Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/05c3fa-4c01-44e8-8d88-46de61ff4cef/1/_rJomAVDyaUPIP51qpIHk0he1_A.roa
File: _rJomAVDyaUPIP51qpIHk0he1_A.roa (raw, json)
Hash identifier: LACdANMwb01Joa8dmiDnz13f/H7H+NN+qC4YeeakcbU=
Subject key identifier: FE:B2:68:98:05:43:C9:A5:0F:20:FE:75:AA:92:07:93:48:5E:D7:F0
Certificate issuer: /CN=43ba531af57679e0211bd6941b5c188f00a0c25a
Certificate serial: 01A01F1D95AC7A5C9B81FAA7DDD0D4793C88
Authority key identifier: 43:BA:53:1A:F5:76:79:E0:21:1B:D6:94:1B:5C:18:8F:00:A0:C2:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7pTGvV2eeAhG9aUG1wYjwCgwlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/05c3fa-4c01-44e8-8d88-46de61ff4cef/1/_rJomAVDyaUPIP51qpIHk0he1_A.roa
Signing time: Thu 20 Aug 2026 12:20:27 +0000
ROA not before: Thu 20 Aug 2026 12:20:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25330
IP address blocks: 193.110.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/05c3fa-4c01-44e8-8d88-46de61ff4cef/1/Q7pTGvV2eeAhG9aUG1wYjwCgwlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/05c3fa-4c01-44e8-8d88-46de61ff4cef/1/Q7pTGvV2eeAhG9aUG1wYjwCgwlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q7pTGvV2eeAhG9aUG1wYjwCgwlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:1d:95:ac:7a:5c:9b:81:fa:a7:dd:d0:d4:79:3c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ba531af57679e0211bd6941b5c188f00a0c25a
Validity
Not Before: Aug 20 12:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=feb268980543c9a50f20fe75aa920793485ed7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:99:10:a1:eb:ee:d6:bb:2f:0a:95:57:2c:58:
3c:b5:de:ee:3a:b5:8c:3e:f9:01:3f:b0:b7:d9:11:
e6:16:ec:64:b1:a9:f1:bb:d4:49:38:5c:4d:e8:b0:
38:a5:a2:65:24:66:35:3e:3a:51:59:36:70:46:9b:
88:63:f8:24:bc:b9:b7:68:08:e8:98:59:63:71:ec:
3e:d7:1a:39:c7:8e:13:c3:12:57:29:06:d3:02:b8:
26:75:9c:f2:7c:93:04:a9:23:e4:a9:eb:49:7b:36:
7e:2e:e8:06:b3:bb:9c:76:70:2e:fe:84:54:a5:5b:
ef:ff:cb:b0:e5:11:91:8e:da:04:d8:ef:75:1a:3c:
c7:c0:cd:b5:8d:39:82:5a:e5:85:1d:b2:dc:e0:16:
77:a5:c1:f3:16:77:89:7e:53:97:cd:73:dd:04:26:
e0:ba:6c:da:2a:7e:96:8e:3a:c7:e4:5c:c9:2f:1f:
56:5a:b0:16:4c:fe:9b:4e:48:61:0c:6f:d0:c0:98:
a9:df:fa:6b:42:8f:40:9a:38:ae:c3:4d:d1:63:23:
01:93:16:8e:3c:16:d9:91:19:b6:03:cd:5f:5c:4a:
dd:f9:23:43:06:18:0a:6b:04:b1:6e:80:6c:36:6c:
d7:7f:b1:44:91:35:36:2e:05:38:d5:13:98:68:15:
aa:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B2:68:98:05:43:C9:A5:0F:20:FE:75:AA:92:07:93:48:5E:D7:F0
X509v3 Authority Key Identifier:
keyid:43:BA:53:1A:F5:76:79:E0:21:1B:D6:94:1B:5C:18:8F:00:A0:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7pTGvV2eeAhG9aUG1wYjwCgwlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/05c3fa-4c01-44e8-8d88-46de61ff4cef/1/_rJomAVDyaUPIP51qpIHk0he1_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/05c3fa-4c01-44e8-8d88-46de61ff4cef/1/Q7pTGvV2eeAhG9aUG1wYjwCgwlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.172.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:c7:ea:e8:d7:ca:67:e0:f3:47:18:7d:3b:77:6d:36:a3:80:
3a:ab:88:5a:8c:c3:69:91:0e:71:e4:8e:1b:cc:e1:0e:2f:b6:
b3:a0:81:97:93:44:79:8d:ab:85:e3:d6:5b:e1:2a:6a:61:f2:
07:fc:f7:7d:e4:dc:15:81:bc:f7:13:d3:ee:b0:8c:95:6c:a4:
68:7d:3d:e1:d9:3c:31:ee:3e:dc:25:0f:e0:91:08:66:07:f7:
7d:99:9a:a3:9a:85:5e:8d:4b:79:80:f6:99:0b:58:bf:1a:66:
9c:52:3e:cc:ac:bc:4c:90:34:6f:f2:73:11:05:e2:83:84:ac:
0b:64:9a:fb:1e:ff:9f:2b:62:8c:2e:ba:25:68:04:bd:cb:70:
4a:eb:ab:88:28:21:cd:7d:38:7e:1d:fe:b5:a2:02:3a:d2:30:
61:b3:a5:b0:e6:e8:e1:d7:32:a1:b7:58:af:2f:af:c1:58:ca:
5a:0b:49:75:ef:80:42:7b:a7:d8:54:31:4b:c4:33:4a:7c:e0:
17:11:10:17:31:72:2e:fc:bc:1e:59:a3:ea:44:9b:3f:d2:a7:
21:4e:25:f4:50:4c:0b:99:b5:09:19:0b:f1:f2:17:95:ec:9d:
ec:13:26:14:80:01:e8:c9:16:32:17:09:9a:86:cf:df:bd:7b:
ca:31:31:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAfHZWselybgfqn3dDUeTyIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYmE1MzFhZjU3Njc5ZTAyMTFiZDY5NDFiNWMxODhmMDBh
MGMyNWEwHhcNMjYwODIwMTIyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWIyNjg5ODA1NDNjOWE1MGYyMGZlNzVhYTkyMDc5MzQ4NWVkN2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5kQoevu1rsvCpVXLFg8td7uOrWM
PvkBP7C32RHmFuxksanxu9RJOFxN6LA4paJlJGY1PjpRWTZwRpuIY/gkvLm3aAjo
mFljcew+1xo5x44TwxJXKQbTArgmdZzyfJMEqSPkqetJezZ+LugGs7ucdnAu/oRU
pVvv/8uw5RGRjtoE2O91GjzHwM21jTmCWuWFHbLc4BZ3pcHzFneJflOXzXPdBCbg
umzaKn6WjjrH5FzJLx9WWrAWTP6bTkhhDG/QwJip3/prQo9Amjiuw03RYyMBkxaO
PBbZkRm2A81fXErd+SNDBhgKawSxboBsNmzXf7FEkTU2LgU41ROYaBWq6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP6yaJgFQ8mlDyD+daqSB5NIXtfwMB8GA1UdIwQY
MBaAFEO6Uxr1dnngIRvWlBtcGI8AoMJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTdwVEd2VjJlZUFoRzlhVUcxd1lqd0Nnd2xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8wNWMzZmEtNGMwMS00NGU4LThkODgt
NDZkZTYxZmY0Y2VmLzEvX3JKb21BVkR5YVVQSVA1MXFwSUhrMGhlMV9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8wNWMzZmEtNGMwMS00NGU4LThkODgtNDZkZTYxZmY0Y2Vm
LzEvUTdwVEd2VjJlZUFoRzlhVUcxd1lqd0Nnd2xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwW6sMA0G
CSqGSIb3DQEBCwUAA4IBAQC2x+ro18pn4PNHGH07d202o4A6q4hajMNpkQ5x5I4b
zOEOL7azoIGXk0R5jauF49Zb4SpqYfIH/Pd95NwVgbz3E9PusIyVbKRofT3h2Twx
7j7cJQ/gkQhmB/d9mZqjmoVejUt5gPaZC1i/GmacUj7MrLxMkDRv8nMRBeKDhKwL
ZJr7Hv+fK2KMLrolaAS9y3BK66uIKCHNfTh+Hf61ogI60jBhs6Ww5ujh1zKht1iv
L6/BWMpaC0l174BCe6fYVDFLxDNKfOAXERAXMXIu/LweWaPqRJs/0qchTiX0UEwL
mbUJGQvx8heV7J3sEyYUgAHoyRYyFwmahs/fvXvKMTH2
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:26:30 2026 by rpki-client