Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/nYiu6oOW0if5nPqD1uAIjhy7bwU.roa
File: nYiu6oOW0if5nPqD1uAIjhy7bwU.roa (raw, json)
Hash identifier: aV32bg43L5hMCnFWVWW9c3F2Uf1RkZZVycXuhNm++yY=
Subject key identifier: 9D:88:AE:EA:83:96:D2:27:F9:9C:FA:83:D6:E0:08:8E:1C:BB:6F:05
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019FA3C3EE3B2F204D6D1394632D41D0E15E
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/nYiu6oOW0if5nPqD1uAIjhy7bwU.roa
Signing time: Mon 27 Jul 2026 13:29:14 +0000
ROA not before: Mon 27 Jul 2026 13:29:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29262
IP address blocks: 93.190.14.0/24 maxlen: 24
185.85.189.0/24 maxlen: 24
185.85.190.0/24 maxlen: 24
185.85.237.0/24 maxlen: 24
185.85.239.0/24 maxlen: 24
185.86.5.0/24 maxlen: 24
185.98.63.0/24 maxlen: 24
185.119.80.0/24 maxlen: 24
185.249.200.0/24 maxlen: 24
185.249.201.0/24 maxlen: 24
185.249.202.0/24 maxlen: 24
185.249.203.0/24 maxlen: 24
2a0b:6780::/29 maxlen: 29
2a0c:46c0::/29 maxlen: 29
2a0c:67c0::/29 maxlen: 29
2a10:8b00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:c3:ee:3b:2f:20:4d:6d:13:94:63:2d:41:d0:e1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jul 27 13:29:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d88aeea8396d227f99cfa83d6e0088e1cbb6f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:02:79:ac:31:ef:9c:24:d4:54:2a:91:62:
75:3d:44:e4:a9:3e:9a:50:18:34:d4:56:6b:a5:5d:
c4:23:f1:9a:d0:fc:26:3d:a0:9d:a9:99:de:25:9e:
d1:32:8f:eb:fb:64:f3:5b:9d:34:25:e9:69:e1:d8:
57:53:62:de:08:eb:21:a5:6e:e5:64:fb:c3:e7:da:
5f:14:e7:25:f3:a3:d8:20:02:68:53:99:44:25:79:
96:a0:4c:c5:51:89:de:3e:fc:74:4e:55:36:58:28:
74:f8:5c:92:c1:aa:49:8f:be:db:65:a7:48:5d:8a:
0a:a6:a0:cb:9c:19:77:7c:26:fc:3d:b3:b0:af:db:
d4:c9:49:f4:0b:3f:f5:0a:25:a8:95:a6:d9:5e:02:
8d:7c:fd:be:20:01:33:b3:e8:d8:de:ed:68:5a:87:
4c:a7:b1:2f:21:35:77:80:87:7b:18:82:ad:ae:46:
24:08:6f:ba:7e:76:90:13:81:87:eb:c4:e1:e7:e1:
17:6b:13:58:c4:43:0f:2e:82:52:fa:b0:db:e4:b5:
78:95:72:30:5a:da:53:0c:cf:ab:49:5d:f7:05:3c:
fe:0a:9c:68:61:b6:a2:c2:4d:8f:36:8e:d5:27:f4:
4a:3f:3f:7d:10:e8:ce:5c:5f:7c:44:3e:d7:81:5d:
a3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:88:AE:EA:83:96:D2:27:F9:9C:FA:83:D6:E0:08:8E:1C:BB:6F:05
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/nYiu6oOW0if5nPqD1uAIjhy7bwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.14.0/24
185.85.189.0-185.85.190.255
185.85.237.0/24
185.85.239.0/24
185.86.5.0/24
185.98.63.0/24
185.119.80.0/24
185.249.200.0/22
IPv6:
2a0b:6780::/29
2a0c:46c0::/29
2a0c:67c0::/29
2a10:8b00::/29
Signature Algorithm: sha256WithRSAEncryption
53:3b:1a:2e:73:8b:a3:b7:f4:89:fe:34:3f:0b:ee:3e:24:07:
64:9a:11:37:15:a9:74:e5:23:2d:99:05:e3:e2:fd:27:2e:62:
43:27:44:2b:36:3e:16:97:a3:26:75:3f:90:35:b4:e5:f0:b1:
a8:f0:b3:dc:b6:a7:86:e2:8d:cd:e9:2a:98:82:d7:48:bd:5e:
8d:0c:79:af:20:ca:ee:2c:cf:76:f8:bb:5b:97:dd:d2:cd:d2:
7f:ab:f5:54:5c:b8:5f:fe:bd:5c:38:c8:16:a7:e4:59:e8:6b:
dd:70:75:23:98:5f:c3:df:1d:af:a6:dd:4d:c1:fc:47:46:60:
f9:b9:32:3e:8f:c4:e8:38:cb:1f:e1:a3:71:b3:d9:a5:c5:76:
3e:b5:77:70:20:bc:d9:11:11:b2:bc:41:62:d6:dd:78:42:63:
f8:60:c4:27:51:4f:b1:67:dc:60:dc:b4:17:71:53:6c:b5:23:
ef:1a:9e:70:54:aa:87:e8:67:3d:0e:ee:37:3d:bf:d7:d8:7e:
c2:55:05:c8:ee:a0:fd:61:2d:79:93:12:2c:46:d3:92:d1:71:
a9:25:0b:4c:b8:b2:fe:d1:f4:f6:61:d0:6d:1e:75:da:0b:b8:
a3:b5:54:21:56:a6:85:e2:ab:3d:60:f8:d3:95:70:26:3a:23:
fc:27:a4:7a
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgISAZ+jw+47LyBNbROUYy1B0OFeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjYwNzI3MTMyOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDg4YWVlYTgzOTZkMjI3Zjk5Y2ZhODNkNmUwMDg4ZTFjYmI2ZjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn8Ceawx75wk1FQqkWJ1PUTkqT6a
UBg01FZrpV3EI/Ga0PwmPaCdqZneJZ7RMo/r+2TzW500Jelp4dhXU2LeCOshpW7l
ZPvD59pfFOcl86PYIAJoU5lEJXmWoEzFUYnePvx0TlU2WCh0+FySwapJj77bZadI
XYoKpqDLnBl3fCb8PbOwr9vUyUn0Cz/1CiWolabZXgKNfP2+IAEzs+jY3u1oWodM
p7EvITV3gId7GIKtrkYkCG+6fnaQE4GH68Th5+EXaxNYxEMPLoJS+rDb5LV4lXIw
WtpTDM+rSV33BTz+CpxoYbaiwk2PNo7VJ/RKPz99EOjOXF98RD7XgV2j0QIDAQAB
o4ICXzCCAlswHQYDVR0OBBYEFJ2IruqDltIn+Zz6g9bgCI4cu28FMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvbllpdTZvT1cwaWY1blBxRDF1QUlqaHk3YndVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDA+BAIAATA4AwQAXb4OMAwD
BAC5Vb0DBAC5Vb4DBAC5Ve0DBAC5Ve8DBAC5VgUDBAC5Yj8DBAC5d1ADBAK5+cgw
IgQCAAIwHAMFAyoLZ4ADBQMqDEbAAwUDKgxnwAMFAyoQiwAwDQYJKoZIhvcNAQEL
BQADggEBAFM7Gi5zi6O39In+ND8L7j4kB2SaETcVqXTlIy2ZBePi/ScuYkMnRCs2
PhaXoyZ1P5A1tOXwsajws9y2p4bijc3pKpiC10i9Xo0Mea8gyu4sz3b4u1uX3dLN
0n+r9VRcuF/+vVw4yBan5Fnoa91wdSOYX8PfHa+m3U3B/EdGYPm5Mj6PxOg4yx/h
o3Gz2aXFdj61d3AgvNkREbK8QWLW3XhCY/hgxCdRT7Fn3GDctBdxU2y1I+8annBU
qofoZz0O7jc9v9fYfsJVBcjuoP1hLXmTEixG05LRcaklC0y4sv7R9PZh0G0eddoL
uKO1VCFWpoXiqz1g+NOVcCY6I/wnpHo=
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:36:48 2026 by rpki-client