Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/567b26-cea2-4718-9ed9-1f11d6548e47/1/aOYeOR8kNpGhgTGa065oNDHViOM.roa
File: aOYeOR8kNpGhgTGa065oNDHViOM.roa (raw, json)
Hash identifier: 1L5hbywEgKLH28eaUqvwqyWB43iSkzvvBeWctA6+Ewc=
Subject key identifier: 68:E6:1E:39:1F:24:36:91:A1:81:31:9A:D3:AE:68:34:31:D5:88:E3
Certificate issuer: /CN=274d2d532eb192b4a4c106cafacd1acc9ce28266
Certificate serial: 019E456C767394F6FC2B36B68F05CAEFC3EF
Authority key identifier: 27:4D:2D:53:2E:B1:92:B4:A4:C1:06:CA:FA:CD:1A:CC:9C:E2:82:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J00tUy6xkrSkwQbK-s0azJzigmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/567b26-cea2-4718-9ed9-1f11d6548e47/1/aOYeOR8kNpGhgTGa065oNDHViOM.roa
Signing time: Wed 20 May 2026 12:46:36 +0000
ROA not before: Wed 20 May 2026 12:46:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 195.214.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/567b26-cea2-4718-9ed9-1f11d6548e47/1/J00tUy6xkrSkwQbK-s0azJzigmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/567b26-cea2-4718-9ed9-1f11d6548e47/1/J00tUy6xkrSkwQbK-s0azJzigmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J00tUy6xkrSkwQbK-s0azJzigmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:45:6c:76:73:94:f6:fc:2b:36:b6:8f:05:ca:ef:c3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274d2d532eb192b4a4c106cafacd1acc9ce28266
Validity
Not Before: May 20 12:46:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68e61e391f243691a181319ad3ae683431d588e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:61:5e:26:93:8d:6c:0e:77:da:a9:b5:86:23:
73:4c:9e:61:93:08:7c:5f:21:0d:99:65:46:34:e1:
b5:cd:6f:27:d8:14:ad:74:17:30:09:14:f8:b9:cd:
b1:39:84:70:91:68:99:2f:33:0e:d8:6e:6c:ca:de:
ab:22:ac:7e:de:87:a2:6a:12:5b:aa:4a:8b:ef:e7:
51:de:dc:1f:40:aa:3d:99:29:9c:00:11:57:80:4d:
89:c4:fc:65:f6:c4:9b:77:25:b3:11:2b:c9:02:b9:
97:dd:82:be:10:a2:75:69:58:f2:63:8e:14:e3:1e:
ce:b3:6e:4a:aa:04:92:d7:de:30:26:04:d9:65:c5:
d9:04:c0:1b:2f:9b:e1:88:e1:5b:c5:f7:4a:ad:57:
cf:f9:48:9d:e9:ab:24:7b:5c:f3:6b:55:45:a8:d5:
b4:a8:b2:1f:c3:0b:02:4e:cd:f8:ab:61:95:89:41:
ec:ff:dd:8c:44:b8:b3:14:69:bb:bc:3b:80:64:3e:
f0:3e:50:40:44:35:03:b7:b9:da:9a:e4:6c:6b:b7:
12:a9:55:58:b6:5f:90:9f:c4:2b:cd:f2:ac:0b:e6:
f4:b0:c4:e4:bf:75:d3:0e:f4:be:02:87:ac:6a:72:
72:04:ad:3b:e0:33:3b:62:6c:44:27:54:97:db:3e:
e7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E6:1E:39:1F:24:36:91:A1:81:31:9A:D3:AE:68:34:31:D5:88:E3
X509v3 Authority Key Identifier:
keyid:27:4D:2D:53:2E:B1:92:B4:A4:C1:06:CA:FA:CD:1A:CC:9C:E2:82:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J00tUy6xkrSkwQbK-s0azJzigmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/567b26-cea2-4718-9ed9-1f11d6548e47/1/aOYeOR8kNpGhgTGa065oNDHViOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/567b26-cea2-4718-9ed9-1f11d6548e47/1/J00tUy6xkrSkwQbK-s0azJzigmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.214.216.0/22
Signature Algorithm: sha256WithRSAEncryption
80:87:a0:e8:77:ae:5d:25:d9:f2:9d:a8:32:ef:58:02:5a:81:
be:26:91:9b:6d:ec:88:fc:a1:d0:e3:07:df:89:a6:e2:f4:1d:
c9:81:17:65:38:eb:3c:5c:55:ee:46:e3:f8:dd:6b:18:31:d0:
b4:ef:ca:db:fc:e8:5c:ea:c9:92:8f:78:dc:67:9f:d4:5c:c4:
e1:0a:77:1d:d4:89:fe:94:24:0f:11:77:e1:5d:c2:42:1a:39:
03:2c:da:24:79:d6:5a:07:ea:30:5e:b9:bf:c4:d4:e3:a5:86:
17:34:c5:ed:a3:18:65:2b:86:21:d0:4b:a7:dc:da:bc:f3:a4:
93:dc:59:4d:6e:30:8e:a2:a0:60:bc:f4:05:ea:2d:fb:54:57:
d4:27:05:01:55:51:b4:72:45:8e:18:36:ca:0d:93:35:d3:d4:
98:a3:c8:44:da:08:25:bb:29:f2:48:bb:50:2f:d3:6e:34:71:
ed:dd:9f:9c:8a:f5:a6:ac:b2:9e:8d:86:ae:0b:8b:b2:b7:20:
ff:f3:4d:30:89:24:5d:c5:9d:e2:c2:31:bc:94:11:c8:ea:98:
79:73:e0:0f:bf:5c:28:d1:1a:53:9e:3b:5b:3b:ea:51:15:d3:
fe:0d:a0:71:62:37:5c:e1:aa:05:bf:75:5c:5b:32:2d:b0:f2:
97:e5:bc:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5FbHZzlPb8Kza2jwXK78PvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NGQyZDUzMmViMTkyYjRhNGMxMDZjYWZhY2QxYWNjOWNl
MjgyNjYwHhcNMjYwNTIwMTI0NjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGU2MWUzOTFmMjQzNjkxYTE4MTMxOWFkM2FlNjgzNDMxZDU4OGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWFeJpONbA532qm1hiNzTJ5hkwh8
XyENmWVGNOG1zW8n2BStdBcwCRT4uc2xOYRwkWiZLzMO2G5syt6rIqx+3oeiahJb
qkqL7+dR3twfQKo9mSmcABFXgE2JxPxl9sSbdyWzESvJArmX3YK+EKJ1aVjyY44U
4x7Os25KqgSS194wJgTZZcXZBMAbL5vhiOFbxfdKrVfP+Uid6aske1zza1VFqNW0
qLIfwwsCTs34q2GViUHs/92MRLizFGm7vDuAZD7wPlBARDUDt7namuRsa7cSqVVY
tl+Qn8QrzfKsC+b0sMTkv3XTDvS+AoesanJyBK074DM7YmxEJ1SX2z7nWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGjmHjkfJDaRoYExmtOuaDQx1YjjMB8GA1UdIwQY
MBaAFCdNLVMusZK0pMEGyvrNGsyc4oJmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjAwdFV5NnhrclNrd1FiSy1zMGF6SnppZ21ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS81NjdiMjYtY2VhMi00NzE4LTllZDkt
MWYxMWQ2NTQ4ZTQ3LzEvYU9ZZU9SOGtOcEdoZ1RHYTA2NW9OREhWaU9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS81NjdiMjYtY2VhMi00NzE4LTllZDktMWYxMWQ2NTQ4ZTQ3
LzEvSjAwdFV5NnhrclNrd1FiSy1zMGF6SnppZ21ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw9bYMA0G
CSqGSIb3DQEBCwUAA4IBAQCAh6Dod65dJdnynagy71gCWoG+JpGbbeyI/KHQ4wff
iabi9B3JgRdlOOs8XFXuRuP43WsYMdC078rb/Ohc6smSj3jcZ5/UXMThCncd1In+
lCQPEXfhXcJCGjkDLNokedZaB+owXrm/xNTjpYYXNMXtoxhlK4Yh0Eun3Nq886ST
3FlNbjCOoqBgvPQF6i37VFfUJwUBVVG0ckWOGDbKDZM109SYo8hE2ggluynySLtQ
L9NuNHHt3Z+civWmrLKejYauC4uytyD/800wiSRdxZ3iwjG8lBHI6ph5c+APv1wo
0RpTnjtbO+pRFdP+DaBxYjdc4aoFv3VcWzItsPKX5bxO
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:38 2026 by rpki-client