Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/sKmNqZP4XwJJXkCp2AXeq4sTwSU.roa
File: sKmNqZP4XwJJXkCp2AXeq4sTwSU.roa (raw, json)
Hash identifier: Ccum7b5NDukYxSo3vYnvI/b4ReTFte4TY0pGvCpuQZE=
Subject key identifier: B0:A9:8D:A9:93:F8:5F:02:49:5E:40:A9:D8:05:DE:AB:8B:13:C1:25
Certificate issuer: /CN=505122f4dea7df3927d4011b3087d4d067f9d19a
Certificate serial: 019FC7DC109C430AC618F03A5745A2BBDE17
Authority key identifier: 50:51:22:F4:DE:A7:DF:39:27:D4:01:1B:30:87:D4:D0:67:F9:D1:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/sKmNqZP4XwJJXkCp2AXeq4sTwSU.roa
Signing time: Mon 03 Aug 2026 13:41:55 +0000
ROA not before: Mon 03 Aug 2026 13:41:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 185.153.128.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:dc:10:9c:43:0a:c6:18:f0:3a:57:45:a2:bb:de:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505122f4dea7df3927d4011b3087d4d067f9d19a
Validity
Not Before: Aug 3 13:41:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0a98da993f85f02495e40a9d805deab8b13c125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e1:b3:de:7d:21:fe:60:5d:30:4a:3f:74:de:
18:3a:16:76:fe:60:fc:e9:79:67:b0:9d:d1:fa:64:
0f:fe:82:16:e2:d4:af:54:fa:fb:4f:de:74:39:a6:
fc:fd:98:2e:28:2d:24:d7:17:fc:89:a9:28:09:ab:
be:2a:de:73:15:80:3f:25:7e:95:a5:25:92:c8:0e:
71:29:4b:86:92:42:57:8c:73:e1:7a:09:4c:cc:6c:
b9:02:7d:f1:9f:3f:9e:4e:90:68:b4:08:66:41:0b:
db:cb:28:5d:dc:fc:2b:03:9d:a6:b6:1c:56:ea:59:
88:3b:84:c6:80:d3:6d:a6:e1:cd:be:fe:9e:da:d4:
31:81:32:3a:07:78:70:f0:89:92:ab:ab:6c:d7:b8:
70:22:e7:43:8b:4f:ac:4d:73:92:f4:35:a0:83:08:
99:47:79:2b:c5:4c:72:12:a7:2c:b4:fc:4b:87:3e:
36:25:53:04:1e:08:b4:01:31:03:dd:73:08:ab:ea:
a9:b1:cf:02:cb:f3:df:aa:bb:01:1c:15:ca:70:40:
04:2b:86:97:e1:f0:7c:c4:58:1b:ac:5f:d6:30:53:
73:a2:ba:13:04:c6:9f:e1:60:6a:97:32:ff:b8:6b:
67:c9:be:3c:1e:74:a9:35:ad:9d:a8:69:58:33:ad:
5a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A9:8D:A9:93:F8:5F:02:49:5E:40:A9:D8:05:DE:AB:8B:13:C1:25
X509v3 Authority Key Identifier:
keyid:50:51:22:F4:DE:A7:DF:39:27:D4:01:1B:30:87:D4:D0:67:F9:D1:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/sKmNqZP4XwJJXkCp2AXeq4sTwSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.128.0/23
Signature Algorithm: sha256WithRSAEncryption
96:72:78:52:b2:e4:b2:b9:45:db:66:62:26:61:33:9a:1d:a1:
2a:a4:65:d5:0a:d8:fe:1b:a1:63:f8:68:4f:f5:bc:eb:ff:31:
fe:7a:06:02:a4:c5:1d:33:d3:28:f4:da:eb:ca:64:2a:5b:f3:
86:97:8b:28:3e:4e:61:ea:c8:54:c3:f5:bf:14:c6:6a:a2:fa:
7b:9f:b1:f5:ce:fa:98:d0:8b:d3:94:7a:da:ab:e7:dc:f8:17:
74:76:a3:3e:2e:02:74:71:bb:e3:78:68:77:9a:e8:07:98:3e:
9d:49:db:22:eb:74:e9:ae:f8:3b:c4:0d:6e:4b:24:97:d7:d1:
e6:8d:0d:85:36:14:51:51:3c:63:05:61:d1:a0:f0:e7:71:85:
a8:5c:97:cf:2e:64:5b:be:ef:ed:23:04:e2:38:25:fb:30:98:
64:06:2b:b8:96:47:27:4a:83:12:45:6f:e0:0f:72:54:33:ea:
b8:11:08:f6:80:d1:9c:42:b4:f5:86:00:79:da:44:82:2d:f9:
b8:c7:59:73:79:aa:ef:34:4b:ce:83:8a:c8:0c:bd:f8:8b:1a:
fc:d0:72:56:41:59:43:b5:7e:50:e1:32:e2:3a:14:29:9f:c4:
5e:3b:37:73:ff:f9:b1:48:d2:67:e4:62:04:88:3a:18:1d:d9:
e8:02:59:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/H3BCcQwrGGPA6V0Wiu94XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTEyMmY0ZGVhN2RmMzkyN2Q0MDExYjMwODdkNGQwNjdm
OWQxOWEwHhcNMjYwODAzMTM0MTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGE5OGRhOTkzZjg1ZjAyNDk1ZTQwYTlkODA1ZGVhYjhiMTNjMTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+Gz3n0h/mBdMEo/dN4YOhZ2/mD8
6XlnsJ3R+mQP/oIW4tSvVPr7T950Oab8/ZguKC0k1xf8iakoCau+Kt5zFYA/JX6V
pSWSyA5xKUuGkkJXjHPheglMzGy5An3xnz+eTpBotAhmQQvbyyhd3PwrA52mthxW
6lmIO4TGgNNtpuHNvv6e2tQxgTI6B3hw8ImSq6ts17hwIudDi0+sTXOS9DWggwiZ
R3krxUxyEqcstPxLhz42JVMEHgi0ATED3XMIq+qpsc8Cy/PfqrsBHBXKcEAEK4aX
4fB8xFgbrF/WMFNzoroTBMaf4WBqlzL/uGtnyb48HnSpNa2dqGlYM61aTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLCpjamT+F8CSV5AqdgF3quLE8ElMB8GA1UdIwQY
MBaAFFBRIvTep985J9QBGzCH1NBn+dGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZFaTlONm4zemtuMUFFYk1JZlUwR2Y1MFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC83NGE4ZjQtMGFlYi00NGIzLThkZDQt
ZDNmMjRhZTdiODdiLzEvc0ttTnFaUDRYd0pKWGtDcDJBWGVxNHNUd1NVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC83NGE4ZjQtMGFlYi00NGIzLThkZDQtZDNmMjRhZTdiODdi
LzEvVUZFaTlONm4zemtuMUFFYk1JZlUwR2Y1MFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuZmAMA0G
CSqGSIb3DQEBCwUAA4IBAQCWcnhSsuSyuUXbZmImYTOaHaEqpGXVCtj+G6Fj+GhP
9bzr/zH+egYCpMUdM9Mo9NrrymQqW/OGl4soPk5h6shUw/W/FMZqovp7n7H1zvqY
0IvTlHraq+fc+Bd0dqM+LgJ0cbvjeGh3mugHmD6dSdsi63Tprvg7xA1uSySX19Hm
jQ2FNhRRUTxjBWHRoPDncYWoXJfPLmRbvu/tIwTiOCX7MJhkBiu4lkcnSoMSRW/g
D3JUM+q4EQj2gNGcQrT1hgB52kSCLfm4x1lzearvNEvOg4rIDL34ixr80HJWQVlD
tX5Q4TLiOhQpn8ReOzdz//mxSNJn5GIEiDoYHdnoAlnq
-----END CERTIFICATE-----
Generated at Sat Aug 22 19:32:03 2026 by rpki-client