Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/834MdZoIilVHj8ITDHKmWhc4LI8.roa
File: 834MdZoIilVHj8ITDHKmWhc4LI8.roa (raw, json)
Hash identifier: 0joC1jVmieeRq9IYfq18LPrQeRhpWEC9AchkePVGZrA=
Subject key identifier: F3:7E:0C:75:9A:08:8A:55:47:8F:C2:13:0C:72:A6:5A:17:38:2C:8F
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 019FF16D2A68D3394841672005244A2ED119
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/834MdZoIilVHj8ITDHKmWhc4LI8.roa
Signing time: Tue 11 Aug 2026 15:24:51 +0000
ROA not before: Tue 11 Aug 2026 15:24:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219359
IP address blocks: 132.243.160.0/24 maxlen: 24
132.243.163.0/24 maxlen: 24
132.243.167.0/24 maxlen: 24
132.243.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:6d:2a:68:d3:39:48:41:67:20:05:24:4a:2e:d1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Aug 11 15:24:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f37e0c759a088a55478fc2130c72a65a17382c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:47:ef:7a:8e:99:ee:d7:ef:be:06:b5:9d:ef:
78:64:30:eb:9f:18:d4:50:59:d7:8b:35:ba:61:76:
23:fc:05:19:d2:e6:a2:44:6e:70:ed:a0:43:9e:9d:
3e:9f:f1:de:f9:cd:85:a0:68:28:b7:a1:68:2a:fe:
6d:09:43:73:9a:0f:d0:1b:08:87:f7:d0:6c:91:7b:
0a:10:97:7b:d8:85:da:16:f8:f3:c0:78:29:f0:4b:
2a:82:9e:ab:dc:f3:74:dc:6d:89:d8:3e:aa:53:39:
3d:d3:78:1e:52:d4:e1:67:7a:38:16:a4:d1:42:a1:
6f:50:00:48:06:9f:38:a8:fe:4e:2c:d0:a1:2b:6e:
db:4d:96:d0:60:11:8e:3b:55:ec:0b:80:5a:80:5a:
3d:7b:ba:c8:5a:fa:59:d4:8f:45:a0:0f:24:2e:9b:
e3:f8:f1:a5:1d:54:79:16:4c:61:10:05:4e:76:db:
db:ba:89:f8:cf:1f:02:cf:44:27:e9:70:c5:a8:c7:
99:5a:e1:f6:7d:6e:6c:68:ca:52:28:17:2c:24:14:
e6:aa:c9:92:95:66:fc:4b:49:e7:a1:a2:69:60:e7:
64:4d:b3:f7:fa:99:17:83:af:96:ca:36:77:18:69:
25:98:c7:2f:aa:db:6b:a2:3e:ab:86:35:07:20:65:
18:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7E:0C:75:9A:08:8A:55:47:8F:C2:13:0C:72:A6:5A:17:38:2C:8F
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/834MdZoIilVHj8ITDHKmWhc4LI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.160.0/24
132.243.163.0/24
132.243.167.0/24
132.243.173.0/24
Signature Algorithm: sha256WithRSAEncryption
79:30:a6:32:e5:f5:6c:bc:b0:97:72:66:26:31:36:94:7e:b2:
d5:50:af:0f:90:cf:55:c3:e8:dd:a7:36:f9:6a:40:b0:39:f2:
5b:45:fc:1f:64:59:d8:04:14:6e:51:ef:c2:9a:f3:77:28:6f:
6c:2c:24:2e:62:4a:6f:15:90:9f:f3:a5:3b:46:4c:49:61:66:
5d:57:57:72:dd:e5:7a:57:14:e2:05:35:d0:54:32:3f:f9:80:
de:8d:27:f3:b5:9c:8b:b2:9d:2d:87:2c:ab:c7:4c:2b:28:cb:
3a:60:82:22:5e:69:79:65:c4:87:2c:b4:f2:9e:56:f0:db:3d:
49:88:4e:f8:b9:0e:fe:11:99:f4:20:d0:d5:b9:21:73:58:6f:
3b:01:73:11:4d:93:ab:44:42:51:7d:2d:8d:5b:f0:ff:02:f0:
05:d9:68:72:45:b4:b7:06:4a:ba:4e:b5:7b:18:28:8f:5f:c3:
f5:00:45:ff:66:1f:cd:f2:37:0e:1e:18:70:91:d3:67:10:3c:
60:ca:ae:83:08:8f:86:ff:fb:76:bb:ad:22:37:65:c7:5b:e2:
97:6c:e5:7e:f4:9c:98:12:5b:72:13:e0:25:ad:aa:c6:dc:73:
50:18:6d:14:54:61:34:bd:60:6c:4f:96:52:f2:72:64:eb:f1:
0b:6c:51:2b
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ/xbSpo0zlIQWcgBSRKLtEZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMWQ2ZWJhNDYzYjc1NjRhYmZhZTkzOGI0NmVkNDcxODdk
ZTBlYzAwHhcNMjYwODExMTUyNDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzdlMGM3NTlhMDg4YTU1NDc4ZmMyMTMwYzcyYTY1YTE3MzgyYzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkfveo6Z7tfvvga1ne94ZDDrnxjU
UFnXizW6YXYj/AUZ0uaiRG5w7aBDnp0+n/He+c2FoGgot6FoKv5tCUNzmg/QGwiH
99BskXsKEJd72IXaFvjzwHgp8Esqgp6r3PN03G2J2D6qUzk903geUtThZ3o4FqTR
QqFvUABIBp84qP5OLNChK27bTZbQYBGOO1XsC4BagFo9e7rIWvpZ1I9FoA8kLpvj
+PGlHVR5FkxhEAVOdtvbuon4zx8Cz0Qn6XDFqMeZWuH2fW5saMpSKBcsJBTmqsmS
lWb8S0nnoaJpYOdkTbP3+pkXg6+WyjZ3GGklmMcvqttroj6rhjUHIGUYzwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPN+DHWaCIpVR4/CEwxyploXOCyPMB8GA1UdIwQY
MBaAFNsdbrpGO3Vkq/rpOLRu1HGH3g7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAt
NmYyY2Y0ZjAzY2ViLzEvODM0TWRab0lpbFZIajhJVERIS21XaGM0TEk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80ZjY5ODUtYjk0YS00N2NjLWEzMDAtNmYyY2Y0ZjAzY2Vi
LzEvMngxdXVrWTdkV1NyLXVrNHRHN1VjWWZlRHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAhPOgAwQA
hPOjAwQAhPOnAwQAhPOtMA0GCSqGSIb3DQEBCwUAA4IBAQB5MKYy5fVsvLCXcmYm
MTaUfrLVUK8PkM9Vw+jdpzb5akCwOfJbRfwfZFnYBBRuUe/CmvN3KG9sLCQuYkpv
FZCf86U7RkxJYWZdV1dy3eV6VxTiBTXQVDI/+YDejSfztZyLsp0thyyrx0wrKMs6
YIIiXml5ZcSHLLTynlbw2z1JiE74uQ7+EZn0INDVuSFzWG87AXMRTZOrREJRfS2N
W/D/AvAF2WhyRbS3Bkq6TrV7GCiPX8P1AEX/Zh/N8jcOHhhwkdNnEDxgyq6DCI+G
//t2u60iN2XHW+KXbOV+9JyYEltyE+AlrarG3HNQGG0UVGE0vWBsT5ZS8nJk6/EL
bFEr
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:25:45 2026 by rpki-client