Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/iCtNp6lUje_AgO9yYeqMkNSwyv4.roa
File: iCtNp6lUje_AgO9yYeqMkNSwyv4.roa (raw, json)
Hash identifier: CvKrsJNF07tEoYugNsdQgzyUNLDcllXE/bP3Vd/nJfI=
Subject key identifier: 88:2B:4D:A7:A9:54:8D:EF:C0:80:EF:72:61:EA:8C:90:D4:B0:CA:FE
Certificate issuer: /CN=cdbb8026d6492603afa413d7354f7e4f15947f2a
Certificate serial: 01A0A030F938B6A2FBBF89034074FED65658
Authority key identifier: CD:BB:80:26:D6:49:26:03:AF:A4:13:D7:35:4F:7E:4F:15:94:7F:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/iCtNp6lUje_AgO9yYeqMkNSwyv4.roa
Signing time: Mon 14 Sep 2026 13:52:39 +0000
ROA not before: Mon 14 Sep 2026 13:52:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 185.72.240.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:30:f9:38:b6:a2:fb:bf:89:03:40:74:fe:d6:56:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbb8026d6492603afa413d7354f7e4f15947f2a
Validity
Not Before: Sep 14 13:52:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=882b4da7a9548defc080ef7261ea8c90d4b0cafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b1:a1:a2:04:68:49:aa:37:b3:09:b7:e7:52:
a8:e4:9f:ac:16:1b:db:e8:27:85:c3:bd:cf:c6:e1:
90:03:a7:f9:37:ea:58:10:28:54:a9:e3:0d:53:70:
c0:93:90:0d:d5:e7:68:2e:5a:4f:71:05:31:79:a4:
56:15:af:83:e5:f9:98:b4:f0:07:7c:d0:18:2b:f6:
bb:ab:b8:93:2c:4a:f4:49:8a:fc:b6:c2:a9:fb:3e:
1b:b1:94:a8:ab:8d:d2:bb:6e:08:57:eb:b3:d3:4c:
04:2f:f6:a9:c4:f8:9e:b8:13:68:f2:60:11:45:05:
db:b0:9c:33:a5:9d:ea:bb:95:d3:78:1a:7c:e6:23:
bd:ca:f4:64:1f:c2:56:16:47:6c:ae:7f:0d:11:7e:
ea:66:fc:3e:74:cb:a0:3e:7a:99:e9:e2:32:3f:20:
03:4e:ed:3a:6f:c2:34:dc:e4:ee:f5:2e:51:dd:48:
64:c5:c6:8e:11:b3:f2:d7:07:7f:05:8c:99:64:02:
24:73:04:27:9b:73:83:59:c2:34:ac:a1:83:f7:6c:
d6:64:49:2e:c3:8a:1f:71:af:53:12:f6:24:0d:54:
5a:ac:d6:b9:dc:f5:61:13:0a:ba:2a:4f:f5:7b:af:
d9:3d:c6:18:89:57:09:48:d2:5d:5a:7b:25:05:5a:
04:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2B:4D:A7:A9:54:8D:EF:C0:80:EF:72:61:EA:8C:90:D4:B0:CA:FE
X509v3 Authority Key Identifier:
keyid:CD:BB:80:26:D6:49:26:03:AF:A4:13:D7:35:4F:7E:4F:15:94:7F:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbuAJtZJJgOvpBPXNU9-TxWUfyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/iCtNp6lUje_AgO9yYeqMkNSwyv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/zbuAJtZJJgOvpBPXNU9-TxWUfyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.240.0/22
Signature Algorithm: sha256WithRSAEncryption
35:db:d4:14:0a:bb:37:50:4c:4e:c7:c4:92:bb:b3:49:f4:a6:
fc:92:20:41:60:93:42:f4:72:af:d5:63:1d:22:45:69:53:ed:
1b:32:d7:72:f1:36:f0:2f:4a:eb:4b:16:02:50:97:93:d0:0b:
12:64:d6:a9:99:33:63:13:a9:8a:a9:89:87:59:7c:ee:69:da:
4a:6b:c4:d2:c0:6c:94:6e:52:d4:e6:b6:18:bb:a4:e5:3a:14:
24:4d:79:da:d7:90:28:57:94:35:b4:d5:97:b7:08:5b:26:5d:
8a:71:cd:9a:e7:5d:7b:84:f5:40:65:1f:f9:9c:6c:e1:3b:85:
14:56:c9:5f:2c:f1:a6:0f:68:25:06:8a:77:3f:6c:e4:01:e0:
ae:32:93:5f:e3:e0:8b:4b:87:45:94:2b:97:30:1d:77:f5:90:
51:7a:d8:d6:5c:d5:6b:1b:b3:eb:61:4c:a4:05:3c:8f:8c:1a:
50:7f:9b:4f:df:62:ae:41:61:18:6d:93:de:c1:43:f5:69:6c:
57:fb:89:62:24:80:3d:b7:37:75:df:37:01:05:b7:22:61:60:
00:f8:70:6c:8a:06:4d:3c:15:41:86:50:ea:ed:44:f3:eb:a2:
d9:4c:2c:79:fa:d5:4e:88:64:6c:96:2a:71:1f:70:95:b7:b2:
44:68:42:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCgMPk4tqL7v4kDQHT+1lZYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYmI4MDI2ZDY0OTI2MDNhZmE0MTNkNzM1NGY3ZTRmMTU5
NDdmMmEwHhcNMjYwOTE0MTM1MjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODJiNGRhN2E5NTQ4ZGVmYzA4MGVmNzI2MWVhOGM5MGQ0YjBjYWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87GhogRoSao3swm351Ko5J+sFhvb
6CeFw73PxuGQA6f5N+pYEChUqeMNU3DAk5AN1edoLlpPcQUxeaRWFa+D5fmYtPAH
fNAYK/a7q7iTLEr0SYr8tsKp+z4bsZSoq43Su24IV+uz00wEL/apxPieuBNo8mAR
RQXbsJwzpZ3qu5XTeBp85iO9yvRkH8JWFkdsrn8NEX7qZvw+dMugPnqZ6eIyPyAD
Tu06b8I03OTu9S5R3UhkxcaOEbPy1wd/BYyZZAIkcwQnm3ODWcI0rKGD92zWZEku
w4ofca9TEvYkDVRarNa53PVhEwq6Kk/1e6/ZPcYYiVcJSNJdWnslBVoEiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIgrTaepVI3vwIDvcmHqjJDUsMr+MB8GA1UdIwQY
MBaAFM27gCbWSSYDr6QT1zVPfk8VlH8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemJ1QUp0WkpKZ092cEJQWE5VOS1UeFdVZnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS82OWVkMjktYWY0ZS00NTI0LWFkZmIt
ZTE1NDM3MzgwMDk5LzEvaUN0TnA2bFVqZV9BZ085eVllcU1rTlN3eXY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS82OWVkMjktYWY0ZS00NTI0LWFkZmItZTE1NDM3MzgwMDk5
LzEvemJ1QUp0WkpKZ092cEJQWE5VOS1UeFdVZnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUjwMA0G
CSqGSIb3DQEBCwUAA4IBAQA129QUCrs3UExOx8SSu7NJ9Kb8kiBBYJNC9HKv1WMd
IkVpU+0bMtdy8TbwL0rrSxYCUJeT0AsSZNapmTNjE6mKqYmHWXzuadpKa8TSwGyU
blLU5rYYu6TlOhQkTXna15AoV5Q1tNWXtwhbJl2Kcc2a5117hPVAZR/5nGzhO4UU
VslfLPGmD2glBop3P2zkAeCuMpNf4+CLS4dFlCuXMB139ZBRetjWXNVrG7PrYUyk
BTyPjBpQf5tP32KuQWEYbZPewUP1aWxX+4liJIA9tzd13zcBBbciYWAA+HBsigZN
PBVBhlDq7UTz66LZTCx5+tVOiGRslipxH3CVt7JEaELK
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:53:58 2026 by rpki-client