Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7bhpssjIG2fKdhGsrEDDom2pgd4.roa
File: 7bhpssjIG2fKdhGsrEDDom2pgd4.roa (raw, json)
Hash identifier: WS54zkGWtqspLYOo7GQj+H+lkOG+rz40ZNE5u7rmYtM=
Subject key identifier: ED:B8:69:B2:C8:C8:1B:67:CA:76:11:AC:AC:40:C3:A2:6D:A9:81:DE
Certificate issuer: /CN=ed800950a31dcdacaac56adb936a42beb845e24b
Certificate serial: 01A0B550814D84CE614FEFF8C530B54D699B
Authority key identifier: ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7bhpssjIG2fKdhGsrEDDom2pgd4.roa
Signing time: Fri 18 Sep 2026 16:19:07 +0000
ROA not before: Fri 18 Sep 2026 16:19:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218656
IP address blocks: 185.221.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:50:81:4d:84:ce:61:4f:ef:f8:c5:30:b5:4d:69:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed800950a31dcdacaac56adb936a42beb845e24b
Validity
Not Before: Sep 18 16:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edb869b2c8c81b67ca7611acac40c3a26da981de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:14:2f:ed:02:00:aa:8c:38:6f:57:c1:af:8b:
93:fe:af:e2:33:73:ef:2c:13:46:29:3c:c9:3d:b8:
dd:f0:53:d4:ab:2a:76:e4:5f:9e:5e:f0:b6:5a:a0:
32:91:76:51:84:d2:f5:94:7e:79:fc:fb:9a:b1:a7:
30:aa:a0:9f:5b:1e:50:a5:82:f3:0a:25:69:c4:ef:
e8:fe:d1:68:1a:ab:a4:b2:84:21:64:bc:d6:73:f4:
2a:44:66:e3:e7:36:76:8a:ca:81:f2:35:6b:ec:a6:
39:07:64:1f:71:dd:a1:be:ab:c7:35:6c:5f:19:57:
9a:42:6a:ab:85:3f:85:a5:d5:1d:67:eb:b8:be:19:
9a:29:6b:3b:e9:17:8d:05:72:83:4b:8d:3a:36:81:
26:cb:bf:43:4a:b0:5f:ec:6e:3e:7d:df:d7:b3:b7:
58:7d:eb:38:df:c7:c9:b3:7a:c3:6b:05:4c:42:87:
86:93:c2:96:a0:31:f2:0e:ff:cc:3d:aa:02:1a:40:
88:f6:0d:0e:33:53:5b:5e:da:48:86:9d:24:7a:4b:
57:01:5c:cf:f4:70:b3:7f:36:44:51:59:af:4c:96:
69:46:26:31:86:73:29:9d:d5:c7:42:72:f1:73:08:
f5:68:dc:94:3b:dc:9c:33:8b:84:22:4f:58:c2:d2:
33:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B8:69:B2:C8:C8:1B:67:CA:76:11:AC:AC:40:C3:A2:6D:A9:81:DE
X509v3 Authority Key Identifier:
keyid:ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7bhpssjIG2fKdhGsrEDDom2pgd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.218.0/24
Signature Algorithm: sha256WithRSAEncryption
87:f9:e4:3f:33:96:a0:40:77:46:c8:16:4b:fc:47:ef:96:b8:
cb:0e:54:31:81:c8:9b:98:d8:26:ba:cb:f4:47:c6:bb:32:81:
bd:52:0a:4e:83:82:a2:78:f9:9f:03:d4:20:9d:3b:a1:e7:6c:
8d:04:86:e2:df:a1:03:74:bc:65:2e:38:c0:7f:eb:35:2e:20:
d5:08:0f:64:97:25:5a:3f:14:28:b6:08:12:ec:2e:00:a9:f4:
96:01:2e:03:61:80:8c:f1:fc:d5:72:3f:d4:f6:59:b8:1f:b0:
44:bf:a3:28:ae:67:e4:4b:64:f9:ad:0e:1c:1a:09:c4:c1:7a:
e9:30:94:38:6a:77:cb:33:9a:9d:1b:38:44:0d:ba:8d:3e:10:
b3:25:20:41:a4:01:2e:de:b9:cc:dd:ba:d0:2a:e6:55:93:b7:
b2:9d:42:c6:90:6b:04:d2:42:4b:ca:a0:74:4b:eb:59:ad:7e:
f5:d7:c7:67:fd:2d:9b:89:7d:39:c3:70:16:62:5b:ef:95:11:
ee:bf:b8:87:2d:a1:f5:f0:6f:c5:5f:ec:91:7f:18:c0:3b:7b:
1e:a7:7c:01:ab:6a:7e:27:7e:c7:42:c5:a3:be:c7:bd:9f:86:
38:f3:1a:71:e6:6d:4b:01:7c:13:ea:97:5c:3f:93:d4:37:4a:
ce:88:d7:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaC1UIFNhM5hT+/4xTC1TWmbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkODAwOTUwYTMxZGNkYWNhYWM1NmFkYjkzNmE0MmJlYjg0
NWUyNGIwHhcNMjYwOTE4MTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGI4NjliMmM4YzgxYjY3Y2E3NjExYWNhYzQwYzNhMjZkYTk4MWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRQv7QIAqow4b1fBr4uT/q/iM3Pv
LBNGKTzJPbjd8FPUqyp25F+eXvC2WqAykXZRhNL1lH55/PuasacwqqCfWx5QpYLz
CiVpxO/o/tFoGquksoQhZLzWc/QqRGbj5zZ2isqB8jVr7KY5B2Qfcd2hvqvHNWxf
GVeaQmqrhT+FpdUdZ+u4vhmaKWs76ReNBXKDS406NoEmy79DSrBf7G4+fd/Xs7dY
fes438fJs3rDawVMQoeGk8KWoDHyDv/MPaoCGkCI9g0OM1NbXtpIhp0kektXAVzP
9HCzfzZEUVmvTJZpRiYxhnMpndXHQnLxcwj1aNyUO9ycM4uEIk9YwtIzlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO24abLIyBtnynYRrKxAw6JtqYHeMB8GA1UdIwQY
MBaAFO2ACVCjHc2sqsVq25NqQr64ReJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1lBSlVLTWR6YXlxeFdyYmsycEN2cmhGNGtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC84YTZmNzItYzgyMi00NTFmLWE1YzUt
YTdmZDZjOGU3MGZkLzEvN2JocHNzaklHMmZLZGhHc3JFRERvbTJwZ2Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC84YTZmNzItYzgyMi00NTFmLWE1YzUtYTdmZDZjOGU3MGZk
LzEvN1lBSlVLTWR6YXlxeFdyYmsycEN2cmhGNGtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud3aMA0G
CSqGSIb3DQEBCwUAA4IBAQCH+eQ/M5agQHdGyBZL/EfvlrjLDlQxgcibmNgmusv0
R8a7MoG9UgpOg4KiePmfA9QgnTuh52yNBIbi36EDdLxlLjjAf+s1LiDVCA9klyVa
PxQotggS7C4AqfSWAS4DYYCM8fzVcj/U9lm4H7BEv6MormfkS2T5rQ4cGgnEwXrp
MJQ4anfLM5qdGzhEDbqNPhCzJSBBpAEu3rnM3brQKuZVk7eynULGkGsE0kJLyqB0
S+tZrX7118dn/S2biX05w3AWYlvvlRHuv7iHLaH18G/FX+yRfxjAO3sep3wBq2p+
J37HQsWjvse9n4Y48xpx5m1LAXwT6pdcP5PUN0rOiNf+
-----END CERTIFICATE-----
Generated at Mon Sep 21 08:14:26 2026 by rpki-client