Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/30sdxKKP0ars307oYhGI6BrpG2o.roa
File: 30sdxKKP0ars307oYhGI6BrpG2o.roa (raw, json)
Hash identifier: Ivy6fMnEE31k2bYTRHxwk6l6HgInwqqeEaoOQT4ACBE=
Subject key identifier: DF:4B:1D:C4:A2:8F:D1:AA:EC:DF:4E:E8:62:11:88:E8:1A:E9:1B:6A
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 019DDD8C3F36FB3BF5D35C72C9C3270B7EF8
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/30sdxKKP0ars307oYhGI6BrpG2o.roa
Signing time: Thu 30 Apr 2026 08:40:49 +0000
ROA not before: Thu 30 Apr 2026 08:40:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51234
IP address blocks: 176.117.0.0/21 maxlen: 21
176.117.0.0/24 maxlen: 24
176.117.2.0/24 maxlen: 24
195.191.78.0/23 maxlen: 23
195.191.78.0/24 maxlen: 24
195.191.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:8c:3f:36:fb:3b:f5:d3:5c:72:c9:c3:27:0b:7e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Apr 30 08:40:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df4b1dc4a28fd1aaecdf4ee8621188e81ae91b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:33:32:aa:2f:2d:c7:83:07:12:04:d5:9b:80:
da:b2:fa:19:e8:f6:38:c7:69:f0:0c:f8:d6:96:94:
11:e3:f3:62:0a:58:48:c2:8b:e7:d4:da:e8:d3:a8:
70:c0:9c:22:b8:70:87:f4:6a:93:87:2b:ee:75:d0:
11:16:35:32:cb:e2:6d:80:7b:a5:b1:d9:4e:ec:f7:
e6:ee:0b:6a:ae:5b:df:d5:02:6e:5b:b6:39:77:19:
0e:88:dd:58:05:1a:1f:6d:51:f6:d6:a1:5f:a8:d9:
d7:1d:93:f5:f1:6b:ac:ca:94:17:d6:90:c9:fe:8c:
3c:ab:98:06:94:da:60:4d:f8:80:2c:f8:ec:75:bd:
88:5b:98:ca:1c:bc:30:be:f0:08:14:9d:99:d6:cc:
c2:7f:1f:4a:1f:5c:a3:60:af:c4:57:7f:cb:84:c6:
fe:38:00:b2:17:c9:f3:c9:d0:af:56:5d:e2:76:d5:
02:f5:8c:65:88:85:ec:fa:2d:6b:16:da:fd:88:74:
e0:78:99:8d:45:55:cb:59:d8:4d:c3:19:b1:77:ca:
e8:7e:46:95:1a:3b:1f:ae:f0:c6:da:db:74:c3:e4:
33:6b:78:ac:3b:58:8f:51:f0:f3:17:c6:9a:f5:84:
2c:11:65:fd:12:28:88:f1:a5:38:ab:94:9d:10:bb:
06:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4B:1D:C4:A2:8F:D1:AA:EC:DF:4E:E8:62:11:88:E8:1A:E9:1B:6A
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/30sdxKKP0ars307oYhGI6BrpG2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.0.0/21
195.191.78.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:28:f5:b6:05:fb:6c:6c:db:7d:ab:66:a9:a8:bc:3a:30:1a:
73:e3:99:ec:62:4f:a4:91:28:dd:3f:6c:c2:c2:e6:bc:20:73:
74:29:e5:a3:38:3e:49:11:7f:0a:e3:38:39:26:a9:8f:d5:43:
d0:92:1b:ff:d0:ed:db:45:e0:ff:ad:b7:89:a0:46:e3:e7:54:
30:41:2d:49:34:45:98:79:54:b1:ee:3e:16:43:1a:a4:3f:c3:
1e:6f:24:93:94:0b:54:4b:17:be:4c:73:0f:db:4d:73:1a:74:
64:62:83:77:04:80:13:f4:02:fa:d4:bb:55:bc:c3:10:4f:94:
c5:08:b5:18:90:19:1a:5e:0a:fd:b6:2a:83:48:32:d5:5e:fd:
2e:22:75:df:57:fa:8a:d8:5f:ba:1f:ac:06:d3:6e:61:24:1b:
c1:62:38:9b:57:fa:88:cf:49:88:1a:48:dc:c0:61:1d:42:4f:
bb:27:27:13:e0:3d:84:29:37:cd:4c:92:37:ca:ca:28:68:96:
02:83:c6:cf:fd:67:71:f7:04:f7:9e:0e:03:37:d5:da:11:cc:
a6:e9:3d:4b:f4:77:20:9b:a4:15:cf:2a:52:60:b3:62:e2:0b:
ec:fd:88:6c:95:81:8b:fd:91:b5:8d:1f:67:ac:a8:35:91:42:
fd:ca:8b:be
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ3djD82+zv101xyycMnC374MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi
Zjk0ODUwHhcNMjYwNDMwMDg0MDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjRiMWRjNGEyOGZkMWFhZWNkZjRlZTg2MjExODhlODFhZTkxYjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljMyqi8tx4MHEgTVm4DasvoZ6PY4
x2nwDPjWlpQR4/NiClhIwovn1Nro06hwwJwiuHCH9GqThyvuddARFjUyy+JtgHul
sdlO7Pfm7gtqrlvf1QJuW7Y5dxkOiN1YBRofbVH21qFfqNnXHZP18WusypQX1pDJ
/ow8q5gGlNpgTfiALPjsdb2IW5jKHLwwvvAIFJ2Z1szCfx9KH1yjYK/EV3/LhMb+
OACyF8nzydCvVl3idtUC9YxliIXs+i1rFtr9iHTgeJmNRVXLWdhNwxmxd8rofkaV
GjsfrvDG2tt0w+Qza3isO1iPUfDzF8aa9YQsEWX9EiiI8aU4q5SdELsGkwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFN9LHcSij9Gq7N9O6GIRiOga6RtqMB8GA1UdIwQY
MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt
Y2JiOTUxODNiMjdhLzEvMzBzZHhLS1AwYXJzMzA3b1loR0k2QnJwRzJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh
LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDsHUAAwQB
w79OMA0GCSqGSIb3DQEBCwUAA4IBAQB9KPW2BftsbNt9q2apqLw6MBpz45nsYk+k
kSjdP2zCwua8IHN0KeWjOD5JEX8K4zg5JqmP1UPQkhv/0O3bReD/rbeJoEbj51Qw
QS1JNEWYeVSx7j4WQxqkP8MebySTlAtUSxe+THMP201zGnRkYoN3BIAT9AL61LtV
vMMQT5TFCLUYkBkaXgr9tiqDSDLVXv0uInXfV/qK2F+6H6wG025hJBvBYjibV/qI
z0mIGkjcwGEdQk+7JycT4D2EKTfNTJI3ysooaJYCg8bP/Wdx9wT3ng4DN9XaEcym
6T1L9Hcgm6QVzypSYLNi4gvs/YhslYGL/ZG1jR9nrKg1kUL9you+
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:51:16 2026 by rpki-client