Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/mdV0Fqg427mYIUG5dBcvLrPAxKA.roa
File: mdV0Fqg427mYIUG5dBcvLrPAxKA.roa (raw, json)
Hash identifier: WTLE6TPjJAJPSn+BMFPBYzhnIQZbDzYgMm+ivoo+rVY=
Subject key identifier: 99:D5:74:16:A8:38:DB:B9:98:21:41:B9:74:17:2F:2E:B3:C0:C4:A0
Certificate issuer: /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Certificate serial: 019E21D60DB80203E7B67FDEAEFBCF8E994B
Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/mdV0Fqg427mYIUG5dBcvLrPAxKA.roa
Signing time: Wed 13 May 2026 14:55:36 +0000
ROA not before: Wed 13 May 2026 14:55:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6893
IP address blocks: 185.25.225.0/24 maxlen: 24
185.25.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:d6:0d:b8:02:03:e7:b6:7f:de:ae:fb:cf:8e:99:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Validity
Not Before: May 13 14:55:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99d57416a838dbb9982141b974172f2eb3c0c4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6d:f8:3c:63:e1:fb:82:d5:5f:0e:fb:1d:94:
06:c7:77:97:71:78:94:2d:7f:04:de:a3:db:63:f5:
36:19:e8:b8:08:c2:bf:63:ba:06:26:80:43:2e:4b:
aa:62:6f:5a:db:2d:05:e5:66:e8:4d:d9:42:c6:d6:
a3:e4:49:5d:16:d0:f8:a2:36:05:c5:16:e3:63:93:
43:90:9d:55:3e:43:71:77:fa:b0:b5:a7:a7:d3:7f:
ff:e3:36:cf:05:6d:23:3a:84:6e:97:57:f6:5a:15:
89:7a:dd:df:b2:81:00:52:09:07:1c:3c:60:57:7f:
92:74:be:0d:55:e3:56:f6:79:2e:ee:9a:c7:c1:61:
c2:10:96:13:1b:6c:45:b5:d1:bf:b1:85:0a:00:3d:
e2:50:a9:67:63:3e:0e:c2:40:f9:8c:8c:3b:f0:89:
e8:05:c0:a6:e6:2c:93:1c:ea:89:2c:87:7c:24:0c:
16:fb:e4:73:a1:29:32:4c:61:75:6f:4b:f1:fd:75:
0a:a3:e0:6c:3e:ca:18:b2:04:25:9e:17:0b:4e:48:
0f:97:cf:25:b2:e3:37:e9:f1:19:cd:e3:df:80:20:
5e:c6:34:8b:ce:b4:09:e8:e4:02:1a:5a:f0:c3:6b:
d6:9f:3b:15:57:35:e2:74:75:61:e5:1d:c0:19:62:
bb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D5:74:16:A8:38:DB:B9:98:21:41:B9:74:17:2F:2E:B3:C0:C4:A0
X509v3 Authority Key Identifier:
keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/mdV0Fqg427mYIUG5dBcvLrPAxKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.225.0/24
185.25.227.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ad:ff:70:e4:11:ec:e5:2f:0b:e5:26:21:40:e9:7f:82:11:
a8:d6:34:d8:10:ed:90:0e:1a:bc:98:8b:e7:36:ee:09:a7:2b:
a5:2f:d9:7e:af:45:67:49:3b:04:42:55:63:24:be:7b:06:ea:
ae:b2:7d:50:04:e1:dc:ae:3c:12:22:34:69:bc:01:d7:85:e6:
a1:53:77:53:d6:4e:ce:15:88:db:7d:d0:16:05:60:3f:1e:cb:
72:93:1f:b8:fe:1d:91:58:e1:d4:88:f8:41:56:d6:c4:41:7e:
3b:33:11:82:54:c3:f4:45:1f:a9:ae:e8:f4:16:98:64:32:0a:
ee:9d:11:6a:66:5c:7a:6b:da:8f:04:c4:a5:f0:67:e4:77:b5:
ad:c4:7e:56:ab:65:cb:40:a8:4f:3f:ce:dd:5b:59:3e:1f:53:
41:2d:6e:5e:a9:91:78:c6:6a:eb:a0:6f:37:c1:89:98:72:d0:
fe:02:43:e4:50:3b:2c:ff:1c:e3:7a:1f:c2:49:3c:28:30:00:
7f:85:08:00:23:bf:8e:02:ef:80:a0:5d:85:1f:7c:4f:a4:62:
50:79:d4:5e:0b:e2:bf:f4:9f:08:2f:8f:7d:68:bc:7a:fe:77:
23:a4:b9:d0:c7:21:c8:f5:96:94:dc:5c:65:1d:fd:c2:c4:af:
99:15:f6:15
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ4h1g24AgPntn/ervvPjplLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYTc2OTI5Y2JlMjFjZWRkOTRjMDEyYmE1OGJiMGI2ZjEy
OTcyMmUwHhcNMjYwNTEzMTQ1NTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWQ1NzQxNmE4MzhkYmI5OTgyMTQxYjk3NDE3MmYyZWIzYzBjNGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm34PGPh+4LVXw77HZQGx3eXcXiU
LX8E3qPbY/U2Gei4CMK/Y7oGJoBDLkuqYm9a2y0F5WboTdlCxtaj5EldFtD4ojYF
xRbjY5NDkJ1VPkNxd/qwtaen03//4zbPBW0jOoRul1f2WhWJet3fsoEAUgkHHDxg
V3+SdL4NVeNW9nku7prHwWHCEJYTG2xFtdG/sYUKAD3iUKlnYz4OwkD5jIw78Ino
BcCm5iyTHOqJLId8JAwW++RzoSkyTGF1b0vx/XUKo+BsPsoYsgQlnhcLTkgPl88l
suM36fEZzePfgCBexjSLzrQJ6OQCGlrww2vWnzsVVzXidHVh5R3AGWK77wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJnVdBaoONu5mCFBuXQXLy6zwMSgMB8GA1UdIwQY
MBaAFHCnaSnL4hzt2UwBK6WLsLbxKXIuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0tkcEtjdmlITzNaVEFFcnBZdXd0dkVwY2k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wMTRmNDctNjI4Yi00ZmI4LWIzNDQt
YTQwOWUyMmEyNDNlLzEvbWRWMEZxZzQyN21ZSVVHNWRCY3ZMclBBeEtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8wMTRmNDctNjI4Yi00ZmI4LWIzNDQtYTQwOWUyMmEyNDNl
LzEvY0tkcEtjdmlITzNaVEFFcnBZdXd0dkVwY2k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuRnhAwQA
uRnjMA0GCSqGSIb3DQEBCwUAA4IBAQATrf9w5BHs5S8L5SYhQOl/ghGo1jTYEO2Q
Dhq8mIvnNu4JpyulL9l+r0VnSTsEQlVjJL57Buqusn1QBOHcrjwSIjRpvAHXheah
U3dT1k7OFYjbfdAWBWA/Hstykx+4/h2RWOHUiPhBVtbEQX47MxGCVMP0RR+pruj0
FphkMgrunRFqZlx6a9qPBMSl8Gfkd7WtxH5Wq2XLQKhPP87dW1k+H1NBLW5eqZF4
xmrroG83wYmYctD+AkPkUDss/xzjeh/CSTwoMAB/hQgAI7+OAu+AoF2FH3xPpGJQ
edReC+K/9J8IL499aLx6/ncjpLnQxyHI9ZaU3FxlHf3CxK+ZFfYV
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:39:06 2026 by rpki-client