Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/IcJ3NkApy3ZuH6zT14y3NRctQTs.roa
File: IcJ3NkApy3ZuH6zT14y3NRctQTs.roa (raw, json)
Hash identifier: YF8uwCi6VEOuzkntI7vmvok4914x30Fr6OxRnIaMfhE=
Subject key identifier: 21:C2:77:36:40:29:CB:76:6E:1F:AC:D3:D7:8C:B7:35:17:2D:41:3B
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 019EBB5F19785A320F35F17BEBFC015AA012
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/IcJ3NkApy3ZuH6zT14y3NRctQTs.roa
Signing time: Fri 12 Jun 2026 10:27:12 +0000
ROA not before: Fri 12 Jun 2026 10:27:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203993
IP address blocks: 185.54.92.0/23 maxlen: 23
2a00:8642::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:5f:19:78:5a:32:0f:35:f1:7b:eb:fc:01:5a:a0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Jun 12 10:27:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21c277364029cb766e1facd3d78cb735172d413b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:36:78:04:19:6b:4c:66:ad:b4:27:52:19:e4:
ff:36:5f:62:6f:ed:57:8d:d4:89:cd:ac:55:27:3a:
7f:99:6a:c9:9a:a0:6c:b3:98:7a:a2:40:e3:4a:70:
93:e2:b7:d1:1d:9c:a8:85:e1:bd:b5:a9:9d:34:d1:
ed:02:30:df:6b:1c:ce:44:13:a6:c4:e6:8d:5b:01:
6a:f6:21:a1:68:df:0e:6c:92:4b:b9:e9:52:9f:e4:
d8:75:64:4e:e2:f5:02:e6:5c:62:9c:8c:91:7d:99:
50:80:f7:24:e7:ac:ad:73:ba:25:3d:dd:70:47:c5:
9f:59:5a:39:0c:ef:54:d8:27:a5:3a:84:fa:70:ef:
5c:8e:bf:cf:5c:8d:31:71:6b:6c:08:04:d8:24:3b:
52:ee:38:76:8f:dd:58:b5:d2:8e:d7:9d:62:7e:66:
e8:0e:19:b6:67:8c:b7:9b:4a:2f:f4:e2:35:9f:b1:
4d:59:5d:1c:fd:89:05:6a:57:8d:3f:12:4f:7e:06:
91:ff:26:ea:72:d1:77:ca:23:22:f3:0a:1c:d0:b3:
8a:a7:8d:f7:1b:a0:69:7c:30:50:eb:b7:75:12:a0:
ba:fa:fd:d5:26:d0:ce:63:d1:52:0f:5a:2a:14:4f:
a0:fa:c4:76:f9:7f:f8:fa:a6:7d:56:8f:c0:79:3c:
48:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C2:77:36:40:29:CB:76:6E:1F:AC:D3:D7:8C:B7:35:17:2D:41:3B
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/IcJ3NkApy3ZuH6zT14y3NRctQTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.92.0/23
IPv6:
2a00:8642::/32
Signature Algorithm: sha256WithRSAEncryption
54:32:4a:e5:a9:56:23:da:c2:0a:24:04:b5:ee:e7:5c:16:19:
87:f6:15:f3:93:4b:99:eb:22:89:c6:22:0f:40:cc:11:57:7e:
30:b1:b6:08:41:bc:a3:9d:bc:70:7f:13:8a:18:0b:76:63:81:
9d:b5:b5:1c:ad:5e:d7:b8:0a:fa:bc:71:33:91:6d:b1:c3:02:
51:dd:fc:7c:7f:dc:07:aa:98:9d:7c:68:62:fc:48:93:15:9c:
b1:a4:f4:22:86:7e:53:3c:02:e2:2e:f1:df:e0:d5:13:49:76:
65:a1:e2:73:1c:ec:41:f4:33:97:8f:64:9a:99:6a:50:76:63:
65:d6:6f:a1:95:68:c9:fc:47:99:a7:0a:24:2e:30:1a:ad:4c:
e2:3c:1a:58:bf:1c:2a:51:57:51:2f:aa:1d:3d:5b:c1:81:a1:
be:c9:b2:b5:f5:c3:2d:1a:4e:9d:63:ed:cb:d5:40:8a:c3:91:
c4:65:d1:a3:81:16:d6:e4:e6:c6:47:b4:38:8d:98:88:53:8f:
72:e1:a2:9e:1c:20:db:aa:a0:84:8f:32:b6:98:ea:c4:74:90:
b4:be:8e:5c:29:be:c9:35:52:27:fb:5a:0e:e3:3d:f7:28:58:
09:7d:62:d8:9c:56:26:e8:ef:7a:69:db:be:0d:69:0b:ad:d2:
31:2a:f4:11
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ67Xxl4WjIPNfF76/wBWqASMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MGIyODNhMDUxMzk0MGQ1MjBhNjgwYjhiM2QxNGRiYzM2
Nzc3MGQwHhcNMjYwNjEyMTAyNzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWMyNzczNjQwMjljYjc2NmUxZmFjZDNkNzhjYjczNTE3MmQ0MTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojZ4BBlrTGattCdSGeT/Nl9ib+1X
jdSJzaxVJzp/mWrJmqBss5h6okDjSnCT4rfRHZyoheG9tamdNNHtAjDfaxzORBOm
xOaNWwFq9iGhaN8ObJJLuelSn+TYdWRO4vUC5lxinIyRfZlQgPck56ytc7olPd1w
R8WfWVo5DO9U2CelOoT6cO9cjr/PXI0xcWtsCATYJDtS7jh2j91YtdKO151ifmbo
Dhm2Z4y3m0ov9OI1n7FNWV0c/YkFaleNPxJPfgaR/ybqctF3yiMi8woc0LOKp433
G6BpfDBQ67d1EqC6+v3VJtDOY9FSD1oqFE+g+sR2+X/4+qZ9Vo/AeTxIJQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCHCdzZAKct2bh+s09eMtzUXLUE7MB8GA1UdIwQY
MBaAFDgLKDoFE5QNUgpoC4s9FNvDZ3cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEt
Y2NmNjQ1NGJiMjRjLzEvSWNKM05rQXB5M1p1SDZ6VDE0eTNOUmN0UVRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEtY2NmNjQ1NGJiMjRj
LzEvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuTZcMA0E
AgACMAcDBQAqAIZCMA0GCSqGSIb3DQEBCwUAA4IBAQBUMkrlqVYj2sIKJAS17udc
FhmH9hXzk0uZ6yKJxiIPQMwRV34wsbYIQbyjnbxwfxOKGAt2Y4GdtbUcrV7XuAr6
vHEzkW2xwwJR3fx8f9wHqpidfGhi/EiTFZyxpPQihn5TPALiLvHf4NUTSXZloeJz
HOxB9DOXj2SamWpQdmNl1m+hlWjJ/EeZpwokLjAarUziPBpYvxwqUVdRL6odPVvB
gaG+ybK19cMtGk6dY+3L1UCKw5HEZdGjgRbW5ObGR7Q4jZiIU49y4aKeHCDbqqCE
jzK2mOrEdJC0vo5cKb7JNVIn+1oO4z33KFgJfWLYnFYm6O96adu+DWkLrdIxKvQR
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:28:31 2026 by rpki-client