Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/DFflnGrVLX1ed8hHQDi8QYAdC5Y.roa
File: DFflnGrVLX1ed8hHQDi8QYAdC5Y.roa (raw, json)
Hash identifier: A9o/XsKdrob4isKSMPwU7pG4Cfib6nwUqTy+L1zYWiw=
Subject key identifier: 0C:57:E5:9C:6A:D5:2D:7D:5E:77:C8:47:40:38:BC:41:80:1D:0B:96
Certificate issuer: /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Certificate serial: 01A1531973ACCDBBF3481B74141BD60991E6
Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/DFflnGrVLX1ed8hHQDi8QYAdC5Y.roa
Signing time: Mon 19 Oct 2026 07:38:59 +0000
ROA not before: Mon 19 Oct 2026 07:38:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5524
IP address blocks: 185.95.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:19:73:ac:cd:bb:f3:48:1b:74:14:1b:d6:09:91:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Validity
Not Before: Oct 19 07:38:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c57e59c6ad52d7d5e77c8474038bc41801d0b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5c:18:1e:a5:11:72:f8:4b:09:75:82:5a:43:
35:8e:a9:af:2b:92:75:a7:fe:a6:95:a0:81:cc:83:
23:25:31:93:5c:e6:98:f7:3f:9d:5b:16:fe:f5:dc:
12:e0:84:b6:88:f1:40:97:60:e5:63:fd:00:4d:8b:
fe:5d:98:8e:b5:d3:93:87:ee:59:54:ff:b5:10:dd:
70:c9:af:50:c0:65:08:b0:20:64:c3:49:ba:82:b9:
cf:bf:27:c5:8c:92:9f:1b:09:2e:c1:57:19:62:46:
fc:57:4e:dd:b9:9a:d7:46:b2:24:e6:e3:b4:a2:b9:
ac:3e:8a:97:43:1a:e2:81:09:03:e0:80:82:51:ce:
d0:0a:41:ec:8a:f0:5e:37:d2:0e:0e:e2:1b:55:2b:
70:40:97:68:e3:89:42:d1:9e:6e:5b:f9:9a:8e:ce:
c5:6e:63:f5:4a:6a:69:20:e5:4c:3c:4c:34:64:c4:
aa:2a:4f:76:db:18:59:43:e5:de:af:8a:5e:7e:6c:
e0:b1:e0:17:94:c7:7b:ee:94:55:27:00:45:e2:00:
f8:79:47:7c:12:70:06:a8:fa:b0:22:bf:fe:4b:99:
28:a3:9d:8a:25:e3:74:12:fe:da:86:a4:d8:da:31:
9c:d0:c5:45:e4:2e:cb:e2:64:c6:52:63:2d:bb:06:
e5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:57:E5:9C:6A:D5:2D:7D:5E:77:C8:47:40:38:BC:41:80:1D:0B:96
X509v3 Authority Key Identifier:
keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/DFflnGrVLX1ed8hHQDi8QYAdC5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.176.0/22
Signature Algorithm: sha256WithRSAEncryption
08:6d:b6:be:52:dc:a4:c9:cc:51:c2:fd:cd:98:be:e2:d8:2d:
ea:0e:73:58:87:06:2a:6a:a4:43:1b:69:d6:c6:9e:5e:90:f4:
b5:01:11:ad:35:dd:17:47:63:29:e6:59:f2:83:72:68:b9:57:
e6:a9:fe:f0:3d:2e:94:c6:13:ce:f6:1e:98:2b:8b:4e:53:2b:
81:26:d0:3a:7d:81:e4:1b:71:35:d2:04:1b:4c:8a:1f:5a:5f:
4d:b5:59:8f:de:17:0e:34:b1:59:a2:90:ee:c4:9b:01:c6:a9:
e1:9d:61:ca:67:a4:0a:61:aa:d6:62:db:5c:66:0a:54:92:fd:
b9:36:01:c7:a6:f3:63:fe:09:72:23:f1:fc:1e:b3:a4:b0:a2:
d7:10:d4:af:e2:93:91:e1:f6:60:2a:fd:93:6b:5d:d4:ed:e4:
2f:b0:5c:cc:c7:d8:13:9b:47:e1:3a:20:bc:ee:a3:a9:3a:6f:
31:8d:7a:ee:7b:91:51:81:00:b3:30:d2:08:94:04:b8:0e:69:
2c:2f:51:4d:c0:e1:26:bf:76:d6:c9:28:cf:11:4d:11:52:96:
5f:a1:be:e6:c6:88:70:29:e5:49:53:16:23:67:29:1f:3c:b9:
93:08:f0:ca:32:ec:97:8b:7e:04:ba:dc:0f:29:00:e2:87:2e:
11:3c:0a:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFTGXOszbvzSBt0FBvWCZHmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMWQyYTU2MmM3ZGIyMTE1MWI0YTA5MjZiOGQ2ZmVlYWNl
Zjg4NTcwHhcNMjYxMDE5MDczODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzU3ZTU5YzZhZDUyZDdkNWU3N2M4NDc0MDM4YmM0MTgwMWQwYjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1wYHqURcvhLCXWCWkM1jqmvK5J1
p/6mlaCBzIMjJTGTXOaY9z+dWxb+9dwS4IS2iPFAl2DlY/0ATYv+XZiOtdOTh+5Z
VP+1EN1wya9QwGUIsCBkw0m6grnPvyfFjJKfGwkuwVcZYkb8V07duZrXRrIk5uO0
ormsPoqXQxrigQkD4ICCUc7QCkHsivBeN9IODuIbVStwQJdo44lC0Z5uW/majs7F
bmP1SmppIOVMPEw0ZMSqKk922xhZQ+Xer4pefmzgseAXlMd77pRVJwBF4gD4eUd8
EnAGqPqwIr/+S5koo52KJeN0Ev7ahqTY2jGc0MVF5C7L4mTGUmMtuwblUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAxX5Zxq1S19XnfIR0A4vEGAHQuWMB8GA1UdIwQY
MBaAFK0dKlYsfbIRUbSgkmuNb+6s74hXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclIwcVZpeDlzaEZSdEtDU2E0MXY3cXp2aUZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS84M2FjZDctNWUxYS00OWY5LWI0MDkt
MzI5MzZjM2E0YTlkLzEvREZmbG5HclZMWDFlZDhoSFFEaThRWUFkQzVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS84M2FjZDctNWUxYS00OWY5LWI0MDktMzI5MzZjM2E0YTlk
LzEvclIwcVZpeDlzaEZSdEtDU2E0MXY3cXp2aUZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuV+wMA0G
CSqGSIb3DQEBCwUAA4IBAQAIbba+UtykycxRwv3NmL7i2C3qDnNYhwYqaqRDG2nW
xp5ekPS1ARGtNd0XR2Mp5lnyg3JouVfmqf7wPS6UxhPO9h6YK4tOUyuBJtA6fYHk
G3E10gQbTIofWl9NtVmP3hcONLFZopDuxJsBxqnhnWHKZ6QKYarWYttcZgpUkv25
NgHHpvNj/glyI/H8HrOksKLXENSv4pOR4fZgKv2Ta13U7eQvsFzMx9gTm0fhOiC8
7qOpOm8xjXrue5FRgQCzMNIIlAS4DmksL1FNwOEmv3bWySjPEU0RUpZfob7mxohw
KeVJUxYjZykfPLmTCPDKMuyXi34EutwPKQDihy4RPAoX
-----END CERTIFICATE-----
Generated at Sat Oct 31 11:14:56 2026 by rpki-client