Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/smNDWO9JONiEw5ekOfJ8bQL-dDw.roa
File: smNDWO9JONiEw5ekOfJ8bQL-dDw.roa (raw, json)
Hash identifier: kjuqNVRF/nsDMFG+UvPVvMjPtqlHmLKiEpVo8tq84jY=
Subject key identifier: B2:63:43:58:EF:49:38:D8:84:C3:97:A4:39:F2:7C:6D:02:FE:74:3C
Certificate issuer: /CN=64ae2f7c4d2cef0b697429d613af5086fc998a8c
Certificate serial: 019F7E1E2B8991F42DAFE423609A264F58A4
Authority key identifier: 64:AE:2F:7C:4D:2C:EF:0B:69:74:29:D6:13:AF:50:86:FC:99:8A:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK4vfE0s7wtpdCnWE69QhvyZiow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/smNDWO9JONiEw5ekOfJ8bQL-dDw.roa
Signing time: Mon 20 Jul 2026 06:02:14 +0000
ROA not before: Mon 20 Jul 2026 06:02:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206211
IP address blocks: 185.247.240.0/24 maxlen: 24
185.247.241.0/24 maxlen: 24
185.247.243.0/24 maxlen: 24
2a0d:d180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/ZK4vfE0s7wtpdCnWE69QhvyZiow.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/ZK4vfE0s7wtpdCnWE69QhvyZiow.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZK4vfE0s7wtpdCnWE69QhvyZiow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:1e:2b:89:91:f4:2d:af:e4:23:60:9a:26:4f:58:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ae2f7c4d2cef0b697429d613af5086fc998a8c
Validity
Not Before: Jul 20 06:02:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2634358ef4938d884c397a439f27c6d02fe743c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:37:a4:e5:1c:cb:69:a6:08:50:bb:77:af:3d:
1a:da:61:6c:ec:98:32:ee:ba:45:c5:72:6a:00:6d:
1b:b6:65:a1:a7:a6:c5:44:d6:35:e2:3b:87:dc:d7:
fe:26:a1:45:ff:11:6f:8c:4a:e6:81:66:19:3c:22:
a1:e5:2b:9c:c2:4d:9f:dc:12:1c:6e:34:7f:69:2d:
29:94:28:0c:44:52:69:3b:52:33:5f:5a:c9:23:78:
4a:59:bc:b4:fd:95:b7:1e:13:4a:ab:18:f1:82:9b:
52:b4:34:79:de:0f:39:f0:5c:d7:0f:d4:13:a3:70:
4f:45:19:fc:73:e4:54:a5:cd:4a:23:63:7d:b5:d3:
4a:d7:89:e7:de:a4:6f:57:64:46:54:d3:d8:45:50:
a9:b3:35:aa:d7:ee:6b:a1:f7:f9:26:92:d2:ca:92:
01:cb:b7:de:89:8e:2f:39:9b:3e:99:7f:63:90:a0:
b6:5e:e3:e5:1a:a7:e0:6a:08:2e:fa:3a:5d:60:15:
16:90:09:fd:49:cb:f6:b7:9f:07:53:bd:d0:b7:53:
3b:4e:87:55:44:a4:63:1a:03:3f:22:68:a8:60:c1:
dc:68:bd:79:80:96:be:bb:29:34:e6:9d:67:10:73:
0c:e6:50:ef:8f:81:c8:39:e5:80:97:0c:bf:f0:65:
25:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:63:43:58:EF:49:38:D8:84:C3:97:A4:39:F2:7C:6D:02:FE:74:3C
X509v3 Authority Key Identifier:
keyid:64:AE:2F:7C:4D:2C:EF:0B:69:74:29:D6:13:AF:50:86:FC:99:8A:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK4vfE0s7wtpdCnWE69QhvyZiow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/smNDWO9JONiEw5ekOfJ8bQL-dDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/ZK4vfE0s7wtpdCnWE69QhvyZiow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.240.0/23
185.247.243.0/24
IPv6:
2a0d:d180::/29
Signature Algorithm: sha256WithRSAEncryption
6d:93:11:b0:26:f6:78:58:0b:f3:2b:2e:d0:f2:04:35:8d:86:
64:65:65:22:bf:1f:8a:78:c0:6d:d2:00:c4:82:39:f9:e1:ce:
e4:3c:27:90:cc:e8:13:07:a5:1d:1c:50:83:dc:d2:02:b6:1f:
84:5e:14:05:44:db:12:4c:61:3e:cd:00:4c:96:e5:ab:f0:7f:
c0:ce:b8:e9:5c:79:e2:6f:2b:fd:a7:e0:38:65:04:a4:30:77:
b2:13:0a:bb:f3:2f:36:b1:7e:d5:ef:3f:64:69:af:52:d1:0f:
13:5e:b7:1a:31:fe:64:f1:1a:c2:c0:9f:e8:d4:db:2b:80:f6:
74:e1:cb:34:2f:1b:72:65:92:0b:dd:5a:17:f6:de:4f:de:52:
79:94:9a:a5:2b:52:8c:6d:de:b3:28:b1:7d:3b:12:9e:52:a0:
62:40:3b:3c:d7:1c:06:1c:31:42:a5:e1:1f:92:f1:5e:9c:86:
5f:52:9f:57:8a:d2:5a:49:3d:de:05:0f:57:93:e9:50:31:f5:
f4:e0:06:72:47:04:0f:8b:be:e5:2c:df:38:be:4b:2e:15:e3:
af:ca:c9:e3:55:1e:e1:a7:8e:fe:a7:24:33:66:b6:30:1b:c6:
ae:ed:c1:81:c2:e9:2d:f2:3e:2c:1e:2e:04:af:49:87:4f:10:
d2:5a:18:45
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ9+HiuJkfQtr+QjYJomT1ikMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YWUyZjdjNGQyY2VmMGI2OTc0MjlkNjEzYWY1MDg2ZmM5
OThhOGMwHhcNMjYwNzIwMDYwMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjYzNDM1OGVmNDkzOGQ4ODRjMzk3YTQzOWYyN2M2ZDAyZmU3NDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDek5RzLaaYIULt3rz0a2mFs7Jgy
7rpFxXJqAG0btmWhp6bFRNY14juH3Nf+JqFF/xFvjErmgWYZPCKh5Sucwk2f3BIc
bjR/aS0plCgMRFJpO1IzX1rJI3hKWby0/ZW3HhNKqxjxgptStDR53g858FzXD9QT
o3BPRRn8c+RUpc1KI2N9tdNK14nn3qRvV2RGVNPYRVCpszWq1+5roff5JpLSypIB
y7feiY4vOZs+mX9jkKC2XuPlGqfgaggu+jpdYBUWkAn9Scv2t58HU73Qt1M7TodV
RKRjGgM/ImioYMHcaL15gJa+uyk05p1nEHMM5lDvj4HIOeWAlwy/8GUllwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFLJjQ1jvSTjYhMOXpDnyfG0C/nQ8MB8GA1UdIwQY
MBaAFGSuL3xNLO8LaXQp1hOvUIb8mYqMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWks0dmZFMHM3d3RwZENuV0U2OVFodnlaaW93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zZGM3MmUtMDg2MS00MzE2LWE0YmUt
YTI5NTgxM2YxZjgyLzEvc21ORFdPOUpPTmlFdzVla09mSjhiUUwtZER3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8zZGM3MmUtMDg2MS00MzE2LWE0YmUtYTI5NTgxM2YxZjgy
LzEvWks0dmZFMHM3d3RwZENuV0U2OVFodnlaaW93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBuffwAwQA
uffzMA0EAgACMAcDBQMqDdGAMA0GCSqGSIb3DQEBCwUAA4IBAQBtkxGwJvZ4WAvz
Ky7Q8gQ1jYZkZWUivx+KeMBt0gDEgjn54c7kPCeQzOgTB6UdHFCD3NICth+EXhQF
RNsSTGE+zQBMluWr8H/AzrjpXHnibyv9p+A4ZQSkMHeyEwq78y82sX7V7z9kaa9S
0Q8TXrcaMf5k8RrCwJ/o1NsrgPZ04cs0LxtyZZIL3VoX9t5P3lJ5lJqlK1KMbd6z
KLF9OxKeUqBiQDs81xwGHDFCpeEfkvFenIZfUp9XitJaST3eBQ9Xk+lQMfX04AZy
RwQPi77lLN84vksuFeOvysnjVR7hp47+pyQzZrYwG8au7cGBwukt8j4sHi4Er0mH
TxDSWhhF
-----END CERTIFICATE-----
Generated at Sat Aug 15 02:24:11 2026 by rpki-client