Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/nVbWh0pJuYoykDM3Ufm0vUQu0IE.roa
File: nVbWh0pJuYoykDM3Ufm0vUQu0IE.roa (raw, json)
Hash identifier: 7Orgw/1y3WPm4Dfr6xr3DA5k5wi24zwItPWXDbeu7SU=
Subject key identifier: 9D:56:D6:87:4A:49:B9:8A:32:90:33:37:51:F9:B4:BD:44:2E:D0:81
Certificate issuer: /CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Certificate serial: 019E87D2560A4462347821E44412892266D7
Authority key identifier: BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/nVbWh0pJuYoykDM3Ufm0vUQu0IE.roa
Signing time: Tue 02 Jun 2026 10:12:49 +0000
ROA not before: Tue 02 Jun 2026 10:12:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.255.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:d2:56:0a:44:62:34:78:21:e4:44:12:89:22:66:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Validity
Not Before: Jun 2 10:12:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d56d6874a49b98a3290333751f9b4bd442ed081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:0f:ff:f1:69:b8:22:46:0d:ad:89:0b:4a:
5c:94:da:d4:5d:5d:72:e4:c1:07:42:64:d2:65:3a:
90:c0:a7:13:1d:b1:fc:4e:0e:c1:67:b3:b8:30:f6:
c5:3c:29:a8:f0:03:f1:a0:69:be:e1:16:6c:41:0b:
5a:49:62:57:85:f7:93:ff:f6:bd:61:f3:df:ff:95:
5e:44:be:a2:b7:b7:46:a1:e2:3c:ba:e5:26:a4:92:
f2:40:85:49:85:71:fe:e3:4a:81:30:7c:5c:e2:9e:
ef:74:07:be:af:63:7d:ef:71:de:44:e2:b0:35:8e:
ad:be:8b:2d:8c:33:ac:8b:77:77:a4:83:9b:b8:42:
32:d1:22:ad:e7:1b:4b:cd:0d:02:af:41:6a:2c:3b:
9b:6d:df:8a:a0:1c:de:95:52:a8:29:20:2f:1d:0f:
26:1f:00:18:63:86:b9:3e:75:df:99:d2:d7:a6:1a:
f4:13:a4:c0:3c:26:b5:1e:1f:94:40:8e:63:91:c4:
27:d0:80:4a:99:4b:c6:41:b3:c1:0d:ea:76:bf:3f:
35:e0:8b:01:51:41:1f:88:e3:19:98:13:28:9a:a9:
e3:54:ac:47:41:73:c2:76:37:6a:46:51:36:80:e6:
2a:ff:06:68:44:57:e5:51:00:cd:17:79:3c:e3:85:
07:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:56:D6:87:4A:49:B9:8A:32:90:33:37:51:F9:B4:BD:44:2E:D0:81
X509v3 Authority Key Identifier:
keyid:BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/nVbWh0pJuYoykDM3Ufm0vUQu0IE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.56.0/24
Signature Algorithm: sha256WithRSAEncryption
44:e3:fc:69:d7:8d:42:f7:bb:7e:41:87:c3:c0:79:8e:79:86:
12:74:f5:b5:95:70:09:34:81:17:a1:1f:95:e3:61:da:1a:3d:
20:65:b9:8f:6e:08:1e:2a:7c:2b:c5:9b:0f:33:8e:e7:37:f3:
c3:1f:8f:cc:15:8e:bb:db:dd:a1:ad:e0:69:ad:54:96:a9:4d:
9e:f2:af:55:f8:9c:8f:c7:ed:38:d3:11:64:ad:2c:0c:17:fc:
7e:45:0a:92:b3:99:b6:03:e1:97:56:84:ab:f5:d8:ea:3d:e2:
3b:86:36:15:7c:b0:87:1c:04:a8:f7:9f:0d:40:01:be:cd:06:
80:12:c5:2c:d0:4e:e7:cf:3a:8b:05:01:b5:ad:7e:b3:60:a2:
f1:eb:38:b5:d8:4f:a0:3a:cc:c8:8b:7c:54:5d:b9:e2:8a:c5:
99:de:f7:a2:9a:86:38:cf:40:a9:a1:af:70:f5:dd:1b:67:8e:
7f:18:36:8b:a5:64:26:09:80:2c:0e:1a:c1:bb:d1:8b:a0:6b:
2a:22:cf:6a:23:ee:a8:7d:c5:d6:1f:27:37:9f:5a:c3:e4:4b:
c9:d7:e1:8f:3a:d0:7d:af:99:e6:a5:3c:bc:2f:de:2e:d1:6a:
18:1f:23:c8:ab:f3:7d:81:b6:62:55:32:7e:3e:c5:c8:ba:50:
b4:f1:f5:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6H0lYKRGI0eCHkRBKJImbXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZDg0YmM0NGRiZGE1YmFiZmM0OTQwYmNjYzE2MzVlMTUz
YjI0YjYwHhcNMjYwNjAyMTAxMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDU2ZDY4NzRhNDliOThhMzI5MDMzMzc1MWY5YjRiZDQ0MmVkMDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT0P//FpuCJGDa2JC0pclNrUXV1y
5MEHQmTSZTqQwKcTHbH8Tg7BZ7O4MPbFPCmo8APxoGm+4RZsQQtaSWJXhfeT//a9
YfPf/5VeRL6it7dGoeI8uuUmpJLyQIVJhXH+40qBMHxc4p7vdAe+r2N973HeROKw
NY6tvostjDOsi3d3pIObuEIy0SKt5xtLzQ0Cr0FqLDubbd+KoBzelVKoKSAvHQ8m
HwAYY4a5PnXfmdLXphr0E6TAPCa1Hh+UQI5jkcQn0IBKmUvGQbPBDep2vz814IsB
UUEfiOMZmBMomqnjVKxHQXPCdjdqRlE2gOYq/wZoRFflUQDNF3k844UHrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ1W1odKSbmKMpAzN1H5tL1ELtCBMB8GA1UdIwQY
MBaAFLvYS8RNvaW6v8SUC8zBY14VOyS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTloTHhFMjlwYnFfeEpRTHpNRmpYaFU3SkxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS82MzliZTQtOTNlNi00MTgzLWFiNmYt
ZGZkZGIxMzY0MzYzLzEvblZiV2gwcEp1WW95a0RNM1VmbTB2VVF1MElFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS82MzliZTQtOTNlNi00MTgzLWFiNmYtZGZkZGIxMzY0MzYz
LzEvdTloTHhFMjlwYnFfeEpRTHpNRmpYaFU3SkxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf84MA0G
CSqGSIb3DQEBCwUAA4IBAQBE4/xp141C97t+QYfDwHmOeYYSdPW1lXAJNIEXoR+V
42HaGj0gZbmPbggeKnwrxZsPM47nN/PDH4/MFY67292hreBprVSWqU2e8q9V+JyP
x+040xFkrSwMF/x+RQqSs5m2A+GXVoSr9djqPeI7hjYVfLCHHASo958NQAG+zQaA
EsUs0E7nzzqLBQG1rX6zYKLx6zi12E+gOszIi3xUXbniisWZ3veimoY4z0Cpoa9w
9d0bZ45/GDaLpWQmCYAsDhrBu9GLoGsqIs9qI+6ofcXWHyc3n1rD5EvJ1+GPOtB9
r5nmpTy8L94u0WoYHyPIq/N9gbZiVTJ+PsXIulC08fV7
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:29 2026 by rpki-client