Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/DsDp1Prc0x0H2dVVtCA9QfS20uc.roa
File: DsDp1Prc0x0H2dVVtCA9QfS20uc.roa (raw, json)
Hash identifier: IRQc9Do/rI0MlaOMAjJGDqLFlm7yPD+rM2DU9Sk0Sp8=
Subject key identifier: 0E:C0:E9:D4:FA:DC:D3:1D:07:D9:D5:55:B4:20:3D:41:F4:B6:D2:E7
Certificate issuer: /CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Certificate serial: 019F944F043CF5C4EABB39DF35C7518593CB
Authority key identifier: 3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/DsDp1Prc0x0H2dVVtCA9QfS20uc.roa
Signing time: Fri 24 Jul 2026 13:27:14 +0000
ROA not before: Fri 24 Jul 2026 13:27:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219135
IP address blocks: 80.253.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:4f:04:3c:f5:c4:ea:bb:39:df:35:c7:51:85:93:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Validity
Not Before: Jul 24 13:27:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ec0e9d4fadcd31d07d9d555b4203d41f4b6d2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a4:df:cb:55:90:f5:6a:d8:5a:15:1d:75:a8:
9b:31:22:e0:b6:26:12:28:a1:80:48:3c:93:5c:8b:
83:2c:84:b5:83:7e:db:8e:96:b5:21:78:fc:5d:60:
6d:f5:01:62:24:68:8a:92:81:b7:16:a4:45:58:41:
31:b6:d7:e2:df:36:8e:0c:94:37:03:5f:2a:f8:da:
01:c6:e7:92:f3:55:28:ca:89:61:64:27:07:66:61:
02:2f:14:cb:f3:61:f2:2f:de:37:21:d9:11:ce:f3:
b0:ab:90:f7:33:16:cf:e3:56:a9:c9:ab:98:03:82:
a3:96:87:73:f6:80:b6:45:2f:79:37:6f:ea:a5:20:
da:87:4e:9f:a5:31:94:6e:92:27:bb:65:64:99:6a:
04:ce:43:03:7e:63:d4:63:63:a7:48:6a:9e:fc:0b:
a5:17:cb:18:a2:82:80:d5:a6:4f:ed:f5:a0:67:09:
63:91:09:9d:3c:fa:88:f9:e8:b1:e1:c3:42:36:95:
44:2b:a2:ce:76:3a:81:7c:95:b1:a2:bd:aa:69:99:
59:fe:ed:64:ba:46:37:4d:f7:a7:48:ee:cd:03:9d:
70:52:87:03:d4:5d:18:12:7e:9c:1c:d9:1e:bf:64:
96:3f:b9:b5:b0:02:aa:c9:7c:25:6f:ce:05:a7:dc:
93:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C0:E9:D4:FA:DC:D3:1D:07:D9:D5:55:B4:20:3D:41:F4:B6:D2:E7
X509v3 Authority Key Identifier:
keyid:3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/DsDp1Prc0x0H2dVVtCA9QfS20uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.244.0/24
Signature Algorithm: sha256WithRSAEncryption
54:97:13:91:9f:51:5c:64:1b:10:5a:42:57:53:6f:a6:ea:bb:
30:5d:46:83:a9:bf:1c:1d:50:a6:2d:d9:fb:03:3d:6f:1a:0f:
2f:27:a0:39:1b:91:fc:06:b2:f6:00:b3:3d:b7:ae:8f:8e:ba:
0f:b7:f7:46:e3:05:5a:e3:b6:99:97:ec:5a:2a:60:8e:62:3c:
f0:de:df:d1:b7:71:d3:d9:81:1c:9f:0d:c9:10:37:f6:31:51:
42:1d:41:f3:c9:44:b5:df:88:68:53:8c:93:a9:1e:e6:7c:57:
12:dc:a6:91:ae:06:c8:dc:e4:5c:22:d8:7a:4b:eb:e8:62:64:
cd:e9:38:b3:de:31:38:fc:bc:0a:2e:2c:83:72:3d:bf:07:62:
89:55:67:29:0e:c4:b0:b5:b8:d3:a9:f1:0b:40:16:de:d3:7b:
8f:fc:7a:2c:67:b6:e0:66:5c:56:f2:97:dd:9a:c3:b2:b5:81:
75:d5:fc:db:c6:5d:f6:19:6b:f5:0d:37:42:06:97:e3:7b:dc:
45:a9:9c:6f:d2:9f:9d:37:ed:af:a1:e6:05:40:da:be:e4:bc:
f5:2c:17:7d:8f:2f:cd:8c:c7:02:57:5d:ea:29:e6:40:a3:e5:
1e:2d:1a:f8:58:3f:15:73:d1:da:a3:20:47:a4:2c:85:81:e2:
49:25:dc:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+UTwQ89cTquznfNcdRhZPLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMjVhYjY5ODVmNzljYTlkZTA2ZTk4ZThiOWRhMjQ1ZDg1
NTlhYjYwHhcNMjYwNzI0MTMyNzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWMwZTlkNGZhZGNkMzFkMDdkOWQ1NTViNDIwM2Q0MWY0YjZkMmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqTfy1WQ9WrYWhUddaibMSLgtiYS
KKGASDyTXIuDLIS1g37bjpa1IXj8XWBt9QFiJGiKkoG3FqRFWEExttfi3zaODJQ3
A18q+NoBxueS81UoyolhZCcHZmECLxTL82HyL943IdkRzvOwq5D3MxbP41apyauY
A4Kjlodz9oC2RS95N2/qpSDah06fpTGUbpInu2VkmWoEzkMDfmPUY2OnSGqe/Aul
F8sYooKA1aZP7fWgZwljkQmdPPqI+eix4cNCNpVEK6LOdjqBfJWxor2qaZlZ/u1k
ukY3TfenSO7NA51wUocD1F0YEn6cHNkev2SWP7m1sAKqyXwlb84Fp9yTiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA7A6dT63NMdB9nVVbQgPUH0ttLnMB8GA1UdIwQY
MBaAFD4lq2mF95yp3gbpjoudokXYVZq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yMmQxNzUtYzcxZC00NjM3LWEwOTAt
YjE5YWQ1NDU1YmZkLzEvRHNEcDFQcmMweDBIMmRWVnRDQTlRZlMyMHVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8yMmQxNzUtYzcxZC00NjM3LWEwOTAtYjE5YWQ1NDU1YmZk
LzEvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUP30MA0G
CSqGSIb3DQEBCwUAA4IBAQBUlxORn1FcZBsQWkJXU2+m6rswXUaDqb8cHVCmLdn7
Az1vGg8vJ6A5G5H8BrL2ALM9t66PjroPt/dG4wVa47aZl+xaKmCOYjzw3t/Rt3HT
2YEcnw3JEDf2MVFCHUHzyUS134hoU4yTqR7mfFcS3KaRrgbI3ORcIth6S+voYmTN
6Tiz3jE4/LwKLiyDcj2/B2KJVWcpDsSwtbjTqfELQBbe03uP/HosZ7bgZlxW8pfd
msOytYF11fzbxl32GWv1DTdCBpfje9xFqZxv0p+dN+2voeYFQNq+5Lz1LBd9jy/N
jMcCV13qKeZAo+UeLRr4WD8Vc9HaoyBHpCyFgeJJJdz9
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:21 2026 by rpki-client