Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/pGHNzAUcIizLpAUPu_Mhby-x9yE.roa
File: pGHNzAUcIizLpAUPu_Mhby-x9yE.roa (raw, json)
Hash identifier: KEMg4RTKneLFApdfqrwUMQOlSL5Nv2nRmOqs0A9LmYg=
Subject key identifier: A4:61:CD:CC:05:1C:22:2C:CB:A4:05:0F:BB:F3:21:6F:2F:B1:F7:21
Certificate issuer: /CN=533fe95a0d5fd96a1696f79a6121308b981fdd58
Certificate serial: 01A049325CA2D500320FA5909DC4B873D28C
Authority key identifier: 53:3F:E9:5A:0D:5F:D9:6A:16:96:F7:9A:61:21:30:8B:98:1F:DD:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/pGHNzAUcIizLpAUPu_Mhby-x9yE.roa
Signing time: Fri 28 Aug 2026 16:27:12 +0000
ROA not before: Fri 28 Aug 2026 16:27:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207017
IP address blocks: 185.168.196.0/22 maxlen: 22
2a0a:1f00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:32:5c:a2:d5:00:32:0f:a5:90:9d:c4:b8:73:d2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533fe95a0d5fd96a1696f79a6121308b981fdd58
Validity
Not Before: Aug 28 16:27:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a461cdcc051c222ccba4050fbbf3216f2fb1f721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f8:b9:68:e3:12:d0:c5:02:1f:b0:48:88:67:
d1:87:f1:f1:4e:01:75:03:ed:81:32:01:d5:da:2d:
f8:1a:63:ea:4a:47:d0:9f:b2:37:08:85:61:88:da:
a4:d8:42:1c:a1:0b:85:32:22:37:dd:81:75:fc:e8:
54:44:9e:28:ad:f2:8f:3c:00:d2:8b:1a:30:87:69:
11:73:5e:b6:7d:e9:71:d6:20:9c:a3:23:00:83:49:
ad:ac:d3:fa:30:46:d5:d0:48:68:6e:63:96:5b:bd:
9f:16:6a:ae:a0:09:de:2e:5d:ce:78:7c:58:1f:4b:
2f:24:9b:80:c5:0a:ef:ab:6e:a3:71:84:7d:2c:59:
17:4d:11:4d:e4:5c:53:47:f0:da:e8:bf:96:7d:b5:
b7:ad:18:e9:5a:ee:cb:2f:ad:c8:1c:15:89:92:af:
d1:0b:03:b4:4e:a4:5f:4a:2e:4e:82:cd:b3:b1:8c:
22:ab:26:f5:a7:50:ca:00:e2:34:4e:31:f2:38:dd:
5a:98:0d:27:6a:82:af:30:4f:ab:5a:9a:2e:bb:9f:
ca:4b:c2:5e:0c:76:c8:18:fd:5f:64:67:2f:73:83:
06:ca:8a:bc:6d:fb:54:b5:6e:2d:01:66:ea:ac:45:
0e:ac:06:60:cc:4f:ff:8e:5d:20:65:8f:8f:0e:ea:
6b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:61:CD:CC:05:1C:22:2C:CB:A4:05:0F:BB:F3:21:6F:2F:B1:F7:21
X509v3 Authority Key Identifier:
keyid:53:3F:E9:5A:0D:5F:D9:6A:16:96:F7:9A:61:21:30:8B:98:1F:DD:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/pGHNzAUcIizLpAUPu_Mhby-x9yE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/Uz_pWg1f2WoWlveaYSEwi5gf3Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.196.0/22
IPv6:
2a0a:1f00::/29
Signature Algorithm: sha256WithRSAEncryption
76:0b:c9:45:a7:55:17:ae:04:d0:f4:67:a3:f4:3f:ec:4f:a3:
5b:d1:7e:27:10:9c:24:e7:8b:26:63:cb:16:94:a4:f3:d6:ec:
97:a8:2b:14:00:c6:45:e0:80:2f:7e:91:73:9a:07:5e:c3:b0:
af:71:6c:8a:dd:7f:10:6a:75:bc:9a:57:3d:2c:eb:e2:42:cd:
d5:71:77:7d:68:f2:01:31:57:31:41:9a:9f:0e:42:3f:b7:ff:
ad:a5:70:8c:4b:37:7c:db:2a:c1:02:df:69:e2:b8:c3:53:ae:
7c:e0:4e:94:5e:e9:2f:f1:73:b0:87:68:28:5c:ad:10:70:6d:
20:8f:41:ed:f5:6d:64:36:e9:1a:27:30:7c:f8:42:52:b4:51:
eb:c1:9d:5d:7a:d4:15:1f:5f:61:dd:48:d9:e9:83:15:9b:7a:
93:e1:3a:99:f8:52:28:74:f4:23:b2:eb:5f:8e:c0:3f:40:1e:
f3:89:7b:38:d7:a7:33:8f:16:56:0d:57:d7:de:a7:7a:77:46:
ae:aa:ac:8d:88:0e:90:62:3a:f7:53:42:6a:fa:2e:be:12:f1:
3e:f5:1c:91:0e:a6:09:7a:e0:22:01:23:c4:cd:bc:16:7a:50:
f3:02:be:98:78:4a:7a:06:06:61:1c:6e:2e:5b:70:e1:5c:11:
b7:3f:6e:73
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaBJMlyi1QAyD6WQncS4c9KMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzM2ZlOTVhMGQ1ZmQ5NmExNjk2Zjc5YTYxMjEzMDhiOTgx
ZmRkNTgwHhcNMjYwODI4MTYyNzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDYxY2RjYzA1MWMyMjJjY2JhNDA1MGZiYmYzMjE2ZjJmYjFmNzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/i5aOMS0MUCH7BIiGfRh/HxTgF1
A+2BMgHV2i34GmPqSkfQn7I3CIVhiNqk2EIcoQuFMiI33YF1/OhURJ4orfKPPADS
ixowh2kRc162felx1iCcoyMAg0mtrNP6MEbV0EhobmOWW72fFmquoAneLl3OeHxY
H0svJJuAxQrvq26jcYR9LFkXTRFN5FxTR/Da6L+WfbW3rRjpWu7LL63IHBWJkq/R
CwO0TqRfSi5Ogs2zsYwiqyb1p1DKAOI0TjHyON1amA0naoKvME+rWpouu5/KS8Je
DHbIGP1fZGcvc4MGyoq8bftUtW4tAWbqrEUOrAZgzE//jl0gZY+PDuprhQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKRhzcwFHCIsy6QFD7vzIW8vsfchMB8GA1UdIwQY
MBaAFFM/6VoNX9lqFpb3mmEhMIuYH91YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXpfcFdnMWYyV29XbHZlYVlTRXdpNWdmM1ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9mY2EzNjktNmI4NS00ZTAzLWFiNzEt
NjhiYTZjNTRlZjlhLzEvcEdITnpBVWNJaXpMcEFVUHVfTWhieS14OXlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9mY2EzNjktNmI4NS00ZTAzLWFiNzEtNjhiYTZjNTRlZjlh
LzEvVXpfcFdnMWYyV29XbHZlYVlTRXdpNWdmM1ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuajEMA0E
AgACMAcDBQMqCh8AMA0GCSqGSIb3DQEBCwUAA4IBAQB2C8lFp1UXrgTQ9Gej9D/s
T6Nb0X4nEJwk54smY8sWlKTz1uyXqCsUAMZF4IAvfpFzmgdew7CvcWyK3X8QanW8
mlc9LOviQs3VcXd9aPIBMVcxQZqfDkI/t/+tpXCMSzd82yrBAt9p4rjDU6584E6U
Xukv8XOwh2goXK0QcG0gj0Ht9W1kNukaJzB8+EJStFHrwZ1detQVH19h3UjZ6YMV
m3qT4TqZ+FIodPQjsutfjsA/QB7ziXs416czjxZWDVfX3qd6d0auqqyNiA6QYjr3
U0Jq+i6+EvE+9RyRDqYJeuAiASPEzbwWelDzAr6YeEp6BgZhHG4uW3DhXBG3P25z
-----END CERTIFICATE-----
Generated at Sun Sep 20 11:48:41 2026 by rpki-client