Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/20xMr4UkTc7mDjSXUAQ2OIVEdaA.roa
File: 20xMr4UkTc7mDjSXUAQ2OIVEdaA.roa (raw, json)
Hash identifier: lYcXkOJMvyy3d7VAmjTtLuavcH5/RrOQ9RjLW9dvSVc=
Subject key identifier: DB:4C:4C:AF:85:24:4D:CE:E6:0E:34:97:50:04:36:38:85:44:75:A0
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 019FDC9BE25ED868629B9D1729D36B7C1AEE
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/20xMr4UkTc7mDjSXUAQ2OIVEdaA.roa
Signing time: Fri 07 Aug 2026 14:23:51 +0000
ROA not before: Fri 07 Aug 2026 14:23:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 194.59.6.0/24 maxlen: 24
194.59.7.0/24 maxlen: 24
194.116.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:9b:e2:5e:d8:68:62:9b:9d:17:29:d3:6b:7c:1a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Aug 7 14:23:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db4c4caf85244dcee60e349750043638854475a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ef:75:a4:b9:27:55:08:55:5e:44:1d:a9:8e:
e2:53:e3:c3:9d:c6:b9:35:61:1c:d1:ea:6a:5b:ec:
cf:84:62:52:fe:b0:9d:9f:62:2a:ca:42:3e:fc:19:
7d:66:54:96:73:42:1f:9f:4b:5d:eb:24:3e:b1:ee:
48:13:9c:11:1e:03:f0:97:25:94:75:ea:7f:4b:04:
45:80:32:3d:40:fa:ad:a8:54:86:e5:43:6e:00:5c:
a6:03:e7:56:05:7d:1c:fd:92:4c:13:b1:70:04:1a:
1a:fe:bf:07:8a:ba:87:02:b1:cc:c2:e7:b4:19:03:
63:e0:74:a1:76:2a:ea:73:8c:f1:d0:df:2d:a1:3e:
de:78:f8:3f:ca:6a:4a:53:9e:06:13:17:aa:5a:22:
0c:74:5c:b8:a0:ae:de:d3:ce:00:1a:e6:e8:58:06:
fe:e9:13:b1:14:b6:3f:90:66:7e:2a:02:95:2c:20:
6b:e0:c0:99:56:82:6f:2a:20:56:8a:e9:b6:af:67:
1c:07:d0:8c:89:9e:f2:82:b6:50:e1:07:44:88:4a:
77:ff:49:7f:f2:85:41:5e:42:7e:29:ba:b9:27:23:
0f:2b:71:ea:9f:57:59:07:b5:f2:e0:6a:26:30:44:
0d:a9:b7:6e:cb:cf:5e:d8:f6:cb:75:32:f5:ae:ea:
cc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4C:4C:AF:85:24:4D:CE:E6:0E:34:97:50:04:36:38:85:44:75:A0
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/20xMr4UkTc7mDjSXUAQ2OIVEdaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.6.0/23
194.116.235.0/24
Signature Algorithm: sha256WithRSAEncryption
74:49:f6:15:d6:c7:03:4e:2a:0c:51:6b:4a:20:33:55:6b:22:
b9:f7:50:87:dc:50:f7:e6:89:80:c6:3d:f5:cd:51:60:39:25:
9a:ed:c9:a8:9f:5d:c6:5a:9d:11:3c:1c:22:97:00:cc:84:2e:
fe:00:bd:4d:61:f9:40:4f:8a:4c:26:32:48:f3:af:49:42:83:
a1:7f:4d:b7:0b:04:f3:4d:d1:a8:c5:fe:b8:87:f2:d5:a8:8f:
ed:15:2a:f0:16:0a:f3:df:a5:b4:83:cb:03:26:65:e9:df:4e:
0b:6b:c0:f0:10:7d:ea:b2:e2:dd:da:a9:ab:7d:96:9a:68:a3:
70:7f:37:d2:41:55:7f:b7:e3:25:db:95:4f:28:58:02:19:7e:
e5:f1:79:4e:69:91:7a:db:75:bd:4d:06:3a:cb:70:b1:ab:b7:
74:ea:ae:5a:b9:b7:52:a6:ea:0c:6f:12:08:dd:fa:4f:9a:cf:
0c:86:25:38:93:b7:dc:2d:32:3d:c3:45:df:58:84:f7:8d:87:
4c:38:aa:f1:21:7a:7a:40:f3:05:2e:31:bf:19:5c:61:1f:77:
4e:2c:87:45:33:e4:ec:cd:de:29:cb:94:34:4a:44:10:06:7d:
8c:6e:5c:2e:79:4f:87:6e:a6:66:9e:39:1f:ee:b4:1a:c7:d2:
1a:89:39:36
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/cm+Je2Ghim50XKdNrfBruMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3
YTI2NmEwHhcNMjYwODA3MTQyMzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjRjNGNhZjg1MjQ0ZGNlZTYwZTM0OTc1MDA0MzYzODg1NDQ3NWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu91pLknVQhVXkQdqY7iU+PDnca5
NWEc0epqW+zPhGJS/rCdn2IqykI+/Bl9ZlSWc0Ifn0td6yQ+se5IE5wRHgPwlyWU
dep/SwRFgDI9QPqtqFSG5UNuAFymA+dWBX0c/ZJME7FwBBoa/r8HirqHArHMwue0
GQNj4HShdirqc4zx0N8toT7eePg/ympKU54GExeqWiIMdFy4oK7e084AGuboWAb+
6ROxFLY/kGZ+KgKVLCBr4MCZVoJvKiBWium2r2ccB9CMiZ7ygrZQ4QdEiEp3/0l/
8oVBXkJ+Kbq5JyMPK3Hqn1dZB7Xy4GomMEQNqbduy89e2PbLdTL1rurMjwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNtMTK+FJE3O5g40l1AENjiFRHWgMB8GA1UdIwQY
MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt
YWRhNWMyMGUzZjdiLzEvMjB4TXI0VWtUYzdtRGpTWFVBUTJPSVZFZGFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi
LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwjsGAwQA
wnTrMA0GCSqGSIb3DQEBCwUAA4IBAQB0SfYV1scDTioMUWtKIDNVayK591CH3FD3
5omAxj31zVFgOSWa7cmon13GWp0RPBwilwDMhC7+AL1NYflAT4pMJjJI869JQoOh
f023CwTzTdGoxf64h/LVqI/tFSrwFgrz36W0g8sDJmXp304La8DwEH3qsuLd2qmr
fZaaaKNwfzfSQVV/t+Ml25VPKFgCGX7l8XlOaZF623W9TQY6y3Cxq7d06q5aubdS
puoMbxII3fpPms8MhiU4k7fcLTI9w0XfWIT3jYdMOKrxIXp6QPMFLjG/GVxhH3dO
LIdFM+Tszd4py5Q0SkQQBn2MblwueU+HbqZmnjkf7rQax9IaiTk2
-----END CERTIFICATE-----
Generated at Sat Aug 22 00:01:57 2026 by rpki-client