Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/esoyd4IrpdY7x5PNXLXB5VvYAbI.roa
File: esoyd4IrpdY7x5PNXLXB5VvYAbI.roa (raw, json)
Hash identifier: lEl0bccjKhWo3DBBIFZjtW/OMW53+2yV7zaPwrJwExk=
Subject key identifier: 7A:CA:32:77:82:2B:A5:D6:3B:C7:93:CD:5C:B5:C1:E5:5B:D8:01:B2
Certificate issuer: /CN=e939e12ec456c5823d2f4068381e80f43332ee93
Certificate serial: 019F23683A9624DFA799B9F0D9CF2A2B8FA7
Authority key identifier: E9:39:E1:2E:C4:56:C5:82:3D:2F:40:68:38:1E:80:F4:33:32:EE:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/esoyd4IrpdY7x5PNXLXB5VvYAbI.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215481
IP address blocks: 185.229.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 15:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3a:96:24:df:a7:99:b9:f0:d9:cf:2a:2b:8f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e939e12ec456c5823d2f4068381e80f43332ee93
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7aca3277822ba5d63bc793cd5cb5c1e55bd801b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ee:73:b1:53:c9:d6:f3:bb:d5:0d:e3:21:5d:
98:75:59:29:d9:97:75:c1:53:8e:b5:90:4c:0c:c6:
1c:af:e6:62:0d:be:67:a1:38:1c:98:20:f1:63:0f:
8b:67:b6:92:49:62:d4:e7:36:38:42:28:cf:98:f9:
c4:fd:43:4c:ba:2a:06:00:4d:8f:91:0b:62:6d:c2:
a7:bd:79:b5:a7:c2:ad:5c:20:1a:e8:2e:1c:9d:da:
f0:1d:c2:7a:cf:a9:e2:f4:2f:17:c9:a3:1a:a5:03:
01:d4:0f:48:b9:b8:ec:0c:fb:15:87:f4:c0:09:e5:
83:42:ea:d0:14:04:c2:66:a3:7e:e9:83:a4:1d:ca:
af:60:ce:15:eb:8c:05:44:a1:e2:b6:df:34:1e:e0:
11:62:9f:9b:d2:a7:aa:d4:c4:98:ac:98:82:a1:f7:
e8:f5:5e:51:97:cf:8e:4d:82:68:e6:aa:64:0d:dc:
7f:5a:ab:06:58:9a:2a:53:1f:a2:62:ce:c3:60:97:
04:94:c7:cb:4f:2a:bc:09:cc:c3:75:d1:60:6b:22:
cf:7c:97:5f:b4:16:0f:ea:90:e5:ca:cc:72:a6:c0:
58:f1:c0:b6:cd:ec:99:42:e0:ce:ba:c5:16:91:85:
c1:64:fc:42:db:da:f6:b5:6d:90:65:e2:fa:73:43:
92:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CA:32:77:82:2B:A5:D6:3B:C7:93:CD:5C:B5:C1:E5:5B:D8:01:B2
X509v3 Authority Key Identifier:
keyid:E9:39:E1:2E:C4:56:C5:82:3D:2F:40:68:38:1E:80:F4:33:32:EE:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/esoyd4IrpdY7x5PNXLXB5VvYAbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.35.0/24
Signature Algorithm: sha256WithRSAEncryption
37:90:5f:94:7f:9c:20:53:c9:d8:05:56:a0:a8:03:dd:ca:ac:
be:68:75:79:0d:c8:e6:37:37:75:bf:a3:00:5b:71:25:fb:3b:
1d:10:ff:02:90:0d:4d:85:32:67:d5:14:7a:7a:ec:19:1e:b7:
d9:a2:4c:00:9f:47:4a:8b:51:73:02:a9:86:d0:57:38:b6:e8:
47:8a:b5:a6:90:c0:87:48:ea:0a:9b:0e:d3:26:ad:74:60:8b:
bc:af:f6:2f:a0:60:63:e5:85:50:da:37:df:1d:eb:93:c3:9b:
c9:11:9a:f3:f4:66:fe:66:45:11:3d:23:4b:f6:24:af:1e:de:
5c:c5:65:96:36:d1:d3:e7:87:72:6a:37:16:e7:9c:85:3d:70:
b0:f4:0d:51:5c:ba:97:4f:48:d8:ee:6d:76:5d:63:27:e0:eb:
20:ed:b5:4b:c4:fe:0f:8d:76:95:55:e8:ae:d2:63:6f:9b:d4:
ac:f7:f0:af:e2:56:cb:81:1c:cc:34:4a:70:ae:f0:cb:8d:7b:
49:b2:23:af:dd:37:b2:ec:5e:eb:d1:7a:98:8a:fc:09:49:0b:
a5:10:21:f9:7a:ef:4c:5a:fb:e2:64:b3:ce:29:47:5c:af:9d:
ca:c3:36:39:d6:1a:15:4c:ff:4a:01:39:6c:fe:e5:e2:47:5f:
87:46:4b:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaDqWJN+nmbnw2c8qK4+nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MzllMTJlYzQ1NmM1ODIzZDJmNDA2ODM4MWU4MGY0MzMz
MmVlOTMwHhcNMjYwNzAyMTUxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWNhMzI3NzgyMmJhNWQ2M2JjNzkzY2Q1Y2I1YzFlNTViZDgwMWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO5zsVPJ1vO71Q3jIV2YdVkp2Zd1
wVOOtZBMDMYcr+ZiDb5noTgcmCDxYw+LZ7aSSWLU5zY4QijPmPnE/UNMuioGAE2P
kQtibcKnvXm1p8KtXCAa6C4cndrwHcJ6z6ni9C8XyaMapQMB1A9IubjsDPsVh/TA
CeWDQurQFATCZqN+6YOkHcqvYM4V64wFRKHitt80HuARYp+b0qeq1MSYrJiCoffo
9V5Rl8+OTYJo5qpkDdx/WqsGWJoqUx+iYs7DYJcElMfLTyq8CczDddFgayLPfJdf
tBYP6pDlysxypsBY8cC2zeyZQuDOusUWkYXBZPxC29r2tW2QZeL6c0OSzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHrKMneCK6XWO8eTzVy1weVb2AGyMB8GA1UdIwQY
MBaAFOk54S7EVsWCPS9AaDgegPQzMu6TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlRuaExzUld4WUk5TDBCb09CNkE5RE15N3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgt
YmJmZDQ1Yzg0YmVhLzEvZXNveWQ0SXJwZFk3eDVQTlhMWEI1VnZZQWJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgtYmJmZDQ1Yzg0YmVh
LzEvNlRuaExzUld4WUk5TDBCb09CNkE5RE15N3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueUjMA0G
CSqGSIb3DQEBCwUAA4IBAQA3kF+Uf5wgU8nYBVagqAPdyqy+aHV5DcjmNzd1v6MA
W3El+zsdEP8CkA1NhTJn1RR6euwZHrfZokwAn0dKi1FzAqmG0Fc4tuhHirWmkMCH
SOoKmw7TJq10YIu8r/YvoGBj5YVQ2jffHeuTw5vJEZrz9Gb+ZkURPSNL9iSvHt5c
xWWWNtHT54dyajcW55yFPXCw9A1RXLqXT0jY7m12XWMn4Osg7bVLxP4PjXaVVeiu
0mNvm9Ss9/Cv4lbLgRzMNEpwrvDLjXtJsiOv3Tey7F7r0XqYivwJSQulECH5eu9M
WvviZLPOKUdcr53KwzY51hoVTP9KATls/uXiR1+HRku9
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:25 2026 by rpki-client