Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/uR2ylumTmfT3BQFedfgIoqmEIcM.roa
File: uR2ylumTmfT3BQFedfgIoqmEIcM.roa (raw, json)
Hash identifier: OT+mNpsQIWtCh4SyPSeorwW+75Abd8tYhpy5oP3ZE18=
Subject key identifier: B9:1D:B2:96:E9:93:99:F4:F7:05:01:5E:75:F8:08:A2:A9:84:21:C3
Certificate issuer: /CN=66306e3acf3eb903cc73973fb62860b663516c93
Certificate serial: 019EE65C48F0FCFE2C238C9A03EB9C74DE54
Authority key identifier: 66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/uR2ylumTmfT3BQFedfgIoqmEIcM.roa
Signing time: Sat 20 Jun 2026 18:47:48 +0000
ROA not before: Sat 20 Jun 2026 18:47:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203979
IP address blocks: 80.173.204.0/24 maxlen: 24
80.173.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e6:5c:48:f0:fc:fe:2c:23:8c:9a:03:eb:9c:74:de:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66306e3acf3eb903cc73973fb62860b663516c93
Validity
Not Before: Jun 20 18:47:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b91db296e99399f4f705015e75f808a2a98421c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:07:b9:6c:c6:92:cc:92:99:c2:aa:c5:c4:ac:
72:5c:0f:17:34:0c:7a:0e:bd:d4:bd:f7:9b:88:31:
aa:4b:58:e4:52:ce:27:63:f3:59:49:f4:d3:09:66:
75:dd:57:b9:d7:0b:cd:4b:d9:a4:29:51:e8:d3:02:
6b:fc:05:fb:5f:7f:89:9c:a9:1c:7c:77:02:49:b9:
49:cf:c5:4e:ed:57:1c:e7:4d:db:eb:08:43:a6:4f:
df:36:8a:68:9e:4e:24:95:0f:98:d9:39:4c:ee:7a:
8b:e1:ae:46:80:7b:35:3a:4e:6f:60:1e:6f:2b:68:
d3:c0:07:96:cb:22:81:a1:fa:14:67:44:05:97:95:
30:81:2f:68:ce:89:c9:37:33:bf:e3:38:09:32:00:
15:35:83:12:17:f5:de:d1:14:c5:af:38:da:28:0d:
5d:43:dd:13:70:b6:fc:a0:6b:a0:20:11:af:d1:32:
e3:e2:4e:5e:90:22:82:f5:da:3d:19:e3:1e:5b:17:
89:8f:fc:68:72:cf:88:7f:4f:b6:1d:f8:cf:71:af:
9f:36:c8:f7:e5:66:27:1d:af:65:48:96:1a:41:b6:
2d:de:77:f7:91:f9:03:82:25:2b:f0:2d:83:90:15:
e3:ed:85:aa:cd:95:6d:19:3b:7a:50:5a:59:8a:6d:
d8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1D:B2:96:E9:93:99:F4:F7:05:01:5E:75:F8:08:A2:A9:84:21:C3
X509v3 Authority Key Identifier:
keyid:66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/uR2ylumTmfT3BQFedfgIoqmEIcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.173.204.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:93:1f:30:91:64:12:e6:20:13:2e:9e:27:6c:46:20:9c:79:
6a:e8:b4:a4:e7:1a:b6:09:fd:c6:a6:26:f0:c4:09:32:21:54:
24:01:f5:26:1d:bd:74:3e:b0:cc:e7:8e:9f:6f:2b:ec:db:1c:
cd:7c:a2:40:72:96:de:65:80:3c:f3:62:d2:b0:86:1e:21:08:
52:88:18:84:d2:a1:a5:14:35:b6:e2:08:8b:74:8d:71:04:cd:
a4:63:d8:19:a1:3d:96:df:27:83:36:fd:c6:c4:8c:d0:10:59:
9e:62:da:f6:73:24:d1:44:22:38:f2:71:66:74:78:33:ad:a5:
e4:5d:f7:04:f3:a8:51:86:b7:b3:78:6c:a9:6c:64:65:fa:c9:
3e:0f:83:68:f5:57:51:44:56:da:a0:eb:f7:bc:39:8b:ef:12:
98:88:96:11:c5:5d:59:50:cc:ba:6c:7c:fc:ce:71:44:80:34:
a2:91:53:68:21:06:95:80:e4:c0:4f:7c:b0:fc:87:93:17:c1:
64:20:88:9e:87:c6:6a:48:70:cf:71:6a:58:eb:bd:92:23:16:
a8:98:19:b5:a3:a2:a1:25:ed:3a:b9:a0:48:53:2f:8f:83:a3:
37:bb:d4:6a:f6:93:92:46:4f:39:c2:b5:f3:92:af:83:47:66:
c4:16:ec:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7mXEjw/P4sI4yaA+ucdN5UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MzA2ZTNhY2YzZWI5MDNjYzczOTczZmI2Mjg2MGI2NjM1
MTZjOTMwHhcNMjYwNjIwMTg0NzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTFkYjI5NmU5OTM5OWY0ZjcwNTAxNWU3NWY4MDhhMmE5ODQyMWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywe5bMaSzJKZwqrFxKxyXA8XNAx6
Dr3UvfebiDGqS1jkUs4nY/NZSfTTCWZ13Ve51wvNS9mkKVHo0wJr/AX7X3+JnKkc
fHcCSblJz8VO7Vcc503b6whDpk/fNoponk4klQ+Y2TlM7nqL4a5GgHs1Ok5vYB5v
K2jTwAeWyyKBofoUZ0QFl5UwgS9ozonJNzO/4zgJMgAVNYMSF/Xe0RTFrzjaKA1d
Q90TcLb8oGugIBGv0TLj4k5ekCKC9do9GeMeWxeJj/xocs+If0+2HfjPca+fNsj3
5WYnHa9lSJYaQbYt3nf3kfkDgiUr8C2DkBXj7YWqzZVtGTt6UFpZim3YRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLkdspbpk5n09wUBXnX4CKKphCHDMB8GA1UdIwQY
MBaAFGYwbjrPPrkDzHOXP7YoYLZjUWyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmpCdU9zOC11UVBNYzVjX3RpaGd0bU5SYkpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82NGRhYmItN2EwMS00MGQ1LWE1ODct
ZWUyN2NiY2E3NDdlLzEvdVIyeWx1bVRtZlQzQlFGZWRmZ0lvcW1FSWNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82NGRhYmItN2EwMS00MGQ1LWE1ODctZWUyN2NiY2E3NDdl
LzEvWmpCdU9zOC11UVBNYzVjX3RpaGd0bU5SYkpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUK3MMA0G
CSqGSIb3DQEBCwUAA4IBAQBNkx8wkWQS5iATLp4nbEYgnHlq6LSk5xq2Cf3Gpibw
xAkyIVQkAfUmHb10PrDM546fbyvs2xzNfKJAcpbeZYA882LSsIYeIQhSiBiE0qGl
FDW24giLdI1xBM2kY9gZoT2W3yeDNv3GxIzQEFmeYtr2cyTRRCI48nFmdHgzraXk
XfcE86hRhrezeGypbGRl+sk+D4No9VdRRFbaoOv3vDmL7xKYiJYRxV1ZUMy6bHz8
znFEgDSikVNoIQaVgOTAT3yw/IeTF8FkIIieh8ZqSHDPcWpY672SIxaomBm1o6Kh
Je06uaBIUy+Pg6M3u9Rq9pOSRk85wrXzkq+DR2bEFuzu
-----END CERTIFICATE-----
Generated at Wed Jul 22 03:03:33 2026 by rpki-client