Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/Ir_nWZJdcOJnCTnVcfZ7Tw6tHb8.roa
File: Ir_nWZJdcOJnCTnVcfZ7Tw6tHb8.roa (raw, json)
Hash identifier: XMhvFuv+q67kVMdBDoquQcBiEsQikcSaInDk97VnSMA=
Subject key identifier: 22:BF:E7:59:92:5D:70:E2:67:09:39:D5:71:F6:7B:4F:0E:AD:1D:BF
Certificate issuer: /CN=2c9e4d4c024b78ad874e96ffb3dc785af9bd5c32
Certificate serial: 019F2368BC02E0FEE0131D587F8A2B2EC9BE
Authority key identifier: 2C:9E:4D:4C:02:4B:78:AD:87:4E:96:FF:B3:DC:78:5A:F9:BD:5C:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJ5NTAJLeK2HTpb_s9x4Wvm9XDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/Ir_nWZJdcOJnCTnVcfZ7Tw6tHb8.roa
Signing time: Thu 02 Jul 2026 15:18:14 +0000
ROA not before: Thu 02 Jul 2026 15:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212766
IP address blocks: 193.163.116.0/24 maxlen: 24
2a11:e340::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/LJ5NTAJLeK2HTpb_s9x4Wvm9XDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/LJ5NTAJLeK2HTpb_s9x4Wvm9XDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJ5NTAJLeK2HTpb_s9x4Wvm9XDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bc:02:e0:fe:e0:13:1d:58:7f:8a:2b:2e:c9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9e4d4c024b78ad874e96ffb3dc785af9bd5c32
Validity
Not Before: Jul 2 15:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22bfe759925d70e2670939d571f67b4f0ead1dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:75:a9:bb:2e:39:71:b3:6a:5f:b7:16:1e:
19:8c:ac:db:11:28:f3:23:ba:4b:51:6b:86:b4:96:
6f:75:95:5a:9b:da:df:71:24:61:bd:89:79:01:3e:
0a:50:da:02:5e:8a:0f:f3:27:8e:72:25:d5:43:ff:
df:3b:75:b9:f6:df:c4:7e:8d:d9:c1:cc:95:9a:c6:
ea:4d:63:b0:a3:ba:ac:9f:dc:58:1e:0b:73:58:fb:
12:e6:2a:06:ac:96:4a:17:1a:d0:cd:e5:d2:96:44:
ff:69:de:a2:1f:8f:15:83:3b:af:97:69:31:c2:96:
58:18:82:3e:63:7b:71:b2:5a:39:a5:59:39:a4:99:
4d:2d:21:62:2d:af:e1:fb:24:bf:86:6e:b2:9b:6e:
38:29:0d:0a:aa:f9:46:76:71:b4:57:ef:00:0a:be:
3e:93:4d:42:f8:ef:15:e9:cf:c7:26:69:a4:92:6c:
03:79:eb:0d:fd:50:a1:d0:4b:a8:37:09:7f:86:90:
6e:7c:36:bd:aa:5e:a2:0f:d2:9f:39:0e:23:69:4f:
ec:b7:de:a0:a2:e4:cf:d2:98:11:fd:57:97:7d:4b:
11:15:15:c4:db:d0:95:54:14:e4:ed:6a:4e:5e:ed:
ca:bc:c0:91:f2:39:68:6d:8b:44:5e:30:c2:08:c1:
fd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BF:E7:59:92:5D:70:E2:67:09:39:D5:71:F6:7B:4F:0E:AD:1D:BF
X509v3 Authority Key Identifier:
keyid:2C:9E:4D:4C:02:4B:78:AD:87:4E:96:FF:B3:DC:78:5A:F9:BD:5C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJ5NTAJLeK2HTpb_s9x4Wvm9XDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/Ir_nWZJdcOJnCTnVcfZ7Tw6tHb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/LJ5NTAJLeK2HTpb_s9x4Wvm9XDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.116.0/24
IPv6:
2a11:e340::/29
Signature Algorithm: sha256WithRSAEncryption
25:b3:b9:37:74:63:7c:34:4f:c9:94:4e:4c:d1:24:74:8a:2b:
d4:39:73:1d:8a:31:ad:da:ce:af:1b:45:5d:a5:80:df:c1:de:
ba:4a:65:39:39:e0:44:53:61:32:3c:e4:5d:ee:42:8d:58:d9:
e7:32:11:3d:27:9b:4c:b5:2f:74:3d:0f:6e:a5:14:8a:72:36:
64:c2:c4:00:51:99:51:9f:88:75:7e:18:b6:1a:b8:a7:ef:86:
d4:05:2f:a5:8c:db:de:a6:70:96:99:5e:61:70:f6:2b:a9:e3:
c6:36:71:1f:d4:1a:32:30:03:5c:c9:f8:88:00:95:48:7f:65:
d9:b1:21:9f:63:18:28:5d:7c:b0:e7:97:72:70:ec:7c:e2:4b:
fa:06:32:d8:5c:9f:c9:ed:d0:6d:28:42:34:44:12:20:cc:ad:
de:d4:48:99:60:cf:f5:48:e0:d8:58:1b:e8:7e:a2:db:4f:17:
7a:ad:06:c3:40:86:a1:2c:dc:b3:f1:20:20:04:88:97:53:87:
34:3c:a1:5d:87:44:63:8c:6a:d0:27:da:f8:0b:5d:41:e5:3b:
f6:03:97:e8:5b:65:af:33:40:01:76:1b:bf:b9:d3:2e:cb:b6:
01:81:59:72:63:09:e1:26:18:67:00:22:43:ed:47:2d:a6:9f:
68:4b:24:d6
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaLwC4P7gEx1Yf4orLsm+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOWU0ZDRjMDI0Yjc4YWQ4NzRlOTZmZmIzZGM3ODVhZjli
ZDVjMzIwHhcNMjYwNzAyMTUxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmJmZTc1OTkyNWQ3MGUyNjcwOTM5ZDU3MWY2N2I0ZjBlYWQxZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLh1qbsuOXGzal+3Fh4ZjKzbESjz
I7pLUWuGtJZvdZVam9rfcSRhvYl5AT4KUNoCXooP8yeOciXVQ//fO3W59t/Efo3Z
wcyVmsbqTWOwo7qsn9xYHgtzWPsS5ioGrJZKFxrQzeXSlkT/ad6iH48Vgzuvl2kx
wpZYGII+Y3txslo5pVk5pJlNLSFiLa/h+yS/hm6ym244KQ0KqvlGdnG0V+8ACr4+
k01C+O8V6c/HJmmkkmwDeesN/VCh0EuoNwl/hpBufDa9ql6iD9KfOQ4jaU/st96g
ouTP0pgR/VeXfUsRFRXE29CVVBTk7WpOXu3KvMCR8jlobYtEXjDCCMH9CwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCK/51mSXXDiZwk51XH2e08OrR2/MB8GA1UdIwQY
MBaAFCyeTUwCS3ith06W/7PceFr5vVwyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEo1TlRBSkxlSzJIVHBiX3M5eDRXdm05WERJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8zMzRjNTYtMmU2OS00ZGEyLWIwMWQt
MDMwODAyNjQxYzY3LzEvSXJfbldaSmRjT0puQ1RuVmNmWjdUdzZ0SGI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8zMzRjNTYtMmU2OS00ZGEyLWIwMWQtMDMwODAyNjQxYzY3
LzEvTEo1TlRBSkxlSzJIVHBiX3M5eDRXdm05WERJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwaN0MA0E
AgACMAcDBQMqEeNAMA0GCSqGSIb3DQEBCwUAA4IBAQAls7k3dGN8NE/JlE5M0SR0
iivUOXMdijGt2s6vG0VdpYDfwd66SmU5OeBEU2EyPORd7kKNWNnnMhE9J5tMtS90
PQ9upRSKcjZkwsQAUZlRn4h1fhi2Grin74bUBS+ljNvepnCWmV5hcPYrqePGNnEf
1BoyMANcyfiIAJVIf2XZsSGfYxgoXXyw55dycOx84kv6BjLYXJ/J7dBtKEI0RBIg
zK3e1EiZYM/1SODYWBvofqLbTxd6rQbDQIahLNyz8SAgBIiXU4c0PKFdh0RjjGrQ
J9r4C11B5Tv2A5foW2WvM0ABdhu/udMuy7YBgVlyYwnhJhhnACJD7Uctpp9oSyTW
-----END CERTIFICATE-----
Generated at Sat Aug 15 01:26:36 2026 by rpki-client