Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/O_SEKVKGanJbkPrRFk4Qz6SyRoo.roa
File: O_SEKVKGanJbkPrRFk4Qz6SyRoo.roa (raw, json)
Hash identifier: KphIZNBTRMa6TyZUJpo9Hsz4n23HhGUiaA1T0qpfwsU=
Subject key identifier: 3B:F4:84:29:52:86:6A:72:5B:90:FA:D1:16:4E:10:CF:A4:B2:46:8A
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01A0A9C0EA86A15D841E78ED73B19C3406A7
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/O_SEKVKGanJbkPrRFk4Qz6SyRoo.roa
Signing time: Wed 16 Sep 2026 10:26:27 +0000
ROA not before: Wed 16 Sep 2026 10:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.109.40.0/24 maxlen: 24
91.109.41.0/24 maxlen: 24
91.109.44.0/24 maxlen: 24
91.109.46.0/24 maxlen: 24
147.185.196.0/24 maxlen: 24
194.38.48.0/24 maxlen: 24
194.38.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:c0:ea:86:a1:5d:84:1e:78:ed:73:b1:9c:34:06:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Sep 16 10:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3bf4842952866a725b90fad1164e10cfa4b2468a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:72:36:1b:45:4a:a2:32:55:96:c3:98:82:2e:
9b:9b:01:cf:cd:5e:04:20:8a:82:eb:e1:d3:c6:27:
be:27:d9:36:f4:cf:0a:e2:66:3d:c7:ee:cf:f8:c1:
5c:bf:01:0d:84:7a:5a:b5:63:fd:3c:2a:42:3a:9c:
ab:18:15:84:52:8d:78:c4:4f:ba:c7:1c:33:dd:b0:
de:1c:3b:9f:07:75:f9:90:f6:db:e2:df:be:10:02:
0e:9b:e0:7d:d6:a8:0d:64:7d:f7:5b:34:4b:b3:74:
f1:d9:12:83:ff:83:d9:9a:da:98:87:9c:7f:d9:cf:
2d:9a:93:73:62:28:dd:19:1a:87:10:7f:4c:c6:6d:
17:4c:73:bf:7a:40:46:66:81:ba:5d:e7:98:61:6e:
56:45:1f:37:aa:e1:3e:3f:22:ef:f7:92:c1:72:77:
c4:95:46:dd:e9:df:79:70:fd:1a:4a:57:3d:28:2a:
7e:04:46:c5:51:cd:c0:33:4e:9a:46:d5:6e:ae:07:
02:12:d8:fb:2d:b0:35:8d:20:b8:b6:d7:56:b5:12:
42:fa:97:69:b6:c4:86:28:10:36:ee:52:48:fe:a2:
d8:1b:92:76:31:d9:a4:91:33:93:b6:6c:1e:b6:3d:
66:44:33:4c:6c:66:2b:5c:00:8a:79:8a:6b:d7:a5:
88:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F4:84:29:52:86:6A:72:5B:90:FA:D1:16:4E:10:CF:A4:B2:46:8A
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/O_SEKVKGanJbkPrRFk4Qz6SyRoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.40.0/23
91.109.44.0/24
91.109.46.0/24
147.185.196.0/24
194.38.48.0/23
Signature Algorithm: sha256WithRSAEncryption
14:bb:a3:ae:06:84:64:8f:54:5f:30:dc:03:81:4f:0f:39:99:
e2:f5:f6:84:f2:f0:66:3d:7a:1a:0f:d8:e1:57:33:97:fb:b8:
ea:5e:a0:f6:50:88:7f:45:eb:b1:48:01:d8:b0:94:5a:e6:a1:
69:34:3f:f0:4b:d5:52:12:7a:da:d7:c6:be:94:aa:e4:45:11:
49:67:0b:5a:3f:21:70:c4:cc:b1:f8:cb:83:4c:a7:6d:e4:6c:
96:e3:e4:8a:d6:f8:1b:f4:5f:b7:17:e8:55:f9:67:6a:ab:ec:
60:87:ea:fd:a6:4d:bd:59:90:96:02:7d:54:d7:02:bf:9a:20:
26:30:b8:b8:8f:eb:03:26:76:24:e5:8c:0e:86:ed:30:e2:ee:
e4:db:56:ac:58:bb:d0:86:d7:ff:f2:04:3d:b4:77:c9:74:29:
cd:a7:cf:cf:be:47:5e:ff:83:b8:71:9d:6b:2d:68:a7:6a:b3:
40:2d:d3:07:d7:99:a1:97:2e:c6:c5:13:c9:9d:12:d3:89:35:
51:c3:6d:0e:8d:07:34:5b:da:58:11:e0:bf:bb:79:62:9d:3c:
35:c0:a0:3d:51:17:46:28:c2:1f:ac:73:4e:1c:20:9e:37:bf:
84:e3:d6:29:25:b8:15:33:8d:79:ae:22:7e:93:01:47:6a:06:
f2:50:95:0f
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaCpwOqGoV2EHnjtc7GcNAanMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk
ZjM1NGEwHhcNMjYwOTE2MTAyNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmY0ODQyOTUyODY2YTcyNWI5MGZhZDExNjRlMTBjZmE0YjI0NjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3I2G0VKojJVlsOYgi6bmwHPzV4E
IIqC6+HTxie+J9k29M8K4mY9x+7P+MFcvwENhHpatWP9PCpCOpyrGBWEUo14xE+6
xxwz3bDeHDufB3X5kPbb4t++EAIOm+B91qgNZH33WzRLs3Tx2RKD/4PZmtqYh5x/
2c8tmpNzYijdGRqHEH9Mxm0XTHO/ekBGZoG6XeeYYW5WRR83quE+PyLv95LBcnfE
lUbd6d95cP0aSlc9KCp+BEbFUc3AM06aRtVurgcCEtj7LbA1jSC4ttdWtRJC+pdp
tsSGKBA27lJI/qLYG5J2MdmkkTOTtmwetj1mRDNMbGYrXACKeYpr16WIwwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFDv0hClShmpyW5D60RZOEM+kskaKMB8GA1UdIwQY
MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt
MjBlMTk3ODBjYjJlLzEvT19TRUtWS0dhbkpia1ByUkZrNFF6NlN5Um9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl
LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBW20oAwQA
W20sAwQAW20uAwQAk7nEAwQBwiYwMA0GCSqGSIb3DQEBCwUAA4IBAQAUu6OuBoRk
j1RfMNwDgU8POZni9faE8vBmPXoaD9jhVzOX+7jqXqD2UIh/ReuxSAHYsJRa5qFp
ND/wS9VSEnra18a+lKrkRRFJZwtaPyFwxMyx+MuDTKdt5GyW4+SK1vgb9F+3F+hV
+Wdqq+xgh+r9pk29WZCWAn1U1wK/miAmMLi4j+sDJnYk5YwOhu0w4u7k21asWLvQ
htf/8gQ9tHfJdCnNp8/Pvkde/4O4cZ1rLWinarNALdMH15mhly7GxRPJnRLTiTVR
w20OjQc0W9pYEeC/u3linTw1wKA9URdGKMIfrHNOHCCeN7+E49YpJbgVM415riJ+
kwFHagbyUJUP
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:17:23 2026 by rpki-client