Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/X1l0GNU1yDw7_zGPlMRbuUvQ4kk.roa
File: X1l0GNU1yDw7_zGPlMRbuUvQ4kk.roa (raw, json)
Hash identifier: LMAqwCwgZXM3AtRI/XB9jpvxRhVfD2tgaK58NflDKOk=
Subject key identifier: 5F:59:74:18:D5:35:C8:3C:3B:FF:31:8F:94:C4:5B:B9:4B:D0:E2:49
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 019F93DBA93B61E56FBBC0880C27A4668989
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/X1l0GNU1yDw7_zGPlMRbuUvQ4kk.roa
Signing time: Fri 24 Jul 2026 11:21:14 +0000
ROA not before: Fri 24 Jul 2026 11:21:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6830
IP address blocks: 80.224.196.0/22 maxlen: 24
80.224.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:db:a9:3b:61:e5:6f:bb:c0:88:0c:27:a4:66:89:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jul 24 11:21:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f597418d535c83c3bff318f94c45bb94bd0e249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ab:6b:3c:6b:19:b1:ec:42:12:68:50:dc:f1:
22:9b:48:6c:7a:ae:60:4e:01:d7:2d:08:9f:6e:8c:
fc:ab:68:df:29:37:7d:38:0a:b2:0a:96:76:d3:cc:
57:62:63:24:61:e2:a9:09:11:84:14:53:21:79:29:
2b:20:63:21:a8:ee:28:11:44:21:1f:f7:9a:32:84:
80:f0:8d:47:bc:e4:8b:e5:80:b2:f5:3f:5d:e8:6a:
16:51:12:13:a1:c0:0d:d8:b8:0c:0f:8b:35:e1:9d:
8d:51:a2:35:bd:4d:a4:b9:96:89:51:1f:bc:9e:6f:
ca:a1:47:9a:ba:35:08:2b:c3:44:70:79:16:26:e2:
78:21:cc:61:8d:ae:b9:be:8e:34:4d:56:67:a4:c3:
13:f9:00:bb:67:ce:13:22:06:89:cf:c6:9b:21:49:
f6:46:94:63:a6:c1:59:2a:b7:36:5e:cd:e6:02:b3:
56:c8:9b:1d:87:eb:d0:f2:94:7d:1e:8c:03:68:c5:
89:90:45:a1:d9:10:78:6b:2a:bd:7f:56:18:d5:e0:
26:1b:86:21:dd:5c:2f:2b:b5:56:be:11:eb:ec:78:
fc:ce:10:12:eb:bc:86:f7:36:e7:44:0a:9e:97:c0:
66:24:8c:cf:78:1c:bc:76:9c:70:f2:f6:e1:c9:7f:
60:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:59:74:18:D5:35:C8:3C:3B:FF:31:8F:94:C4:5B:B9:4B:D0:E2:49
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/X1l0GNU1yDw7_zGPlMRbuUvQ4kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.224.196.0/22
80.224.244.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:88:34:b0:ce:b0:25:43:d7:2e:67:88:24:af:8d:19:7c:b8:
32:f6:eb:ae:42:d6:65:dd:d6:44:c2:bb:83:cc:df:6c:eb:e8:
8d:cb:9b:bc:e3:24:73:6d:cc:e7:0b:53:6a:58:5f:c4:c2:3f:
ad:34:cb:d3:0c:3f:52:f7:b5:1d:68:68:83:21:ef:15:ea:2c:
e1:ce:7a:ad:f9:90:82:c4:89:2a:86:87:80:15:27:fd:1a:3c:
f8:53:2d:ce:ba:5a:12:cf:dd:5a:4d:32:ec:49:e1:54:c5:c4:
57:57:a6:ee:e5:06:71:23:ba:2b:b6:32:c2:e5:28:25:68:0f:
6a:af:aa:5a:de:14:58:d8:1e:c2:d8:94:55:a2:c2:e2:0c:c6:
ea:5e:82:50:c6:01:fc:e6:d6:bf:67:72:87:04:85:d6:ac:34:
4b:ce:b4:a6:f6:01:ed:34:a2:cb:66:4e:57:d4:30:16:93:fc:
dd:2a:0c:67:fb:e5:b0:36:26:54:4f:01:4e:91:22:a6:8f:33:
ac:70:7e:84:8e:fd:02:cf:b7:39:d1:1d:d4:55:f8:a6:d6:a0:
ac:a4:9a:95:44:51:e1:7f:7e:12:d3:b7:ce:f9:38:c0:6e:1e:
6f:56:30:10:49:de:e2:d6:41:a8:25:0d:92:d9:71:d0:b8:b8:
39:cd:c5:37
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ+T26k7YeVvu8CIDCekZomJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MzRmMTY4NjEwMjg3NmM2MjE2YmNlYTI4YTVlNTAyZWMw
ZDdiNmIwHhcNMjYwNzI0MTEyMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjU5NzQxOGQ1MzVjODNjM2JmZjMxOGY5NGM0NWJiOTRiZDBlMjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0atrPGsZsexCEmhQ3PEim0hseq5g
TgHXLQifboz8q2jfKTd9OAqyCpZ208xXYmMkYeKpCRGEFFMheSkrIGMhqO4oEUQh
H/eaMoSA8I1HvOSL5YCy9T9d6GoWURITocAN2LgMD4s14Z2NUaI1vU2kuZaJUR+8
nm/KoUeaujUIK8NEcHkWJuJ4Icxhja65vo40TVZnpMMT+QC7Z84TIgaJz8abIUn2
RpRjpsFZKrc2Xs3mArNWyJsdh+vQ8pR9HowDaMWJkEWh2RB4ayq9f1YY1eAmG4Yh
3VwvK7VWvhHr7Hj8zhAS67yG9zbnRAqel8BmJIzPeBy8dpxw8vbhyX9gbQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFF9ZdBjVNcg8O/8xj5TEW7lL0OJJMB8GA1UdIwQY
MBaAFNQ08WhhAodsYha86iil5QLsDXtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2Ut
NTcxMmQ5NWFlNjM4LzEvWDFsMEdOVTF5RHc3X3pHUGxNUmJ1VXZRNGtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2UtNTcxMmQ5NWFlNjM4
LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCUODEAwQC
UOD0MA0GCSqGSIb3DQEBCwUAA4IBAQBuiDSwzrAlQ9cuZ4gkr40ZfLgy9uuuQtZl
3dZEwruDzN9s6+iNy5u84yRzbcznC1NqWF/Ewj+tNMvTDD9S97UdaGiDIe8V6izh
znqt+ZCCxIkqhoeAFSf9Gjz4Uy3OuloSz91aTTLsSeFUxcRXV6bu5QZxI7ortjLC
5SglaA9qr6pa3hRY2B7C2JRVosLiDMbqXoJQxgH85ta/Z3KHBIXWrDRLzrSm9gHt
NKLLZk5X1DAWk/zdKgxn++WwNiZUTwFOkSKmjzOscH6Ejv0Cz7c50R3UVfim1qCs
pJqVRFHhf34S07fO+TjAbh5vVjAQSd7i1kGoJQ2S2XHQuLg5zcU3
-----END CERTIFICATE-----
Generated at Sun Jul 26 16:56:07 2026 by rpki-client