Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bAIqrZCulMvGw6aurFDDzYjBSNQ.roa
File: bAIqrZCulMvGw6aurFDDzYjBSNQ.roa (raw, json)
Hash identifier: O4aP4WC2KrDEtbQHGBMhhZlkzrahvQwpzaVnqPRwjyE=
Subject key identifier: 6C:02:2A:AD:90:AE:94:CB:C6:C3:A6:AE:AC:50:C3:CD:88:C1:48:D4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0881C41C41293EF0A9E041388A01428B4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bAIqrZCulMvGw6aurFDDzYjBSNQ.roa
Signing time: Wed 09 Sep 2026 21:39:08 +0000
ROA not before: Wed 09 Sep 2026 21:39:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216416
IP address blocks: 89.106.81.0/24 maxlen: 24
89.144.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:39:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:1c:41:c4:12:93:ef:0a:9e:04:13:88:a0:14:28:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 9 21:39:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c022aad90ae94cbc6c3a6aeac50c3cd88c148d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9a:1a:03:0e:04:8d:5c:2a:0c:43:71:03:99:
07:6a:ac:d4:33:85:3f:f1:fa:8d:10:aa:47:bb:3d:
84:e6:3a:f3:d4:b4:84:1a:d3:5e:67:e0:8c:e0:8a:
b1:a4:d6:1b:a3:36:23:d5:95:21:1b:92:c4:49:0e:
7c:1e:e2:aa:b6:15:a5:c3:82:8c:36:04:07:da:4f:
c8:8e:20:1a:49:1b:94:b1:82:c8:42:33:2d:c4:28:
0a:2c:89:9c:5d:8f:b6:0c:9b:d8:14:5a:b4:6f:d1:
cc:f4:d7:f6:39:cb:af:41:6a:74:9d:c7:3d:fe:bc:
04:b2:0a:02:39:ee:9e:4e:95:2c:7b:97:2a:2f:cc:
98:11:6d:ef:52:74:46:c0:67:38:c3:8d:f4:53:de:
07:7a:7c:5c:cd:b2:45:eb:5a:a5:91:aa:c0:71:61:
a1:ff:dc:1b:c3:0f:e3:88:94:05:70:5d:57:ce:08:
a2:6c:13:14:ac:cc:ff:f2:11:3d:78:81:db:26:0c:
92:de:4f:0c:56:37:c1:c7:b9:44:47:61:a2:70:45:
f6:ba:fe:f2:88:75:92:79:4a:9e:4b:1f:07:78:81:
a0:b3:16:18:6f:19:5a:83:6d:f0:4a:11:a4:1b:98:
e0:9a:4d:f0:65:4c:6d:e2:e0:bd:8e:7d:cc:a8:ee:
50:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:02:2A:AD:90:AE:94:CB:C6:C3:A6:AE:AC:50:C3:CD:88:C1:48:D4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bAIqrZCulMvGw6aurFDDzYjBSNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.81.0/24
89.144.17.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:3d:c6:a7:50:06:c2:a3:9f:6b:fb:0e:56:d4:e4:ec:b1:9a:
9c:ee:6a:55:f2:ff:bb:c9:eb:05:e3:11:ec:99:3e:34:81:83:
67:9d:c8:8f:96:2c:fa:fa:0a:d6:97:26:77:c0:0e:26:34:fb:
ff:f8:5d:16:37:97:ae:21:d9:6f:0a:72:e5:af:8c:a4:e6:fe:
7d:87:24:6c:ea:bd:20:08:94:32:23:9e:7a:00:e2:c4:66:10:
5c:56:e0:2c:fb:b9:83:20:fe:33:b2:ff:1b:de:17:88:f6:db:
5f:eb:de:24:f2:bf:a4:c1:16:7a:fd:2e:be:24:80:17:48:0a:
99:da:83:35:fd:6a:b4:b1:1c:f9:2e:54:b0:6f:b9:55:59:ea:
b2:99:8c:bd:b1:2f:fd:dc:ac:cb:46:fc:83:8c:5d:0a:80:bf:
64:03:dc:0c:42:cc:4e:2c:ce:48:fc:0f:db:19:d7:21:18:c1:
27:ba:59:51:3b:aa:12:8f:6f:64:7b:be:ad:a3:c1:c6:42:70:
b0:da:f7:c8:f5:53:8e:55:d1:58:b4:b9:f4:f1:b0:f8:62:0c:
60:32:25:2f:d3:7a:20:c7:a3:16:82:62:99:a2:1c:86:76:ac:
6e:09:a9:2e:94:a3:36:26:2d:f4:59:4d:3f:f4:2f:16:ed:34:
8d:31:be:3b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCIHEHEEpPvCp4EE4igFCi0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwOTA5MjEzOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzAyMmFhZDkwYWU5NGNiYzZjM2E2YWVhYzUwYzNjZDg4YzE0OGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZoaAw4EjVwqDENxA5kHaqzUM4U/
8fqNEKpHuz2E5jrz1LSEGtNeZ+CM4IqxpNYbozYj1ZUhG5LESQ58HuKqthWlw4KM
NgQH2k/IjiAaSRuUsYLIQjMtxCgKLImcXY+2DJvYFFq0b9HM9Nf2OcuvQWp0ncc9
/rwEsgoCOe6eTpUse5cqL8yYEW3vUnRGwGc4w430U94HenxczbJF61qlkarAcWGh
/9wbww/jiJQFcF1XzgiibBMUrMz/8hE9eIHbJgyS3k8MVjfBx7lER2GicEX2uv7y
iHWSeUqeSx8HeIGgsxYYbxlag23wShGkG5jgmk3wZUxt4uC9jn3MqO5QQwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGwCKq2QrpTLxsOmrqxQw82IwUjUMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvYkFJcXJaQ3VsTXZHdzZhdXJGRER6WWpCU05RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWWpRAwQA
WZARMA0GCSqGSIb3DQEBCwUAA4IBAQDKPcanUAbCo59r+w5W1OTssZqc7mpV8v+7
yesF4xHsmT40gYNnnciPliz6+grWlyZ3wA4mNPv/+F0WN5euIdlvCnLlr4yk5v59
hyRs6r0gCJQyI556AOLEZhBcVuAs+7mDIP4zsv8b3heI9ttf694k8r+kwRZ6/S6+
JIAXSAqZ2oM1/Wq0sRz5LlSwb7lVWeqymYy9sS/93KzLRvyDjF0KgL9kA9wMQsxO
LM5I/A/bGdchGMEnullRO6oSj29ke76to8HGQnCw2vfI9VOOVdFYtLn08bD4Ygxg
MiUv03ogx6MWgmKZohyGdqxuCakulKM2Ji30WU0/9C8W7TSNMb47
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:26:53 2026 by rpki-client