Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/sA9dK_96uoFn9OzLmWPj0jDqoGk.roa
File: sA9dK_96uoFn9OzLmWPj0jDqoGk.roa (raw, json)
Hash identifier: qjwTSEU6zfUdrsc6+xbvb6xBiHxiA+zK04XvFe2R5m8=
Subject key identifier: B0:0F:5D:2B:FF:7A:BA:81:67:F4:EC:CB:99:63:E3:D2:30:EA:A0:69
Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial: 019FAF63639FE3614681954F54E52E6EEA8E
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/sA9dK_96uoFn9OzLmWPj0jDqoGk.roa
Signing time: Wed 29 Jul 2026 19:39:14 +0000
ROA not before: Wed 29 Jul 2026 19:39:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 185.221.84.0/24 maxlen: 24
212.32.0.0/21 maxlen: 24
2a0d:8000:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:af:63:63:9f:e3:61:46:81:95:4f:54:e5:2e:6e:ea:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
Validity
Not Before: Jul 29 19:39:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b00f5d2bff7aba8167f4eccb9963e3d230eaa069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3e:3e:44:72:31:53:be:ff:97:e7:d9:6c:89:
0e:a0:ca:81:bc:b8:21:1c:c9:97:29:4a:97:c5:e7:
aa:1b:8d:0f:be:24:3e:73:f3:40:5b:af:a2:32:6f:
81:d3:3b:b0:5b:ef:4e:42:ff:ea:5c:51:c0:7d:30:
69:d8:6c:8a:c1:e6:38:80:57:3e:74:da:dc:23:44:
3b:97:46:94:95:8b:9e:74:6d:48:23:88:c7:29:69:
3f:4d:09:bc:70:07:00:3c:8b:0d:83:03:bf:3d:b1:
8e:36:3f:8c:f6:25:9d:b9:83:01:b6:13:47:16:d0:
c2:21:c1:92:9d:6d:19:73:4c:a8:72:99:91:1c:f7:
94:e4:1e:d9:94:13:fb:66:98:e4:3f:e6:de:bc:47:
76:4a:72:5f:91:7d:8e:96:ea:af:c8:be:8a:0f:09:
10:0c:d2:62:a6:23:aa:35:c5:c5:26:f9:86:fe:e8:
ea:6f:30:2b:64:cd:5f:45:c5:7e:a0:06:36:1a:fe:
fb:c5:98:d9:f6:c0:c5:26:71:fe:8d:21:d1:d6:c0:
b0:85:d4:f3:22:37:4c:ee:4e:58:7d:b3:05:54:04:
22:60:22:cf:b4:f1:cf:3c:57:ea:02:75:a9:01:f2:
ef:de:03:7e:f9:9c:45:cf:68:2b:c4:4b:23:e5:fb:
38:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0F:5D:2B:FF:7A:BA:81:67:F4:EC:CB:99:63:E3:D2:30:EA:A0:69
X509v3 Authority Key Identifier:
keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/sA9dK_96uoFn9OzLmWPj0jDqoGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.84.0/24
212.32.0.0/21
IPv6:
2a0d:8000:2::/48
Signature Algorithm: sha256WithRSAEncryption
31:8c:6a:71:06:fc:bb:fe:7e:a5:23:23:b2:d6:2c:df:d0:e2:
c1:6b:70:d4:c3:9d:7a:4d:23:d4:4a:75:3d:ff:c0:c4:cf:c6:
3f:47:b7:f3:7e:a6:a3:7b:01:9a:99:a5:3a:2c:10:ce:64:26:
55:30:3e:50:fc:db:91:db:26:3a:fb:42:8e:6a:48:66:db:75:
22:5f:f2:72:8f:e6:4d:da:09:9a:cb:07:2a:a7:7d:d3:7b:18:
b5:70:a1:15:ca:71:4f:58:cf:28:ba:10:ba:b9:d7:84:70:8d:
70:6c:55:1b:73:3a:a0:0f:a0:b3:76:33:36:88:82:9b:44:d8:
70:3f:bd:cd:44:6b:fb:d7:ec:ae:1f:fd:f6:7b:8c:af:88:12:
e4:35:44:a7:bc:ba:2e:58:9d:b7:3d:9f:53:e6:33:b5:02:95:
6e:90:5b:d8:60:f3:fa:a7:8e:2a:7a:d2:f2:5d:3a:a3:4f:4d:
98:c6:57:a1:2d:16:91:da:a4:30:38:3c:0c:b7:60:31:26:96:
66:26:86:f3:e6:21:d6:81:fa:18:b4:01:89:fd:2a:8d:94:41:
1a:ff:70:c4:af:2d:e2:1e:e8:42:5c:a8:4f:6a:eb:a7:e8:d2:
0f:9a:7d:60:13:c3:6d:ea:27:15:cb:a5:25:c6:27:12:6f:f7:
d1:4f:03:7d
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZ+vY2Of42FGgZVPVOUubuqOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMTZjNzY1OWFmMWQ1NmJjNzE4ZmFmNjE0ZjA5Mjc1OGY1
ZWRjN2YwHhcNMjYwNzI5MTkzOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDBmNWQyYmZmN2FiYTgxNjdmNGVjY2I5OTYzZTNkMjMwZWFhMDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7D4+RHIxU77/l+fZbIkOoMqBvLgh
HMmXKUqXxeeqG40PviQ+c/NAW6+iMm+B0zuwW+9OQv/qXFHAfTBp2GyKweY4gFc+
dNrcI0Q7l0aUlYuedG1II4jHKWk/TQm8cAcAPIsNgwO/PbGONj+M9iWduYMBthNH
FtDCIcGSnW0Zc0yocpmRHPeU5B7ZlBP7ZpjkP+bevEd2SnJfkX2OluqvyL6KDwkQ
DNJipiOqNcXFJvmG/ujqbzArZM1fRcV+oAY2Gv77xZjZ9sDFJnH+jSHR1sCwhdTz
IjdM7k5YfbMFVAQiYCLPtPHPPFfqAnWpAfLv3gN++ZxFz2grxEsj5fs4WwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFLAPXSv/erqBZ/Tsy5lj49Iw6qBpMB8GA1UdIwQY
MBaAFKMWx2Wa8dVrxxj69hTwknWPXtx/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUt
MzY4N2M4MThlZGU1LzEvc0E5ZEtfOTZ1b0ZuOU96TG1XUGowakRxb0drLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zMGQ0ZTgtZTA5MC00YmYyLTgxODUtMzY4N2M4MThlZGU1
LzEvb3hiSFpacngxV3ZIR1ByMkZQQ1NkWTllM0g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAud1UAwQD
1CAAMA8EAgACMAkDBwAqDYAAAAIwDQYJKoZIhvcNAQELBQADggEBADGManEG/Lv+
fqUjI7LWLN/Q4sFrcNTDnXpNI9RKdT3/wMTPxj9Ht/N+pqN7AZqZpTosEM5kJlUw
PlD825HbJjr7Qo5qSGbbdSJf8nKP5k3aCZrLByqnfdN7GLVwoRXKcU9Yzyi6ELq5
14RwjXBsVRtzOqAPoLN2MzaIgptE2HA/vc1Ea/vX7K4f/fZ7jK+IEuQ1RKe8ui5Y
nbc9n1PmM7UClW6QW9hg8/qnjip60vJdOqNPTZjGV6EtFpHapDA4PAy3YDEmlmYm
hvPmIdaB+hi0AYn9Ko2UQRr/cMSvLeIe6EJcqE9q66fo0g+afWATw23qJxXLpSXG
JxJv99FPA30=
-----END CERTIFICATE-----
Generated at Thu Sep 10 22:36:32 2026 by rpki-client