Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/hiOT2Cf69M8ZpOfY-RoImScepqk.roa
File: hiOT2Cf69M8ZpOfY-RoImScepqk.roa (raw, json)
Hash identifier: Yk1/3MwfgOP0DK9bDbs1ulqqBaeN7eekSv3gXFMWIZc=
Subject key identifier: 86:23:93:D8:27:FA:F4:CF:19:A4:E7:D8:F9:1A:08:99:27:1E:A6:A9
Certificate issuer: /CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Certificate serial: 019FCB76E8D0B5EEF777EFD2331D8B0317D9
Authority key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/hiOT2Cf69M8ZpOfY-RoImScepqk.roa
Signing time: Tue 04 Aug 2026 06:29:55 +0000
ROA not before: Tue 04 Aug 2026 06:29:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201873
IP address blocks: 185.61.52.0/22 maxlen: 22
185.142.252.0/22 maxlen: 22
185.143.104.0/22 maxlen: 22
2a02:7820::/32 maxlen: 32
2a07:3200::/29 maxlen: 29
2a07:3440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:76:e8:d0:b5:ee:f7:77:ef:d2:33:1d:8b:03:17:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Validity
Not Before: Aug 4 06:29:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=862393d827faf4cf19a4e7d8f91a0899271ea6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:ab:14:bb:34:05:e9:5c:ee:3f:4e:9d:10:
5c:65:f5:f9:6b:0f:c8:bd:c4:1d:90:b1:27:b0:05:
19:31:5f:28:95:12:0f:18:78:28:c0:43:c7:7b:ac:
e4:d1:50:87:16:08:c5:22:41:14:03:98:91:ad:a3:
8e:65:04:86:52:67:2d:55:1b:c7:22:2e:8c:af:5d:
36:2b:c1:7b:1e:a1:56:bd:e6:23:00:c7:2b:a9:1c:
15:66:70:b4:bf:ed:e5:e0:21:44:43:25:c4:75:d2:
87:df:c8:bb:6c:a4:37:3b:84:a9:e6:96:eb:09:cc:
df:cd:98:86:28:92:9f:aa:8e:6f:9c:04:9d:45:79:
e5:ce:7e:57:bf:92:0c:94:c6:02:8c:74:e6:a4:8d:
37:cb:d5:5b:da:a4:01:f1:22:b5:9c:ec:f0:db:17:
a4:1f:39:1f:26:6a:e3:b5:d7:ed:6f:16:b8:5e:83:
2b:f5:aa:19:7a:5e:95:39:95:58:90:3f:25:4b:1e:
06:41:aa:46:f0:00:27:a6:45:57:2d:76:86:c5:40:
41:80:e8:86:1c:81:c0:76:8d:a5:12:a6:68:91:7a:
94:15:80:e2:d7:4f:a7:aa:29:c2:9f:3d:d6:8e:a7:
9c:9f:8d:5b:1a:67:6e:aa:af:34:56:39:dc:ec:c8:
f1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:23:93:D8:27:FA:F4:CF:19:A4:E7:D8:F9:1A:08:99:27:1E:A6:A9
X509v3 Authority Key Identifier:
keyid:82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/hiOT2Cf69M8ZpOfY-RoImScepqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.52.0/22
185.142.252.0/22
185.143.104.0/22
IPv6:
2a02:7820::/32
2a07:3200::/29
2a07:3440::/29
Signature Algorithm: sha256WithRSAEncryption
17:05:70:03:39:86:4a:7e:6c:c9:bb:63:a9:af:e0:72:8a:64:
34:c2:f6:33:ba:ab:95:ef:43:b2:d9:22:1b:c1:13:aa:c2:45:
d1:d2:d1:01:7a:4c:f7:20:4c:3a:bb:66:6e:bf:72:eb:9c:a7:
ed:b6:4f:f9:27:19:73:78:a9:89:42:7d:7c:9f:b9:f2:58:6b:
a2:25:2e:10:ab:d5:de:16:68:37:57:a5:8a:99:e3:e7:dc:83:
16:68:72:36:3f:f7:fb:14:ff:ab:63:1a:e7:1d:46:5b:72:b5:
14:af:71:67:de:22:de:aa:c9:22:99:42:8f:de:af:69:30:54:
23:58:31:9c:65:43:d7:96:22:5a:55:aa:a8:48:58:b2:a2:ba:
86:42:d2:07:27:31:0c:39:9b:41:b6:d8:53:ed:93:ee:6e:51:
17:8a:48:d8:1e:05:f2:fc:40:80:63:86:38:9e:f4:66:3c:21:
e6:1a:39:9c:89:03:92:89:e4:1e:12:94:70:45:e6:6a:66:62:
3c:ce:10:c4:a1:b8:8d:50:f4:46:8f:07:e2:95:2e:9a:c7:4b:
1a:26:a6:62:98:53:90:45:19:91:24:69:8a:c6:f7:81:a0:47:
1e:e9:10:e6:19:f3:e5:ae:53:c6:58:59:6a:8d:6a:ef:4a:4b:
ff:61:7b:52
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAZ/LdujQte73d+/SMx2LAxfZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTYzNWZlY2VmMTcxMDllMWFjNzhiMmZiNzIyNDEwZDg0
NzdhOWMwHhcNMjYwODA0MDYyOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjIzOTNkODI3ZmFmNGNmMTlhNGU3ZDhmOTFhMDg5OTI3MWVhNmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1WrFLs0Belc7j9OnRBcZfX5aw/I
vcQdkLEnsAUZMV8olRIPGHgowEPHe6zk0VCHFgjFIkEUA5iRraOOZQSGUmctVRvH
Ii6Mr102K8F7HqFWveYjAMcrqRwVZnC0v+3l4CFEQyXEddKH38i7bKQ3O4Sp5pbr
CczfzZiGKJKfqo5vnASdRXnlzn5Xv5IMlMYCjHTmpI03y9Vb2qQB8SK1nOzw2xek
HzkfJmrjtdftbxa4XoMr9aoZel6VOZVYkD8lSx4GQapG8AAnpkVXLXaGxUBBgOiG
HIHAdo2lEqZokXqUFYDi10+nqinCnz3Wjqecn41bGmduqq80Vjnc7Mjx7QIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFIYjk9gn+vTPGaTn2PkaCJknHqapMB8GA1UdIwQY
MBaAFILmNf7O8XEJ4ax4svtyJBDYR3qcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VZMV9zN3hjUW5ockhpeS0zSWtFTmhIZXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS85Zjk4NTgtNjIwOS00Y2Y1LWI1NDEt
YTI2MDUwZWYwNDdlLzEvaGlPVDJDZjY5TThacE9mWS1Sb0ltU2NlcHFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS85Zjk4NTgtNjIwOS00Y2Y1LWI1NDEtYTI2MDUwZWYwNDdl
LzEvZ3VZMV9zN3hjUW5ockhpeS0zSWtFTmhIZXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAYBAIAATASAwQCuT00AwQC
uY78AwQCuY9oMBsEAgACMBUDBQAqAnggAwUDKgcyAAMFAyoHNEAwDQYJKoZIhvcN
AQELBQADggEBABcFcAM5hkp+bMm7Y6mv4HKKZDTC9jO6q5XvQ7LZIhvBE6rCRdHS
0QF6TPcgTDq7Zm6/cuucp+22T/knGXN4qYlCfXyfufJYa6IlLhCr1d4WaDdXpYqZ
4+fcgxZocjY/9/sU/6tjGucdRltytRSvcWfeIt6qySKZQo/er2kwVCNYMZxlQ9eW
IlpVqqhIWLKiuoZC0gcnMQw5m0G22FPtk+5uUReKSNgeBfL8QIBjhjie9GY8IeYa
OZyJA5KJ5B4SlHBF5mpmYjzOEMShuI1Q9EaPB+KVLprHSxompmKYU5BFGZEkaYrG
94GgRx7pEOYZ8+WuU8ZYWWqNau9KS/9he1I=
-----END CERTIFICATE-----
Generated at Sat Aug 22 06:14:44 2026 by rpki-client