Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/929vYbDJj4se9paqibWN3-3R8HA.roa
File: 929vYbDJj4se9paqibWN3-3R8HA.roa (raw, json)
Hash identifier: W9ddFPxvbc6tqGzHqj597SIXQeJ26nx3+gxFSTYVhW8=
Subject key identifier: F7:6F:6F:61:B0:C9:8F:8B:1E:F6:96:AA:89:B5:8D:DF:ED:D1:F0:70
Certificate issuer: /CN=bb6aa2e90b970d1bcaeed125256325081153f9d0
Certificate serial: 019F2368E463E76F737313EC513F6B3382C7
Authority key identifier: BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/929vYbDJj4se9paqibWN3-3R8HA.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20517
IP address blocks: 185.20.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 06:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e4:63:e7:6f:73:73:13:ec:51:3f:6b:33:82:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb6aa2e90b970d1bcaeed125256325081153f9d0
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f76f6f61b0c98f8b1ef696aa89b58ddfedd1f070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b3:d5:ff:ef:b4:09:d1:81:45:05:2e:cc:ff:
74:18:b3:8d:27:b9:22:bc:1d:bc:15:ea:b1:9d:51:
94:12:a6:da:19:8f:16:96:18:31:a3:bb:b6:5d:8b:
55:d7:d6:40:2b:04:31:7d:81:d4:4e:b2:40:c5:91:
5e:9d:cf:96:5a:e7:22:54:5c:84:9a:95:e2:e8:a5:
6c:e2:9f:3a:1d:56:db:ab:4b:6f:3f:3e:c3:4a:e6:
b9:a5:bf:09:67:99:4b:e5:75:cc:bf:56:61:75:a4:
c2:33:b4:34:66:e9:78:22:a4:3a:50:cf:fa:42:00:
7b:6d:e6:09:53:1f:be:8b:a0:d8:4b:bf:eb:0d:0a:
21:e4:2d:40:e5:93:81:b8:cd:ab:0a:85:4e:f1:73:
ba:ee:4a:3f:7e:b6:d6:37:85:32:af:1c:2f:44:ce:
80:77:80:0a:a5:69:39:c5:3a:16:7d:07:6d:64:4f:
ca:ba:e7:c9:c3:e4:9c:c7:c5:b7:ed:00:cd:86:cd:
8e:a0:a4:fe:60:55:0a:ee:c8:98:9a:64:21:3c:25:
97:1a:43:11:da:4f:4a:8e:ae:cf:6f:ae:48:88:ef:
71:0a:a8:43:7b:32:10:a1:a1:44:e3:12:37:de:72:
6d:3b:83:7e:71:e2:21:a0:2c:9b:66:28:83:8d:68:
ed:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6F:6F:61:B0:C9:8F:8B:1E:F6:96:AA:89:B5:8D:DF:ED:D1:F0:70
X509v3 Authority Key Identifier:
keyid:BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/929vYbDJj4se9paqibWN3-3R8HA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.254.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:89:9b:1d:65:e9:e5:ae:3e:1c:a7:60:8c:82:8a:09:20:95:
a6:e8:4e:f9:95:50:18:fc:31:0a:a1:c3:74:61:69:8d:d7:36:
45:6f:54:38:02:e6:34:01:03:32:4a:ba:2f:2a:7d:e6:27:ac:
b0:d5:5b:ff:71:1c:a0:8a:e5:86:79:94:ef:6e:89:0b:1b:60:
17:c3:3b:f2:6c:5e:8a:dc:5c:86:08:71:a4:2f:3f:a3:ce:49:
f8:f2:e6:a5:4e:96:77:28:5c:6b:bf:da:31:10:c3:02:a2:89:
65:5b:56:54:e2:74:5c:92:48:31:bb:2a:19:0b:9b:81:b9:8b:
81:a6:4d:2d:13:24:67:c8:25:1d:9d:aa:26:e5:ee:ee:6c:31:
98:09:cb:4c:7f:59:fd:16:6d:88:39:5c:b2:ed:18:f6:7a:93:
ad:35:a5:7b:2c:9b:dc:a7:9a:78:5a:d4:64:2d:49:25:c6:17:
74:3d:6c:0a:a7:6f:a7:d4:50:95:c4:0c:ff:10:22:16:dd:81:
f4:25:b5:65:ca:f2:ab:58:ff:ea:a1:a1:0d:db:4c:a9:0a:1c:
d4:37:f6:91:07:cc:30:47:23:d2:e1:48:a4:b9:ff:33:4f:42:
0d:31:84:9f:e9:8c:c4:48:57:6b:42:71:9b:51:d7:fc:c8:31:
f8:06:0b:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaORj529zcxPsUT9rM4LHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNmFhMmU5MGI5NzBkMWJjYWVlZDEyNTI1NjMyNTA4MTE1
M2Y5ZDAwHhcNMjYwNzAyMTUxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzZmNmY2MWIwYzk4ZjhiMWVmNjk2YWE4OWI1OGRkZmVkZDFmMDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7PV/++0CdGBRQUuzP90GLONJ7ki
vB28FeqxnVGUEqbaGY8Wlhgxo7u2XYtV19ZAKwQxfYHUTrJAxZFenc+WWuciVFyE
mpXi6KVs4p86HVbbq0tvPz7DSua5pb8JZ5lL5XXMv1ZhdaTCM7Q0Zul4IqQ6UM/6
QgB7beYJUx++i6DYS7/rDQoh5C1A5ZOBuM2rCoVO8XO67ko/frbWN4UyrxwvRM6A
d4AKpWk5xToWfQdtZE/KuufJw+Scx8W37QDNhs2OoKT+YFUK7siYmmQhPCWXGkMR
2k9Kjq7Pb65IiO9xCqhDezIQoaFE4xI33nJtO4N+ceIhoCybZiiDjWjtpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPdvb2GwyY+LHvaWqom1jd/t0fBwMB8GA1UdIwQY
MBaAFLtqoukLlw0byu7RJSVjJQgRU/nQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTJxaTZRdVhEUnZLN3RFbEpXTWxDQkZULWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt
NzI2MDU3YTFmMmE0LzEvOTI5dlliREpqNHNlOXBhcWliV04zLTNSOEhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0
LzEvdTJxaTZRdVhEUnZLN3RFbEpXTWxDQkZULWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRT+MA0G
CSqGSIb3DQEBCwUAA4IBAQDQiZsdZenlrj4cp2CMgooJIJWm6E75lVAY/DEKocN0
YWmN1zZFb1Q4AuY0AQMySrovKn3mJ6yw1Vv/cRygiuWGeZTvbokLG2AXwzvybF6K
3FyGCHGkLz+jzkn48ualTpZ3KFxrv9oxEMMCoollW1ZU4nRckkgxuyoZC5uBuYuB
pk0tEyRnyCUdnaom5e7ubDGYCctMf1n9Fm2IOVyy7Rj2epOtNaV7LJvcp5p4WtRk
LUklxhd0PWwKp2+n1FCVxAz/ECIW3YH0JbVlyvKrWP/qoaEN20ypChzUN/aRB8ww
RyPS4Uikuf8zT0INMYSf6YzESFdrQnGbUdf8yDH4Bgst
-----END CERTIFICATE-----
Generated at Wed Jul 8 14:03:25 2026 by rpki-client