Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/0hivMId7QyV_J-baQe-LpP04A_E.roa
File: 0hivMId7QyV_J-baQe-LpP04A_E.roa (raw, json)
Hash identifier: 4wskR4bGB2kTBEPb3U0Ndo9Z+ReWqtwzIpeVVcyolq4=
Subject key identifier: D2:18:AF:30:87:7B:43:25:7F:27:E6:DA:41:EF:8B:A4:FD:38:03:F1
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019F4678197BB3C75E442EA6FA81A7F1F04B
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/0hivMId7QyV_J-baQe-LpP04A_E.roa
Signing time: Thu 09 Jul 2026 10:41:43 +0000
ROA not before: Thu 09 Jul 2026 10:41:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 194.152.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:78:19:7b:b3:c7:5e:44:2e:a6:fa:81:a7:f1:f0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jul 9 10:41:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d218af30877b43257f27e6da41ef8ba4fd3803f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:07:3a:40:cf:11:99:63:0c:a9:30:f0:53:42:
a1:f9:27:26:3f:c9:5a:7f:9a:39:19:f8:31:60:c4:
4b:49:be:d6:09:26:63:ac:9b:f8:6b:2b:06:8a:c3:
9e:f1:ea:fb:eb:bf:09:04:f5:38:b5:df:b6:38:95:
a2:9b:68:2c:cd:6d:c8:81:8b:b6:b7:e0:c4:9d:2d:
77:b5:a5:3c:20:f5:70:b6:31:34:ba:00:0e:0e:f7:
4f:e2:9a:1b:5c:b4:f1:f5:cc:f5:ef:41:79:5d:8f:
a1:34:52:05:36:f4:ab:3c:2d:31:39:e6:64:27:24:
2b:99:69:a2:7e:a9:d2:46:60:24:8e:34:91:a9:a5:
84:58:7f:8a:6f:09:25:d0:47:ed:7a:64:21:d2:b3:
c1:f1:7e:55:f2:00:31:af:7b:2e:93:9d:78:9b:a5:
13:af:39:52:5d:99:b9:2a:51:2c:dc:d7:2f:a2:4e:
0f:0f:2b:1b:9b:d8:f1:b8:7d:58:12:0b:c9:3b:56:
2d:8c:a7:2d:78:ff:79:52:2e:f9:61:33:14:ec:29:
7d:2a:d4:21:db:f2:4f:1b:65:3e:d9:32:93:60:e8:
24:4f:1b:09:99:43:a1:4d:61:6f:43:1e:1c:46:3c:
b5:14:f5:b4:4a:30:7b:18:78:70:9c:e6:60:94:96:
f9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:18:AF:30:87:7B:43:25:7F:27:E6:DA:41:EF:8B:A4:FD:38:03:F1
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/0hivMId7QyV_J-baQe-LpP04A_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.152.143.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:aa:a0:38:0f:a4:b3:05:30:d7:5f:0a:bc:a9:a2:de:c8:65:
4c:63:52:d0:19:42:50:ee:bf:19:ad:83:bd:7f:8d:aa:70:c6:
0d:d1:9d:b3:eb:3d:06:47:79:56:a9:1f:5e:39:cd:39:8d:6c:
95:1f:cc:0a:62:60:d0:5b:c6:73:2d:6f:48:e1:ad:12:b5:bc:
c7:02:14:d1:8f:5f:43:98:e9:f2:f8:b4:da:86:ae:ef:a4:db:
eb:8f:a8:6d:7c:1a:33:a3:a7:b6:b9:a1:1c:51:0f:80:c6:e0:
e3:23:c9:a1:f2:ea:f0:8d:17:af:81:dc:a6:a2:31:10:70:52:
b1:a3:4f:f2:5b:e4:ee:d5:10:6e:c8:77:a2:27:8d:ae:43:df:
ee:44:2a:c5:09:00:3d:e1:2a:2a:c9:f6:e4:69:fb:77:9e:d3:
b3:05:9c:57:6b:f2:e3:cb:1d:d8:86:8c:bc:37:7c:6e:06:45:
37:fd:40:a8:8f:bd:eb:8c:f8:86:a1:9a:76:d5:55:a8:83:df:
de:ba:32:25:ba:65:11:ea:0d:a9:fe:ff:ee:8a:36:4b:ab:0b:
1e:c1:45:46:56:a6:b7:80:f4:98:70:35:c8:4a:50:e0:41:7d:
f7:d6:16:8e:39:3b:08:b3:17:b0:18:b2:63:03:73:01:9d:3e:
ce:ca:b0:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9GeBl7s8deRC6m+oGn8fBLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw
YzZmYzMwHhcNMjYwNzA5MTA0MTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjE4YWYzMDg3N2I0MzI1N2YyN2U2ZGE0MWVmOGJhNGZkMzgwM2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQc6QM8RmWMMqTDwU0Kh+ScmP8la
f5o5GfgxYMRLSb7WCSZjrJv4aysGisOe8er7678JBPU4td+2OJWim2gszW3IgYu2
t+DEnS13taU8IPVwtjE0ugAODvdP4pobXLTx9cz170F5XY+hNFIFNvSrPC0xOeZk
JyQrmWmifqnSRmAkjjSRqaWEWH+Kbwkl0EftemQh0rPB8X5V8gAxr3suk514m6UT
rzlSXZm5KlEs3Ncvok4PDysbm9jxuH1YEgvJO1YtjKcteP95Ui75YTMU7Cl9KtQh
2/JPG2U+2TKTYOgkTxsJmUOhTWFvQx4cRjy1FPW0SjB7GHhwnOZglJb50wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNIYrzCHe0Mlfyfm2kHvi6T9OAPxMB8GA1UdIwQY
MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt
ZjFjMzNhYTJmZDUwLzEvMGhpdk1JZDdReVZfSi1iYVFlLUxwUDA0QV9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw
LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpiPMA0G
CSqGSIb3DQEBCwUAA4IBAQAsqqA4D6SzBTDXXwq8qaLeyGVMY1LQGUJQ7r8ZrYO9
f42qcMYN0Z2z6z0GR3lWqR9eOc05jWyVH8wKYmDQW8ZzLW9I4a0StbzHAhTRj19D
mOny+LTahq7vpNvrj6htfBozo6e2uaEcUQ+AxuDjI8mh8urwjRevgdymojEQcFKx
o0/yW+Tu1RBuyHeiJ42uQ9/uRCrFCQA94Soqyfbkaft3ntOzBZxXa/Ljyx3Yhoy8
N3xuBkU3/UCoj73rjPiGoZp21VWog9/eujIlumUR6g2p/v/uijZLqwsewUVGVqa3
gPSYcDXISlDgQX331haOOTsIsxewGLJjA3MBnT7OyrCu
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:22:03 2026 by rpki-client