Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/R2VwpfxLGkkZ_BAomobXq01wNg0.roa
File: R2VwpfxLGkkZ_BAomobXq01wNg0.roa (raw, json)
Hash identifier: Tul1AZ3wqqQ37mlAynAUXK1enEBxW5/PblRblDDJnZ4=
Subject key identifier: 47:65:70:A5:FC:4B:1A:49:19:FC:10:28:9A:86:D7:AB:4D:70:36:0D
Certificate issuer: /CN=98facafff23a62c1903b1e95af40c6d0834e5e32
Certificate serial: 019F2368CEC1E2446887CB32527CB533990B
Authority key identifier: 98:FA:CA:FF:F2:3A:62:C1:90:3B:1E:95:AF:40:C6:D0:83:4E:5E:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPrK__I6YsGQOx6Vr0DG0INOXjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/R2VwpfxLGkkZ_BAomobXq01wNg0.roa
Signing time: Thu 02 Jul 2026 15:18:19 +0000
ROA not before: Thu 02 Jul 2026 15:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212638
IP address blocks: 185.214.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/mPrK__I6YsGQOx6Vr0DG0INOXjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/mPrK__I6YsGQOx6Vr0DG0INOXjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPrK__I6YsGQOx6Vr0DG0INOXjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ce:c1:e2:44:68:87:cb:32:52:7c:b5:33:99:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98facafff23a62c1903b1e95af40c6d0834e5e32
Validity
Not Before: Jul 2 15:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=476570a5fc4b1a4919fc10289a86d7ab4d70360d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d9:e6:87:97:cb:c9:48:2c:55:66:00:c7:d4:
18:6c:93:e2:f2:bb:19:6a:7b:e3:b0:f6:e7:8f:37:
87:2a:a6:f7:ac:b9:59:47:47:bc:a7:8a:84:f6:dd:
72:bb:ff:d7:67:c8:0d:8b:96:69:43:3f:82:23:f1:
2e:16:12:9b:9f:9d:b2:4a:99:7a:3d:84:d8:1a:4f:
c4:01:c4:6b:15:5f:be:e5:07:44:96:68:68:76:ad:
c4:dc:7d:e2:33:92:69:bc:d9:be:a1:1a:54:4e:5b:
20:d4:5b:e2:3c:a8:ab:3f:e3:f0:bc:f9:ed:46:d6:
07:c4:f0:43:ad:f1:31:8c:df:94:aa:9e:d8:07:47:
ba:43:bc:9a:f7:7c:94:7a:89:81:4c:77:04:6e:cc:
f8:b5:5b:b7:29:12:25:b7:b2:dc:ad:17:0c:f5:4b:
ea:4c:8b:dc:b6:41:d2:c1:f2:fc:c3:7a:45:ac:b9:
83:ae:c2:7f:53:5e:7b:43:e5:f7:78:44:2d:28:06:
09:2d:67:6e:8a:49:8f:fd:9d:b5:aa:13:f6:8d:4d:
67:d6:e2:83:e5:2d:0c:e6:6a:be:3f:2e:b3:d2:f1:
16:80:95:a7:0d:92:ce:63:f3:22:3e:51:58:dd:36:
b4:55:4b:a2:b7:ce:25:ff:6f:c8:65:c5:4f:b3:00:
57:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:65:70:A5:FC:4B:1A:49:19:FC:10:28:9A:86:D7:AB:4D:70:36:0D
X509v3 Authority Key Identifier:
keyid:98:FA:CA:FF:F2:3A:62:C1:90:3B:1E:95:AF:40:C6:D0:83:4E:5E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPrK__I6YsGQOx6Vr0DG0INOXjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/R2VwpfxLGkkZ_BAomobXq01wNg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/mPrK__I6YsGQOx6Vr0DG0INOXjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.43.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:da:02:c6:b4:06:25:ce:d9:a6:ee:43:3e:5b:ba:99:81:fb:
70:45:a1:4c:03:cf:8c:75:01:20:c0:f8:da:a6:ae:55:aa:b0:
60:81:6e:f7:19:5a:cd:07:3d:9f:47:e3:42:b7:03:0d:75:d6:
d6:33:8f:ae:44:4a:7d:03:78:43:8c:4f:1e:2c:bb:40:e7:01:
4f:33:8c:1e:51:13:15:17:cc:1f:aa:9f:be:c5:45:23:e6:dd:
a6:a0:43:bc:e7:2d:33:d3:b1:d5:ba:60:91:39:8e:4b:a8:9e:
d1:ac:0f:9a:4a:ac:48:8e:dc:48:7f:15:8b:64:0b:5b:0f:bd:
ed:09:37:65:6d:aa:60:58:b1:7f:13:94:74:b7:21:55:49:8a:
8c:8d:e3:cf:38:f6:62:1b:73:41:aa:05:79:39:ea:0b:e5:76:
c4:de:67:4d:06:1f:a6:00:d7:84:7c:b1:ab:f8:bc:70:23:a0:
9e:c2:cd:d7:6b:f8:ea:d3:b3:6a:32:0a:e6:15:36:a1:c8:9b:
41:f9:7b:04:e0:72:d1:e8:f7:eb:bf:b5:cb:52:22:f2:63:1b:
40:29:fc:74:ab:56:ff:e4:26:55:0d:2f:7f:6c:37:44:8a:ba:
8c:92:99:df:ec:7f:dd:0e:ae:da:c2:5b:1d:09:36:03:b6:70:
90:fb:0d:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaM7B4kRoh8syUny1M5kLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZmFjYWZmZjIzYTYyYzE5MDNiMWU5NWFmNDBjNmQwODM0
ZTVlMzIwHhcNMjYwNzAyMTUxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzY1NzBhNWZjNGIxYTQ5MTlmYzEwMjg5YTg2ZDdhYjRkNzAzNjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Nnmh5fLyUgsVWYAx9QYbJPi8rsZ
anvjsPbnjzeHKqb3rLlZR0e8p4qE9t1yu//XZ8gNi5ZpQz+CI/EuFhKbn52ySpl6
PYTYGk/EAcRrFV++5QdElmhodq3E3H3iM5JpvNm+oRpUTlsg1FviPKirP+PwvPnt
RtYHxPBDrfExjN+Uqp7YB0e6Q7ya93yUeomBTHcEbsz4tVu3KRIlt7LcrRcM9Uvq
TIvctkHSwfL8w3pFrLmDrsJ/U157Q+X3eEQtKAYJLWduikmP/Z21qhP2jU1n1uKD
5S0M5mq+Py6z0vEWgJWnDZLOY/MiPlFY3Ta0VUuit84l/2/IZcVPswBXFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEdlcKX8SxpJGfwQKJqG16tNcDYNMB8GA1UdIwQY
MBaAFJj6yv/yOmLBkDsela9AxtCDTl4yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVByS19fSTZZc0dRT3g2VnIwREcwSU5PWGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wYTlhMzMtOTlkYy00YjkyLThjZWQt
ODM2YWM5N2MwMWJiLzEvUjJWd3BmeExHa2taX0JBb21vYlhxMDF3TmcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8wYTlhMzMtOTlkYy00YjkyLThjZWQtODM2YWM5N2MwMWJi
LzEvbVByS19fSTZZc0dRT3g2VnIwREcwSU5PWGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudYrMA0G
CSqGSIb3DQEBCwUAA4IBAQBe2gLGtAYlztmm7kM+W7qZgftwRaFMA8+MdQEgwPja
pq5VqrBggW73GVrNBz2fR+NCtwMNddbWM4+uREp9A3hDjE8eLLtA5wFPM4weURMV
F8wfqp++xUUj5t2moEO85y0z07HVumCROY5LqJ7RrA+aSqxIjtxIfxWLZAtbD73t
CTdlbapgWLF/E5R0tyFVSYqMjePPOPZiG3NBqgV5OeoL5XbE3mdNBh+mANeEfLGr
+LxwI6Cews3Xa/jq07NqMgrmFTahyJtB+XsE4HLR6Pfrv7XLUiLyYxtAKfx0q1b/
5CZVDS9/bDdEirqMkpnf7H/dDq7awlsdCTYDtnCQ+w1T
-----END CERTIFICATE-----
Generated at Mon Jul 27 19:29:16 2026 by rpki-client