Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/985aee-5e4c-42cc-8f24-9d559dc4c124/1/RDXHjc00fOrRt3Yaj8OOOGP3IeQ.roa
File: RDXHjc00fOrRt3Yaj8OOOGP3IeQ.roa (raw, json)
Hash identifier: 7wQU77lcMx7zNIX5/jMinttVxkaBruMAvwo/yeRlBaU=
Subject key identifier: 44:35:C7:8D:CD:34:7C:EA:D1:B7:76:1A:8F:C3:8E:38:63:F7:21:E4
Certificate issuer: /CN=374f8d22d2184cc7ced9eeb13d94a05f4bbe0ca7
Certificate serial: 01A0E6B6EE542E6FAB624D227EF95FE3C0BC
Authority key identifier: 37:4F:8D:22:D2:18:4C:C7:CE:D9:EE:B1:3D:94:A0:5F:4B:BE:0C:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0-NItIYTMfO2e6xPZSgX0u-DKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/985aee-5e4c-42cc-8f24-9d559dc4c124/1/RDXHjc00fOrRt3Yaj8OOOGP3IeQ.roa
Signing time: Mon 28 Sep 2026 06:32:23 +0000
ROA not before: Mon 28 Sep 2026 06:32:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15694
IP address blocks: 194.150.230.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/985aee-5e4c-42cc-8f24-9d559dc4c124/1/N0-NItIYTMfO2e6xPZSgX0u-DKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/985aee-5e4c-42cc-8f24-9d559dc4c124/1/N0-NItIYTMfO2e6xPZSgX0u-DKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0-NItIYTMfO2e6xPZSgX0u-DKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:b6:ee:54:2e:6f:ab:62:4d:22:7e:f9:5f:e3:c0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f8d22d2184cc7ced9eeb13d94a05f4bbe0ca7
Validity
Not Before: Sep 28 06:32:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4435c78dcd347cead1b7761a8fc38e3863f721e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d8:25:93:44:6c:0f:46:39:bf:e8:0f:a1:4c:
e4:79:32:8f:d4:b8:91:7b:ed:27:51:b3:d2:49:e1:
f7:95:10:bf:eb:81:02:b5:10:48:38:ab:1d:39:6c:
05:7a:05:ef:31:5d:80:78:7e:3a:69:b3:68:04:7a:
8a:7a:f1:51:ad:4e:ad:06:84:ca:ce:a9:e9:8f:22:
ab:c5:4c:67:8d:fa:af:83:b8:9a:67:2f:59:25:c8:
53:7c:4a:38:15:9a:27:01:31:fd:dd:51:d9:39:ce:
f9:5c:1c:d6:92:76:e3:3a:ca:a7:c3:a0:fe:78:eb:
b3:8f:ca:45:82:50:db:2a:40:5e:26:1a:3a:e4:37:
74:46:72:53:a7:04:bb:5d:13:77:6a:f8:02:a6:38:
49:c8:ea:be:70:15:56:7b:17:04:f9:f3:c1:ed:5e:
95:2b:44:c7:45:ad:73:93:32:93:89:8e:af:4a:9f:
6e:75:23:d7:99:19:f6:ca:1e:9b:e7:58:47:d7:25:
b6:df:2a:05:f1:1b:6a:59:35:6b:91:c8:4d:56:94:
7f:58:d4:c4:ce:d6:4b:8a:f1:dd:5d:d8:72:19:02:
fa:06:74:e4:d6:33:7f:fe:bd:7f:29:3e:76:ba:d0:
47:39:2f:05:ec:87:a3:a2:a5:b7:b5:28:79:45:fd:
16:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:35:C7:8D:CD:34:7C:EA:D1:B7:76:1A:8F:C3:8E:38:63:F7:21:E4
X509v3 Authority Key Identifier:
keyid:37:4F:8D:22:D2:18:4C:C7:CE:D9:EE:B1:3D:94:A0:5F:4B:BE:0C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0-NItIYTMfO2e6xPZSgX0u-DKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/985aee-5e4c-42cc-8f24-9d559dc4c124/1/RDXHjc00fOrRt3Yaj8OOOGP3IeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/985aee-5e4c-42cc-8f24-9d559dc4c124/1/N0-NItIYTMfO2e6xPZSgX0u-DKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.230.0/23
Signature Algorithm: sha256WithRSAEncryption
68:3c:ba:0e:20:b0:4c:f3:5f:15:bb:e6:83:79:f5:c1:8a:c7:
e9:f8:ee:6c:13:d1:7f:cc:27:57:1a:01:3a:09:04:44:d9:f0:
27:4b:82:08:45:d9:a1:fb:ed:88:68:85:80:11:d5:fb:99:e1:
40:fd:ec:9d:3f:b4:28:f8:fd:af:79:1a:b1:df:f2:cb:f9:e2:
bf:84:d6:e3:cb:3a:e6:37:26:bd:c3:2e:10:a3:b6:d2:59:d3:
07:e9:e1:56:d5:23:bd:3b:f2:84:5d:92:77:12:59:19:8c:10:
60:23:1a:a8:a2:1b:8e:4e:3a:95:5f:3d:a7:f5:44:c9:39:29:
52:94:4c:9b:22:23:d5:96:c9:01:90:1e:20:53:74:20:a1:e4:
4f:30:59:54:65:c6:58:3b:15:b6:5e:1b:09:28:65:70:ae:7f:
29:a6:82:a1:5d:a8:5e:31:5d:6b:c4:ae:de:b6:38:09:76:99:
e1:5a:2d:21:2d:8f:3c:69:7a:e3:75:df:d1:81:72:77:44:7e:
98:08:ae:03:cc:c9:e4:7e:05:d9:3f:ee:33:0f:f1:49:2d:50:
92:59:83:56:0b:3b:04:d0:4a:9a:dd:5e:ba:a9:6a:ee:62:e7:
b3:46:b2:c0:c5:bc:9a:31:78:f6:26:18:ca:5c:db:d6:b8:4e:
7e:72:37:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDmtu5ULm+rYk0ifvlf48C8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NGY4ZDIyZDIxODRjYzdjZWQ5ZWViMTNkOTRhMDVmNGJi
ZTBjYTcwHhcNMjYwOTI4MDYzMjIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDM1Yzc4ZGNkMzQ3Y2VhZDFiNzc2MWE4ZmMzOGUzODYzZjcyMWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dglk0RsD0Y5v+gPoUzkeTKP1LiR
e+0nUbPSSeH3lRC/64ECtRBIOKsdOWwFegXvMV2AeH46abNoBHqKevFRrU6tBoTK
zqnpjyKrxUxnjfqvg7iaZy9ZJchTfEo4FZonATH93VHZOc75XBzWknbjOsqnw6D+
eOuzj8pFglDbKkBeJho65Dd0RnJTpwS7XRN3avgCpjhJyOq+cBVWexcE+fPB7V6V
K0THRa1zkzKTiY6vSp9udSPXmRn2yh6b51hH1yW23yoF8RtqWTVrkchNVpR/WNTE
ztZLivHdXdhyGQL6BnTk1jN//r1/KT52utBHOS8F7IejoqW3tSh5Rf0WFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEQ1x43NNHzq0bd2Go/Djjhj9yHkMB8GA1UdIwQY
MBaAFDdPjSLSGEzHztnusT2UoF9LvgynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjAtTkl0SVlUTWZPMmU2eFBaU2dYMHUtREtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85ODVhZWUtNWU0Yy00MmNjLThmMjQt
OWQ1NTlkYzRjMTI0LzEvUkRYSGpjMDBmT3JSdDNZYWo4T09PR1AzSWVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85ODVhZWUtNWU0Yy00MmNjLThmMjQtOWQ1NTlkYzRjMTI0
LzEvTjAtTkl0SVlUTWZPMmU2eFBaU2dYMHUtREtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwpbmMA0G
CSqGSIb3DQEBCwUAA4IBAQBoPLoOILBM818Vu+aDefXBisfp+O5sE9F/zCdXGgE6
CQRE2fAnS4IIRdmh++2IaIWAEdX7meFA/eydP7Qo+P2veRqx3/LL+eK/hNbjyzrm
Nya9wy4Qo7bSWdMH6eFW1SO9O/KEXZJ3ElkZjBBgIxqoohuOTjqVXz2n9UTJOSlS
lEybIiPVlskBkB4gU3QgoeRPMFlUZcZYOxW2XhsJKGVwrn8ppoKhXaheMV1rxK7e
tjgJdpnhWi0hLY88aXrjdd/RgXJ3RH6YCK4DzMnkfgXZP+4zD/FJLVCSWYNWCzsE
0Eqa3V66qWruYuezRrLAxbyaMXj2JhjKXNvWuE5+cjdN
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:56:16 2026 by rpki-client