Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/0Br6ew21BtNn2_2jlJWymhjSVoE.roa
File: 0Br6ew21BtNn2_2jlJWymhjSVoE.roa (raw, json)
Hash identifier: 090GYaL9VJ47BkQl07wkzwEWSWPACUU9C/YKBRTmTt4=
Subject key identifier: D0:1A:FA:7B:0D:B5:06:D3:67:DB:FD:A3:94:95:B2:9A:18:D2:56:81
Certificate issuer: /CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Certificate serial: 019F236938ADDFD2A9AFC2A7AF719F9E64FF
Authority key identifier: B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/0Br6ew21BtNn2_2jlJWymhjSVoE.roa
Signing time: Thu 02 Jul 2026 15:18:45 +0000
ROA not before: Thu 02 Jul 2026 15:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151331
IP address blocks: 200.180.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.mft
rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 20:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:38:ad:df:d2:a9:af:c2:a7:af:71:9f:9e:64:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Validity
Not Before: Jul 2 15:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d01afa7b0db506d367dbfda39495b29a18d25681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7d:7f:e1:cd:b9:61:83:9b:32:17:39:ce:4b:
6a:ca:df:db:ee:1d:c0:8d:3d:9a:1d:e5:4a:e2:1e:
20:a8:68:40:49:dd:f8:05:57:b6:9d:54:d9:d1:45:
0e:77:96:6e:e0:89:a4:7a:e6:b0:ca:65:8b:ac:23:
d7:16:eb:d4:61:0f:e2:ea:ce:43:74:6d:e5:30:54:
75:cb:45:b6:d8:d2:16:79:76:4a:12:6c:84:a4:fa:
24:c1:fa:88:27:1e:a1:e4:4b:74:22:9b:aa:27:c3:
ee:2d:b4:e6:70:9b:3f:71:1b:9f:fb:ad:02:67:d2:
dc:8f:54:7e:fc:3e:03:94:0c:f5:28:7d:4d:35:65:
ad:bf:bf:c6:61:67:84:fc:f3:58:f1:14:e0:5d:7b:
0c:80:7e:99:a2:4a:cb:ae:be:cc:d0:05:19:e8:da:
d5:0c:cb:c4:be:44:a1:b1:56:70:fd:c6:f7:54:10:
6c:55:16:4f:6d:02:a7:09:a6:ca:4b:97:b8:09:f7:
d7:4a:1b:24:b0:3f:df:e7:9f:0e:36:d0:18:aa:bc:
20:ae:40:6f:97:f2:85:d8:e8:4d:62:e2:f1:19:a8:
7a:7d:cc:a2:09:f4:f4:57:4f:3f:bd:12:ee:43:c2:
24:52:64:c2:8c:20:5c:a9:d9:b7:43:ec:35:2d:96:
42:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1A:FA:7B:0D:B5:06:D3:67:DB:FD:A3:94:95:B2:9A:18:D2:56:81
X509v3 Authority Key Identifier:
keyid:B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/0Br6ew21BtNn2_2jlJWymhjSVoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.180.160.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:f6:a3:5a:7e:e1:c5:94:2a:9c:6b:47:ef:bb:b0:fc:f8:ab:
eb:db:d2:23:1e:ef:38:86:cd:4c:25:a7:a3:20:dd:e6:46:f7:
e5:67:30:e4:a1:ac:8f:4b:ec:22:ba:ac:01:bd:5a:74:49:4c:
f6:61:04:5c:83:6f:00:96:3e:39:be:83:c9:1c:4e:d0:85:a9:
db:6c:a0:97:e1:cf:1d:06:dc:fd:e7:e4:2d:30:3d:8a:bd:ca:
ca:3c:15:1e:47:0a:40:dc:2d:de:c7:93:7c:81:ae:51:0f:4f:
ac:7a:4b:d6:0f:41:60:cc:a3:25:3c:f4:7d:67:13:ff:0c:0e:
60:7e:df:76:61:c9:58:0b:e4:e1:2a:13:c5:3f:22:bf:97:db:
dd:77:10:79:31:ad:2f:42:dd:d9:65:5c:89:96:f6:18:44:aa:
b2:93:e5:7d:24:94:04:8b:61:1f:98:31:03:43:0c:c4:03:9e:
d1:9f:bd:c8:b5:9e:58:88:ca:b3:38:f1:52:1e:85:14:70:ef:
c6:25:22:6b:e4:51:5b:e4:45:e1:14:09:28:b1:f9:0c:71:3a:
29:f9:d8:5f:38:37:59:9c:16:aa:11:23:5a:0b:2b:65:d8:b3:
00:af:41:7a:67:92:bd:9e:97:70:19:b1:66:60:58:be:bd:36:
42:98:c5:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaTit39Kpr8Knr3GfnmT/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyODZlOWYwODg0OGU0ODBiMWYzZTlhOWMwNmE4MzJkNDhj
ZTM3YWQwHhcNMjYwNzAyMTUxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDFhZmE3YjBkYjUwNmQzNjdkYmZkYTM5NDk1YjI5YTE4ZDI1NjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH1/4c25YYObMhc5zktqyt/b7h3A
jT2aHeVK4h4gqGhASd34BVe2nVTZ0UUOd5Zu4ImkeuawymWLrCPXFuvUYQ/i6s5D
dG3lMFR1y0W22NIWeXZKEmyEpPokwfqIJx6h5Et0IpuqJ8PuLbTmcJs/cRuf+60C
Z9Lcj1R+/D4DlAz1KH1NNWWtv7/GYWeE/PNY8RTgXXsMgH6ZokrLrr7M0AUZ6NrV
DMvEvkShsVZw/cb3VBBsVRZPbQKnCabKS5e4CffXShsksD/f558ONtAYqrwgrkBv
l/KF2OhNYuLxGah6fcyiCfT0V08/vRLuQ8IkUmTCjCBcqdm3Q+w1LZZCqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNAa+nsNtQbTZ9v9o5SVspoY0laBMB8GA1UdIwQY
MBaAFLKG6fCISOSAsfPpqcBqgy1IzjetMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc29icDhJaEk1SUN4OC1tcHdHcURMVWpPTjYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC85MDA3MDQtNmI0Ny00MDE3LWI5N2Yt
NDYwMTY4MDE3M2FhLzEvMEJyNmV3MjFCdE5uMl8yamxKV3ltaGpTVm9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC85MDA3MDQtNmI0Ny00MDE3LWI5N2YtNDYwMTY4MDE3M2Fh
LzEvc29icDhJaEk1SUN4OC1tcHdHcURMVWpPTjYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyLSgMA0G
CSqGSIb3DQEBCwUAA4IBAQCO9qNafuHFlCqca0fvu7D8+Kvr29IjHu84hs1MJaej
IN3mRvflZzDkoayPS+wiuqwBvVp0SUz2YQRcg28Alj45voPJHE7QhanbbKCX4c8d
Btz95+QtMD2KvcrKPBUeRwpA3C3ex5N8ga5RD0+sekvWD0FgzKMlPPR9ZxP/DA5g
ft92YclYC+ThKhPFPyK/l9vddxB5Ma0vQt3ZZVyJlvYYRKqyk+V9JJQEi2EfmDED
QwzEA57Rn73ItZ5YiMqzOPFSHoUUcO/GJSJr5FFb5EXhFAkosfkMcTop+dhfODdZ
nBaqESNaCytl2LMAr0F6Z5K9npdwGbFmYFi+vTZCmMW6
-----END CERTIFICATE-----
Generated at Tue Jul 7 04:30:34 2026 by rpki-client