIV/qk8ffu8M1zMiLA=
Subject key identifier: 75:F3:09:B1:16:0F:69:66:1E:82:88:EB:57:A2:61:23:6F:7B:38:99
Certificate issuer: /CN=91cbd4dee9400991784a22fb4f42b2a72e5e30f2
Certificate serial: 019F2368C4BE9B7CC9F06E343BC14BB1C64C
Authority key identifier: 91:CB:D4:DE:E9:40:09:91:78:4A:22:FB:4F:42:B2:A7:2E:5E:30:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/dfMJsRYPaWYegojrV6JhI297OJk.roa
Signing time: Thu 02 Jul 2026 15:18:16 +0000
ROA not before: Thu 02 Jul 2026 15:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48469
IP address blocks: 94.127.56.0/22 maxlen: 22
185.247.96.0/24 maxlen: 24
185.247.99.0/24 maxlen: 24
2a02:2188::/48 maxlen: 48
2a02:2188:1000::/36 maxlen: 36
2a02:2188:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c4:be:9b:7c:c9:f0:6e:34:3b:c1:4b:b1:c6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91cbd4dee9400991784a22fb4f42b2a72e5e30f2
Validity
Not Before: Jul 2 15:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75f309b1160f69661e8288eb57a261236f7b3899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cb:4f:83:fa:8d:19:98:eb:b8:90:13:55:0a:
e5:c7:22:94:e3:93:fe:f4:2d:c5:a1:f0:23:08:6d:
b6:ff:76:93:a3:66:6c:34:d1:bd:67:c7:5d:20:b9:
76:db:14:29:69:ad:c4:e1:92:4a:23:ad:d3:cc:2b:
5e:8a:f6:41:db:51:33:58:86:62:ec:a2:e4:11:35:
83:77:fd:eb:8c:16:a4:68:94:01:de:35:8f:6a:5e:
88:d1:11:85:22:ed:1c:df:53:5d:eb:47:2a:44:af:
28:49:b5:49:c7:ca:9e:3d:85:74:46:dd:a9:bf:fc:
10:f7:ef:46:0d:79:60:8a:06:0c:03:62:4d:54:a7:
b9:f4:22:83:a8:e1:c8:bf:ab:b5:16:45:15:2f:ab:
6f:4b:c8:bc:43:b1:30:52:76:33:6a:ac:e2:ed:a0:
42:22:b2:b6:11:19:2f:78:81:30:1e:bf:72:37:87:
f5:19:13:14:50:78:ca:52:44:fd:55:af:62:15:f0:
9b:d4:14:4a:f1:5d:bb:fa:4a:d1:89:d7:a6:68:56:
87:b3:af:0d:14:02:af:3a:a3:ac:7d:28:11:1c:39:
11:c1:74:25:20:89:32:96:f4:f0:b3:df:15:2c:92:
d5:89:c2:c6:b1:9b:ca:1a:ea:35:ca:23:e0:7c:24:
a7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F3:09:B1:16:0F:69:66:1E:82:88:EB:57:A2:61:23:6F:7B:38:99
X509v3 Authority Key Identifier:
keyid:91:CB:D4:DE:E9:40:09:91:78:4A:22:FB:4F:42:B2:A7:2E:5E:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/dfMJsRYPaWYegojrV6JhI297OJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.56.0/22
185.247.96.0/24
185.247.99.0/24
IPv6:
2a02:2188::/48
2a02:2188:1000::/36
2a02:2188:f000::/36
Signature Algorithm: sha256WithRSAEncryption
78:8a:0d:96:f9:26:6a:5f:c9:4b:c9:e8:ea:e6:5d:f8:68:d2:
c9:25:7f:f1:81:07:cd:90:aa:a5:62:02:0f:70:74:d8:26:0a:
70:bc:14:28:6b:47:8a:5a:23:c7:02:90:97:95:b7:bf:05:68:
97:f2:3e:eb:15:c9:c1:a6:9e:1c:e5:8c:d0:4e:1c:5d:8b:60:
4c:2b:cc:b8:73:26:cb:4c:c7:1b:b1:25:ed:ed:2b:9a:f1:66:
1c:81:fb:5b:46:43:a3:6e:fe:71:d2:6c:8a:85:e9:72:63:c3:
5e:e0:11:50:ec:22:bf:3f:20:86:96:44:c8:54:24:79:6d:72:
4b:80:b5:2b:05:e8:6c:53:b4:3c:d0:80:eb:60:82:8e:14:36:
b4:ca:f1:bd:56:48:c7:83:29:f1:59:84:27:e8:8b:12:53:66:
76:65:24:1f:dc:27:06:61:cf:74:88:a9:d0:f3:b3:b4:6c:59:
4a:9c:50:54:34:cc:0e:1d:77:48:a5:70:16:ea:0b:4e:94:e3:
f0:f9:cd:03:ee:21:70:34:29:44:dd:e9:31:3f:70:d9:2a:0b:
93:7c:e3:c7:19:e1:ee:c1:6c:29:70:7a:30:3f:b2:cc:4f:8d:
10:1e:31:7a:58:60:b4:9b:ae:bf:4f:1c:63:65:21:83:c4:9f:
c6:47:6e:10
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZ8jaMS+m3zJ8G40O8FLscZMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxY2JkNGRlZTk0MDA5OTE3ODRhMjJmYjRmNDJiMmE3MmU1
ZTMwZjIwHhcNMjYwNzAyMTUxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWYzMDliMTE2MGY2OTY2MWU4Mjg4ZWI1N2EyNjEyMzZmN2IzODk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMtPg/qNGZjruJATVQrlxyKU45P+
9C3FofAjCG22/3aTo2ZsNNG9Z8ddILl22xQpaa3E4ZJKI63TzCteivZB21EzWIZi
7KLkETWDd/3rjBakaJQB3jWPal6I0RGFIu0c31Nd60cqRK8oSbVJx8qePYV0Rt2p
v/wQ9+9GDXlgigYMA2JNVKe59CKDqOHIv6u1FkUVL6tvS8i8Q7EwUnYzaqzi7aBC
IrK2ERkveIEwHr9yN4f1GRMUUHjKUkT9Va9iFfCb1BRK8V27+krRidemaFaHs68N
FAKvOqOsfSgRHDkRwXQlIIkylvTws98VLJLVicLGsZvKGuo1yiPgfCSnNQIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFHXzCbEWD2lmHoKI61eiYSNveziZMB8GA1UdIwQY
MBaAFJHL1N7pQAmReEoi+09CsqcuXjDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2N2VTN1bEFDWkY0U2lMN1QwS3lweTVlTVBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jNWExNTktODU2OC00OTQ1LTgwMjYt
MjNjMzM4NjgwNzcxLzEvZGZNSnNSWVBhV1llZ29qclY2SmhJMjk3T0prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9jNWExNTktODU2OC00OTQ1LTgwMjYtMjNjMzM4NjgwNzcx
LzEva2N2VTN1bEFDWkY0U2lMN1QwS3lweTVlTVBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAYBAIAATASAwQCXn84AwQA
ufdgAwQAufdjMB8EAgACMBkDBwAqAiGIAAADBgQqAiGIEAMGBCoCIYjwMA0GCSqG
SIb3DQEBCwUAA4IBAQB4ig2W+SZqX8lLyejq5l34aNLJJX/xgQfNkKqlYgIPcHTY
JgpwvBQoa0eKWiPHApCXlbe/BWiX8j7rFcnBpp4c5YzQThxdi2BMK8y4cybLTMcb
sSXt7Sua8WYcgftbRkOjbv5x0myKhelyY8Ne4BFQ7CK/PyCGlkTIVCR5bXJLgLUr
BehsU7Q80IDrYIKOFDa0yvG9VkjHgynxWYQn6IsSU2Z2ZSQf3CcGYc90iKnQ87O0
bFlKnFBUNMwOHXdIpXAW6gtOlOPw+c0D7iFwNClE3ekxP3DZKguTfOPHGeHuwWwp
cHowP7LMT40QHjF6WGC0m66/TxxjZSGDxJ/GR24Q
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:29 2026 by rpki-client