Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/42j6rh74kZK8B4TK9TrxT-yy6qs.roa
File: 42j6rh74kZK8B4TK9TrxT-yy6qs.roa (raw, json)
Hash identifier: TpgZQPZnpYPaVp9fqt+Gp0r1j/N3bvdYSt8BYEQV4W8=
Subject key identifier: E3:68:FA:AE:1E:F8:91:92:BC:07:84:CA:F5:3A:F1:4F:EC:B2:EA:AB
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019E72633DD5C2C7E46037560379AFC9CA69
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/42j6rh74kZK8B4TK9TrxT-yy6qs.roa
Signing time: Fri 29 May 2026 06:19:27 +0000
ROA not before: Fri 29 May 2026 06:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209805
IP address blocks: 185.65.200.0/24 maxlen: 24
185.65.201.0/24 maxlen: 24
185.120.56.0/24 maxlen: 24
212.22.70.0/24 maxlen: 24
212.22.78.0/24 maxlen: 24
212.22.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:72:63:3d:d5:c2:c7:e4:60:37:56:03:79:af:c9:ca:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: May 29 06:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e368faae1ef89192bc0784caf53af14fecb2eaab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cc:4a:78:86:a4:7a:a4:53:46:da:d9:db:c9:
ad:87:40:90:a7:6e:72:8b:d7:b0:be:d9:36:9a:ec:
dc:ee:b6:b2:f8:8f:09:2c:da:4d:2a:c7:45:b8:bd:
21:9c:2e:a3:8e:5b:65:53:1f:d3:a6:95:c3:c8:68:
13:ff:6f:3d:08:cc:5d:98:c3:9e:e1:f2:25:38:52:
d6:c4:be:ec:a7:79:08:1c:ab:75:85:41:a9:3a:27:
2b:28:45:20:d7:51:7d:04:e4:e8:a8:3b:c7:26:1c:
9d:56:ad:64:90:05:13:1b:d9:96:5d:92:a1:2c:9d:
ea:c5:5d:5f:99:40:f4:af:3c:25:b7:2e:09:3c:cc:
a8:6b:7b:0b:c3:3c:7b:ec:50:8b:c7:93:61:91:1f:
34:37:2a:66:9b:04:e6:b6:e2:ad:e6:9c:99:68:92:
e5:6c:06:7c:62:bc:ea:b4:01:fb:d6:b1:38:1e:f2:
5a:d8:12:87:e1:ad:dd:85:a7:cc:c9:36:d4:7a:03:
1e:28:a3:00:96:d7:9e:15:e8:28:4f:7a:39:51:71:
ca:61:18:31:16:6f:f4:8c:cd:5b:df:39:42:ca:c0:
f9:d4:3c:44:5a:18:53:83:ca:15:a9:5f:34:1f:39:
ed:63:20:2f:20:86:e2:29:76:b7:9e:e8:4f:d4:19:
55:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:68:FA:AE:1E:F8:91:92:BC:07:84:CA:F5:3A:F1:4F:EC:B2:EA:AB
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/42j6rh74kZK8B4TK9TrxT-yy6qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.200.0/23
185.120.56.0/24
212.22.70.0/24
212.22.78.0/24
212.22.94.0/24
Signature Algorithm: sha256WithRSAEncryption
00:18:5c:7d:41:69:95:8b:17:86:b9:f4:bc:6e:6c:d6:53:33:
c2:16:f0:af:32:c1:c0:b3:41:e0:73:b7:ce:b8:cc:9e:bc:f8:
42:33:a8:aa:2a:c4:b0:82:91:41:10:5b:74:15:a5:02:9e:3a:
5b:c6:91:ec:ba:73:87:0b:c0:e4:31:4c:d0:d0:37:c2:3f:05:
4a:ec:f9:b1:d9:58:08:b5:f6:1e:c5:03:74:dc:ab:b5:58:1d:
0f:ab:82:17:45:56:6b:23:98:2a:91:e8:e1:ed:58:e5:1a:c1:
96:58:3d:13:18:e5:e7:3f:8b:5a:c8:dc:eb:94:16:aa:c3:e0:
3b:ec:42:d5:43:ff:fd:d4:9c:57:2d:7e:1b:9a:b9:31:ee:be:
41:45:b5:2e:64:9b:a9:50:b2:d2:ef:89:56:0b:51:55:fd:1e:
2d:42:10:3e:8c:7c:dc:ae:35:24:6f:63:d5:89:87:ce:09:93:
b3:f4:a9:85:6b:7b:1d:a0:8e:d3:d8:6a:2a:c2:0a:5b:8c:f3:
5c:37:cd:cf:21:75:04:a5:92:04:9d:62:d6:1f:8a:b4:7d:49:
1d:38:7f:c2:7c:a9:5e:45:4d:6e:61:ad:23:b2:72:f9:f4:ba:
00:69:76:6c:08:e9:a7:e6:2d:6f:e3:ca:64:af:35:43:ba:99:
a2:dc:a4:2f
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ5yYz3VwsfkYDdWA3mvycppMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm
YmViOWEwHhcNMjYwNTI5MDYxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzY4ZmFhZTFlZjg5MTkyYmMwNzg0Y2FmNTNhZjE0ZmVjYjJlYWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisxKeIakeqRTRtrZ28mth0CQp25y
i9ewvtk2muzc7ray+I8JLNpNKsdFuL0hnC6jjltlUx/TppXDyGgT/289CMxdmMOe
4fIlOFLWxL7sp3kIHKt1hUGpOicrKEUg11F9BOToqDvHJhydVq1kkAUTG9mWXZKh
LJ3qxV1fmUD0rzwlty4JPMyoa3sLwzx77FCLx5NhkR80NypmmwTmtuKt5pyZaJLl
bAZ8YrzqtAH71rE4HvJa2BKH4a3dhafMyTbUegMeKKMAlteeFegoT3o5UXHKYRgx
Fm/0jM1b3zlCysD51DxEWhhTg8oVqV80HzntYyAvIIbiKXa3nuhP1BlVVwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFONo+q4e+JGSvAeEyvU68U/ssuqrMB8GA1UdIwQY
MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt
NmE0ZWNhZjhiM2IxLzEvNDJqNnJoNzRrWks4QjRUSzlUcnhULXl5NnFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix
LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBuUHIAwQA
uXg4AwQA1BZGAwQA1BZOAwQA1BZeMA0GCSqGSIb3DQEBCwUAA4IBAQAAGFx9QWmV
ixeGufS8bmzWUzPCFvCvMsHAs0Hgc7fOuMyevPhCM6iqKsSwgpFBEFt0FaUCnjpb
xpHsunOHC8DkMUzQ0DfCPwVK7Pmx2VgItfYexQN03Ku1WB0Pq4IXRVZrI5gqkejh
7VjlGsGWWD0TGOXnP4tayNzrlBaqw+A77ELVQ//91JxXLX4bmrkx7r5BRbUuZJup
ULLS74lWC1FV/R4tQhA+jHzcrjUkb2PViYfOCZOz9KmFa3sdoI7T2GoqwgpbjPNc
N83PIXUEpZIEnWLWH4q0fUkdOH/CfKleRU1uYa0jsnL59LoAaXZsCOmn5i1v48pk
rzVDupmi3KQv
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:42:00 2026 by rpki-client