Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/IUND_ZJvUj1CtcpArBHxe8bv1p4.roa
File: IUND_ZJvUj1CtcpArBHxe8bv1p4.roa (raw, json)
Hash identifier: n/xeReedDwJALLUqAUfHidJssa5b4nfOPmZ83oYT4CQ=
Subject key identifier: 21:43:43:FD:92:6F:52:3D:42:B5:CA:40:AC:11:F1:7B:C6:EF:D6:9E
Certificate issuer: /CN=2be04a2d156c1c68c35238f6e8301abaef00bdf1
Certificate serial: 01A1158B81146B14B94536458ACCB555C654
Authority key identifier: 2B:E0:4A:2D:15:6C:1C:68:C3:52:38:F6:E8:30:1A:BA:EF:00:BD:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-BKLRVsHGjDUjj26DAauu8AvfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/IUND_ZJvUj1CtcpArBHxe8bv1p4.roa
Signing time: Wed 07 Oct 2026 08:47:06 +0000
ROA not before: Wed 07 Oct 2026 08:47:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25566
IP address blocks: 195.245.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-BKLRVsHGjDUjj26DAauu8AvfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:8b:81:14:6b:14:b9:45:36:45:8a:cc:b5:55:c6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2be04a2d156c1c68c35238f6e8301abaef00bdf1
Validity
Not Before: Oct 7 08:47:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=214343fd926f523d42b5ca40ac11f17bc6efd69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:92:cc:2f:b5:cb:27:5c:73:da:1f:01:77:d6:
2f:ce:74:19:fb:8d:50:79:d9:08:96:6c:be:5f:d8:
0b:0b:77:e9:21:ef:4d:20:17:7b:e7:6e:0e:e6:4d:
31:7f:22:a9:3e:3d:16:4d:06:4b:b8:c3:9e:cb:1d:
3e:3f:24:8f:ce:65:95:47:db:e3:f9:ba:df:22:3c:
42:4f:a7:ac:8c:83:7b:50:6c:0e:47:ea:6f:ee:c1:
4b:6f:34:18:76:36:a1:1b:b6:e9:88:15:ca:3e:2e:
87:d1:e5:3a:36:c2:07:4b:00:f5:f2:72:3e:12:e5:
db:9a:29:c6:f5:f6:45:d3:8f:cd:37:d1:5e:68:bd:
bf:d4:c2:7d:4f:66:3c:3f:df:61:93:b2:3d:a0:ea:
74:50:44:1f:be:7e:7d:20:36:5d:be:d5:7c:9f:cb:
0f:27:aa:8b:f7:3c:26:87:bf:7e:e0:86:d4:53:dd:
d0:83:b8:d4:59:4a:6d:55:5f:bf:9f:7a:ec:3c:8e:
f8:dc:7a:08:6d:ea:a1:03:c3:12:35:ef:89:66:18:
b7:3c:6a:17:33:18:81:a1:a3:70:c2:e2:71:8f:da:
ff:9c:68:05:f7:cb:5c:d8:c8:74:da:af:1c:aa:4d:
9f:1c:fb:24:ba:ea:66:ed:31:88:36:47:72:b6:29:
51:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:43:43:FD:92:6F:52:3D:42:B5:CA:40:AC:11:F1:7B:C6:EF:D6:9E
X509v3 Authority Key Identifier:
keyid:2B:E0:4A:2D:15:6C:1C:68:C3:52:38:F6:E8:30:1A:BA:EF:00:BD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-BKLRVsHGjDUjj26DAauu8AvfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/IUND_ZJvUj1CtcpArBHxe8bv1p4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/61cfd2-b0c2-453a-b658-321805c7e20f/1/K-BKLRVsHGjDUjj26DAauu8AvfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.227.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:17:b6:95:bd:62:05:50:bb:cc:3b:24:ce:fe:54:56:7b:49:
3c:d9:de:a7:90:58:3a:0f:86:4b:be:a2:3a:a0:da:b3:1a:9b:
61:ba:90:f3:ab:8a:46:29:7a:1b:59:e2:d4:42:e9:4a:79:91:
4f:7a:f9:6a:fc:62:e0:94:2e:72:cd:92:f4:32:da:bd:9d:27:
3d:85:56:90:8a:8f:35:78:30:97:ca:2c:ee:36:d7:57:de:1e:
f7:45:c8:78:f6:fd:7b:58:66:98:87:b9:53:0b:5c:a0:e2:87:
d0:06:c7:08:79:54:56:ac:fa:ce:17:c2:d5:a1:49:91:09:53:
61:09:75:4a:f3:68:8f:93:32:fa:08:04:ba:4c:18:b9:d6:b4:
df:4a:f0:dd:65:d0:3a:9a:93:79:18:de:96:c2:5c:30:d0:a9:
e0:39:61:3d:46:42:b4:c3:2a:e6:71:f9:46:d8:e3:91:f1:ab:
9b:43:6f:31:14:96:1d:14:e2:5a:f3:21:18:e8:4e:4d:44:73:
dd:ed:9f:27:0a:7d:35:14:e6:a1:b5:5f:1a:75:31:03:00:2f:
a0:ba:14:18:af:3c:0c:59:06:91:1e:45:55:41:92:5a:99:25:
ec:17:8b:c5:21:31:cd:79:1c:f2:63:e8:98:5d:e5:64:0e:77:
a9:6a:2e:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEVi4EUaxS5RTZFisy1VcZUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZTA0YTJkMTU2YzFjNjhjMzUyMzhmNmU4MzAxYWJhZWYw
MGJkZjEwHhcNMjYxMDA3MDg0NzA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTQzNDNmZDkyNmY1MjNkNDJiNWNhNDBhYzExZjE3YmM2ZWZkNjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZLML7XLJ1xz2h8Bd9YvznQZ+41Q
edkIlmy+X9gLC3fpIe9NIBd7524O5k0xfyKpPj0WTQZLuMOeyx0+PySPzmWVR9vj
+brfIjxCT6esjIN7UGwOR+pv7sFLbzQYdjahG7bpiBXKPi6H0eU6NsIHSwD18nI+
EuXbminG9fZF04/NN9FeaL2/1MJ9T2Y8P99hk7I9oOp0UEQfvn59IDZdvtV8n8sP
J6qL9zwmh79+4IbUU93Qg7jUWUptVV+/n3rsPI743HoIbeqhA8MSNe+JZhi3PGoX
MxiBoaNwwuJxj9r/nGgF98tc2Mh02q8cqk2fHPskuupm7TGINkdytilRvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCFDQ/2Sb1I9QrXKQKwR8XvG79aeMB8GA1UdIwQY
MBaAFCvgSi0VbBxow1I49ugwGrrvAL3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSy1CS0xSVnNIR2pEVWpqMjZEQWF1dThBdmZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82MWNmZDItYjBjMi00NTNhLWI2NTgt
MzIxODA1YzdlMjBmLzEvSVVORF9aSnZVajFDdGNwQXJCSHhlOGJ2MXA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi82MWNmZDItYjBjMi00NTNhLWI2NTgtMzIxODA1YzdlMjBm
LzEvSy1CS0xSVnNIR2pEVWpqMjZEQWF1dThBdmZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/XjMA0G
CSqGSIb3DQEBCwUAA4IBAQA/F7aVvWIFULvMOyTO/lRWe0k82d6nkFg6D4ZLvqI6
oNqzGpthupDzq4pGKXobWeLUQulKeZFPevlq/GLglC5yzZL0Mtq9nSc9hVaQio81
eDCXyizuNtdX3h73Rch49v17WGaYh7lTC1yg4ofQBscIeVRWrPrOF8LVoUmRCVNh
CXVK82iPkzL6CAS6TBi51rTfSvDdZdA6mpN5GN6Wwlww0KngOWE9RkK0wyrmcflG
2OOR8aubQ28xFJYdFOJa8yEY6E5NRHPd7Z8nCn01FOahtV8adTEDAC+guhQYrzwM
WQaRHkVVQZJamSXsF4vFITHNeRzyY+iYXeVkDnepai5z
-----END CERTIFICATE-----
Generated at Sat Oct 24 05:19:30 2026 by rpki-client