Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/14vJMYWPfWJwLTm41EvJP3dxv0s.roa
File: 14vJMYWPfWJwLTm41EvJP3dxv0s.roa (raw, json)
Hash identifier: 6ta2h79FQjtJwBWFhRNFFHbCANlnZ9ggluTNDumd/P8=
Subject key identifier: D7:8B:C9:31:85:8F:7D:62:70:2D:39:B8:D4:4B:C9:3F:77:71:BF:4B
Certificate issuer: /CN=79df25961f141b21586eb9a40b5d4166d73bb8c6
Certificate serial: 019F2368BD530D271846CDB34DCD3179E6B6
Authority key identifier: 79:DF:25:96:1F:14:1B:21:58:6E:B9:A4:0B:5D:41:66:D7:3B:B8:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ed8llh8UGyFYbrmkC11BZtc7uMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/14vJMYWPfWJwLTm41EvJP3dxv0s.roa
Signing time: Thu 02 Jul 2026 15:18:14 +0000
ROA not before: Thu 02 Jul 2026 15:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42962
IP address blocks: 185.192.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ed8llh8UGyFYbrmkC11BZtc7uMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bd:53:0d:27:18:46:cd:b3:4d:cd:31:79:e6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79df25961f141b21586eb9a40b5d4166d73bb8c6
Validity
Not Before: Jul 2 15:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d78bc931858f7d62702d39b8d44bc93f7771bf4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:3c:45:67:91:87:b5:0f:bd:22:bd:14:cd:
69:92:60:14:4d:4a:f7:54:d0:e8:9f:6d:6d:93:ec:
72:26:79:23:34:e7:0f:e8:b2:b5:d7:fb:93:a6:78:
90:58:65:ce:1f:5c:72:a3:20:37:1d:45:5e:8e:c6:
3a:9d:ef:37:39:8c:88:b3:dd:f3:b6:14:4e:16:51:
b4:30:4e:83:65:ea:09:e6:90:19:e3:fe:0e:4e:a4:
19:2e:f5:eb:ff:8d:2c:a2:98:a1:cf:f2:ed:9a:ad:
1d:7f:23:2f:69:10:34:26:b6:ee:24:81:3c:6a:68:
d6:80:96:14:20:88:b7:75:4c:3b:98:39:7e:70:63:
44:68:a3:89:cb:98:87:87:76:ea:39:e8:ee:ba:3a:
1c:f8:0e:6a:11:fa:e6:78:3a:9c:d8:dd:fd:b1:d3:
84:a7:86:a0:29:da:70:19:e3:68:ad:63:f9:cf:ab:
a3:20:9a:3b:49:64:dd:ba:20:e8:3e:34:ba:b1:3c:
0f:f6:4a:3e:7e:94:0c:4c:58:59:d2:77:9f:a8:86:
5d:7b:ec:f7:96:8b:cb:8b:83:90:c1:1a:ec:d8:71:
a9:c7:c5:d9:79:eb:1a:73:48:49:39:d1:c8:7e:70:
05:d7:a9:de:79:49:fd:09:98:b4:8b:f5:23:93:95:
d6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8B:C9:31:85:8F:7D:62:70:2D:39:B8:D4:4B:C9:3F:77:71:BF:4B
X509v3 Authority Key Identifier:
keyid:79:DF:25:96:1F:14:1B:21:58:6E:B9:A4:0B:5D:41:66:D7:3B:B8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed8llh8UGyFYbrmkC11BZtc7uMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/14vJMYWPfWJwLTm41EvJP3dxv0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.56.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:cd:12:87:ed:08:4e:93:13:00:2e:54:7d:5a:e2:93:5c:77:
34:cd:74:97:88:38:52:27:96:c9:b4:4a:a9:a1:22:24:d6:ce:
89:cd:32:8a:6a:d2:3f:c3:9d:0a:41:36:5a:5d:e3:63:21:6b:
a8:58:02:4f:46:36:f1:13:23:33:2b:a8:4c:9f:4e:ed:bb:52:
f5:96:8e:c5:6f:2a:f6:43:8e:74:0d:b6:ec:60:77:59:c1:e9:
d9:e5:66:91:9d:75:d6:15:18:e7:45:ff:1f:7f:62:1f:9e:f6:
7d:d7:c3:80:62:e2:b8:95:ee:71:12:89:26:a8:7a:19:73:a0:
4c:96:b7:1d:60:7a:97:bf:e1:62:55:58:0e:da:39:3e:81:af:
4c:80:d7:ae:d1:65:a9:ca:90:3d:6a:9a:30:7d:4b:cf:27:86:
1f:97:2d:06:0a:df:93:cf:28:6c:3b:33:94:fb:3b:f6:37:98:
25:e6:99:37:40:ad:75:1a:29:37:da:94:1d:83:1c:a2:14:7d:
f8:5a:4b:bc:dc:97:7f:88:26:6f:5f:5d:27:e0:2e:a9:a6:b6:
f3:63:18:5f:05:8d:c9:13:3a:38:25:e0:20:fb:b0:01:c2:1a:
22:43:1b:97:08:cd:f0:d1:bf:7a:c2:f3:a1:71:32:d6:92:ac:
db:45:03:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaL1TDScYRs2zTc0xeea2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZGYyNTk2MWYxNDFiMjE1ODZlYjlhNDBiNWQ0MTY2ZDcz
YmI4YzYwHhcNMjYwNzAyMTUxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzhiYzkzMTg1OGY3ZDYyNzAyZDM5YjhkNDRiYzkzZjc3NzFiZjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcA8RWeRh7UPvSK9FM1pkmAUTUr3
VNDon21tk+xyJnkjNOcP6LK11/uTpniQWGXOH1xyoyA3HUVejsY6ne83OYyIs93z
thROFlG0ME6DZeoJ5pAZ4/4OTqQZLvXr/40sopihz/Ltmq0dfyMvaRA0JrbuJIE8
amjWgJYUIIi3dUw7mDl+cGNEaKOJy5iHh3bqOejuujoc+A5qEfrmeDqc2N39sdOE
p4agKdpwGeNorWP5z6ujIJo7SWTduiDoPjS6sTwP9ko+fpQMTFhZ0nefqIZde+z3
lovLi4OQwRrs2HGpx8XZeesac0hJOdHIfnAF16neeUn9CZi0i/Ujk5XWrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNeLyTGFj31icC05uNRLyT93cb9LMB8GA1UdIwQY
MBaAFHnfJZYfFBshWG65pAtdQWbXO7jGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWQ4bGxoOFVHeUZZYnJta0MxMUJadGM3dU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83YmRkZGEtMGM2Yy00YTVlLWIxYzUt
M2JhNWYzMGNhYWJmLzEvMTR2Sk1ZV1BmV0p3TFRtNDFFdkpQM2R4djBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS83YmRkZGEtMGM2Yy00YTVlLWIxYzUtM2JhNWYzMGNhYWJm
LzEvZWQ4bGxoOFVHeUZZYnJta0MxMUJadGM3dU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucA4MA0G
CSqGSIb3DQEBCwUAA4IBAQB6zRKH7QhOkxMALlR9WuKTXHc0zXSXiDhSJ5bJtEqp
oSIk1s6JzTKKatI/w50KQTZaXeNjIWuoWAJPRjbxEyMzK6hMn07tu1L1lo7Fbyr2
Q450DbbsYHdZwenZ5WaRnXXWFRjnRf8ff2IfnvZ918OAYuK4le5xEokmqHoZc6BM
lrcdYHqXv+FiVVgO2jk+ga9MgNeu0WWpypA9apowfUvPJ4Yfly0GCt+TzyhsOzOU
+zv2N5gl5pk3QK11Gik32pQdgxyiFH34Wku83Jd/iCZvX10n4C6pprbzYxhfBY3J
Ezo4JeAg+7ABwhoiQxuXCM3w0b96wvOhcTLWkqzbRQMV
-----END CERTIFICATE-----
Generated at Wed Jul 8 19:33:23 2026 by rpki-client