Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/1-CiDrqbmERXOpG9SMHicw3qasuw.roa
File: 1-CiDrqbmERXOpG9SMHicw3qasuw.roa (raw, json)
Hash identifier: iSRU/0wozf9Okdu3tMaJ6tDL4SNkPY2zcM5n9DF7Eqk=
Subject key identifier: F8:28:83:AE:A6:E6:11:15:CE:A4:6F:52:30:78:9C:C3:7A:9A:B2:EC
Certificate issuer: /CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Certificate serial: 01A06172FA9CE8A30EA21C91B6C00A157926
Authority key identifier: 1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/1-CiDrqbmERXOpG9SMHicw3qasuw.roa
Signing time: Wed 02 Sep 2026 09:28:40 +0000
ROA not before: Wed 02 Sep 2026 09:28:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48206
IP address blocks: 185.142.40.0/24 maxlen: 24
185.142.41.0/24 maxlen: 24
185.142.42.0/24 maxlen: 24
185.142.43.0/24 maxlen: 24
185.142.43.96/27 maxlen: 27
185.142.43.192/26 maxlen: 26
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:72:fa:9c:e8:a3:0e:a2:1c:91:b6:c0:0a:15:79:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a879de1c75fbbd2c31d1d90814056f27d57d776
Validity
Not Before: Sep 2 09:28:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f82883aea6e61115cea46f5230789cc37a9ab2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:27:2e:f0:68:3b:15:af:d7:1b:54:70:e7:
4b:4e:a3:75:10:19:59:19:38:8c:d9:85:ab:76:2a:
3e:90:a5:a0:29:b7:db:b9:bc:37:47:ab:8c:89:c9:
ac:9d:a2:38:6b:82:08:49:29:3a:d1:1e:ab:10:1f:
d1:6a:57:78:b4:7d:87:1c:45:3d:0b:0e:f2:c8:86:
1a:21:f2:0d:44:08:23:fa:a6:8d:6a:c7:22:5b:df:
33:6c:41:e5:e3:35:11:48:44:7e:68:82:b3:a6:b4:
09:f1:1e:f7:ff:fa:94:0f:21:aa:b5:dd:23:56:54:
68:89:e9:3f:7a:33:18:b1:a6:77:76:ca:f3:e8:77:
d7:e7:72:9b:ec:45:8c:53:51:23:af:fb:3f:24:92:
b8:34:36:ca:94:5c:28:5f:79:86:b6:66:7c:aa:86:
92:b5:1f:cf:04:82:12:8c:f1:cc:e4:f6:e8:95:a6:
2c:cf:56:09:b3:6f:ca:07:f7:b7:00:df:c7:7d:74:
07:ce:60:69:b9:8a:14:3f:2f:57:85:f6:36:cb:e4:
72:bd:8f:dc:fe:87:09:48:2d:5c:06:5e:fa:b4:f3:
aa:f4:6f:50:54:4a:aa:0f:34:d8:4d:55:67:8c:76:
71:92:58:b0:a4:a7:6f:60:4d:80:8e:65:1d:f6:41:
69:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:28:83:AE:A6:E6:11:15:CE:A4:6F:52:30:78:9C:C3:7A:9A:B2:EC
X509v3 Authority Key Identifier:
keyid:1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/1-CiDrqbmERXOpG9SMHicw3qasuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.40.0/22
Signature Algorithm: sha256WithRSAEncryption
af:47:ba:83:74:21:9f:ad:bc:43:5d:e9:c3:c5:f0:43:4f:e6:
2e:84:01:99:6d:58:2c:97:15:4c:dc:e2:1f:96:02:82:c4:26:
50:aa:bb:14:60:bc:f4:60:9c:d2:a0:a8:45:56:82:92:64:dc:
7b:28:a5:08:79:f4:64:cd:43:e9:1d:ff:c2:0b:38:c7:a2:99:
7c:19:1a:5e:c4:1e:2e:3e:c1:18:9f:33:9f:70:66:95:e2:91:
19:d3:f4:15:13:de:43:86:7d:01:74:93:cc:4f:b4:87:bb:c3:
5c:87:63:ba:f6:9c:95:95:1a:1d:d9:98:06:34:d8:53:b5:51:
ab:de:d1:77:38:96:cd:2c:7c:46:e3:ff:fb:6a:27:b7:10:74:
47:5e:db:17:52:3c:8a:ba:d4:b9:12:34:c1:13:eb:cd:6f:b8:
83:29:bf:8d:fe:51:67:50:71:34:83:11:47:2c:45:d1:39:90:
eb:d7:d8:9d:60:bb:c0:55:9a:f9:60:01:96:11:2f:47:33:93:
9b:a9:14:a9:1f:52:37:74:14:bb:a6:b9:bd:82:7d:5d:62:65:
68:28:97:af:9f:b3:70:26:27:3e:2f:7a:93:8d:58:18:fc:00:
d2:35:6b:85:65:0f:02:eb:16:98:c0:74:2e:1a:f6:4d:12:ad:
eb:83:e8:a3
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaBhcvqc6KMOohyRtsAKFXkmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhODc5ZGUxYzc1ZmJiZDJjMzFkMWQ5MDgxNDA1NmYyN2Q1
N2Q3NzYwHhcNMjYwOTAyMDkyODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODI4ODNhZWE2ZTYxMTE1Y2VhNDZmNTIzMDc4OWNjMzdhOWFiMmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul0nLvBoOxWv1xtUcOdLTqN1EBlZ
GTiM2YWrdio+kKWgKbfbubw3R6uMicmsnaI4a4IISSk60R6rEB/Rald4tH2HHEU9
Cw7yyIYaIfINRAgj+qaNasciW98zbEHl4zURSER+aIKzprQJ8R73//qUDyGqtd0j
VlRoiek/ejMYsaZ3dsrz6HfX53Kb7EWMU1Ejr/s/JJK4NDbKlFwoX3mGtmZ8qoaS
tR/PBIISjPHM5PbolaYsz1YJs2/KB/e3AN/HfXQHzmBpuYoUPy9XhfY2y+RyvY/c
/ocJSC1cBl76tPOq9G9QVEqqDzTYTVVnjHZxkliwpKdvYE2AjmUd9kFp5wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPgog66m5hEVzqRvUjB4nMN6mrLsMB8GA1UdIwQY
MBaAFBqHneHHX7vSwx0dkIFAVvJ9V9d2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR29lZDRjZGZ1OUxESFIyUWdVQlc4bjFYMTNZLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS82YTYzMTMtODU0Ni00MDMxLWJlOWIt
OGIyZWJlNGUyOWNlLzEvMS1DaURycWJtRVJYT3BHOVNNSGljdzNxYXN1dy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZDEvNmE2MzEzLTg1NDYtNDAzMS1iZTliLThiMmViZTRlMjlj
ZS8xL0dvZWQ0Y2RmdTlMREhSMlFnVUJXOG4xWDEzWS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArmOKDAN
BgkqhkiG9w0BAQsFAAOCAQEAr0e6g3Qhn628Q13pw8XwQ0/mLoQBmW1YLJcVTNzi
H5YCgsQmUKq7FGC89GCc0qCoRVaCkmTceyilCHn0ZM1D6R3/wgs4x6KZfBkaXsQe
Lj7BGJ8zn3BmleKRGdP0FRPeQ4Z9AXSTzE+0h7vDXIdjuvaclZUaHdmYBjTYU7VR
q97RdziWzSx8RuP/+2ontxB0R17bF1I8irrUuRI0wRPrzW+4gym/jf5RZ1BxNIMR
RyxF0TmQ69fYnWC7wFWa+WABlhEvRzOTm6kUqR9SN3QUu6a5vYJ9XWJlaCiXr5+z
cCYnPi96k41YGPwA0jVrhWUPAusWmMB0Lhr2TRKt64Poow==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:49:26 2026 by rpki-client