Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/Iq0arkDI7mc72j_5AL0xqddSDPk.roa
File: Iq0arkDI7mc72j_5AL0xqddSDPk.roa (raw, json)
Hash identifier: 9GguSUWoRoJ62NIzTT6HHSv216zj+q9bcvhXn7X5CaA=
Subject key identifier: 22:AD:1A:AE:40:C8:EE:67:3B:DA:3F:F9:00:BD:31:A9:D7:52:0C:F9
Certificate issuer: /CN=1fafca53ac54e57e52c010138a212794c670e0cd
Certificate serial: 01A0C0CD2D624DED242E7F5FFB8785A59ED6
Authority key identifier: 1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/Iq0arkDI7mc72j_5AL0xqddSDPk.roa
Signing time: Sun 20 Sep 2026 21:51:07 +0000
ROA not before: Sun 20 Sep 2026 21:51:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42724
IP address blocks: 185.50.237.0/24 maxlen: 24
185.235.77.0/24 maxlen: 24
194.169.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:cd:2d:62:4d:ed:24:2e:7f:5f:fb:87:85:a5:9e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fafca53ac54e57e52c010138a212794c670e0cd
Validity
Not Before: Sep 20 21:51:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22ad1aae40c8ee673bda3ff900bd31a9d7520cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ab:6b:7d:39:8a:20:4f:d9:09:ba:75:f4:16:
bb:66:c5:d4:89:b5:3c:e1:49:b9:03:db:43:74:81:
88:36:20:f1:26:ff:32:5a:e6:5d:43:ee:c8:19:7d:
50:1e:c5:21:fe:25:2f:95:22:7e:76:ed:4e:02:6b:
a0:e4:4a:b5:d1:54:9f:ed:64:e2:f0:0e:d5:9f:08:
8e:03:bd:00:b5:8c:1f:1e:77:91:26:de:e6:4a:0f:
6f:c8:ef:49:37:1f:7d:d6:c0:50:03:9b:2c:9c:bc:
d6:36:78:c5:5c:7a:49:60:d1:c9:2a:2c:6c:01:49:
48:16:cb:45:47:4a:1b:ec:e9:ba:0d:11:a5:e2:15:
81:0e:fa:ae:ef:9b:e9:3f:59:0e:56:9c:2a:c0:31:
f8:3c:7b:55:93:18:a2:f8:77:19:bc:f1:dd:2d:a2:
4d:42:45:b3:fe:21:b6:3f:0c:00:c0:99:75:3a:cc:
40:bf:f7:33:a4:82:96:b1:7c:5f:55:2c:95:ad:07:
4a:fe:ff:37:8b:4e:b9:10:ab:bb:6c:4e:33:ad:eb:
6e:a3:e1:1d:f9:91:da:d4:04:ce:e2:80:19:52:32:
f8:e0:ba:07:93:58:a5:ec:4f:01:95:27:6c:32:b1:
c5:5d:c1:fd:1c:16:f7:1b:98:62:f0:7e:98:11:62:
89:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AD:1A:AE:40:C8:EE:67:3B:DA:3F:F9:00:BD:31:A9:D7:52:0C:F9
X509v3 Authority Key Identifier:
keyid:1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/Iq0arkDI7mc72j_5AL0xqddSDPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.237.0/24
185.235.77.0/24
194.169.120.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:d5:9c:73:11:36:5b:2c:f2:b0:8f:bc:0d:94:e3:18:ad:8b:
8a:a8:26:90:d9:d4:77:f1:ff:f9:e2:c4:00:a5:5e:f9:50:b7:
72:3d:1d:54:f7:fb:87:85:50:ff:b4:b4:82:f9:a2:5c:61:9d:
60:3c:b4:fb:d3:09:4b:b7:42:07:90:f8:08:5b:5d:f4:08:ed:
88:93:8f:aa:44:4c:90:b5:ed:3f:8e:d9:67:a7:8b:e4:d3:4f:
b7:9e:64:e1:12:0a:cb:07:e5:ea:fb:bb:09:b1:e8:fa:71:40:
ac:fc:10:f6:f5:77:f4:33:e1:a6:5c:7b:8f:ad:39:14:f8:2b:
77:06:b0:fe:7a:c1:ed:7c:c7:9a:fe:0b:18:f4:a7:dc:7e:90:
4f:72:41:ba:43:38:39:a5:db:2f:73:c0:59:3f:36:bd:16:70:
7e:1b:99:a8:24:e8:17:aa:d1:04:e2:8c:ef:bf:f6:9b:55:db:
9a:ca:42:12:bd:da:13:1c:53:1a:0e:96:fd:dd:54:40:d6:4b:
25:ac:00:08:5d:9e:5a:80:24:cf:6e:ab:e3:cb:b1:9d:2a:fb:
03:54:a6:75:d8:57:de:7c:7f:04:2a:14:03:b8:5a:c2:2b:63:
c1:4f:00:a2:fa:77:af:8c:1d:71:3c:43:38:ff:b4:d1:33:00:
3e:0f:25:15
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaDAzS1iTe0kLn9f+4eFpZ7WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYWZjYTUzYWM1NGU1N2U1MmMwMTAxMzhhMjEyNzk0YzY3
MGUwY2QwHhcNMjYwOTIwMjE1MTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmFkMWFhZTQwYzhlZTY3M2JkYTNmZjkwMGJkMzFhOWQ3NTIwY2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36trfTmKIE/ZCbp19Ba7ZsXUibU8
4Um5A9tDdIGINiDxJv8yWuZdQ+7IGX1QHsUh/iUvlSJ+du1OAmug5Eq10VSf7WTi
8A7VnwiOA70AtYwfHneRJt7mSg9vyO9JNx991sBQA5ssnLzWNnjFXHpJYNHJKixs
AUlIFstFR0ob7Om6DRGl4hWBDvqu75vpP1kOVpwqwDH4PHtVkxii+HcZvPHdLaJN
QkWz/iG2PwwAwJl1OsxAv/czpIKWsXxfVSyVrQdK/v83i065EKu7bE4zretuo+Ed
+ZHa1ATO4oAZUjL44LoHk1il7E8BlSdsMrHFXcH9HBb3G5hi8H6YEWKJpwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCKtGq5AyO5nO9o/+QC9ManXUgz5MB8GA1UdIwQY
MBaAFB+vylOsVOV+UsAQE4ohJ5TGcODNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDZfS1U2eFU1WDVTd0JBVGlpRW5sTVp3NE0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83NjhlMjktMjRjNS00ZmE3LTliMzYt
Yzk5NWQyZWM5ZTk0LzEvSXEwYXJrREk3bWM3MmpfNUFMMHhxZGRTRFBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83NjhlMjktMjRjNS00ZmE3LTliMzYtYzk5NWQyZWM5ZTk0
LzEvSDZfS1U2eFU1WDVTd0JBVGlpRW5sTVp3NE0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuTLtAwQA
uetNAwQAwql4MA0GCSqGSIb3DQEBCwUAA4IBAQCq1ZxzETZbLPKwj7wNlOMYrYuK
qCaQ2dR38f/54sQApV75ULdyPR1U9/uHhVD/tLSC+aJcYZ1gPLT70wlLt0IHkPgI
W130CO2Ik4+qREyQte0/jtlnp4vk00+3nmThEgrLB+Xq+7sJsej6cUCs/BD29Xf0
M+GmXHuPrTkU+Ct3BrD+esHtfMea/gsY9KfcfpBPckG6Qzg5pdsvc8BZPza9FnB+
G5moJOgXqtEE4ozvv/abVduaykISvdoTHFMaDpb93VRA1kslrAAIXZ5agCTPbqvj
y7GdKvsDVKZ12FfefH8EKhQDuFrCK2PBTwCi+nevjB1xPEM4/7TRMwA+DyUV
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:49:40 2026 by rpki-client