Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/slmMvnIFywHDgwV-wFbQ9dx_MgM.roa
File: slmMvnIFywHDgwV-wFbQ9dx_MgM.roa (raw, json)
Hash identifier: 14u6qAwoGY/eFFNW93mUvg1QcjQ1Oh3qZtQw1ddD8zw=
Subject key identifier: B2:59:8C:BE:72:05:CB:01:C3:83:05:7E:C0:56:D0:F5:DC:7F:32:03
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 019FA7A484C44BAC766A2B5932B7E52E869C
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/slmMvnIFywHDgwV-wFbQ9dx_MgM.roa
Signing time: Tue 28 Jul 2026 07:33:24 +0000
ROA not before: Tue 28 Jul 2026 07:33:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 80.86.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:a4:84:c4:4b:ac:76:6a:2b:59:32:b7:e5:2e:86:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Jul 28 07:33:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2598cbe7205cb01c383057ec056d0f5dc7f3203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:17:20:2b:6e:f5:0e:e5:29:68:22:6d:fc:98:
c0:77:98:a3:c3:48:95:29:58:68:ae:7f:8b:df:45:
4a:c0:b6:b7:13:58:40:31:ae:b4:3d:74:73:c6:f9:
eb:35:24:f8:bc:87:77:e9:5e:15:05:03:5d:c3:37:
8b:b5:94:7d:bf:a0:db:15:f3:14:dd:90:06:59:b4:
13:09:41:8e:04:5b:08:06:36:59:6f:1d:6b:51:33:
df:c4:a4:5a:2f:44:d5:f3:f3:1e:e3:32:13:41:d5:
ec:e2:d0:6a:a2:7b:e9:19:e2:19:1c:cb:ee:5d:32:
ed:8c:1c:0f:54:a1:e5:c1:73:e4:7b:ec:12:d9:43:
53:13:73:67:f9:56:6f:1f:db:a0:a1:9c:fb:10:6c:
a9:ed:ce:66:18:3c:04:40:d6:f3:bc:c2:35:47:0b:
da:1e:3d:0a:90:6b:44:e2:16:28:36:46:23:c6:3c:
4f:69:12:5c:c3:b1:f7:ae:f9:7f:8d:8f:ac:3d:6e:
31:3d:6b:8c:05:64:32:0e:70:e3:89:01:66:d9:75:
7e:64:b9:1d:12:91:ad:cd:2d:91:8f:45:92:ca:5a:
5a:d6:f1:c8:db:43:e4:6e:9d:1c:c1:ff:66:5d:75:
c6:ee:2d:a4:03:7f:45:ef:72:02:3f:fc:b3:ef:f6:
a8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:59:8C:BE:72:05:CB:01:C3:83:05:7E:C0:56:D0:F5:DC:7F:32:03
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/slmMvnIFywHDgwV-wFbQ9dx_MgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.208.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:0c:c6:df:c6:9a:3c:3a:20:b5:ad:2c:28:46:ad:f9:c2:02:
35:4d:db:52:e9:2e:3d:8e:97:b9:81:07:aa:bb:dd:40:0c:53:
d8:3a:7f:65:1a:34:96:2b:c7:15:42:8b:36:81:35:37:16:f5:
58:be:ad:76:ed:4d:18:ab:38:63:f4:1f:84:0d:ef:af:81:13:
97:08:6d:08:e5:09:86:dc:ab:f7:89:cd:af:87:f5:be:cb:5c:
c1:88:8f:4c:90:c2:f2:28:3a:f4:ce:6c:88:55:8d:24:41:2d:
f5:dd:56:dd:18:39:c8:28:c1:ef:5b:2f:ac:ea:24:31:69:36:
e2:0a:27:6b:3d:46:14:1f:17:80:3a:1a:65:02:b1:01:3b:5f:
45:15:c0:3d:80:74:f4:0d:d0:ec:0a:ec:35:41:11:7c:26:70:
ea:88:93:e0:1c:6c:5f:aa:be:a5:6f:c6:63:22:91:cb:27:64:
05:a1:e6:b4:cb:c9:14:1a:35:b5:b9:e4:db:7c:f9:15:c8:73:
5b:af:5d:86:b1:49:2e:99:62:5f:a7:a2:34:af:72:ca:0e:91:
03:29:07:d7:ec:d3:87:0b:36:87:25:86:84:49:e9:74:25:a7:
eb:a6:1d:fe:6e:67:59:0a:d8:ec:4d:75:ba:76:ba:7b:ec:4e:
2d:aa:c3:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+npITES6x2aitZMrflLoacMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMjI2ZjY3MWMyNjQzYTVjMDQ4NDYyNjRmZWUwMWY5NDNh
YzJiZmMwHhcNMjYwNzI4MDczMzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjU5OGNiZTcyMDVjYjAxYzM4MzA1N2VjMDU2ZDBmNWRjN2YzMjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxcgK271DuUpaCJt/JjAd5ijw0iV
KVhorn+L30VKwLa3E1hAMa60PXRzxvnrNST4vId36V4VBQNdwzeLtZR9v6DbFfMU
3ZAGWbQTCUGOBFsIBjZZbx1rUTPfxKRaL0TV8/Me4zITQdXs4tBqonvpGeIZHMvu
XTLtjBwPVKHlwXPke+wS2UNTE3Nn+VZvH9ugoZz7EGyp7c5mGDwEQNbzvMI1Rwva
Hj0KkGtE4hYoNkYjxjxPaRJcw7H3rvl/jY+sPW4xPWuMBWQyDnDjiQFm2XV+ZLkd
EpGtzS2Rj0WSylpa1vHI20Pkbp0cwf9mXXXG7i2kA39F73ICP/yz7/aoqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLJZjL5yBcsBw4MFfsBW0PXcfzIDMB8GA1UdIwQY
MBaAFFIib2ccJkOlwEhGJk/uAflDrCv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgt
YTEyZGUzYTMzNTUzLzEvc2xtTXZuSUZ5d0hEZ3dWLXdGYlE5ZHhfTWdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgtYTEyZGUzYTMzNTUz
LzEvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUFbQMA0G
CSqGSIb3DQEBCwUAA4IBAQALDMbfxpo8OiC1rSwoRq35wgI1TdtS6S49jpe5gQeq
u91ADFPYOn9lGjSWK8cVQos2gTU3FvVYvq127U0Yqzhj9B+EDe+vgROXCG0I5QmG
3Kv3ic2vh/W+y1zBiI9MkMLyKDr0zmyIVY0kQS313VbdGDnIKMHvWy+s6iQxaTbi
CidrPUYUHxeAOhplArEBO19FFcA9gHT0DdDsCuw1QRF8JnDqiJPgHGxfqr6lb8Zj
IpHLJ2QFoea0y8kUGjW1ueTbfPkVyHNbr12GsUkumWJfp6I0r3LKDpEDKQfX7NOH
CzaHJYaESel0Jafrph3+bmdZCtjsTXW6drp77E4tqsPc
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:48:40 2026 by rpki-client