Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/1oOFjZGYYwwXb_ODv4361WII64k.roa
File: 1oOFjZGYYwwXb_ODv4361WII64k.roa (raw, json)
Hash identifier: bFW1AoN4EVHakvioEa5q7RzteiQi3jCQsHyhBG7njhI=
Subject key identifier: D6:83:85:8D:91:98:63:0C:17:6F:F3:83:BF:8D:FA:D5:62:08:EB:89
Certificate issuer: /CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Certificate serial: 019F9450D93833756A08192FAD806553D1B9
Authority key identifier: 3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/1oOFjZGYYwwXb_ODv4361WII64k.roa
Signing time: Fri 24 Jul 2026 13:29:14 +0000
ROA not before: Fri 24 Jul 2026 13:29:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60707
IP address blocks: 80.253.247.0/24 maxlen: 24
91.151.83.0/24 maxlen: 24
91.151.84.0/24 maxlen: 24
185.179.124.0/24 maxlen: 24
213.142.135.0/24 maxlen: 24
213.142.143.0/24 maxlen: 24
2a01:ed80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:50:d9:38:33:75:6a:08:19:2f:ad:80:65:53:d1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Validity
Not Before: Jul 24 13:29:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d683858d9198630c176ff383bf8dfad56208eb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f1:45:ec:f9:66:5c:95:3a:2c:96:f1:bd:f7:
58:75:12:13:21:42:04:7f:00:4c:a9:44:69:c9:6d:
ac:be:bc:17:8e:83:32:78:82:64:47:45:56:a2:f4:
9f:fc:fd:e7:e2:65:49:8b:e3:93:97:a4:ce:0d:49:
0f:2b:71:ea:d6:26:8b:eb:bb:b6:5c:b1:20:c5:1b:
0e:45:75:d0:b5:c5:34:20:48:98:c2:66:7c:49:05:
a0:11:00:e4:ef:0d:c4:8f:85:04:86:0f:f3:1c:d6:
c5:fd:ac:00:cc:e8:1d:ae:ce:d0:6c:0f:13:e0:bf:
aa:16:67:ed:05:ac:4a:46:eb:72:91:b5:73:0f:82:
8b:08:de:73:dd:13:d2:94:a4:46:a5:74:3a:a8:8b:
56:d7:ce:c4:1d:6c:7d:ac:61:6d:58:3a:5b:01:af:
3c:f9:c1:62:0d:67:be:7d:41:e5:00:9d:a5:25:55:
b0:99:9c:e8:d7:64:fb:01:4d:0c:77:18:d2:9f:07:
cf:d6:81:d2:73:62:51:43:5c:b7:52:c7:90:1e:72:
7c:4f:c4:9d:a4:a6:e7:e4:8b:64:3b:d8:f0:eb:21:
5f:ab:33:fc:2c:4b:22:64:57:aa:76:27:f5:2d:29:
a2:e0:e7:17:dd:7a:b0:54:9b:66:b5:e0:30:cc:b6:
87:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:83:85:8D:91:98:63:0C:17:6F:F3:83:BF:8D:FA:D5:62:08:EB:89
X509v3 Authority Key Identifier:
keyid:3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/1oOFjZGYYwwXb_ODv4361WII64k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.247.0/24
91.151.83.0-91.151.84.255
185.179.124.0/24
213.142.135.0/24
213.142.143.0/24
IPv6:
2a01:ed80::/29
Signature Algorithm: sha256WithRSAEncryption
b6:6f:05:87:40:cc:3c:c0:65:44:fe:5b:95:e1:31:95:67:b2:
a4:d0:09:0a:6a:ed:c4:b1:fa:e8:a0:d2:72:c0:60:fc:00:bf:
78:85:c4:a2:bb:31:2e:61:97:8f:99:e1:03:b5:d6:7e:f2:45:
00:39:a3:7c:c5:ee:d2:92:db:4f:58:c2:af:7a:f0:0e:de:60:
f0:ab:86:fa:9d:95:37:dd:72:f5:6e:74:93:33:fd:38:13:a9:
50:b0:76:19:35:2b:43:2a:7f:dd:09:98:c4:d7:90:2a:81:1f:
c1:7f:5f:12:57:6b:bb:b2:ec:9e:ff:5e:0f:47:f3:11:95:72:
f8:e0:c2:86:8b:7d:6b:b2:8e:55:39:7e:0e:8e:af:13:fd:63:
54:96:23:fe:ef:2c:c5:31:de:24:83:d1:c8:39:38:94:f8:c7:
7b:0d:f0:1b:88:6a:c4:b3:a4:5b:93:1c:de:37:43:ab:6d:c3:
7d:bf:1d:94:ba:5d:6b:ce:42:a9:dc:ec:40:81:bb:48:a2:25:
b7:1f:1f:85:a9:cd:df:10:93:a2:36:4f:ef:c8:6d:55:82:c7:
32:a5:03:d3:f7:e4:61:94:9d:76:0b:c3:4c:5a:d0:2b:9e:be:
5e:af:88:a7:73:6f:08:48:bd:4f:aa:66:0a:f0:75:e0:00:fb:
9c:8d:f5:8d
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAZ+UUNk4M3VqCBkvrYBlU9G5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMjVhYjY5ODVmNzljYTlkZTA2ZTk4ZThiOWRhMjQ1ZDg1
NTlhYjYwHhcNMjYwNzI0MTMyOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjgzODU4ZDkxOTg2MzBjMTc2ZmYzODNiZjhkZmFkNTYyMDhlYjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvFF7PlmXJU6LJbxvfdYdRITIUIE
fwBMqURpyW2svrwXjoMyeIJkR0VWovSf/P3n4mVJi+OTl6TODUkPK3Hq1iaL67u2
XLEgxRsORXXQtcU0IEiYwmZ8SQWgEQDk7w3Ej4UEhg/zHNbF/awAzOgdrs7QbA8T
4L+qFmftBaxKRutykbVzD4KLCN5z3RPSlKRGpXQ6qItW187EHWx9rGFtWDpbAa88
+cFiDWe+fUHlAJ2lJVWwmZzo12T7AU0MdxjSnwfP1oHSc2JRQ1y3UseQHnJ8T8Sd
pKbn5ItkO9jw6yFfqzP8LEsiZFeqdif1LSmi4OcX3XqwVJtmteAwzLaHpQIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFNaDhY2RmGMMF2/zg7+N+tViCOuJMB8GA1UdIwQY
MBaAFD4lq2mF95yp3gbpjoudokXYVZq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yMmQxNzUtYzcxZC00NjM3LWEwOTAt
YjE5YWQ1NDU1YmZkLzEvMW9PRmpaR1lZd3dYYl9PRHY0MzYxV0lJNjRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8yMmQxNzUtYzcxZC00NjM3LWEwOTAtYjE5YWQ1NDU1YmZk
LzEvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQAUP33MAwD
BABbl1MDBABbl1QDBAC5s3wDBADVjocDBADVjo8wDQQCAAIwBwMFAyoB7YAwDQYJ
KoZIhvcNAQELBQADggEBALZvBYdAzDzAZUT+W5XhMZVnsqTQCQpq7cSx+uig0nLA
YPwAv3iFxKK7MS5hl4+Z4QO11n7yRQA5o3zF7tKS209Ywq968A7eYPCrhvqdlTfd
cvVudJMz/TgTqVCwdhk1K0Mqf90JmMTXkCqBH8F/XxJXa7uy7J7/Xg9H8xGVcvjg
woaLfWuyjlU5fg6OrxP9Y1SWI/7vLMUx3iSD0cg5OJT4x3sN8BuIasSzpFuTHN43
Q6ttw32/HZS6XWvOQqnc7ECBu0iiJbcfH4Wpzd8Qk6I2T+/IbVWCxzKlA9P35GGU
nXYLw0xa0Cuevl6viKdzbwhIvU+qZgrwdeAA+5yN9Y0=
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:00:53 2026 by rpki-client