Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/oNqDVTYlC79yiD9UWNN2dLJ6tTA.roa
File: oNqDVTYlC79yiD9UWNN2dLJ6tTA.roa (raw, json)
Hash identifier: StGfUlGx55sPhzUCgeMfLj+MAK+ygxOMgD1BADAXlpk=
Subject key identifier: A0:DA:83:55:36:25:0B:BF:72:88:3F:54:58:D3:76:74:B2:7A:B5:30
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 019D68DCE4A832CC74CDCB4D2F717F47CDEA
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/oNqDVTYlC79yiD9UWNN2dLJ6tTA.roa
Signing time: Tue 07 Apr 2026 16:53:20 +0000
ROA not before: Tue 07 Apr 2026 16:53:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400992
IP address blocks: 185.219.7.0/24 maxlen: 24
193.46.217.0/24 maxlen: 24
193.46.218.0/24 maxlen: 24
195.96.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:68:dc:e4:a8:32:cc:74:cd:cb:4d:2f:71:7f:47:cd:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Apr 7 16:53:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0da835536250bbf72883f5458d37674b27ab530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f4:c2:60:cc:51:24:33:cc:b8:2c:96:bd:1f:
a2:8e:35:0d:56:18:a8:a5:a7:9b:0b:6e:1e:75:1e:
f1:36:ec:02:f3:96:83:83:f3:0a:ae:e2:cf:28:1d:
1f:51:0f:5e:29:2f:95:1f:15:c9:8e:63:d5:fb:58:
e7:cd:fd:25:02:d3:e7:18:f4:4b:31:f1:b1:4c:26:
4d:11:70:f4:f5:65:5d:d2:38:c5:c2:ce:35:6b:5f:
7e:07:ca:0e:b2:14:84:4f:76:df:c9:71:a1:ee:1f:
14:72:a7:7a:6c:0b:b9:23:0e:17:61:52:4a:1b:8c:
37:86:e4:89:c2:9d:bc:7c:80:06:c9:f2:67:ae:94:
a3:f0:c8:0b:9d:8e:48:17:ae:54:c1:d4:a7:e7:92:
19:b9:14:0e:d9:34:29:84:8d:13:af:49:03:85:27:
30:bb:a6:8e:3b:59:d7:3b:33:19:24:ac:e8:81:d1:
c9:7d:82:31:1f:c1:e2:23:4a:06:42:dd:8b:13:b7:
af:c2:d4:40:fc:70:f2:38:93:b7:1a:fc:f7:ab:4a:
31:0b:25:65:c2:36:c5:71:cc:ca:fa:28:5a:d6:5b:
97:eb:ed:a9:a6:af:d0:71:28:46:45:8b:e8:62:10:
8e:72:4a:da:63:47:67:b7:ac:b9:49:81:9c:a2:b5:
2e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DA:83:55:36:25:0B:BF:72:88:3F:54:58:D3:76:74:B2:7A:B5:30
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/oNqDVTYlC79yiD9UWNN2dLJ6tTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.7.0/24
193.46.217.0-193.46.218.255
195.96.132.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:11:ea:cc:9c:9b:90:65:12:4b:01:13:8f:72:24:55:3a:d6:
4e:80:2b:26:80:96:23:10:b1:32:37:37:9f:ca:a7:da:b7:ee:
ef:b9:b6:b6:a0:81:bd:b9:c1:d0:e8:fe:d9:e3:64:26:1e:5b:
c6:c9:53:bb:1c:05:b3:a8:5a:ff:1c:21:d0:7a:1f:88:a2:21:
c4:63:eb:ff:9f:91:ee:34:9c:a4:0a:ad:57:7a:cc:b7:c9:6f:
f6:6a:29:16:aa:98:5c:ed:43:e8:a4:53:af:e9:10:37:6d:7b:
be:18:95:53:71:1d:ea:3d:1e:2c:3e:72:17:5c:55:73:01:09:
3d:84:17:24:22:d7:b4:ce:95:69:1b:37:77:8d:39:86:a8:9c:
cb:c7:dc:65:3d:04:e5:21:41:b0:59:ac:8e:62:ee:39:25:f9:
11:c9:aa:0c:81:90:f4:f9:7b:0f:26:18:26:e3:b0:c9:19:de:
d3:a4:11:de:cb:ae:c1:aa:c8:87:eb:a8:06:b7:a5:0f:b0:f5:
82:06:49:75:68:57:99:e4:88:81:39:23:42:10:df:6d:48:77:
91:39:28:30:f1:9c:c2:9e:03:4a:77:0c:f0:d0:e0:e8:d0:ca:
0e:bb:a0:9c:41:fb:c7:de:33:fb:df:87:1b:64:eb:f9:ca:90:
bc:9e:92:b6
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZ1o3OSoMsx0zctNL3F/R83qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi
YzU5MDEwHhcNMjYwNDA3MTY1MzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGRhODM1NTM2MjUwYmJmNzI4ODNmNTQ1OGQzNzY3NGIyN2FiNTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvTCYMxRJDPMuCyWvR+ijjUNVhio
paebC24edR7xNuwC85aDg/MKruLPKB0fUQ9eKS+VHxXJjmPV+1jnzf0lAtPnGPRL
MfGxTCZNEXD09WVd0jjFws41a19+B8oOshSET3bfyXGh7h8Ucqd6bAu5Iw4XYVJK
G4w3huSJwp28fIAGyfJnrpSj8MgLnY5IF65UwdSn55IZuRQO2TQphI0Tr0kDhScw
u6aOO1nXOzMZJKzogdHJfYIxH8HiI0oGQt2LE7evwtRA/HDyOJO3Gvz3q0oxCyVl
wjbFcczK+iha1luX6+2ppq/QcShGRYvoYhCOckraY0dnt6y5SYGcorUuzQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFKDag1U2JQu/cog/VFjTdnSyerUwMB8GA1UdIwQY
MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt
NGRkMDQzNDZhYmMzLzEvb05xRFZUWWxDNzl5aUQ5VVdOTjJkTEo2dFRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz
LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAudsHMAwD
BADBLtkDBADBLtoDBADDYIQwDQYJKoZIhvcNAQELBQADggEBAH8R6sycm5BlEksB
E49yJFU61k6AKyaAliMQsTI3N5/Kp9q37u+5traggb25wdDo/tnjZCYeW8bJU7sc
BbOoWv8cIdB6H4iiIcRj6/+fke40nKQKrVd6zLfJb/ZqKRaqmFztQ+ikU6/pEDdt
e74YlVNxHeo9Hiw+chdcVXMBCT2EFyQi17TOlWkbN3eNOYaonMvH3GU9BOUhQbBZ
rI5i7jkl+RHJqgyBkPT5ew8mGCbjsMkZ3tOkEd7LrsGqyIfrqAa3pQ+w9YIGSXVo
V5nkiIE5I0IQ321Id5E5KDDxnMKeA0p3DPDQ4OjQyg67oJxB+8feM/vfhxtk6/nK
kLyekrY=
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:18:15 2026 by rpki-client