Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/Tm9YQPK-QIZxd2ETnOjMjlrf5iE.roa
File: Tm9YQPK-QIZxd2ETnOjMjlrf5iE.roa (raw, json)
Hash identifier: whGszraZOmhpbIRFR+/A2z2SahEUdOmazsccBDJL8i4=
Subject key identifier: 4E:6F:58:40:F2:BE:40:86:71:77:61:13:9C:E8:CC:8E:5A:DF:E6:21
Certificate issuer: /CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Certificate serial: 019B7BA471DF7392F767D83024BF753E0F12
Authority key identifier: CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/Tm9YQPK-QIZxd2ETnOjMjlrf5iE.roa
Signing time: Thu 01 Jan 2026 22:18:53 +0000
ROA not before: Thu 01 Jan 2026 22:18:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57297
IP address blocks: 194.36.116.0/22 maxlen: 24
2a0c:bf40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:71:df:73:92:f7:67:d8:30:24:bf:75:3e:0f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca7448fc09b3f7320da8057bfa8eea9baf9cee39
Validity
Not Before: Jan 1 22:18:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e6f5840f2be4086717761139ce8cc8e5adfe621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:b6:19:a0:c7:c8:35:1f:0b:3c:cd:0c:7f:
4d:9b:9e:88:f8:54:db:24:54:8d:4e:c3:bc:c8:5e:
bc:c1:18:07:4f:80:72:34:93:78:ec:f1:7b:f8:10:
18:4c:6d:62:02:e6:39:6e:5b:67:fb:25:ba:32:51:
47:70:a5:de:1a:e3:af:8f:9d:34:da:1a:26:e4:6c:
0f:28:4e:dd:b9:5a:3d:86:fe:e4:a8:78:1a:37:ce:
a0:ef:6d:5f:74:43:94:07:5c:60:5d:29:a0:c7:9b:
e3:3c:af:b6:b2:37:cd:2e:75:6e:10:61:27:cd:66:
08:a0:fa:8d:78:e6:4d:81:b8:f0:13:e4:27:30:c5:
f6:5f:2d:57:33:d7:d7:88:a9:97:aa:ba:26:d6:11:
27:1e:96:12:f3:de:58:dc:f0:36:e9:71:fa:0a:91:
73:e1:ca:2b:b8:1d:c3:a4:7c:42:08:84:b8:2c:6f:
27:a7:76:8d:7f:69:e8:81:1a:cc:c2:42:f9:50:95:
a7:be:c1:d0:34:6e:9e:0b:04:83:96:50:b6:7c:a7:
01:62:eb:69:58:64:04:05:13:e7:b0:e4:0d:a4:43:
77:78:92:2e:bd:b7:64:a8:fc:bc:45:dc:3e:26:1a:
22:3a:bc:03:e7:a9:24:0d:5d:12:77:e2:35:d4:ab:
56:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6F:58:40:F2:BE:40:86:71:77:61:13:9C:E8:CC:8E:5A:DF:E6:21
X509v3 Authority Key Identifier:
keyid:CA:74:48:FC:09:B3:F7:32:0D:A8:05:7B:FA:8E:EA:9B:AF:9C:EE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynRI_Amz9zINqAV7-o7qm6-c7jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/Tm9YQPK-QIZxd2ETnOjMjlrf5iE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/44ce01-d451-4d73-a6e4-3802ff4ec159/1/ynRI_Amz9zINqAV7-o7qm6-c7jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.116.0/22
IPv6:
2a0c:bf40::/29
Signature Algorithm: sha256WithRSAEncryption
33:8f:68:0c:18:12:1a:05:f8:86:1e:f5:9d:ef:92:27:e5:1e:
6d:c8:0f:ee:ae:72:1d:b0:56:74:18:35:0a:ec:7e:8f:a6:a5:
84:35:32:db:51:78:8e:3f:9b:67:65:3a:1c:20:5c:e8:c3:4a:
81:f1:31:61:bd:4b:0e:b9:57:6b:a0:cc:46:a6:a7:ab:b3:55:
0c:b8:28:b1:e8:86:d4:e7:f7:0e:12:4d:7b:fc:9c:e9:39:3e:
0e:cc:c8:11:6d:5a:49:6d:11:0c:70:b4:55:00:ac:fe:02:20:
6a:1e:10:3a:1a:73:c4:2b:49:65:c9:f4:ac:3b:c4:16:57:58:
3c:62:b4:39:23:92:3e:13:59:a5:c8:a6:99:be:f3:c6:37:70:
f2:29:e6:2a:cf:d2:96:be:24:60:f1:dd:a4:f2:48:f2:b4:8b:
5b:83:2d:3b:b4:87:cc:8a:24:60:99:ca:24:8d:13:c8:15:bd:
e1:9f:93:83:c0:d2:84:ff:0e:88:34:ef:94:80:e0:ed:a1:ae:
3c:62:e6:51:b2:e5:31:db:06:92:cd:40:2a:54:9f:6c:02:4f:
79:ba:7a:20:60:09:43:76:48:79:9a:d5:b3:bf:0a:10:5a:92:
b5:ee:df:e7:ec:af:66:7d:e3:31:c3:6d:2f:9f:1c:d7:bf:80:
51:91:8d:d4
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZt7pHHfc5L3Z9gwJL91Pg8SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNzQ0OGZjMDliM2Y3MzIwZGE4MDU3YmZhOGVlYTliYWY5
Y2VlMzkwHhcNMjYwMTAxMjIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTZmNTg0MGYyYmU0MDg2NzE3NzYxMTM5Y2U4Y2M4ZTVhZGZlNjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7O2GaDHyDUfCzzNDH9Nm56I+FTb
JFSNTsO8yF68wRgHT4ByNJN47PF7+BAYTG1iAuY5bltn+yW6MlFHcKXeGuOvj500
2hom5GwPKE7duVo9hv7kqHgaN86g721fdEOUB1xgXSmgx5vjPK+2sjfNLnVuEGEn
zWYIoPqNeOZNgbjwE+QnMMX2Xy1XM9fXiKmXqrom1hEnHpYS895Y3PA26XH6CpFz
4coruB3DpHxCCIS4LG8np3aNf2nogRrMwkL5UJWnvsHQNG6eCwSDllC2fKcBYutp
WGQEBRPnsOQNpEN3eJIuvbdkqPy8Rdw+JhoiOrwD56kkDV0Sd+I11KtW5QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFE5vWEDyvkCGcXdhE5zozI5a3+YhMB8GA1UdIwQY
MBaAFMp0SPwJs/cyDagFe/qO6puvnO45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW5SSV9BbXo5eklOcUFWNy1vN3FtNi1jN2prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80NGNlMDEtZDQ1MS00ZDczLWE2ZTQt
MzgwMmZmNGVjMTU5LzEvVG05WVFQSy1RSVp4ZDJFVG5Pak1qbHJmNWlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC80NGNlMDEtZDQ1MS00ZDczLWE2ZTQtMzgwMmZmNGVjMTU5
LzEveW5SSV9BbXo5eklOcUFWNy1vN3FtNi1jN2prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwiR0MA0E
AgACMAcDBQMqDL9AMA0GCSqGSIb3DQEBCwUAA4IBAQAzj2gMGBIaBfiGHvWd75In
5R5tyA/urnIdsFZ0GDUK7H6PpqWENTLbUXiOP5tnZTocIFzow0qB8TFhvUsOuVdr
oMxGpqers1UMuCix6IbU5/cOEk17/JzpOT4OzMgRbVpJbREMcLRVAKz+AiBqHhA6
GnPEK0llyfSsO8QWV1g8YrQ5I5I+E1mlyKaZvvPGN3DyKeYqz9KWviRg8d2k8kjy
tItbgy07tIfMiiRgmcokjRPIFb3hn5ODwNKE/w6INO+UgODtoa48YuZRsuUx2waS
zUAqVJ9sAk95unogYAlDdkh5mtWzvwoQWpK17t/n7K9mfeMxw20vnxzXv4BRkY3U
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:38:04 2026 by rpki-client