Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/G85sD1kwmB21ByXHaKc0GV6KI9o.roa
File: G85sD1kwmB21ByXHaKc0GV6KI9o.roa (raw, json)
Hash identifier: 7OuA71y4NDBK43Q3q72+2Xt8GEEBR4zBYlY0WhQZpHg=
Subject key identifier: 1B:CE:6C:0F:59:30:98:1D:B5:07:25:C7:68:A7:34:19:5E:8A:23:DA
Certificate issuer: /CN=95d108f0e85868c2bbe7db6d7377034c131eb224
Certificate serial: 019E739507EF68FF0A0FF83F16AFF96C4383
Authority key identifier: 95:D1:08:F0:E8:58:68:C2:BB:E7:DB:6D:73:77:03:4C:13:1E:B2:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/G85sD1kwmB21ByXHaKc0GV6KI9o.roa
Signing time: Fri 29 May 2026 11:53:27 +0000
ROA not before: Fri 29 May 2026 11:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206446
IP address blocks: 189.74.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:95:07:ef:68:ff:0a:0f:f8:3f:16:af:f9:6c:43:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d108f0e85868c2bbe7db6d7377034c131eb224
Validity
Not Before: May 29 11:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bce6c0f5930981db50725c768a734195e8a23da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:85:29:5b:3c:8d:72:ad:c2:24:1f:ce:c5:6f:
84:19:0b:9c:09:c5:08:1f:b5:4f:17:26:ba:ab:15:
0e:7b:55:44:8a:4e:39:49:2b:ce:fb:59:6a:3f:76:
6a:a6:0f:6c:da:2b:0c:00:af:54:10:9a:4c:72:11:
24:55:6d:c2:f2:ea:7b:ae:a0:13:e3:59:7b:1d:a5:
f9:d5:9c:fd:9e:c7:c6:6b:2f:49:1b:74:76:5c:12:
7b:75:64:ef:83:1d:c1:e0:da:ec:0d:db:48:59:01:
b7:d2:a8:fc:51:18:a7:59:f9:92:e8:65:1a:14:49:
82:38:2b:f7:e0:b7:d4:bf:76:9a:7a:74:de:7d:38:
53:ea:28:8c:3e:45:e2:e0:35:ae:a4:79:87:53:2a:
f7:cc:2e:20:44:3d:9d:f7:a0:f3:be:6f:e9:80:b9:
d6:08:d2:30:d4:1e:cc:e2:ae:aa:be:64:5c:35:0d:
e1:f1:e9:37:d1:bd:cc:0a:b4:bb:5e:31:54:ec:90:
5c:e9:fa:23:e9:1e:31:2f:72:0f:fe:d3:dd:51:d1:
4d:eb:2a:08:f2:8c:5a:ff:ce:e1:71:f1:7d:eb:68:
58:30:19:5c:fe:cf:d2:bb:20:f3:cf:24:fb:47:e8:
2b:e5:a3:d2:b9:bf:a6:b5:b7:cb:2c:f8:0b:4e:b6:
a7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CE:6C:0F:59:30:98:1D:B5:07:25:C7:68:A7:34:19:5E:8A:23:DA
X509v3 Authority Key Identifier:
keyid:95:D1:08:F0:E8:58:68:C2:BB:E7:DB:6D:73:77:03:4C:13:1E:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/G85sD1kwmB21ByXHaKc0GV6KI9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.74.107.0/24
Signature Algorithm: sha256WithRSAEncryption
31:8b:95:38:2a:f4:97:a4:54:89:ea:8b:5c:f6:ee:d6:f9:8d:
14:93:c0:22:b9:5b:cf:b5:7b:6e:e5:f4:0b:bf:2a:34:5a:bb:
a9:ad:d6:8f:57:9b:7c:25:cb:a8:1c:2a:fe:5c:d4:fa:dc:f9:
f2:44:33:83:da:0f:9d:d4:61:9e:b5:5d:e2:e9:a5:19:5d:55:
83:77:e7:cd:5a:40:d0:65:7e:0a:7c:3c:d0:46:5b:72:9e:02:
e6:76:35:86:33:bf:88:b4:b7:3d:8f:b4:61:4a:f0:f9:3f:20:
f8:fd:66:75:0d:27:d6:82:7b:78:80:94:cb:62:7d:3f:73:de:
30:96:81:0d:b1:cd:f2:c5:25:b0:53:8a:3b:ae:de:d3:9c:f0:
1f:04:a9:65:e4:0b:0b:eb:46:e5:d7:2b:6b:6c:8d:bd:5b:1d:
3b:ef:72:ea:6a:15:0e:c2:15:64:22:d6:d5:3f:d7:f8:9a:b4:
2e:ca:08:e3:4e:e8:29:0e:91:77:09:2e:2f:60:e8:49:1c:8c:
cf:08:78:2b:7d:68:fc:af:b4:d6:2d:9c:c6:ec:df:04:8b:ea:
71:50:b8:1c:12:7e:78:c8:78:f5:6e:be:c2:d2:98:d3:24:e1:
e4:68:1b:09:61:b9:57:e3:9a:8d:7a:d7:a8:16:73:5d:d7:f7:
ac:5b:61:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5zlQfvaP8KD/g/Fq/5bEODMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZDEwOGYwZTg1ODY4YzJiYmU3ZGI2ZDczNzcwMzRjMTMx
ZWIyMjQwHhcNMjYwNTI5MTE1MzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmNlNmMwZjU5MzA5ODFkYjUwNzI1Yzc2OGE3MzQxOTVlOGEyM2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYUpWzyNcq3CJB/OxW+EGQucCcUI
H7VPFya6qxUOe1VEik45SSvO+1lqP3Zqpg9s2isMAK9UEJpMchEkVW3C8up7rqAT
41l7HaX51Zz9nsfGay9JG3R2XBJ7dWTvgx3B4NrsDdtIWQG30qj8URinWfmS6GUa
FEmCOCv34LfUv3aaenTefThT6iiMPkXi4DWupHmHUyr3zC4gRD2d96Dzvm/pgLnW
CNIw1B7M4q6qvmRcNQ3h8ek30b3MCrS7XjFU7JBc6foj6R4xL3IP/tPdUdFN6yoI
8oxa/87hcfF962hYMBlc/s/SuyDzzyT7R+gr5aPSub+mtbfLLPgLTran2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBvObA9ZMJgdtQclx2inNBleiiPaMB8GA1UdIwQY
MBaAFJXRCPDoWGjCu+fbbXN3A0wTHrIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGRFSThPaFlhTUs3NTl0dGMzY0RUQk1lc2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYt
NzJmYjk3ZDU5Y2U0LzEvRzg1c0Qxa3dtQjIxQnlYSGFLYzBHVjZLSTlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYtNzJmYjk3ZDU5Y2U0
LzEvbGRFSThPaFlhTUs3NTl0dGMzY0RUQk1lc2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvUprMA0G
CSqGSIb3DQEBCwUAA4IBAQAxi5U4KvSXpFSJ6otc9u7W+Y0Uk8AiuVvPtXtu5fQL
vyo0WruprdaPV5t8JcuoHCr+XNT63PnyRDOD2g+d1GGetV3i6aUZXVWDd+fNWkDQ
ZX4KfDzQRltyngLmdjWGM7+ItLc9j7RhSvD5PyD4/WZ1DSfWgnt4gJTLYn0/c94w
loENsc3yxSWwU4o7rt7TnPAfBKll5AsL60bl1ytrbI29Wx0773LqahUOwhVkItbV
P9f4mrQuygjjTugpDpF3CS4vYOhJHIzPCHgrfWj8r7TWLZzG7N8Ei+pxULgcEn54
yHj1br7C0pjTJOHkaBsJYblX45qNeteoFnNd1/esW2E7
-----END CERTIFICATE-----
Generated at Thu Jun 4 08:56:07 2026 by rpki-client