Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/B4UdmI4nMjXvDI9mqvP3jq5Yyds.roa
File: B4UdmI4nMjXvDI9mqvP3jq5Yyds.roa (raw, json)
Hash identifier: TvdoyPhTynvytwC8PwcUZrOiE5PXu6aF1+Z/HvWiCkk=
Subject key identifier: 07:85:1D:98:8E:27:32:35:EF:0C:8F:66:AA:F3:F7:8E:AE:58:C9:DB
Certificate issuer: /CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Certificate serial: 019E836BE5BCF2F731D2B0F16BE9621A0E7B
Authority key identifier: E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/B4UdmI4nMjXvDI9mqvP3jq5Yyds.roa
Signing time: Mon 01 Jun 2026 13:42:26 +0000
ROA not before: Mon 01 Jun 2026 13:42:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21077
IP address blocks: 80.86.32.0/20 maxlen: 20
185.98.180.0/22 maxlen: 22
185.98.180.0/24 maxlen: 24
185.98.181.0/24 maxlen: 24
185.98.182.0/24 maxlen: 24
185.106.220.0/22 maxlen: 22
185.106.220.0/24 maxlen: 24
185.106.221.0/24 maxlen: 24
185.106.222.0/23 maxlen: 23
185.106.222.0/24 maxlen: 24
185.106.223.0/24 maxlen: 24
193.24.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:83:6b:e5:bc:f2:f7:31:d2:b0:f1:6b:e9:62:1a:0e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Validity
Not Before: Jun 1 13:42:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07851d988e273235ef0c8f66aaf3f78eae58c9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:be:5d:6f:52:37:1c:36:63:7f:65:7a:1b:5f:
c1:c0:be:f5:1e:78:8a:0c:60:8e:2d:52:dc:cc:38:
34:a0:24:fb:d0:99:a5:f7:72:f2:b4:4e:6c:e4:83:
1d:db:20:c2:51:7a:22:38:98:99:9a:e5:2e:43:2f:
d8:73:fa:ed:d4:16:87:0b:fe:0c:87:3f:e6:64:22:
29:df:23:44:c6:a1:e9:37:97:10:f9:8d:5e:d7:00:
82:f9:6e:e5:aa:be:8e:2a:e6:29:48:58:95:f4:a4:
92:26:aa:cb:68:b4:ec:94:79:f1:38:15:81:09:d4:
1f:b0:96:f2:c1:eb:1e:ac:65:fd:17:0b:53:44:04:
01:f7:12:46:aa:5b:db:1f:5e:15:1d:c0:71:63:b7:
29:87:ea:9e:06:2a:e4:4a:44:82:8c:ae:65:bd:a6:
e4:d6:c8:f1:65:65:7a:50:f4:7c:b2:8c:a0:d9:70:
d9:97:c1:20:1a:da:bb:6a:87:5e:a8:32:ec:cc:32:
62:4a:f3:cc:1f:48:ea:19:a0:86:49:2e:89:9a:4b:
05:71:77:08:fd:ad:41:78:bd:0d:ec:15:2f:e7:71:
c6:38:3a:c3:1f:f1:c8:d2:94:d1:50:26:48:7c:ce:
70:6e:1b:80:8c:0c:07:1b:05:22:2d:d6:93:3b:d8:
91:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:85:1D:98:8E:27:32:35:EF:0C:8F:66:AA:F3:F7:8E:AE:58:C9:DB
X509v3 Authority Key Identifier:
keyid:E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/B4UdmI4nMjXvDI9mqvP3jq5Yyds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.32.0/20
185.98.180.0/22
185.106.220.0/22
193.24.28.0/24
Signature Algorithm: sha256WithRSAEncryption
99:f5:1c:ee:10:3e:bd:bc:3c:39:29:49:32:46:1c:ad:f1:7b:
2f:86:64:c4:1b:89:0b:a8:53:dd:f6:4c:99:64:4f:ba:8f:95:
55:f3:46:d3:d8:a0:64:12:a8:5a:f7:d4:f7:eb:f5:61:cd:0e:
9b:30:b7:f1:03:43:f3:23:65:ac:89:c7:13:3c:8d:d9:ad:8e:
b8:ee:ea:83:40:5f:3a:c9:94:78:73:30:2c:23:14:69:cb:d3:
fe:f8:af:62:ff:6a:7e:de:ba:c0:af:72:ab:e9:f5:79:90:90:
c5:9a:ca:0d:9c:b5:dd:c6:e2:c5:ed:6c:46:50:ad:64:17:20:
73:fe:38:42:2f:a5:e3:90:88:80:1e:49:b2:e3:22:0d:c4:09:
2e:f3:27:13:88:14:be:33:dd:5e:59:5c:1e:55:94:da:c3:ac:
26:17:fa:a6:40:6a:03:55:05:c8:d1:a4:66:3c:53:aa:8c:d1:
14:5f:bc:7e:d4:2e:6d:51:2e:5c:fe:6a:78:90:53:3e:2b:25:
54:68:a1:8c:e6:4c:a7:eb:31:3d:ee:36:3f:da:e2:4c:88:a3:
af:3d:c4:5c:21:af:26:79:6a:59:7c:ec:76:35:38:ee:c4:34:
4f:3e:29:27:ac:30:a3:a1:3b:f9:e0:02:fb:be:90:f0:8c:85:
d5:85:44:4b
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ6Da+W88vcx0rDxa+liGg57MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZGEyM2QzYjkzMGQ0YzFmM2FjNzMwNjVkNzFhNjA3YzM1
ZDI5MDAwHhcNMjYwNjAxMTM0MjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzg1MWQ5ODhlMjczMjM1ZWYwYzhmNjZhYWYzZjc4ZWFlNThjOWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5L5db1I3HDZjf2V6G1/BwL71HniK
DGCOLVLczDg0oCT70Jml93LytE5s5IMd2yDCUXoiOJiZmuUuQy/Yc/rt1BaHC/4M
hz/mZCIp3yNExqHpN5cQ+Y1e1wCC+W7lqr6OKuYpSFiV9KSSJqrLaLTslHnxOBWB
CdQfsJbyweserGX9FwtTRAQB9xJGqlvbH14VHcBxY7cph+qeBirkSkSCjK5lvabk
1sjxZWV6UPR8soyg2XDZl8EgGtq7aodeqDLszDJiSvPMH0jqGaCGSS6JmksFcXcI
/a1BeL0N7BUv53HGODrDH/HI0pTRUCZIfM5wbhuAjAwHGwUiLdaTO9iRcQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFAeFHZiOJzI17wyPZqrz946uWMnbMB8GA1UdIwQY
MBaAFOLaI9O5MNTB86xzBl1xpgfDXSkAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRvajA3a3cxTUh6ckhNR1hYR21COE5kS1FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kZWViYjgtYWU4Ni00Njk0LWE5NzIt
ODI3YTBhYzA0YTlkLzEvQjRVZG1JNG5Nalh2REk5bXF2UDNqcTVZeWRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9kZWViYjgtYWU4Ni00Njk0LWE5NzItODI3YTBhYzA0YTlk
LzEvNHRvajA3a3cxTUh6ckhNR1hYR21COE5kS1FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQEUFYgAwQC
uWK0AwQCuWrcAwQAwRgcMA0GCSqGSIb3DQEBCwUAA4IBAQCZ9RzuED69vDw5KUky
Rhyt8XsvhmTEG4kLqFPd9kyZZE+6j5VV80bT2KBkEqha99T36/VhzQ6bMLfxA0Pz
I2WsiccTPI3ZrY647uqDQF86yZR4czAsIxRpy9P++K9i/2p+3rrAr3Kr6fV5kJDF
msoNnLXdxuLF7WxGUK1kFyBz/jhCL6XjkIiAHkmy4yINxAku8ycTiBS+M91eWVwe
VZTaw6wmF/qmQGoDVQXI0aRmPFOqjNEUX7x+1C5tUS5c/mp4kFM+KyVUaKGM5kyn
6zE97jY/2uJMiKOvPcRcIa8meWpZfOx2NTjuxDRPPiknrDCjoTv54AL7vpDwjIXV
hURL
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:58:26 2026 by rpki-client