Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/PIK_cDodINI0iYBstXmbPX8NmbU.roa
File: PIK_cDodINI0iYBstXmbPX8NmbU.roa (raw, json)
Hash identifier: wsh8RB6vngnvVEJooLnSoxpJFfQxV9+OAGAxc8EZhQ8=
Subject key identifier: 3C:82:BF:70:3A:1D:20:D2:34:89:80:6C:B5:79:9B:3D:7F:0D:99:B5
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F236868D619FEA6403D7E97974E2A9011
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/PIK_cDodINI0iYBstXmbPX8NmbU.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210656
IP address blocks: 201.50.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:68:d6:19:fe:a6:40:3d:7e:97:97:4e:2a:90:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c82bf703a1d20d23489806cb5799b3d7f0d99b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:dc:d4:2f:ca:0d:d0:48:78:e6:50:a8:55:27:
be:5b:28:7d:70:08:4f:bb:6d:b8:3f:ec:2e:f8:73:
9f:b4:a8:3d:dd:cc:72:6d:97:09:e2:61:2f:26:fb:
6e:90:28:79:92:e0:de:76:a8:3a:bb:df:63:3f:66:
41:cd:c7:b3:2b:51:7b:03:f5:73:84:87:91:d6:91:
4a:2a:cd:48:52:9b:b7:d3:de:d4:e5:ed:8f:f0:45:
0b:f7:fc:92:64:39:2a:dd:cf:01:17:8e:6e:fb:f0:
ca:a2:06:38:b5:1d:00:d8:b6:6c:fa:95:2c:1e:63:
2c:5c:2a:c2:15:5e:aa:11:b6:61:93:8c:a8:02:a7:
e5:1b:0a:80:bd:f5:83:78:c1:33:ba:7c:1d:f9:b5:
95:5e:8c:e1:9c:85:a8:79:99:f4:0d:bc:1f:c5:ca:
74:af:57:32:b6:36:c4:db:8d:53:68:5b:08:c1:ca:
49:b3:4b:5c:fe:4a:a6:ac:d9:8c:f3:2e:40:5b:cc:
0f:c3:00:2a:be:6b:b9:e7:de:1c:59:7e:78:f3:63:
13:d1:73:61:8c:e0:e3:57:1d:46:44:1a:ca:f9:34:
77:f4:c8:af:dc:ce:02:fe:08:78:fa:f0:54:61:f7:
7b:28:6f:04:2c:26:67:59:b0:86:ae:9f:8f:08:86:
0a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:82:BF:70:3A:1D:20:D2:34:89:80:6C:B5:79:9B:3D:7F:0D:99:B5
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/PIK_cDodINI0iYBstXmbPX8NmbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.50.118.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ab:00:91:6b:07:92:46:4b:dd:fc:03:b9:05:ec:1b:a6:dc:
0d:e3:fa:a8:02:12:30:18:0a:d7:34:ee:ec:fe:d2:fb:05:fb:
4f:cd:22:2a:38:4a:f2:a4:1a:98:25:2a:e5:0e:90:20:77:46:
4f:c3:b0:99:f9:4f:2f:85:e0:52:d6:46:6a:a2:d2:ff:b1:7d:
2b:df:3f:85:21:26:3b:05:24:ed:0e:5b:ad:64:f4:b8:65:44:
de:39:3b:fb:05:32:45:ec:0f:9d:c3:e5:6f:bd:c6:d3:79:b8:
64:e5:27:b0:01:fd:47:6c:d1:3a:78:e4:6a:a7:03:93:8f:a6:
10:09:20:d1:fe:1b:6e:e8:1b:41:17:76:84:09:6a:ee:69:6f:
d6:44:c1:bd:7c:dc:41:1f:97:06:08:03:6b:44:77:43:a7:14:
72:b3:a2:ed:75:e8:6e:0a:ce:b8:90:94:68:d1:58:d2:17:82:
91:a5:0e:db:06:5e:3b:8b:6b:65:5f:1d:76:d8:20:a8:ee:36:
aa:30:ae:9d:21:f5:89:9d:d8:01:77:a2:99:73:2b:22:fb:91:
6c:fe:c6:82:b4:1d:cc:47:5a:30:9b:11:18:60:7b:18:e1:15:
09:89:e3:53:4f:3c:c0:eb:53:35:3c:81:6c:63:6d:57:50:ce:
05:b9:7a:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaGjWGf6mQD1+l5dOKpARMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZmEyNjIzYjIyMmQwOGQ5MzU2OTc1MDQ0Yjk0MDdiNWZl
YTQ4YmEwHhcNMjYwNzAyMTUxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzgyYmY3MDNhMWQyMGQyMzQ4OTgwNmNiNTc5OWIzZDdmMGQ5OWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dzUL8oN0Eh45lCoVSe+Wyh9cAhP
u224P+wu+HOftKg93cxybZcJ4mEvJvtukCh5kuDedqg6u99jP2ZBzcezK1F7A/Vz
hIeR1pFKKs1IUpu3097U5e2P8EUL9/ySZDkq3c8BF45u+/DKogY4tR0A2LZs+pUs
HmMsXCrCFV6qEbZhk4yoAqflGwqAvfWDeMEzunwd+bWVXozhnIWoeZn0Dbwfxcp0
r1cytjbE241TaFsIwcpJs0tc/kqmrNmM8y5AW8wPwwAqvmu5594cWX5482MT0XNh
jODjVx1GRBrK+TR39Miv3M4C/gh4+vBUYfd7KG8ELCZnWbCGrp+PCIYKCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDyCv3A6HSDSNImAbLV5mz1/DZm1MB8GA1UdIwQY
MBaAFGn6JiOyItCNk1aXUES5QHtf6ki6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWZvbUk3SWkwSTJUVnBkUVJMbEFlMV9xU0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYt
NzJmYjk3ZDU5Y2U0LzEvUElLX2NEb2RJTkkwaVlCc3RYbWJQWDhObWJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYtNzJmYjk3ZDU5Y2U0
LzEvYWZvbUk3SWkwSTJUVnBkUVJMbEFlMV9xU0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyTJ2MA0G
CSqGSIb3DQEBCwUAA4IBAQBoqwCRaweSRkvd/AO5BewbptwN4/qoAhIwGArXNO7s
/tL7BftPzSIqOErypBqYJSrlDpAgd0ZPw7CZ+U8vheBS1kZqotL/sX0r3z+FISY7
BSTtDlutZPS4ZUTeOTv7BTJF7A+dw+VvvcbTebhk5SewAf1HbNE6eORqpwOTj6YQ
CSDR/htu6BtBF3aECWruaW/WRMG9fNxBH5cGCANrRHdDpxRys6LtdehuCs64kJRo
0VjSF4KRpQ7bBl47i2tlXx122CCo7jaqMK6dIfWJndgBd6KZcysi+5Fs/saCtB3M
R1owmxEYYHsY4RUJieNTTzzA61M1PIFsY21XUM4FuXq0
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:38 2026 by rpki-client