Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/SV8q6Z5-8w1GEMHCKZorWE8eTtQ.roa
File: SV8q6Z5-8w1GEMHCKZorWE8eTtQ.roa (raw, json)
Hash identifier: Ewdpo+CTlyPEkAk0HFpeVmLoOfbSpUi2qqrFa/JWyEE=
Subject key identifier: 49:5F:2A:E9:9E:7E:F3:0D:46:10:C1:C2:29:9A:2B:58:4F:1E:4E:D4
Certificate issuer: /CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Certificate serial: 019EBB4CC743AC8BDC77BF786228843E13A2
Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/SV8q6Z5-8w1GEMHCKZorWE8eTtQ.roa
Signing time: Fri 12 Jun 2026 10:07:11 +0000
ROA not before: Fri 12 Jun 2026 10:07:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201679
IP address blocks: 185.64.132.0/22 maxlen: 22
185.64.132.0/24 maxlen: 24
185.64.134.0/24 maxlen: 24
185.64.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:4c:c7:43:ac:8b:dc:77:bf:78:62:28:84:3e:13:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Validity
Not Before: Jun 12 10:07:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=495f2ae99e7ef30d4610c1c2299a2b584f1e4ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:47:4a:85:01:cb:97:96:0c:60:e5:de:f8:
0b:67:86:47:1e:ea:50:fa:65:31:6c:8d:dc:83:7d:
1d:28:ff:1a:f1:19:b3:98:64:e4:c3:52:ea:88:9c:
f9:ef:31:1c:f2:4a:5a:59:87:55:f1:7d:d8:4b:6f:
2c:7d:15:5f:46:19:ef:ba:40:d0:5f:7e:ed:d4:99:
8a:1a:1f:66:a9:08:71:a6:7d:cc:22:f8:b4:d4:ee:
0f:f9:3c:ac:31:03:4d:36:3a:0f:e6:d0:ab:7a:d7:
18:b7:d5:2f:df:32:ea:7c:9e:2e:87:59:b7:49:d4:
b4:c4:d9:d2:8e:df:a0:d5:b5:d5:04:27:9b:9e:c8:
73:a2:b0:47:9a:03:c3:f8:4f:9a:8e:ac:b6:1d:29:
c1:fe:7b:36:d2:f8:5e:ee:9a:1d:7e:9e:70:7a:9f:
53:ce:d2:6e:be:08:92:57:13:57:d9:75:e0:b6:76:
ec:64:d1:64:ec:1a:dc:b8:44:d7:ca:f4:70:df:92:
82:e8:d7:7a:5c:19:00:f3:26:82:7f:7d:24:4f:ff:
d9:81:89:be:53:cf:52:5d:39:dd:03:bc:11:a3:7e:
6c:a0:d1:ba:a3:5c:da:68:14:fb:36:6e:84:d2:a9:
50:94:00:53:0e:7a:7f:d0:16:e0:85:89:64:d9:a2:
86:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5F:2A:E9:9E:7E:F3:0D:46:10:C1:C2:29:9A:2B:58:4F:1E:4E:D4
X509v3 Authority Key Identifier:
keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/SV8q6Z5-8w1GEMHCKZorWE8eTtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.132.0/22
Signature Algorithm: sha256WithRSAEncryption
02:f1:9b:3a:b7:b2:de:16:50:40:f2:bf:5f:bb:47:97:85:52:
38:77:d6:16:09:ff:1d:1b:2f:dc:23:b5:f9:c3:b2:63:a2:d9:
4e:65:15:27:f4:33:4d:87:8a:9c:b5:b4:fe:2e:e4:b7:dd:5f:
03:50:af:e2:d1:99:06:55:4f:7c:3a:86:ad:30:c3:d3:da:17:
8e:7e:cf:03:8d:fe:57:49:5e:59:a5:0b:23:1c:d8:f6:50:b5:
ea:5d:a1:86:35:6d:19:b3:47:35:af:8f:4c:05:58:4f:12:f4:
ab:16:61:d8:9c:cb:69:f3:8f:32:dc:a1:ae:b8:1e:1e:d7:6b:
2f:47:41:ac:12:fb:0d:82:4e:e6:ad:47:6e:6b:43:3b:65:78:
83:8e:42:bc:4d:ee:45:76:e6:63:1e:27:89:aa:cf:34:ee:e6:
69:f5:f5:09:0a:7a:ef:1f:10:e2:06:48:d2:c0:17:84:4a:8e:
f5:e0:c2:0e:f7:9b:59:83:a1:9d:90:25:16:fa:a3:59:af:88:
6c:ae:d0:cb:40:e6:fe:ae:60:62:ae:ac:c3:71:7f:70:3f:05:
ce:59:9c:8c:45:72:ef:57:b7:a9:0f:fc:be:e0:22:7c:61:7b:
24:e4:86:da:22:bb:5d:24:dd:f0:cb:16:6c:1f:ab:06:28:f4:
10:cc:dd:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ67TMdDrIvcd794YiiEPhOiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMjg2ZDAzYTM3M2JkNjg5ZWYwNDYxMGExYzhhZDg0NzNl
YmRkYWQwHhcNMjYwNjEyMTAwNzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTVmMmFlOTllN2VmMzBkNDYxMGMxYzIyOTlhMmI1ODRmMWU0ZWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpRHSoUBy5eWDGDl3vgLZ4ZHHupQ
+mUxbI3cg30dKP8a8RmzmGTkw1LqiJz57zEc8kpaWYdV8X3YS28sfRVfRhnvukDQ
X37t1JmKGh9mqQhxpn3MIvi01O4P+TysMQNNNjoP5tCretcYt9Uv3zLqfJ4uh1m3
SdS0xNnSjt+g1bXVBCebnshzorBHmgPD+E+ajqy2HSnB/ns20vhe7podfp5wep9T
ztJuvgiSVxNX2XXgtnbsZNFk7BrcuETXyvRw35KC6Nd6XBkA8yaCf30kT//ZgYm+
U89SXTndA7wRo35soNG6o1zaaBT7Nm6E0qlQlABTDnp/0BbghYlk2aKGVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFElfKumefvMNRhDBwimaK1hPHk7UMB8GA1UdIwQY
MBaAFN4obQOjc71onvBGEKHIrYRz692tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2lodEE2Tnp2V2llOEVZUW9jaXRoSFByM2EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kYmVmMTctOWJiOC00NmJjLTkzNDMt
Y2FkZjBjYTFkZDBkLzEvU1Y4cTZaNS04dzFHRU1IQ0tab3JXRThlVHRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9kYmVmMTctOWJiOC00NmJjLTkzNDMtY2FkZjBjYTFkZDBk
LzEvM2lodEE2Tnp2V2llOEVZUW9jaXRoSFByM2EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUCEMA0G
CSqGSIb3DQEBCwUAA4IBAQAC8Zs6t7LeFlBA8r9fu0eXhVI4d9YWCf8dGy/cI7X5
w7JjotlOZRUn9DNNh4qctbT+LuS33V8DUK/i0ZkGVU98OoatMMPT2heOfs8Djf5X
SV5ZpQsjHNj2ULXqXaGGNW0Zs0c1r49MBVhPEvSrFmHYnMtp848y3KGuuB4e12sv
R0GsEvsNgk7mrUdua0M7ZXiDjkK8Te5FduZjHieJqs807uZp9fUJCnrvHxDiBkjS
wBeESo714MIO95tZg6GdkCUW+qNZr4hsrtDLQOb+rmBirqzDcX9wPwXOWZyMRXLv
V7epD/y+4CJ8YXsk5IbaIrtdJN3wyxZsH6sGKPQQzN2+
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:07:59 2026 by rpki-client