Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/shmFFAg0R7SZje90TBb4AKCWkmA.roa
File: shmFFAg0R7SZje90TBb4AKCWkmA.roa (raw, json)
Hash identifier: 8IJgQpymjp9yZ3Tpr40N6p9o2clse9J3Sqp/cBdy9v0=
Subject key identifier: B2:19:85:14:08:34:47:B4:99:8D:EF:74:4C:16:F8:00:A0:96:92:60
Certificate issuer: /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial: 01A0A08B6ECC63EF0508F22A35FA2A26BD71
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/shmFFAg0R7SZje90TBb4AKCWkmA.roa
Signing time: Mon 14 Sep 2026 15:31:27 +0000
ROA not before: Mon 14 Sep 2026 15:31:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.233.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:8b:6e:cc:63:ef:05:08:f2:2a:35:fa:2a:26:bd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Validity
Not Before: Sep 14 15:31:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2198514083447b4998def744c16f800a0969260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c0:5f:21:0e:be:ea:e1:75:ec:24:0d:ff:fa:
a9:0b:cb:8b:9a:e1:f8:fb:8c:35:bb:2c:bf:bb:b0:
7a:34:be:50:a3:66:ab:b0:78:05:7d:1c:f9:b6:6e:
8b:42:fa:7f:d8:af:bb:3b:89:5c:15:08:31:8c:c0:
ed:73:a7:de:6b:d4:d3:54:c0:bc:39:7d:c8:e9:49:
d8:4f:7c:72:ab:d3:bb:39:a1:b0:56:8e:2b:c2:a4:
eb:56:79:77:05:9c:84:40:3b:f3:e8:b4:f6:ac:f4:
36:26:15:f5:7a:01:21:c8:d8:5e:36:d7:1f:0c:ec:
54:62:ba:fc:17:fa:55:fa:48:7a:d8:45:ae:6e:73:
af:f5:9d:d3:18:b5:e4:e1:7b:d4:b7:8c:ce:36:f8:
7a:7b:7a:ab:5b:bd:f2:cb:2a:34:36:63:49:81:1c:
7a:cd:62:f6:d0:f8:71:13:b4:67:d4:18:aa:64:0b:
18:23:0c:56:42:98:0b:14:75:37:46:79:39:36:26:
24:f2:3e:44:58:36:73:cb:62:2d:15:76:ab:1d:51:
db:fb:ec:d1:64:3a:b8:fd:99:ea:66:4d:d6:85:fe:
03:4e:4c:2a:cc:ae:3b:4c:40:88:ac:66:3e:33:8a:
5e:82:a9:e5:69:f8:d3:52:04:db:a5:c6:25:97:9d:
b6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:19:85:14:08:34:47:B4:99:8D:EF:74:4C:16:F8:00:A0:96:92:60
X509v3 Authority Key Identifier:
keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/shmFFAg0R7SZje90TBb4AKCWkmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.165.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:08:c0:71:2f:32:88:b1:a4:19:27:7b:22:0c:3b:b3:dc:90:
f5:8f:d9:f3:e8:ab:dd:f1:15:76:8e:de:2b:33:8b:24:40:c6:
9a:b8:32:8f:9c:17:8a:05:e3:b4:ab:c2:b7:8b:b4:20:ee:2a:
8b:9f:40:15:f0:85:93:aa:9c:72:e6:44:98:d4:fb:40:0a:16:
02:44:c4:40:7c:1d:14:54:76:a1:62:2e:b6:aa:2f:38:d9:1b:
2c:ad:30:1b:38:72:5f:6f:ba:a6:84:4e:62:0f:ed:bc:8c:80:
2c:d1:27:ea:24:1c:72:c0:57:1f:f1:8b:c9:d0:89:d5:91:7a:
0a:f3:ff:2b:14:ba:00:2e:ef:fc:fb:7f:29:f8:3a:59:50:5d:
c6:c1:b0:94:e8:03:70:b3:03:80:ed:83:a5:24:a6:4b:fe:85:
2f:9a:bc:c0:e9:e3:bd:ee:fd:eb:e8:3f:e2:11:71:f5:c9:e6:
0c:d6:94:a7:65:3e:fd:69:cc:96:4d:7a:f5:c7:47:2e:08:e4:
42:41:82:ec:4e:73:8a:36:72:09:47:5a:a5:4f:41:09:7d:41:
98:b6:9c:7b:3c:dc:a9:0a:5d:8e:13:c5:b4:08:32:da:b2:d1:
67:45:4e:29:87:0c:50:c7:fc:e8:cc:dd:c7:ac:fe:db:49:19:
49:eb:58:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCgi27MY+8FCPIqNfoqJr1xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YjYyM2JiYzU0ZTk4NDY3NDhjZDc3YjJiOGIzNDM4Mjdl
NWFlYWEwHhcNMjYwOTE0MTUzMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjE5ODUxNDA4MzQ0N2I0OTk4ZGVmNzQ0YzE2ZjgwMGEwOTY5MjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sBfIQ6+6uF17CQN//qpC8uLmuH4
+4w1uyy/u7B6NL5Qo2arsHgFfRz5tm6LQvp/2K+7O4lcFQgxjMDtc6fea9TTVMC8
OX3I6UnYT3xyq9O7OaGwVo4rwqTrVnl3BZyEQDvz6LT2rPQ2JhX1egEhyNheNtcf
DOxUYrr8F/pV+kh62EWubnOv9Z3TGLXk4XvUt4zONvh6e3qrW73yyyo0NmNJgRx6
zWL20PhxE7Rn1BiqZAsYIwxWQpgLFHU3Rnk5NiYk8j5EWDZzy2ItFXarHVHb++zR
ZDq4/ZnqZk3Whf4DTkwqzK47TECIrGY+M4pegqnlafjTUgTbpcYll522oQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLIZhRQINEe0mY3vdEwW+ACglpJgMB8GA1UdIwQY
MBaAFMe2I7vFTphGdIzXeyuLNDgn5a6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMt
MzRlNGUwNjc5MzMzLzEvc2htRkZBZzBSN1NaamU5MFRCYjRBS0NXa21BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMtMzRlNGUwNjc5MzMz
LzEveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuemlMA0G
CSqGSIb3DQEBCwUAA4IBAQCbCMBxLzKIsaQZJ3siDDuz3JD1j9nz6Kvd8RV2jt4r
M4skQMaauDKPnBeKBeO0q8K3i7Qg7iqLn0AV8IWTqpxy5kSY1PtAChYCRMRAfB0U
VHahYi62qi842RssrTAbOHJfb7qmhE5iD+28jIAs0SfqJBxywFcf8YvJ0InVkXoK
8/8rFLoALu/8+38p+DpZUF3GwbCU6ANwswOA7YOlJKZL/oUvmrzA6eO97v3r6D/i
EXH1yeYM1pSnZT79acyWTXr1x0cuCORCQYLsTnOKNnIJR1qlT0EJfUGYtpx7PNyp
Cl2OE8W0CDLastFnRU4phwxQx/zozN3HrP7bSRlJ61i3
-----END CERTIFICATE-----
Generated at Mon Sep 21 15:54:51 2026 by rpki-client