Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/nN73NbUGqukOpA94Jjdh8i2ig_E.roa
File: nN73NbUGqukOpA94Jjdh8i2ig_E.roa (raw, json)
Hash identifier: v+MEZ6gE/2SzkGEIJerhbHxOQ1qEZGl9aNZd7P5DCZ8=
Subject key identifier: 9C:DE:F7:35:B5:06:AA:E9:0E:A4:0F:78:26:37:61:F2:2D:A2:83:F1
Certificate issuer: /CN=c6b619d4d1835745b04be9e44dab102d0614622f
Certificate serial: 019F23692D2D04ED5820E8B3E12C74721503
Authority key identifier: C6:B6:19:D4:D1:83:57:45:B0:4B:E9:E4:4D:AB:10:2D:06:14:62:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrYZ1NGDV0WwS-nkTasQLQYUYi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/nN73NbUGqukOpA94Jjdh8i2ig_E.roa
Signing time: Thu 02 Jul 2026 15:18:43 +0000
ROA not before: Thu 02 Jul 2026 15:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209372
IP address blocks: 185.240.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrYZ1NGDV0WwS-nkTasQLQYUYi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2d:2d:04:ed:58:20:e8:b3:e1:2c:74:72:15:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b619d4d1835745b04be9e44dab102d0614622f
Validity
Not Before: Jul 2 15:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9cdef735b506aae90ea40f78263761f22da283f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:59:b6:02:7e:b8:6c:41:30:2a:07:f2:b7:45:
6c:3e:95:c0:cf:33:aa:99:c0:83:77:44:3e:a1:7a:
b7:64:ba:4e:00:83:c9:99:d8:12:cc:f6:7b:5d:f3:
42:ac:3c:08:69:5c:00:ce:95:c6:d5:13:2e:28:55:
27:e0:25:2e:c5:a7:ad:2a:b8:1d:8c:a2:0f:c1:d6:
ff:79:19:2a:1e:76:16:0c:6f:5d:f2:b6:1c:48:d4:
a6:3f:9d:65:7c:ff:a7:ed:b1:71:2c:d4:e4:85:f0:
b3:79:4f:48:b4:20:7d:87:17:3a:93:90:3a:e8:bd:
99:d4:07:a5:ba:3a:50:2e:b8:0c:94:24:91:e5:67:
09:a0:d3:05:e4:e2:22:e4:20:20:f6:3f:e9:2b:9b:
3a:4b:84:e2:c2:2e:06:9c:00:99:8c:22:20:6f:0d:
d1:77:e6:23:25:e5:e5:44:47:48:b7:15:8f:b1:f0:
5d:d4:35:81:c6:5c:22:78:37:8f:86:40:87:fb:46:
5c:32:a2:20:28:68:6f:d9:e3:0c:47:34:9d:6c:2d:
da:c3:4d:78:b2:be:22:ab:f7:78:79:dd:8f:ee:30:
dc:ee:a8:79:87:56:61:83:3d:b0:fe:fd:21:44:5b:
4d:2d:30:8d:34:5a:76:fb:17:e2:4e:2a:ac:0f:f4:
b4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DE:F7:35:B5:06:AA:E9:0E:A4:0F:78:26:37:61:F2:2D:A2:83:F1
X509v3 Authority Key Identifier:
keyid:C6:B6:19:D4:D1:83:57:45:B0:4B:E9:E4:4D:AB:10:2D:06:14:62:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrYZ1NGDV0WwS-nkTasQLQYUYi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/nN73NbUGqukOpA94Jjdh8i2ig_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.128.0/22
Signature Algorithm: sha256WithRSAEncryption
25:0a:e8:78:8f:73:b9:9b:3e:05:64:fd:22:c2:60:3f:e1:5d:
f6:a9:8c:e2:f9:e0:80:16:c6:e0:75:d3:e4:df:54:de:5f:1e:
d2:6c:56:0f:3d:0a:4e:0b:21:53:4d:dd:4e:28:41:ca:ea:a6:
25:92:bf:c6:87:da:ab:07:13:81:16:92:48:a7:1a:07:35:70:
67:b1:14:75:44:cc:7b:b4:09:a9:06:32:0d:79:ef:87:1a:33:
f2:54:6f:2f:d8:7d:08:2d:db:91:1d:6c:0e:5a:df:f1:61:95:
5c:4f:79:e2:75:3b:f8:b8:de:32:da:21:f5:b5:2d:75:11:eb:
86:c5:de:00:19:b7:f5:f9:9a:9e:4c:bd:05:2e:76:ca:9c:ae:
4f:60:43:24:e6:70:f9:82:72:95:4c:c2:cf:7d:22:ad:cf:75:
08:26:b4:53:68:9a:d3:cf:4f:7c:37:7e:5d:f0:50:4a:28:80:
50:2e:8b:54:01:32:1c:08:fd:b4:33:5b:36:de:0d:bc:4d:7a:
c6:41:25:2f:d1:da:46:62:76:b6:d1:cb:db:9b:0a:83:a1:1f:
fb:bc:89:46:50:f9:4a:61:5e:c4:cb:ab:d4:74:8e:d7:43:84:
fb:51:e9:db:79:dd:c5:7a:09:ce:30:bc:33:a3:46:2b:64:bd:
b4:56:95:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaS0tBO1YIOiz4Sx0chUDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YjYxOWQ0ZDE4MzU3NDViMDRiZTllNDRkYWIxMDJkMDYx
NDYyMmYwHhcNMjYwNzAyMTUxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2RlZjczNWI1MDZhYWU5MGVhNDBmNzgyNjM3NjFmMjJkYTI4M2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01m2An64bEEwKgfyt0VsPpXAzzOq
mcCDd0Q+oXq3ZLpOAIPJmdgSzPZ7XfNCrDwIaVwAzpXG1RMuKFUn4CUuxaetKrgd
jKIPwdb/eRkqHnYWDG9d8rYcSNSmP51lfP+n7bFxLNTkhfCzeU9ItCB9hxc6k5A6
6L2Z1AelujpQLrgMlCSR5WcJoNMF5OIi5CAg9j/pK5s6S4Tiwi4GnACZjCIgbw3R
d+YjJeXlREdItxWPsfBd1DWBxlwieDePhkCH+0ZcMqIgKGhv2eMMRzSdbC3aw014
sr4iq/d4ed2P7jDc7qh5h1Zhgz2w/v0hRFtNLTCNNFp2+xfiTiqsD/S0RwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJze9zW1BqrpDqQPeCY3YfItooPxMB8GA1UdIwQY
MBaAFMa2GdTRg1dFsEvp5E2rEC0GFGIvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHJZWjFOR0RWMFd3Uy1ua1Rhc1FMUVlVWWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84ZjQ2YmUtMDI4Yi00ZDAzLWE5NzMt
ZmRhMDExZTVjOTcyLzEvbk43M05iVUdxdWtPcEE5NEpqZGg4aTJpZ19FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy84ZjQ2YmUtMDI4Yi00ZDAzLWE5NzMtZmRhMDExZTVjOTcy
LzEveHJZWjFOR0RWMFd3Uy1ua1Rhc1FMUVlVWWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufCAMA0G
CSqGSIb3DQEBCwUAA4IBAQAlCuh4j3O5mz4FZP0iwmA/4V32qYzi+eCAFsbgddPk
31TeXx7SbFYPPQpOCyFTTd1OKEHK6qYlkr/Gh9qrBxOBFpJIpxoHNXBnsRR1RMx7
tAmpBjINee+HGjPyVG8v2H0ILduRHWwOWt/xYZVcT3nidTv4uN4y2iH1tS11EeuG
xd4AGbf1+ZqeTL0FLnbKnK5PYEMk5nD5gnKVTMLPfSKtz3UIJrRTaJrTz098N35d
8FBKKIBQLotUATIcCP20M1s23g28TXrGQSUv0dpGYna20cvbmwqDoR/7vIlGUPlK
YV7Ey6vUdI7XQ4T7Uenbed3FegnOMLwzo0YrZL20VpWp
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:37 2026 by rpki-client