Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/shpDfVCiNqZZihnMrj5dXfgsCAQ.roa
File: shpDfVCiNqZZihnMrj5dXfgsCAQ.roa (raw, json)
Hash identifier: HPrUqlE/bGZfDnfrOOeSX3Y6okisxt+WgP9TyVPrn2Q=
Subject key identifier: B2:1A:43:7D:50:A2:36:A6:59:8A:19:CC:AE:3E:5D:5D:F8:2C:08:04
Certificate issuer: /CN=e939e12ec456c5823d2f4068381e80f43332ee93
Certificate serial: 019F236839FBD9EA8F7E6E257534829358E4
Authority key identifier: E9:39:E1:2E:C4:56:C5:82:3D:2F:40:68:38:1E:80:F4:33:32:EE:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/shpDfVCiNqZZihnMrj5dXfgsCAQ.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211052
IP address blocks: 185.229.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:39:fb:d9:ea:8f:7e:6e:25:75:34:82:93:58:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e939e12ec456c5823d2f4068381e80f43332ee93
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b21a437d50a236a6598a19ccae3e5d5df82c0804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:78:f0:f2:4d:e6:a9:23:96:92:1e:95:b8:50:
35:d6:50:cc:3c:49:0b:43:62:34:2e:27:06:4c:5e:
45:55:06:4b:5e:04:71:7c:bb:8b:3d:ec:a0:dc:9b:
b0:31:de:45:9a:3a:89:e6:d4:1b:a8:06:14:d8:38:
3e:9e:77:e5:af:a8:bc:ab:d0:a8:98:f9:92:ff:52:
b4:af:77:dc:55:a6:d5:49:54:9b:40:3c:3c:68:2c:
eb:5f:42:d6:c5:1a:0b:65:8d:3f:bb:58:e1:6b:ad:
bb:fc:1f:c4:69:38:b9:59:0a:48:8e:53:1c:2c:a7:
81:f5:74:b6:41:1c:5b:54:cc:71:29:b8:c1:41:2e:
5b:1b:55:ec:23:b5:89:cf:e7:66:fa:78:52:1a:ad:
75:5f:31:b7:59:1f:15:02:4f:54:05:81:95:0d:cf:
a6:cd:6a:9a:f0:ce:a7:61:ae:91:67:66:5b:8c:24:
6c:ce:4b:6c:f9:36:7d:ba:55:d1:12:d1:e9:57:8a:
5a:56:e5:19:c1:62:83:5a:0c:3d:05:18:c1:0f:e2:
64:d8:98:28:78:5e:c6:3a:30:75:51:a8:8c:2d:d8:
93:85:7f:c4:61:f0:78:e6:7a:df:50:3c:51:69:a6:
99:c9:07:c5:5e:1f:1d:fb:27:49:b9:eb:e6:a8:8b:
5c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1A:43:7D:50:A2:36:A6:59:8A:19:CC:AE:3E:5D:5D:F8:2C:08:04
X509v3 Authority Key Identifier:
keyid:E9:39:E1:2E:C4:56:C5:82:3D:2F:40:68:38:1E:80:F4:33:32:EE:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TnhLsRWxYI9L0BoOB6A9DMy7pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/shpDfVCiNqZZihnMrj5dXfgsCAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/6TnhLsRWxYI9L0BoOB6A9DMy7pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.34.0/24
Signature Algorithm: sha256WithRSAEncryption
10:3d:d1:9f:b4:8b:b5:cc:21:98:ba:f2:45:7a:49:59:60:5c:
a6:5a:dd:e4:c1:0a:95:a6:c1:1c:39:fd:14:4a:b9:d0:4e:34:
a7:e0:a4:10:5f:05:8a:f3:69:b9:3c:51:b6:e8:ad:0a:a4:c1:
24:70:fc:98:33:5c:d4:4a:51:65:9d:55:94:96:c1:b8:0b:c7:
64:e9:c5:ef:33:bc:47:ed:90:60:35:50:a0:44:f2:ca:d2:ce:
76:41:0c:26:22:29:92:5e:87:a8:8f:35:ec:74:1c:4c:c0:07:
c6:57:85:77:07:e9:4b:06:be:9b:09:ad:a3:5b:ea:0d:02:5b:
bb:2d:f8:26:03:ac:fb:e1:46:4c:ff:91:e6:97:8a:56:7a:7e:
97:1e:25:b8:38:b0:80:f7:dd:8b:fa:5e:67:d4:c0:51:fd:81:
3e:23:66:5e:f5:49:b7:f9:59:b9:ab:d4:b8:3f:f0:89:87:42:
ee:ca:65:4f:b7:86:f0:41:b5:68:9b:79:52:09:0c:80:de:f6:
87:97:7a:27:23:d9:f0:b5:ac:fa:91:70:9a:a5:e6:cd:2c:41:
54:1a:ba:4d:7c:79:20:9e:d8:6d:ee:9f:43:be:86:3b:46:a4:
6f:23:96:15:8e:a9:f5:19:4a:76:10:c8:67:66:4e:d0:5a:22:
d5:8d:c0:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaDn72eqPfm4ldTSCk1jkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MzllMTJlYzQ1NmM1ODIzZDJmNDA2ODM4MWU4MGY0MzMz
MmVlOTMwHhcNMjYwNzAyMTUxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjFhNDM3ZDUwYTIzNmE2NTk4YTE5Y2NhZTNlNWQ1ZGY4MmMwODA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXjw8k3mqSOWkh6VuFA11lDMPEkL
Q2I0LicGTF5FVQZLXgRxfLuLPeyg3JuwMd5FmjqJ5tQbqAYU2Dg+nnflr6i8q9Co
mPmS/1K0r3fcVabVSVSbQDw8aCzrX0LWxRoLZY0/u1jha627/B/EaTi5WQpIjlMc
LKeB9XS2QRxbVMxxKbjBQS5bG1XsI7WJz+dm+nhSGq11XzG3WR8VAk9UBYGVDc+m
zWqa8M6nYa6RZ2ZbjCRszkts+TZ9ulXREtHpV4paVuUZwWKDWgw9BRjBD+Jk2Jgo
eF7GOjB1UaiMLdiThX/EYfB45nrfUDxRaaaZyQfFXh8d+ydJuevmqItcmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLIaQ31QojamWYoZzK4+XV34LAgEMB8GA1UdIwQY
MBaAFOk54S7EVsWCPS9AaDgegPQzMu6TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlRuaExzUld4WUk5TDBCb09CNkE5RE15N3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgt
YmJmZDQ1Yzg0YmVhLzEvc2hwRGZWQ2lOcVpaaWhuTXJqNWRYZmdzQ0FRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9iZTFhMjUtNTg1NS00YWVjLThlMTgtYmJmZDQ1Yzg0YmVh
LzEvNlRuaExzUld4WUk5TDBCb09CNkE5RE15N3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueUiMA0G
CSqGSIb3DQEBCwUAA4IBAQAQPdGftIu1zCGYuvJFeklZYFymWt3kwQqVpsEcOf0U
SrnQTjSn4KQQXwWK82m5PFG26K0KpMEkcPyYM1zUSlFlnVWUlsG4C8dk6cXvM7xH
7ZBgNVCgRPLK0s52QQwmIimSXoeojzXsdBxMwAfGV4V3B+lLBr6bCa2jW+oNAlu7
LfgmA6z74UZM/5Hml4pWen6XHiW4OLCA992L+l5n1MBR/YE+I2Ze9Um3+Vm5q9S4
P/CJh0LuymVPt4bwQbVom3lSCQyA3vaHl3onI9nwtaz6kXCapebNLEFUGrpNfHkg
ntht7p9DvoY7RqRvI5YVjqn1GUp2EMhnZk7QWiLVjcB4
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:14 2026 by rpki-client