Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/4f64ab-9327-4bb4-b986-1c7b4d468d39/1/A87KyXgZxFXcOFcdTP-aqI08c04.roa
File: A87KyXgZxFXcOFcdTP-aqI08c04.roa (raw, json)
Hash identifier: bMlH4UM/eYsz1FGmzC6vUqxk4Fiu/Vplgw62sZLOk7s=
Subject key identifier: 03:CE:CA:C9:78:19:C4:55:DC:38:57:1D:4C:FF:9A:A8:8D:3C:73:4E
Certificate issuer: /CN=bd79028407e36fd3d0fc78d6745322bb0a91ec3e
Certificate serial: 01A0CE0F0AE8AF185CB9A1A117949CCACC8C
Authority key identifier: BD:79:02:84:07:E3:6F:D3:D0:FC:78:D6:74:53:22:BB:0A:91:EC:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXkChAfjb9PQ_HjWdFMiuwqR7D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/4f64ab-9327-4bb4-b986-1c7b4d468d39/1/A87KyXgZxFXcOFcdTP-aqI08c04.roa
Signing time: Wed 23 Sep 2026 11:38:07 +0000
ROA not before: Wed 23 Sep 2026 11:38:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2611
IP address blocks: 192.135.167.0/24 maxlen: 24
192.135.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/4f64ab-9327-4bb4-b986-1c7b4d468d39/1/vXkChAfjb9PQ_HjWdFMiuwqR7D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/4f64ab-9327-4bb4-b986-1c7b4d468d39/1/vXkChAfjb9PQ_HjWdFMiuwqR7D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXkChAfjb9PQ_HjWdFMiuwqR7D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:0f:0a:e8:af:18:5c:b9:a1:a1:17:94:9c:ca:cc:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd79028407e36fd3d0fc78d6745322bb0a91ec3e
Validity
Not Before: Sep 23 11:38:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03cecac97819c455dc38571d4cff9aa88d3c734e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:7f:5e:bf:18:99:be:1d:4e:cf:bc:3a:12:
0c:13:41:b0:74:dc:5f:0a:f5:30:b6:90:a7:94:cc:
5c:d6:05:9b:0d:6c:75:91:0e:69:4e:9e:64:d2:19:
17:4b:44:31:4b:06:f9:b0:3a:d2:19:52:9c:ce:89:
54:3b:eb:6a:05:95:ff:4d:1a:18:bb:1c:1a:fc:f8:
19:23:58:58:8d:8f:fa:04:8b:34:fc:59:a2:4f:e2:
c1:86:4d:11:a7:54:0b:de:f2:b4:04:93:3e:aa:70:
65:f9:47:a2:40:9e:1d:da:90:a0:a3:75:51:53:b0:
50:c7:a3:b3:b2:5f:28:41:58:bc:5f:c4:2b:33:cf:
96:9e:ed:c1:45:49:b3:48:ea:77:43:28:63:2b:c6:
81:da:c8:c0:4f:e6:a4:aa:ed:9b:15:99:2e:6a:a2:
85:1b:bd:fc:48:b8:ab:4a:e8:71:84:f4:10:3a:2c:
79:36:ee:93:ab:15:40:c1:57:22:46:c4:ea:b7:20:
fa:60:19:ac:6a:41:e6:e6:10:e7:3c:33:26:ed:cf:
48:a3:31:d2:d1:0d:7a:5b:5e:bf:f8:fe:10:4f:8e:
ba:82:9e:f0:40:89:99:d6:de:4f:3a:9f:77:32:25:
0b:cd:e0:1a:7e:37:a5:54:dc:a1:8c:d1:03:98:95:
1e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CE:CA:C9:78:19:C4:55:DC:38:57:1D:4C:FF:9A:A8:8D:3C:73:4E
X509v3 Authority Key Identifier:
keyid:BD:79:02:84:07:E3:6F:D3:D0:FC:78:D6:74:53:22:BB:0A:91:EC:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXkChAfjb9PQ_HjWdFMiuwqR7D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/4f64ab-9327-4bb4-b986-1c7b4d468d39/1/A87KyXgZxFXcOFcdTP-aqI08c04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/4f64ab-9327-4bb4-b986-1c7b4d468d39/1/vXkChAfjb9PQ_HjWdFMiuwqR7D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.135.167.0-192.135.168.255
Signature Algorithm: sha256WithRSAEncryption
14:ec:46:5c:c4:2c:bc:df:3c:3e:5f:35:49:f2:f7:82:91:04:
b7:46:bd:08:f8:fe:aa:2c:c2:55:ed:5a:4e:fb:54:7f:bf:24:
5d:cc:0a:a9:59:ed:01:98:f6:d8:52:46:f6:b2:3e:fc:c1:23:
d5:44:15:7e:7a:76:0e:b1:c9:74:a6:54:cb:2f:ce:ca:c6:f3:
70:14:97:ba:ec:77:31:cb:40:d5:21:46:ce:12:4a:15:b2:65:
65:82:48:a4:2b:e0:3b:a9:6a:15:2f:7d:b0:08:44:eb:10:b1:
be:00:4a:f5:3c:0f:65:e9:32:26:90:5c:66:aa:a1:80:dd:f0:
a3:56:36:1f:46:43:0e:9f:f2:b6:55:13:c1:a3:9f:ab:79:61:
24:6b:a0:4f:ba:ef:89:08:0f:52:d7:08:49:d4:6f:c1:f9:00:
69:ed:59:f8:cf:eb:09:eb:05:8b:61:79:30:52:95:c4:c7:5a:
b5:24:af:92:de:d8:b2:5a:92:95:6d:a9:b6:dd:a4:35:63:b6:
2e:c6:e8:c2:90:ea:c3:cf:55:c0:e3:30:25:67:16:31:60:93:
06:8c:78:32:57:31:a1:cf:a9:b3:55:13:66:d0:1d:d5:b7:fb:
2a:1d:90:98:9e:9d:b8:b3:d9:c0:2b:9d:7e:e1:b3:0b:e3:a6:
c0:6b:47:65
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAaDODwrorxhcuaGhF5ScysyMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNzkwMjg0MDdlMzZmZDNkMGZjNzhkNjc0NTMyMmJiMGE5
MWVjM2UwHhcNMjYwOTIzMTEzODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2NlY2FjOTc4MTljNDU1ZGMzODU3MWQ0Y2ZmOWFhODhkM2M3MzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrl/Xr8Ymb4dTs+8OhIME0GwdNxf
CvUwtpCnlMxc1gWbDWx1kQ5pTp5k0hkXS0QxSwb5sDrSGVKczolUO+tqBZX/TRoY
uxwa/PgZI1hYjY/6BIs0/FmiT+LBhk0Rp1QL3vK0BJM+qnBl+UeiQJ4d2pCgo3VR
U7BQx6Ozsl8oQVi8X8QrM8+Wnu3BRUmzSOp3QyhjK8aB2sjAT+akqu2bFZkuaqKF
G738SLirSuhxhPQQOix5Nu6TqxVAwVciRsTqtyD6YBmsakHm5hDnPDMm7c9IozHS
0Q16W16/+P4QT466gp7wQImZ1t5POp93MiULzeAafjelVNyhjNEDmJUeKQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFAPOysl4GcRV3DhXHUz/mqiNPHNOMB8GA1UdIwQY
MBaAFL15AoQH42/T0Px41nRTIrsKkew+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlhrQ2hBZmpiOVBRX0hqV2RGTWl1d3FSN0Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80ZjY0YWItOTMyNy00YmI0LWI5ODYt
MWM3YjRkNDY4ZDM5LzEvQTg3S3lYZ1p4RlhjT0ZjZFRQLWFxSTA4YzA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC80ZjY0YWItOTMyNy00YmI0LWI5ODYtMWM3YjRkNDY4ZDM5
LzEvdlhrQ2hBZmpiOVBRX0hqV2RGTWl1d3FSN0Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADAh6cD
BADAh6gwDQYJKoZIhvcNAQELBQADggEBABTsRlzELLzfPD5fNUny94KRBLdGvQj4
/qoswlXtWk77VH+/JF3MCqlZ7QGY9thSRvayPvzBI9VEFX56dg6xyXSmVMsvzsrG
83AUl7rsdzHLQNUhRs4SShWyZWWCSKQr4DupahUvfbAIROsQsb4ASvU8D2XpMiaQ
XGaqoYDd8KNWNh9GQw6f8rZVE8Gjn6t5YSRroE+674kID1LXCEnUb8H5AGntWfjP
6wnrBYtheTBSlcTHWrUkr5Le2LJakpVtqbbdpDVjti7G6MKQ6sPPVcDjMCVnFjFg
kwaMeDJXMaHPqbNVE2bQHdW3+yodkJienbiz2cArnX7hswvjpsBrR2U=
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:00:18 2026 by rpki-client