Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/lDyCfBsAKSLuA5u6PnXXVyL6E5o.roa
File: lDyCfBsAKSLuA5u6PnXXVyL6E5o.roa (raw, json)
Hash identifier: UQQdaNyo0as9g1ExChiNlUoP+7tgogkdvG77S7KlytI=
Subject key identifier: 94:3C:82:7C:1B:00:29:22:EE:03:9B:BA:3E:75:D7:57:22:FA:13:9A
Certificate issuer: /CN=297194f4b52b9ff433f2bf0d16b58c11c7cf1131
Certificate serial: 019E3786D2B4962D5321FA2090CB44EE5AE3
Authority key identifier: 29:71:94:F4:B5:2B:9F:F4:33:F2:BF:0D:16:B5:8C:11:C7:CF:11:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/lDyCfBsAKSLuA5u6PnXXVyL6E5o.roa
Signing time: Sun 17 May 2026 20:00:43 +0000
ROA not before: Sun 17 May 2026 20:00:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205940
IP address blocks: 185.201.140.0/23 maxlen: 23
185.201.142.0/24 maxlen: 24
2a0a:c540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:37:86:d2:b4:96:2d:53:21:fa:20:90:cb:44:ee:5a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297194f4b52b9ff433f2bf0d16b58c11c7cf1131
Validity
Not Before: May 17 20:00:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=943c827c1b002922ee039bba3e75d75722fa139a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a3:f0:cd:67:97:9f:c2:c4:ad:c7:7b:e2:d0:
02:05:8d:d5:97:67:9c:ad:ef:b6:39:87:52:f6:64:
1d:e1:ab:a8:f2:74:65:76:e6:41:30:64:92:52:d3:
0f:68:5a:c2:43:cd:02:7b:e3:f7:cf:94:15:33:ec:
69:48:80:f4:36:fb:9e:e3:f7:20:f0:7f:ff:f3:3a:
7d:0e:0a:49:78:de:86:e2:48:a8:9a:41:f0:d5:b6:
0a:f2:70:0c:1e:1c:3a:4f:af:45:7e:a0:ca:5d:6f:
93:dc:08:a8:5d:a1:7a:8b:fc:68:18:e7:50:8b:5c:
19:54:fc:e1:1d:ff:c4:c9:ae:4b:77:a0:db:e7:1a:
85:91:4b:f9:29:9a:de:b4:87:d3:c2:58:f1:a9:40:
76:9a:5c:0f:6c:a7:56:b3:81:88:eb:0b:f5:6f:2f:
8b:db:dc:73:ab:30:48:b1:55:93:25:13:2a:3f:10:
fd:83:59:4d:06:a6:b5:52:03:50:cc:2e:bd:1e:67:
77:f1:84:1d:6a:40:1f:56:ab:f3:0c:3c:f0:9a:56:
42:4b:1a:19:7b:18:b9:bd:37:54:29:76:99:29:07:
bc:40:87:b0:9d:94:3d:78:73:81:cc:ae:24:ee:65:
e1:fd:a0:d7:b1:58:94:64:e2:2b:23:16:bd:89:d8:
69:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3C:82:7C:1B:00:29:22:EE:03:9B:BA:3E:75:D7:57:22:FA:13:9A
X509v3 Authority Key Identifier:
keyid:29:71:94:F4:B5:2B:9F:F4:33:F2:BF:0D:16:B5:8C:11:C7:CF:11:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/lDyCfBsAKSLuA5u6PnXXVyL6E5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.140.0-185.201.142.255
IPv6:
2a0a:c540::/29
Signature Algorithm: sha256WithRSAEncryption
53:ca:f2:02:19:06:68:f6:ef:95:54:5a:61:a7:48:a9:74:66:
be:09:8c:ea:b4:75:53:15:fa:66:aa:b5:18:b2:67:fb:c7:24:
28:13:b1:ee:c7:f9:14:54:32:18:5e:42:7f:ff:14:a1:69:58:
23:93:b7:74:a6:a0:5f:3e:7b:80:d4:7c:71:0b:9d:74:19:c0:
21:4e:6a:b4:71:b6:b0:b5:80:2b:36:cf:94:ea:17:23:1e:78:
e9:86:ab:67:a7:40:87:22:ec:d3:92:55:b9:be:3b:1a:71:9e:
7a:d7:34:85:4b:8e:f9:f8:64:59:1d:e9:75:f5:19:1d:7f:e3:
f3:54:f4:3a:db:2e:87:25:65:14:c8:f8:4c:9d:31:22:32:6e:
c2:50:5e:8c:8c:89:64:54:cd:e0:a2:6c:fd:c6:70:5c:be:30:
6d:56:af:30:ca:31:44:06:80:bd:f8:fb:ba:8a:7d:38:e7:53:
68:1a:9f:2e:7a:04:50:54:ec:02:9c:36:8c:09:d0:a5:98:37:
a9:f3:f8:bc:5c:57:fc:36:ee:56:13:71:90:0f:0f:a3:51:79:
9a:d6:0d:73:6a:30:fc:db:d9:a3:1e:82:2b:3b:5f:5e:61:6d:
5c:fa:42:81:da:b6:de:94:15:02:ab:92:71:41:30:c3:90:76:
6c:e9:17:86
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZ43htK0li1TIfogkMtE7lrjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NzE5NGY0YjUyYjlmZjQzM2YyYmYwZDE2YjU4YzExYzdj
ZjExMzEwHhcNMjYwNTE3MjAwMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDNjODI3YzFiMDAyOTIyZWUwMzliYmEzZTc1ZDc1NzIyZmExMzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqPwzWeXn8LErcd74tACBY3Vl2ec
re+2OYdS9mQd4auo8nRlduZBMGSSUtMPaFrCQ80Ce+P3z5QVM+xpSID0Nvue4/cg
8H//8zp9DgpJeN6G4kiomkHw1bYK8nAMHhw6T69FfqDKXW+T3AioXaF6i/xoGOdQ
i1wZVPzhHf/Eya5Ld6Db5xqFkUv5KZretIfTwljxqUB2mlwPbKdWs4GI6wv1by+L
29xzqzBIsVWTJRMqPxD9g1lNBqa1UgNQzC69Hmd38YQdakAfVqvzDDzwmlZCSxoZ
exi5vTdUKXaZKQe8QIewnZQ9eHOBzK4k7mXh/aDXsViUZOIrIxa9idhpsQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFJQ8gnwbACki7gObuj5111ci+hOaMB8GA1UdIwQY
MBaAFClxlPS1K5/0M/K/DRa1jBHHzxExMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1hHVTlMVXJuX1F6OHI4TkZyV01FY2ZQRVRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS84MGI0YzAtMDZjYi00NDI0LTlkZDUt
NWE5ODg5MzFlYTMzLzEvbER5Q2ZCc0FLU0x1QTV1NlBuWFhWeUw2RTVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS84MGI0YzAtMDZjYi00NDI0LTlkZDUtNWE5ODg5MzFlYTMz
LzEvS1hHVTlMVXJuX1F6OHI4TkZyV01FY2ZQRVRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAK5yYwD
BAC5yY4wDQQCAAIwBwMFAyoKxUAwDQYJKoZIhvcNAQELBQADggEBAFPK8gIZBmj2
75VUWmGnSKl0Zr4JjOq0dVMV+maqtRiyZ/vHJCgTse7H+RRUMhheQn//FKFpWCOT
t3SmoF8+e4DUfHELnXQZwCFOarRxtrC1gCs2z5TqFyMeeOmGq2enQIci7NOSVbm+
OxpxnnrXNIVLjvn4ZFkd6XX1GR1/4/NU9DrbLoclZRTI+EydMSIybsJQXoyMiWRU
zeCibP3GcFy+MG1WrzDKMUQGgL34+7qKfTjnU2gany56BFBU7AKcNowJ0KWYN6nz
+LxcV/w27lYTcZAPD6NReZrWDXNqMPzb2aMegis7X15hbVz6QoHatt6UFQKrknFB
MMOQdmzpF4Y=
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:55:54 2026 by rpki-client