Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/KS3gSsDRatqoleacB_dktcBbY2M.roa
File: KS3gSsDRatqoleacB_dktcBbY2M.roa (raw, json)
Hash identifier: WbFmHVs4aB8N9NQu1Q9tJalzkeMamudIYW/ZZUkdB1k=
Subject key identifier: 29:2D:E0:4A:C0:D1:6A:DA:A8:95:E6:9C:07:F7:64:B5:C0:5B:63:63
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 019E2FCFEF9CD2C4B7B0CFC8722B2C9E8BF2
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/KS3gSsDRatqoleacB_dktcBbY2M.roa
Signing time: Sat 16 May 2026 08:03:36 +0000
ROA not before: Sat 16 May 2026 08:03:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 185.16.0.0/24 maxlen: 24
193.57.231.0/24 maxlen: 24
194.165.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cf:ef:9c:d2:c4:b7:b0:cf:c8:72:2b:2c:9e:8b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: May 16 08:03:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=292de04ac0d16adaa895e69c07f764b5c05b6363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:08:6a:f9:ad:f3:fb:fc:1d:eb:dc:9b:1a:6c:
d5:43:8c:0c:bf:b9:18:47:40:99:8a:67:44:35:e2:
31:52:56:a5:72:70:86:bc:32:4b:d1:74:84:ec:36:
f3:29:9a:c1:7e:e6:1b:29:4c:cf:a7:54:92:cc:ea:
f1:db:ae:d9:15:c0:78:3f:bb:f0:6a:50:08:15:7b:
1e:96:77:97:cd:75:8a:ef:8c:9e:3d:41:4e:85:4d:
3c:66:01:54:b8:a7:9b:04:60:99:f4:60:85:11:93:
8d:2f:a3:37:a6:18:ab:59:29:d9:df:b9:85:ed:78:
3d:fe:0e:dc:3f:d6:8a:2a:6a:5e:75:97:18:6c:06:
dd:f5:1c:34:de:24:56:89:3f:bf:50:2f:b8:e4:56:
17:1e:1e:b6:49:cd:14:14:40:b4:3d:c7:33:ce:91:
c1:6e:51:28:a8:11:f7:30:0c:2c:a6:c8:a2:a4:6b:
21:ea:d5:08:32:8e:94:38:4e:ec:37:2b:b5:43:92:
70:89:2b:8e:55:13:8a:7f:78:78:b8:b8:3e:f4:b0:
87:bf:8c:4d:bd:67:b7:0b:3d:ca:a1:45:6a:b4:14:
14:1e:c6:81:63:1f:31:16:bb:c7:8d:d2:8a:52:c1:
d6:3a:66:18:e0:ff:2e:2c:53:88:ef:7f:5b:8d:3e:
b4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2D:E0:4A:C0:D1:6A:DA:A8:95:E6:9C:07:F7:64:B5:C0:5B:63:63
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/KS3gSsDRatqoleacB_dktcBbY2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.0.0/24
193.57.231.0/24
194.165.37.0/24
Signature Algorithm: sha256WithRSAEncryption
01:17:1f:e6:08:d0:36:92:1d:48:b0:c6:f2:9e:09:f7:7b:57:
8e:6d:b9:1a:04:3a:7d:65:24:2b:48:24:a3:3a:6e:57:be:1a:
6e:fd:5f:dc:05:15:cd:8e:e7:33:02:32:5e:fc:9b:d3:08:9d:
29:65:7c:d8:b7:37:ea:1a:80:2f:bd:d9:02:09:58:ab:91:ab:
3e:2c:34:67:63:fa:8c:97:59:e7:5e:8c:73:bc:8b:d3:aa:63:
35:e4:e5:cd:0f:fa:5e:7c:a6:d6:4a:9c:fe:9f:81:2c:33:ea:
94:6b:b6:6a:5e:ef:d0:c0:17:d8:0c:d1:36:3b:de:03:eb:80:
76:9a:ea:74:40:ad:1c:27:4d:35:44:1a:e8:88:15:23:c8:46:
b1:3c:51:14:ce:75:94:8c:d6:a4:b7:e0:41:d0:0b:c7:7a:8a:
b1:ee:83:64:44:26:6e:fa:08:60:84:c2:6f:07:30:58:e5:f3:
54:e8:9a:c8:30:06:eb:ed:3f:9c:f0:a2:45:0f:0f:9f:fc:d9:
d1:66:ad:7c:59:fa:3b:43:39:3c:66:90:51:c1:46:d6:d4:b7:
d4:ea:46:df:8d:31:47:dc:b2:8a:8c:e7:1a:74:9b:84:bf:3c:
25:fb:da:62:9e:2d:5d:7a:53:03:20:7e:a3:68:db:d7:7e:02:
ea:be:37:5b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ4vz++c0sS3sM/IcissnovyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NjQzOGU5ODg5Mzg5ODI5ZmE1ZjUxYjZhMjEwNzMxMDgy
ZWFjMjIwHhcNMjYwNTE2MDgwMzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTJkZTA0YWMwZDE2YWRhYTg5NWU2OWMwN2Y3NjRiNWMwNWI2MzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAhq+a3z+/wd69ybGmzVQ4wMv7kY
R0CZimdENeIxUlalcnCGvDJL0XSE7DbzKZrBfuYbKUzPp1SSzOrx267ZFcB4P7vw
alAIFXselneXzXWK74yePUFOhU08ZgFUuKebBGCZ9GCFEZONL6M3phirWSnZ37mF
7Xg9/g7cP9aKKmpedZcYbAbd9Rw03iRWiT+/UC+45FYXHh62Sc0UFEC0PcczzpHB
blEoqBH3MAwspsiipGsh6tUIMo6UOE7sNyu1Q5JwiSuOVROKf3h4uLg+9LCHv4xN
vWe3Cz3KoUVqtBQUHsaBYx8xFrvHjdKKUsHWOmYY4P8uLFOI739bjT60pQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCkt4ErA0WraqJXmnAf3ZLXAW2NjMB8GA1UdIwQY
MBaAFAhkOOmIk4mCn6X1G2ohBzEILqwiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0dRNDZZaVRpWUtmcGZVYmFpRUhNUWd1ckNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lNDlhZTctYTUxYS00NzY0LTg1Yzgt
YTc4MTBlM2ExYmViLzEvS1MzZ1NzRFJhdHFvbGVhY0JfZGt0Y0JiWTJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9lNDlhZTctYTUxYS00NzY0LTg1YzgtYTc4MTBlM2ExYmVi
LzEvQ0dRNDZZaVRpWUtmcGZVYmFpRUhNUWd1ckNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuRAAAwQA
wTnnAwQAwqUlMA0GCSqGSIb3DQEBCwUAA4IBAQABFx/mCNA2kh1IsMbyngn3e1eO
bbkaBDp9ZSQrSCSjOm5Xvhpu/V/cBRXNjuczAjJe/JvTCJ0pZXzYtzfqGoAvvdkC
CVirkas+LDRnY/qMl1nnXoxzvIvTqmM15OXND/pefKbWSpz+n4EsM+qUa7ZqXu/Q
wBfYDNE2O94D64B2mup0QK0cJ001RBroiBUjyEaxPFEUznWUjNakt+BB0AvHeoqx
7oNkRCZu+ghghMJvBzBY5fNU6JrIMAbr7T+c8KJFDw+f/NnRZq18Wfo7Qzk8ZpBR
wUbW1LfU6kbfjTFH3LKKjOcadJuEvzwl+9pini1delMDIH6jaNvXfgLqvjdb
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:38:38 2026 by rpki-client