Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/I1bm7eXIZpq2tqGKBIuB8NRWQPk.roa
File: I1bm7eXIZpq2tqGKBIuB8NRWQPk.roa (raw, json)
Hash identifier: N9y61MIeJ5NO8Eq26x4lUQLtlEQG0sukKq68n6T3Z5U=
Subject key identifier: 23:56:E6:ED:E5:C8:66:9A:B6:B6:A1:8A:04:8B:81:F0:D4:56:40:F9
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01A08CF34615C8EE252BA39F82BB7AD79FC6
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/I1bm7eXIZpq2tqGKBIuB8NRWQPk.roa
Signing time: Thu 10 Sep 2026 20:12:28 +0000
ROA not before: Thu 10 Sep 2026 20:12:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22773
IP address blocks: 194.38.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:f3:46:15:c8:ee:25:2b:a3:9f:82:bb:7a:d7:9f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Sep 10 20:12:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2356e6ede5c8669ab6b6a18a048b81f0d45640f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:cd:3d:65:55:0e:59:01:77:fe:48:dc:f8:
50:7e:36:e1:57:9b:71:b3:01:27:7d:17:ec:39:4e:
44:7b:ad:fc:a7:8e:18:92:1a:41:8d:2d:73:1c:ab:
73:23:3a:ae:60:a5:cc:fe:dc:11:b2:93:1e:41:da:
99:6e:96:c1:83:5f:e2:20:ed:b4:7b:e6:65:81:ce:
b3:d8:62:6c:65:b9:3f:51:a9:b8:45:e3:ab:0c:25:
cf:bb:21:42:8d:7f:af:f2:64:02:12:26:ff:83:97:
4a:2f:37:5a:08:e7:dc:06:56:ea:0c:ad:46:dc:e6:
41:c5:dd:05:49:28:78:1c:31:94:70:6e:af:64:d8:
3a:bc:4d:8c:34:3d:1e:af:1e:17:43:7e:81:17:05:
39:70:bc:1f:ca:d8:a9:8f:68:51:fd:a4:60:50:5c:
0c:e5:39:e3:cb:8a:ad:73:0f:a5:d6:64:9a:5c:77:
ac:db:95:db:c2:63:e6:02:bc:60:1a:f1:50:cf:df:
70:fe:fd:cc:8a:10:51:2b:09:77:96:31:33:a6:30:
cd:d1:19:25:59:61:e5:94:52:f1:16:b5:9f:95:cf:
bc:24:57:ce:80:be:ed:3c:e7:d7:8e:9a:7b:57:f1:
f6:f5:93:f8:11:2d:89:39:5d:ca:fa:84:f7:a1:ef:
35:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:56:E6:ED:E5:C8:66:9A:B6:B6:A1:8A:04:8B:81:F0:D4:56:40:F9
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/I1bm7eXIZpq2tqGKBIuB8NRWQPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.50.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:05:af:0a:bd:ff:62:a3:21:a5:ab:c9:9d:1f:12:c1:98:b6:
50:54:15:78:fb:11:bd:9d:8c:f3:c1:2c:e1:b5:b5:0e:f6:0f:
5c:a4:7f:ff:a8:c4:ba:4a:4e:78:66:a4:6a:df:40:ae:d8:fd:
2d:ab:b8:e4:29:a3:33:83:22:79:2e:8c:59:a3:45:67:c1:b8:
b5:bc:00:36:37:80:d7:e7:c2:fa:01:f9:f2:dc:4d:53:64:df:
28:b6:b8:76:4c:86:61:04:49:85:e2:94:c1:b7:f8:e8:7c:34:
23:88:87:ac:c1:2b:05:88:e5:90:78:74:94:ff:a2:11:22:ce:
ca:72:71:b9:05:30:c3:7b:d8:f5:b3:0e:04:9f:12:55:11:0c:
58:75:43:fb:4e:b7:7d:83:9e:fc:00:d7:70:90:91:6d:76:ce:
2a:f6:3b:56:84:82:fa:e5:f7:73:77:ca:b5:ae:9f:50:d8:31:
b7:f0:5f:12:af:0e:65:9c:7b:ae:0c:75:be:5e:4f:30:d1:b0:
84:dd:00:2c:a6:06:67:1c:8d:fb:21:5d:0c:86:87:ce:8d:97:
de:05:9a:f9:83:77:d1:88:51:99:63:9b:50:76:91:21:e4:80:
5b:12:76:ae:fd:5e:da:d7:ab:b3:eb:41:0b:a6:4e:1e:c4:fb:
97:e1:8c:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCM80YVyO4lK6Ofgrt615/GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk
ZjM1NGEwHhcNMjYwOTEwMjAxMjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzU2ZTZlZGU1Yzg2NjlhYjZiNmExOGEwNDhiODFmMGQ0NTY0MGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWbNPWVVDlkBd/5I3PhQfjbhV5tx
swEnfRfsOU5Ee638p44YkhpBjS1zHKtzIzquYKXM/twRspMeQdqZbpbBg1/iIO20
e+Zlgc6z2GJsZbk/Uam4ReOrDCXPuyFCjX+v8mQCEib/g5dKLzdaCOfcBlbqDK1G
3OZBxd0FSSh4HDGUcG6vZNg6vE2MND0erx4XQ36BFwU5cLwfytipj2hR/aRgUFwM
5Tnjy4qtcw+l1mSaXHes25XbwmPmArxgGvFQz99w/v3MihBRKwl3ljEzpjDN0Rkl
WWHllFLxFrWflc+8JFfOgL7tPOfXjpp7V/H29ZP4ES2JOV3K+oT3oe81yQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCNW5u3lyGaatrahigSLgfDUVkD5MB8GA1UdIwQY
MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt
MjBlMTk3ODBjYjJlLzEvSTFibTdlWElacHEydHFHS0JJdUI4TlJXUVBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl
LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiYyMA0G
CSqGSIb3DQEBCwUAA4IBAQBaBa8Kvf9ioyGlq8mdHxLBmLZQVBV4+xG9nYzzwSzh
tbUO9g9cpH//qMS6Sk54ZqRq30Cu2P0tq7jkKaMzgyJ5LoxZo0Vnwbi1vAA2N4DX
58L6Afny3E1TZN8otrh2TIZhBEmF4pTBt/jofDQjiIeswSsFiOWQeHSU/6IRIs7K
cnG5BTDDe9j1sw4EnxJVEQxYdUP7Trd9g578ANdwkJFtds4q9jtWhIL65fdzd8q1
rp9Q2DG38F8Srw5lnHuuDHW+Xk8w0bCE3QAspgZnHI37IV0MhofOjZfeBZr5g3fR
iFGZY5tQdpEh5IBbEnau/V7a16uz60ELpk4exPuX4YwB
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:38:56 2026 by rpki-client