Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/JDgMbtzm9TbQ4eWyo_rVJwWaWOY.roa
File: JDgMbtzm9TbQ4eWyo_rVJwWaWOY.roa (raw, json)
Hash identifier: v4xwFMtuHO8ayfqB5VQBenyDwKgKi5kZP3vMs+HZh4g=
Subject key identifier: 24:38:0C:6E:DC:E6:F5:36:D0:E1:E5:B2:A3:FA:D5:27:05:9A:58:E6
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 019F76C86C90C20A24A033297AE197612638
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/JDgMbtzm9TbQ4eWyo_rVJwWaWOY.roa
Signing time: Sat 18 Jul 2026 19:51:14 +0000
ROA not before: Sat 18 Jul 2026 19:51:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 195.8.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:76:c8:6c:90:c2:0a:24:a0:33:29:7a:e1:97:61:26:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jul 18 19:51:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24380c6edce6f536d0e1e5b2a3fad527059a58e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a5:ed:06:ad:c9:66:ff:51:97:d2:cc:16:da:
f6:f8:f8:52:36:06:a4:21:64:45:42:3b:51:d2:2f:
66:bf:01:ed:fb:f1:7b:b2:09:14:1a:8b:bc:06:aa:
89:5b:dd:cb:e2:5b:23:17:de:75:ba:63:11:22:c5:
d0:7d:ab:35:68:3c:05:f1:ab:50:d9:0e:1d:4b:c5:
e6:b0:64:55:61:27:be:15:08:7c:b8:f5:91:20:05:
b7:70:b5:9f:09:53:dd:00:47:fc:a8:b3:74:5b:7f:
da:1b:df:2a:a2:32:ea:3b:05:66:e8:7b:e9:21:54:
68:00:95:86:00:31:33:4e:f3:cb:99:a2:42:39:43:
55:b1:02:f0:db:82:ba:0f:29:88:d9:3a:1d:2b:f9:
58:63:e5:b2:a1:62:37:17:e8:d5:49:23:10:67:ee:
b2:fb:bd:5d:c0:f3:83:37:56:4c:0c:cd:41:ec:1e:
9f:b4:4c:9a:8b:73:62:eb:67:bf:64:55:72:ba:f9:
f7:73:ba:9e:4a:bf:fc:04:43:50:c0:ac:21:c7:90:
18:68:fd:20:1b:ae:90:d8:dd:7f:e2:25:5e:8e:26:
b6:11:49:1e:b1:c7:5c:ed:c3:06:9c:1f:07:bb:cc:
3d:ab:4f:10:ac:83:1e:1f:50:a1:bd:d5:13:46:91:
8a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:38:0C:6E:DC:E6:F5:36:D0:E1:E5:B2:A3:FA:D5:27:05:9A:58:E6
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/JDgMbtzm9TbQ4eWyo_rVJwWaWOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.200.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:a5:2e:a8:80:48:e7:d6:3b:a6:0c:f6:68:61:68:bf:e2:b8:
b8:28:ef:2e:ea:ed:10:f4:db:ce:c7:d0:d0:9e:9a:8b:ad:1b:
3e:59:bb:8a:f9:55:73:a5:c8:69:78:0b:49:41:f2:85:b9:0d:
46:d4:9e:dc:d4:e8:cd:f1:3b:e4:e5:c8:34:f7:31:34:20:64:
00:18:66:e3:2e:d5:8e:03:e4:c9:75:c4:1f:8e:0a:fc:28:51:
5a:48:81:fb:8a:78:4f:e9:1e:c6:a1:8b:b2:7b:88:31:79:e9:
07:c3:65:c5:f3:b5:5b:03:d0:17:1c:47:f0:ae:90:34:72:a5:
47:f0:25:29:ee:5b:c8:ab:03:b5:2e:5b:d1:f9:ad:96:db:8a:
64:b8:d3:41:0e:97:86:eb:2b:65:9f:32:5f:fe:cd:15:b4:2d:
7b:5f:38:3b:8b:76:5e:41:6e:5d:d8:ae:c9:1a:7e:7c:b0:24:
42:bd:0c:13:5f:be:20:49:b1:09:83:9e:74:c2:37:ed:44:41:
80:48:77:a3:ba:80:0d:d0:63:23:36:c3:ba:ba:33:33:bd:e0:
03:ca:a6:9c:f6:1c:4e:f0:47:2e:81:bc:d9:52:30:ef:a7:44:
79:76:a9:3f:ba:0e:19:db:a3:aa:68:97:28:35:fd:da:d4:81:
2a:23:ef:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ92yGyQwgokoDMpeuGXYSY4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy
NTdkYzQwHhcNMjYwNzE4MTk1MTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDM4MGM2ZWRjZTZmNTM2ZDBlMWU1YjJhM2ZhZDUyNzA1OWE1OGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6XtBq3JZv9Rl9LMFtr2+PhSNgak
IWRFQjtR0i9mvwHt+/F7sgkUGou8BqqJW93L4lsjF951umMRIsXQfas1aDwF8atQ
2Q4dS8XmsGRVYSe+FQh8uPWRIAW3cLWfCVPdAEf8qLN0W3/aG98qojLqOwVm6Hvp
IVRoAJWGADEzTvPLmaJCOUNVsQLw24K6DymI2TodK/lYY+WyoWI3F+jVSSMQZ+6y
+71dwPODN1ZMDM1B7B6ftEyai3Ni62e/ZFVyuvn3c7qeSr/8BENQwKwhx5AYaP0g
G66Q2N1/4iVejia2EUkescdc7cMGnB8Hu8w9q08QrIMeH1ChvdUTRpGK6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCQ4DG7c5vU20OHlsqP61ScFmljmMB8GA1UdIwQY
MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt
OTk5MGUyZDllYWZlLzEvSkRnTWJ0em05VGJRNGVXeW9fclZKd1dhV09ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl
LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwjIMA0G
CSqGSIb3DQEBCwUAA4IBAQC4pS6ogEjn1jumDPZoYWi/4ri4KO8u6u0Q9NvOx9DQ
npqLrRs+WbuK+VVzpchpeAtJQfKFuQ1G1J7c1OjN8Tvk5cg09zE0IGQAGGbjLtWO
A+TJdcQfjgr8KFFaSIH7inhP6R7GoYuye4gxeekHw2XF87VbA9AXHEfwrpA0cqVH
8CUp7lvIqwO1LlvR+a2W24pkuNNBDpeG6ytlnzJf/s0VtC17Xzg7i3ZeQW5d2K7J
Gn58sCRCvQwTX74gSbEJg550wjftREGASHejuoAN0GMjNsO6ujMzveADyqac9hxO
8EcugbzZUjDvp0R5dqk/ug4Z26OqaJcoNf3a1IEqI++X
-----END CERTIFICATE-----
Generated at Sun Jul 19 14:53:05 2026 by rpki-client