Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/2smISjiMOdhhLybRw82zMy-vIO0.roa
File: 2smISjiMOdhhLybRw82zMy-vIO0.roa (raw, json)
Hash identifier: 2L7fwhr1tYTQ62tCJQA9HHtzYPaQAkvmNKBAOPh7RI0=
Subject key identifier: DA:C9:88:4A:38:8C:39:D8:61:2F:26:D1:C3:CD:B3:33:2F:AF:20:ED
Certificate issuer: /CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Certificate serial: 019F93B66240265940E736D7ADE402958234
Authority key identifier: E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/2smISjiMOdhhLybRw82zMy-vIO0.roa
Signing time: Fri 24 Jul 2026 10:40:31 +0000
ROA not before: Fri 24 Jul 2026 10:40:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 185.230.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:b6:62:40:26:59:40:e7:36:d7:ad:e4:02:95:82:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Validity
Not Before: Jul 24 10:40:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dac9884a388c39d8612f26d1c3cdb3332faf20ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:07:64:cd:7d:8e:53:e0:9b:19:10:08:37:03:
bc:19:b7:aa:61:d7:57:54:d0:21:c1:a9:aa:bd:62:
d1:03:4d:c0:4b:8f:3e:6a:2a:2c:33:f4:08:b7:b5:
d7:7b:b7:23:74:e3:04:61:99:29:1e:ad:54:b3:39:
36:7a:b9:95:f2:80:a3:87:53:37:db:f2:1e:88:65:
40:4c:6d:16:02:d4:ba:5f:4b:df:bf:2b:90:61:35:
f5:37:50:03:5b:a7:55:a9:ea:25:7c:ba:45:31:e7:
e6:f0:0e:5b:cf:56:e2:9f:d1:46:b7:e1:8f:60:f7:
f8:6e:59:9b:83:bd:b5:78:ca:88:96:a7:52:f2:a1:
59:0d:27:d8:10:fe:19:41:bc:77:70:ee:53:c5:8a:
05:2d:34:7e:21:26:ec:11:1d:f7:3f:8a:e7:41:cb:
d1:fc:6b:db:9a:f7:cb:96:33:57:d0:67:96:93:1c:
e4:b7:69:4e:e0:f1:51:f8:58:ea:d6:a8:1d:2c:73:
2a:de:66:a6:1a:25:5a:93:f0:ca:2b:77:42:7a:21:
27:7a:3e:2a:6a:0e:9e:0f:ee:33:7e:46:ee:73:19:
0d:32:80:07:59:c0:d0:d9:ce:77:ee:68:2f:c0:8a:
65:eb:ad:0d:82:93:e5:61:78:b8:09:ac:15:02:0b:
72:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C9:88:4A:38:8C:39:D8:61:2F:26:D1:C3:CD:B3:33:2F:AF:20:ED
X509v3 Authority Key Identifier:
keyid:E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/2smISjiMOdhhLybRw82zMy-vIO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.230.0/24
Signature Algorithm: sha256WithRSAEncryption
29:c7:66:93:7a:d2:91:39:c9:a7:ca:cd:4b:56:0f:ca:88:76:
62:c2:be:d3:b4:bf:af:63:aa:5f:83:04:c0:6d:3c:f0:91:5f:
75:f0:b3:84:35:92:2f:5f:b8:ba:3c:62:a5:2c:e2:a8:37:03:
df:38:f8:a3:13:39:28:7e:73:28:27:f5:4e:e4:d7:7b:43:aa:
72:8d:9c:43:b7:46:38:07:d5:12:5f:4c:68:53:74:80:a5:7a:
ff:25:e0:b7:81:d1:ae:f0:86:fc:d1:b9:7a:0d:30:36:ec:1f:
70:01:72:5b:52:5b:39:4e:e5:d0:44:40:d2:13:fc:09:1a:f2:
ed:65:cc:e1:3d:de:8e:0d:94:69:e7:33:83:ba:d1:71:e6:cc:
77:58:9e:8b:9e:59:3b:74:79:7f:7d:1c:96:b8:cd:a1:34:54:
ab:f0:7f:e8:5d:1b:ed:72:30:59:a6:78:ba:0b:45:31:9a:42:
0a:34:05:0a:46:56:56:ec:28:d7:bb:a8:66:e6:5c:20:69:96:
e7:38:c7:b8:5d:c7:a5:9d:7d:f3:33:20:89:07:f3:7e:3b:6e:
d2:25:38:d5:81:72:b0:c1:a6:05:ad:19:07:06:8e:f6:c3:97:
68:b8:7e:5c:ff:3e:d3:93:ee:de:ce:d1:6b:ff:47:61:cd:7c:
36:6c:ad:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+TtmJAJllA5zbXreQClYI0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZjFkZWRhZjRkYmRhNjBkYTk5MGQ2ODU2NTBlNjhjODg4
YzYxMDAwHhcNMjYwNzI0MTA0MDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWM5ODg0YTM4OGMzOWQ4NjEyZjI2ZDFjM2NkYjMzMzJmYWYyMGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngdkzX2OU+CbGRAINwO8GbeqYddX
VNAhwamqvWLRA03AS48+aiosM/QIt7XXe7cjdOMEYZkpHq1Uszk2ermV8oCjh1M3
2/IeiGVATG0WAtS6X0vfvyuQYTX1N1ADW6dVqeolfLpFMefm8A5bz1bin9FGt+GP
YPf4blmbg721eMqIlqdS8qFZDSfYEP4ZQbx3cO5TxYoFLTR+ISbsER33P4rnQcvR
/GvbmvfLljNX0GeWkxzkt2lO4PFR+Fjq1qgdLHMq3mamGiVak/DKK3dCeiEnej4q
ag6eD+4zfkbucxkNMoAHWcDQ2c537mgvwIpl660NgpPlYXi4CawVAgtyDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNrJiEo4jDnYYS8m0cPNszMvryDtMB8GA1UdIwQY
MBaAFObx3tr029pg2pkNaFZQ5oyIjGEAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXZIZTJ2VGIybURhbVExb1ZsRG1qSWlNWVFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8yM2JhNDYtZmM3YS00Yjk3LThiNGYt
MjMxNjU3ODI5ZWY1LzEvMnNtSVNqaU1PZGhoTHliUnc4MnpNeS12SU8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8yM2JhNDYtZmM3YS00Yjk3LThiNGYtMjMxNjU3ODI5ZWY1
LzEvNXZIZTJ2VGIybURhbVExb1ZsRG1qSWlNWVFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuebmMA0G
CSqGSIb3DQEBCwUAA4IBAQApx2aTetKROcmnys1LVg/KiHZiwr7TtL+vY6pfgwTA
bTzwkV918LOENZIvX7i6PGKlLOKoNwPfOPijEzkofnMoJ/VO5Nd7Q6pyjZxDt0Y4
B9USX0xoU3SApXr/JeC3gdGu8Ib80bl6DTA27B9wAXJbUls5TuXQREDSE/wJGvLt
ZczhPd6ODZRp5zODutFx5sx3WJ6Lnlk7dHl/fRyWuM2hNFSr8H/oXRvtcjBZpni6
C0UxmkIKNAUKRlZW7CjXu6hm5lwgaZbnOMe4XcelnX3zMyCJB/N+O27SJTjVgXKw
waYFrRkHBo72w5douH5c/z7Tk+7eztFr/0dhzXw2bK1v
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:19:16 2026 by rpki-client