Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/FdzJdbih8GYJJyfSWdIfdNOiPbQ.roa
File: FdzJdbih8GYJJyfSWdIfdNOiPbQ.roa (raw, json)
Hash identifier: 8DYsIMJzu+yvu5ZWSknfuVne4QSGnTYYVURq3C3fqq0=
Subject key identifier: 15:DC:C9:75:B8:A1:F0:66:09:27:27:D2:59:D2:1F:74:D3:A2:3D:B4
Certificate issuer: /CN=0522f70eb9aaefab2b4ec4e1e022ec06b5447aa8
Certificate serial: 01A0C581191067863B0EF6C4D9AA938258C8
Authority key identifier: 05:22:F7:0E:B9:AA:EF:AB:2B:4E:C4:E1:E0:22:EC:06:B5:44:7A:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSL3Drmq76srTsTh4CLsBrVEeqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/FdzJdbih8GYJJyfSWdIfdNOiPbQ.roa
Signing time: Mon 21 Sep 2026 19:46:07 +0000
ROA not before: Mon 21 Sep 2026 19:46:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59803
IP address blocks: 185.70.242.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSL3Drmq76srTsTh4CLsBrVEeqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:81:19:10:67:86:3b:0e:f6:c4:d9:aa:93:82:58:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0522f70eb9aaefab2b4ec4e1e022ec06b5447aa8
Validity
Not Before: Sep 21 19:46:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15dcc975b8a1f066092727d259d21f74d3a23db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:30:df:0b:da:fd:b7:d1:db:08:67:53:3e:60:
7e:eb:2c:79:83:0f:c4:0e:60:dc:1f:61:77:23:d0:
fa:8b:e8:3b:e5:f4:04:32:63:cd:75:f5:ba:db:0f:
0a:7b:4f:93:0b:0f:87:39:c4:34:62:8b:86:27:18:
09:f8:2d:a1:ca:c8:22:e0:61:3f:41:7c:a7:74:74:
0c:3d:53:11:f0:04:b1:fb:42:df:dc:30:ae:d4:c5:
a6:42:56:4c:d6:55:82:84:53:f5:89:59:f5:ba:34:
de:2c:ff:4a:82:5e:c4:27:05:b3:f3:36:c6:3f:6e:
57:e4:30:29:49:a3:40:d1:4f:26:db:f5:4d:ce:19:
d4:9f:d9:92:7e:3c:c1:c1:02:4d:a7:db:2d:da:37:
90:5c:f9:d6:a6:78:2e:79:c6:0d:da:5b:f6:47:63:
35:65:e2:86:5f:6b:0b:ad:44:0e:fa:af:c4:8c:89:
8a:cb:a7:0b:42:e2:2d:c3:d1:51:7f:db:55:59:8c:
40:d5:9e:4b:fa:62:06:cf:22:80:6f:40:9d:4c:30:
60:fd:e7:96:a2:fc:33:cf:f6:db:01:bf:fa:d0:51:
9f:26:31:68:e3:ed:45:8c:0d:83:c3:ae:d3:82:12:
07:b0:21:78:c8:f4:f8:ed:03:94:2a:bd:8c:f8:fc:
30:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DC:C9:75:B8:A1:F0:66:09:27:27:D2:59:D2:1F:74:D3:A2:3D:B4
X509v3 Authority Key Identifier:
keyid:05:22:F7:0E:B9:AA:EF:AB:2B:4E:C4:E1:E0:22:EC:06:B5:44:7A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSL3Drmq76srTsTh4CLsBrVEeqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/FdzJdbih8GYJJyfSWdIfdNOiPbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.242.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:af:4f:0c:de:19:75:0b:80:85:83:09:ed:c7:41:95:80:5c:
0d:f5:95:e1:6a:96:9f:0c:d8:73:87:d8:a4:28:1a:ef:c1:e9:
f3:34:ce:ef:0b:c5:f7:52:e2:c8:01:36:fe:d1:04:48:d7:dc:
2b:e7:84:df:17:19:de:5d:04:e0:43:c3:46:4b:0e:a3:9f:79:
b3:25:4b:9e:c3:6c:6c:68:81:6b:87:12:6b:52:04:3b:26:10:
e4:9c:f3:cd:81:d8:9a:f6:4e:2e:c0:5a:18:e1:3a:28:23:be:
df:d1:7d:4b:0d:bf:f3:d1:07:1c:03:6b:3b:34:5f:c8:30:57:
16:07:5b:61:8c:82:f4:86:a0:d1:df:1e:09:91:44:84:59:8d:
40:7b:7d:fc:03:3b:94:eb:da:38:5e:39:73:82:55:2e:d4:29:
a3:0a:0d:e1:34:96:a3:95:29:e0:67:97:58:af:77:7f:1d:52:
c9:22:89:de:22:15:6f:e3:b0:c6:7b:85:76:da:0b:a7:89:83:
3f:0e:e8:d5:3b:bc:20:98:7f:d9:a3:ad:f1:ce:6e:47:73:33:
d0:d5:7e:d6:de:1d:4a:ce:30:cd:4f:d2:ec:f4:a1:62:64:25:
ee:ef:06:82:b6:60:dc:ba:1d:5f:ec:ef:93:e5:93:91:4d:e6:
9f:72:a1:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDFgRkQZ4Y7DvbE2aqTgljIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MjJmNzBlYjlhYWVmYWIyYjRlYzRlMWUwMjJlYzA2YjU0
NDdhYTgwHhcNMjYwOTIxMTk0NjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWRjYzk3NWI4YTFmMDY2MDkyNzI3ZDI1OWQyMWY3NGQzYTIzZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzDfC9r9t9HbCGdTPmB+6yx5gw/E
DmDcH2F3I9D6i+g75fQEMmPNdfW62w8Ke0+TCw+HOcQ0YouGJxgJ+C2hysgi4GE/
QXyndHQMPVMR8ASx+0Lf3DCu1MWmQlZM1lWChFP1iVn1ujTeLP9Kgl7EJwWz8zbG
P25X5DApSaNA0U8m2/VNzhnUn9mSfjzBwQJNp9st2jeQXPnWpnguecYN2lv2R2M1
ZeKGX2sLrUQO+q/EjImKy6cLQuItw9FRf9tVWYxA1Z5L+mIGzyKAb0CdTDBg/eeW
ovwzz/bbAb/60FGfJjFo4+1FjA2Dw67TghIHsCF4yPT47QOUKr2M+PwwXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBXcyXW4ofBmCScn0lnSH3TToj20MB8GA1UdIwQY
MBaAFAUi9w65qu+rK07E4eAi7Aa1RHqoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlNMM0RybXE3NnNyVHNUaDRDTHNCclZFZXFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zY2RiNjctMTFlOS00MDZhLThkMzIt
ZWJlYmVmYzk2Y2NiLzEvRmR6SmRiaWg4R1lKSnlmU1dkSWZkTk9pUGJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zY2RiNjctMTFlOS00MDZhLThkMzItZWJlYmVmYzk2Y2Ni
LzEvQlNMM0RybXE3NnNyVHNUaDRDTHNCclZFZXFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuUbyMA0G
CSqGSIb3DQEBCwUAA4IBAQC2r08M3hl1C4CFgwntx0GVgFwN9ZXhapafDNhzh9ik
KBrvwenzNM7vC8X3UuLIATb+0QRI19wr54TfFxneXQTgQ8NGSw6jn3mzJUuew2xs
aIFrhxJrUgQ7JhDknPPNgdia9k4uwFoY4TooI77f0X1LDb/z0QccA2s7NF/IMFcW
B1thjIL0hqDR3x4JkUSEWY1Ae338AzuU69o4XjlzglUu1CmjCg3hNJajlSngZ5dY
r3d/HVLJIoneIhVv47DGe4V22guniYM/DujVO7wgmH/Zo63xzm5HczPQ1X7W3h1K
zjDNT9Ls9KFiZCXu7waCtmDcuh1f7O+T5ZORTeafcqFE
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:15:48 2026 by rpki-client