Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/sTu1WNqw_QZ7OOjNiKnqjz84Svw.roa
File: sTu1WNqw_QZ7OOjNiKnqjz84Svw.roa (raw, json)
Hash identifier: mlys9AKr6bUl80EIb5qR+eU3Oef7oBDEziAxWniTW18=
Subject key identifier: B1:3B:B5:58:DA:B0:FD:06:7B:38:E8:CD:88:A9:EA:8F:3F:38:4A:FC
Certificate issuer: /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial: 019DC40FDB3492902896E041D6A2A553D17F
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/sTu1WNqw_QZ7OOjNiKnqjz84Svw.roa
Signing time: Sat 25 Apr 2026 09:54:26 +0000
ROA not before: Sat 25 Apr 2026 09:54:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44090
IP address blocks: 185.129.232.0/21 maxlen: 21
185.129.232.0/22 maxlen: 22
185.129.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c4:0f:db:34:92:90:28:96:e0:41:d6:a2:a5:53:d1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Validity
Not Before: Apr 25 09:54:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b13bb558dab0fd067b38e8cd88a9ea8f3f384afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:a7:ec:97:03:71:9d:fb:7e:af:d0:20:28:
e0:6c:83:01:ae:4d:50:fb:ea:67:57:94:37:bc:ac:
c7:7e:61:e8:2c:bb:2c:b3:19:7d:85:dc:2e:69:f8:
e4:33:ff:ba:a6:92:1e:c8:94:c5:84:8d:20:46:b5:
87:95:5c:fd:ba:b9:cc:de:8a:17:4f:d1:bb:66:c1:
84:ec:ee:21:79:af:dc:d9:50:85:23:8d:19:b0:2e:
db:12:66:36:34:55:94:d2:7b:3b:be:7e:73:f0:dd:
0f:09:1a:23:99:a2:39:0d:12:02:66:33:63:7d:00:
2a:93:21:45:bd:b6:c1:b9:12:16:0e:bc:62:62:da:
c6:90:e2:e3:37:ef:93:7d:c1:73:46:1e:f9:c4:f8:
f3:04:97:ec:70:3a:c9:5c:24:3a:34:75:3c:d2:f6:
c7:6f:f1:39:dd:35:fc:bc:ce:97:3a:50:e7:d5:5f:
40:92:8c:fc:5d:33:e1:de:b7:65:bd:b8:5c:b4:8b:
08:65:73:16:44:fa:b1:6d:e0:23:ae:e5:1d:3e:05:
f7:ee:e0:cd:9d:47:61:6e:a7:19:ea:19:aa:f4:58:
48:e5:ad:2c:1d:0d:ef:4b:61:e7:b2:3a:f2:35:c7:
67:2e:3e:71:48:5b:05:3a:52:25:a9:20:a3:80:8a:
b1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3B:B5:58:DA:B0:FD:06:7B:38:E8:CD:88:A9:EA:8F:3F:38:4A:FC
X509v3 Authority Key Identifier:
keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/sTu1WNqw_QZ7OOjNiKnqjz84Svw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.232.0/21
Signature Algorithm: sha256WithRSAEncryption
26:eb:f2:46:e6:0e:77:58:bc:18:c5:e6:82:d9:74:16:c2:f7:
a4:2f:e4:72:8d:7f:65:8c:b5:8d:22:22:c6:88:fe:2b:a2:55:
95:bb:68:db:c1:cb:4d:b1:fd:4c:43:1f:4d:e0:fc:8f:04:42:
5a:e2:da:5b:71:1f:85:b5:e0:5a:8b:1f:1a:9b:07:d1:af:45:
a2:ff:70:d3:0d:ca:da:30:1d:84:36:81:24:86:ce:f3:12:ae:
d0:d4:81:72:2d:ca:5a:47:89:be:39:c1:20:47:ca:4b:07:9c:
ae:8d:de:20:14:d3:cc:ea:5a:a9:61:ef:c0:b1:c2:29:ff:b1:
a2:a4:55:3f:19:f5:a6:11:f4:a8:79:b1:66:98:ee:a2:05:a7:
92:ff:95:99:4c:26:6f:f0:2b:72:8e:83:ba:cb:9a:4e:22:8d:
7c:56:22:51:d8:b0:6a:68:02:27:05:af:11:ad:6e:7b:1a:21:
df:ba:94:1c:24:75:73:5f:83:57:18:56:53:d8:e7:e3:46:2e:
7f:7a:48:08:52:d7:ae:48:d4:47:17:0a:39:dc:44:54:f0:cc:
46:6c:a9:ff:f5:31:73:fc:14:6b:d1:2b:92:17:bd:a7:cf:b9:
dc:22:09:f8:42:55:90:e3:5b:d6:2f:62:c9:a3:b1:07:70:0b:
38:91:6b:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3ED9s0kpAoluBB1qKlU9F/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYmQ1MTI3MjA2NGI2M2IyYzY2M2MwMjk2YmExMWRiNWVh
MjM4YzAwHhcNMjYwNDI1MDk1NDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTNiYjU1OGRhYjBmZDA2N2IzOGU4Y2Q4OGE5ZWE4ZjNmMzg0YWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCKn7JcDcZ37fq/QICjgbIMBrk1Q
++pnV5Q3vKzHfmHoLLsssxl9hdwuafjkM/+6ppIeyJTFhI0gRrWHlVz9urnM3ooX
T9G7ZsGE7O4hea/c2VCFI40ZsC7bEmY2NFWU0ns7vn5z8N0PCRojmaI5DRICZjNj
fQAqkyFFvbbBuRIWDrxiYtrGkOLjN++TfcFzRh75xPjzBJfscDrJXCQ6NHU80vbH
b/E53TX8vM6XOlDn1V9Akoz8XTPh3rdlvbhctIsIZXMWRPqxbeAjruUdPgX37uDN
nUdhbqcZ6hmq9FhI5a0sHQ3vS2HnsjryNcdnLj5xSFsFOlIlqSCjgIqxMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLE7tVjasP0GezjozYip6o8/OEr8MB8GA1UdIwQY
MBaAFHu9UScgZLY7LGY8Apa6EdteojjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iODJhMDYtYWIwZC00YWRmLThhODUt
OTdjOWFhYjgyOGYyLzEvc1R1MVdOcXdfUVo3T09qTmlLbnFqejg0U3Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9iODJhMDYtYWIwZC00YWRmLThhODUtOTdjOWFhYjgyOGYy
LzEvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDuYHoMA0G
CSqGSIb3DQEBCwUAA4IBAQAm6/JG5g53WLwYxeaC2XQWwvekL+RyjX9ljLWNIiLG
iP4rolWVu2jbwctNsf1MQx9N4PyPBEJa4tpbcR+FteBaix8amwfRr0Wi/3DTDcra
MB2ENoEkhs7zEq7Q1IFyLcpaR4m+OcEgR8pLB5yujd4gFNPM6lqpYe/AscIp/7Gi
pFU/GfWmEfSoebFmmO6iBaeS/5WZTCZv8CtyjoO6y5pOIo18ViJR2LBqaAInBa8R
rW57GiHfupQcJHVzX4NXGFZT2OfjRi5/ekgIUteuSNRHFwo53ERU8MxGbKn/9TFz
/BRr0SuSF72nz7ncIgn4QlWQ41vWL2LJo7EHcAs4kWub
-----END CERTIFICATE-----
Generated at Mon Apr 27 23:41:24 2026 by rpki-client