Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/IOcF50Y84C4oKw5VOWTp952lF7M.roa
File: IOcF50Y84C4oKw5VOWTp952lF7M.roa (raw, json)
Hash identifier: CZcs5hE+0oCeK7HT7IK0YGkLS5J2tvkXaJDHUf2w8IA=
Subject key identifier: 20:E7:05:E7:46:3C:E0:2E:28:2B:0E:55:39:64:E9:F7:9D:A5:17:B3
Certificate issuer: /CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4
Certificate serial: 01A047133DCCFE165401B1436F24C31CAE1D
Authority key identifier: 7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/IOcF50Y84C4oKw5VOWTp952lF7M.roa
Signing time: Fri 28 Aug 2026 06:33:58 +0000
ROA not before: Fri 28 Aug 2026 06:33:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54113
IP address blocks: 185.175.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:13:3d:cc:fe:16:54:01:b1:43:6f:24:c3:1c:ae:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4
Validity
Not Before: Aug 28 06:33:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20e705e7463ce02e282b0e553964e9f79da517b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c0:1d:b6:9a:e8:aa:a0:0a:3a:3b:90:1c:0b:
a5:9e:1b:17:67:1d:08:6d:e2:0a:0f:3e:a7:09:02:
f2:17:63:d3:dd:cd:43:c1:6b:66:90:14:9d:29:94:
d8:7b:78:af:ca:ca:e5:e9:85:bf:7c:8a:1f:b6:55:
41:2a:3b:b6:07:40:aa:25:f4:51:ba:d6:fa:76:bf:
a7:f4:ec:89:06:0b:23:5d:ec:7b:5a:a5:e1:5e:8b:
2c:70:45:0c:03:39:0d:57:9c:fe:3f:08:e4:a8:0c:
bd:4d:79:38:58:c5:23:4e:d7:15:0b:d7:d3:1f:a0:
9a:2e:81:c2:e6:ca:3c:75:7f:76:25:24:a4:16:0d:
a8:ea:bc:45:dd:36:17:eb:12:d8:b0:3e:22:d9:32:
90:95:76:66:4f:61:7a:16:65:d7:e4:cc:5d:ff:dd:
5a:47:67:1f:05:84:41:cb:e7:10:6b:9b:79:2e:f5:
36:17:a1:ae:81:07:79:9a:c0:05:5e:63:cf:a2:b9:
81:5e:4e:d2:71:12:15:16:04:06:ca:79:17:48:b0:
4a:a3:b1:95:f3:4b:a5:3d:d4:82:e6:12:11:4c:d6:
83:0e:db:3d:9b:b9:c3:ae:4b:fd:5b:64:01:4a:ae:
94:f4:b8:35:37:de:41:a4:7e:1d:61:0b:ac:c0:4a:
e9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E7:05:E7:46:3C:E0:2E:28:2B:0E:55:39:64:E9:F7:9D:A5:17:B3
X509v3 Authority Key Identifier:
keyid:7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/IOcF50Y84C4oKw5VOWTp952lF7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.194.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:33:ee:e0:c7:5a:b0:6a:0a:7e:4a:89:1f:3a:a1:4b:65:6b:
16:65:9b:23:56:3f:60:dc:ea:18:bc:f2:3d:30:a9:5e:63:ed:
09:6f:54:2e:dd:34:09:35:35:ac:da:7a:12:f0:61:fe:89:c4:
4a:2c:f2:87:35:3d:e3:bb:44:35:e9:31:eb:f1:d6:35:ff:92:
de:0c:11:52:a4:9e:c6:72:c2:e6:06:cc:63:5f:a5:3a:15:5e:
df:8e:05:64:b2:18:45:42:25:9f:02:6a:72:26:fe:b7:b0:a7:
03:d6:9b:74:03:c2:94:a1:29:49:30:a9:17:19:db:a9:e3:fa:
c2:b5:f9:b4:29:89:b5:65:a9:f4:f9:05:f6:f3:6d:0e:31:7d:
63:92:2a:b6:6a:7d:2a:5f:8c:7e:cc:49:e6:1d:c9:63:0a:d8:
eb:23:62:80:c1:f1:01:a0:0c:eb:2a:74:ca:39:b0:4f:b7:ec:
c9:50:53:ba:19:f6:0f:5e:25:06:c6:92:6a:d9:88:60:85:88:
1b:2f:10:ef:87:e8:69:e5:d7:0f:8d:83:d1:2f:27:e9:89:b5:
46:88:f9:9e:a1:8c:8a:c7:01:d8:18:a8:71:00:61:06:e3:0c:
d1:54:9c:11:94:23:d2:96:46:95:d8:b9:b1:ab:ba:3b:20:bb:
cc:38:81:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBHEz3M/hZUAbFDbyTDHK4dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmOWI0Y2ZkYzliMGQ5ZTNjMzFlMGViYjgxZTZmMWIxY2Ji
ZGM5ZTQwHhcNMjYwODI4MDYzMzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGU3MDVlNzQ2M2NlMDJlMjgyYjBlNTUzOTY0ZTlmNzlkYTUxN2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sAdtproqqAKOjuQHAulnhsXZx0I
beIKDz6nCQLyF2PT3c1DwWtmkBSdKZTYe3ivysrl6YW/fIoftlVBKju2B0CqJfRR
utb6dr+n9OyJBgsjXex7WqXhXosscEUMAzkNV5z+PwjkqAy9TXk4WMUjTtcVC9fT
H6CaLoHC5so8dX92JSSkFg2o6rxF3TYX6xLYsD4i2TKQlXZmT2F6FmXX5Mxd/91a
R2cfBYRBy+cQa5t5LvU2F6GugQd5msAFXmPPormBXk7ScRIVFgQGynkXSLBKo7GV
80ulPdSC5hIRTNaDDts9m7nDrkv9W2QBSq6U9Lg1N95BpH4dYQuswErp4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCDnBedGPOAuKCsOVTlk6fedpRezMB8GA1UdIwQY
MBaAFH+bTP3JsNnjwx4Ou4Hm8bHLvcnkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjV0TV9jbXcyZVBESGc2N2dlYnhzY3U5eWVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84MjQ2ZWItODQ2OS00MmRmLWEwOGYt
OTBjNDIxZjU1YWRiLzEvSU9jRjUwWTg0QzRvS3c1Vk9XVHA5NTJsRjdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi84MjQ2ZWItODQ2OS00MmRmLWEwOGYtOTBjNDIxZjU1YWRi
LzEvZjV0TV9jbXcyZVBESGc2N2dlYnhzY3U5eWVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAua/CMA0G
CSqGSIb3DQEBCwUAA4IBAQAtM+7gx1qwagp+SokfOqFLZWsWZZsjVj9g3OoYvPI9
MKleY+0Jb1Qu3TQJNTWs2noS8GH+icRKLPKHNT3ju0Q16THr8dY1/5LeDBFSpJ7G
csLmBsxjX6U6FV7fjgVkshhFQiWfAmpyJv63sKcD1pt0A8KUoSlJMKkXGdup4/rC
tfm0KYm1Zan0+QX2820OMX1jkiq2an0qX4x+zEnmHcljCtjrI2KAwfEBoAzrKnTK
ObBPt+zJUFO6GfYPXiUGxpJq2YhghYgbLxDvh+hp5dcPjYPRLyfpibVGiPmeoYyK
xwHYGKhxAGEG4wzRVJwRlCPSlkaV2Lmxq7o7ILvMOIEX
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:50:37 2026 by rpki-client