Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/S2oSU95Bc5KHamK5aDSJ9nLc7Ps.roa
File: S2oSU95Bc5KHamK5aDSJ9nLc7Ps.roa (raw, json)
Hash identifier: jo9uW/EfFrv7avMQwhlQaDKV2tu9K+V96NtiixNAWjo=
Subject key identifier: 4B:6A:12:53:DE:41:73:92:87:6A:62:B9:68:34:89:F6:72:DC:EC:FB
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 019D0639E1834CCBA7F2291219B031636FFB
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/S2oSU95Bc5KHamK5aDSJ9nLc7Ps.roa
Signing time: Thu 19 Mar 2026 13:12:29 +0000
ROA not before: Thu 19 Mar 2026 13:12:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209697
IP address blocks: 195.8.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:39:e1:83:4c:cb:a7:f2:29:12:19:b0:31:63:6f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Mar 19 13:12:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b6a1253de417392876a62b9683489f672dcecfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e0:6c:44:42:35:f7:89:5e:49:8b:e1:36:f3:
6c:b2:41:3d:d1:27:59:4c:5b:c6:e7:a2:74:9a:67:
96:e9:59:5d:f3:61:2a:93:4e:65:92:4d:bb:18:46:
c6:61:99:1d:95:2a:9a:99:fb:aa:fa:55:3b:53:da:
fa:f3:15:06:58:ae:27:98:9e:f2:94:ec:23:86:be:
52:79:e4:c8:7d:6a:c1:ab:8b:a2:7d:4a:a3:86:35:
4a:44:3c:25:9d:7b:7c:b5:2c:29:f5:e9:80:27:c4:
7a:14:fa:59:53:15:0b:f5:ba:da:d5:1b:97:e4:b6:
1f:e1:fe:c8:53:32:91:e0:c3:0f:59:33:89:d9:a2:
0b:72:78:e8:cc:f0:56:d4:4a:93:58:33:0c:90:75:
30:e0:7a:48:c6:f5:a2:96:5b:ca:ea:e7:97:b7:df:
33:de:b6:11:23:9b:ac:08:5c:2d:18:fc:06:5d:d2:
8d:96:ba:9e:d4:55:23:ce:6c:a6:cd:eb:4b:d5:7f:
02:cf:f2:18:a7:1b:4e:62:37:8d:21:e5:80:68:d4:
4f:3a:96:34:29:1c:af:37:e1:0b:64:d9:bf:ce:2a:
61:a4:0a:3e:7d:23:00:73:8a:33:63:e4:72:78:54:
e7:58:ca:d8:38:66:7e:29:7d:04:c1:08:ce:6d:0d:
31:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6A:12:53:DE:41:73:92:87:6A:62:B9:68:34:89:F6:72:DC:EC:FB
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/S2oSU95Bc5KHamK5aDSJ9nLc7Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.200.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:7b:ba:9c:a5:03:a6:eb:b9:f8:56:fe:9c:ac:05:66:55:6c:
80:90:d5:21:92:8a:32:19:94:0b:38:b5:84:1e:b9:d4:3d:b8:
c8:eb:e3:ba:63:32:49:04:e0:c3:f9:0c:cf:07:df:02:aa:4a:
ec:92:2f:b5:0a:6c:1f:45:bc:67:b6:ba:5b:ba:f7:65:f6:c7:
18:08:4e:4b:c6:f5:71:7f:80:e6:d4:3e:b6:5a:4e:bb:b7:f4:
b6:a1:e9:75:53:11:01:06:cc:a9:66:18:bb:ac:7d:f4:74:e7:
f0:61:49:11:af:db:86:ba:05:cf:ff:f9:a2:5e:fe:78:86:2f:
2d:46:e2:90:4f:73:7c:1a:6e:1b:68:38:b5:f1:24:88:90:43:
f8:22:f2:b7:7f:43:39:9c:70:bc:b9:a4:24:56:0e:c3:e9:69:
96:8f:a6:40:50:fa:b2:eb:4e:12:42:7d:ae:e8:c4:f4:c7:c1:
69:a6:8d:e4:01:e6:0f:41:38:56:66:46:a5:ea:79:d3:8a:45:
05:ba:bc:29:eb:fe:ec:91:88:1e:c2:9f:ec:c2:d0:cf:05:23:
1e:b0:da:c1:87:cd:1b:18:02:d6:7b:5c:e1:4a:f9:e9:df:02:
66:12:11:e8:f4:1e:04:ad:9c:5a:4c:1d:8a:f4:64:ff:b2:31:
64:83:6b:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0GOeGDTMun8ikSGbAxY2/7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy
NTdkYzQwHhcNMjYwMzE5MTMxMjI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjZhMTI1M2RlNDE3MzkyODc2YTYyYjk2ODM0ODlmNjcyZGNlY2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8uBsREI194leSYvhNvNsskE90SdZ
TFvG56J0mmeW6Vld82Eqk05lkk27GEbGYZkdlSqamfuq+lU7U9r68xUGWK4nmJ7y
lOwjhr5SeeTIfWrBq4uifUqjhjVKRDwlnXt8tSwp9emAJ8R6FPpZUxUL9bra1RuX
5LYf4f7IUzKR4MMPWTOJ2aILcnjozPBW1EqTWDMMkHUw4HpIxvWillvK6ueXt98z
3rYRI5usCFwtGPwGXdKNlrqe1FUjzmymzetL1X8Cz/IYpxtOYjeNIeWAaNRPOpY0
KRyvN+ELZNm/ziphpAo+fSMAc4ozY+RyeFTnWMrYOGZ+KX0EwQjObQ0xbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEtqElPeQXOSh2piuWg0ifZy3Oz7MB8GA1UdIwQY
MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt
OTk5MGUyZDllYWZlLzEvUzJvU1U5NUJjNUtIYW1LNWFEU0o5bkxjN1BzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl
LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwjIMA0G
CSqGSIb3DQEBCwUAA4IBAQBte7qcpQOm67n4Vv6crAVmVWyAkNUhkooyGZQLOLWE
HrnUPbjI6+O6YzJJBODD+QzPB98Cqkrski+1CmwfRbxntrpbuvdl9scYCE5LxvVx
f4Dm1D62Wk67t/S2oel1UxEBBsypZhi7rH30dOfwYUkRr9uGugXP//miXv54hi8t
RuKQT3N8Gm4baDi18SSIkEP4IvK3f0M5nHC8uaQkVg7D6WmWj6ZAUPqy604SQn2u
6MT0x8Fppo3kAeYPQThWZkal6nnTikUFurwp6/7skYgewp/swtDPBSMesNrBh80b
GALWe1zhSvnp3wJmEhHo9B4ErZxaTB2K9GT/sjFkg2vu
-----END CERTIFICATE-----
Generated at Fri Mar 20 15:55:24 2026 by rpki-client