Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/9JlP-iTgnf0BbEIpCilPZU_F8Ko.roa
File: 9JlP-iTgnf0BbEIpCilPZU_F8Ko.roa (raw, json)
Hash identifier: JVp6R3gHIgKD3+HZy+clTRye19MBTBwvA+lvdr/a0NE=
Subject key identifier: F4:99:4F:FA:24:E0:9D:FD:01:6C:42:29:0A:29:4F:65:4F:C5:F0:AA
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0A51301100DF8BB9878F3653FEEF95D20
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/9JlP-iTgnf0BbEIpCilPZU_F8Ko.roa
Signing time: Tue 15 Sep 2026 12:38:01 +0000
ROA not before: Tue 15 Sep 2026 12:38:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 193.187.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:13:01:10:0d:f8:bb:98:78:f3:65:3f:ee:f9:5d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Sep 15 12:38:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4994ffa24e09dfd016c42290a294f654fc5f0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:b7:d7:68:65:ee:b5:c8:27:07:6e:12:07:
d0:65:0c:a0:40:24:82:a0:21:ce:0b:99:89:73:ea:
35:9a:60:3a:0a:5a:5f:ce:a8:c8:c8:27:58:5b:05:
2b:86:35:1a:f8:b5:2c:25:7c:e6:9a:ff:0f:7a:a9:
33:e3:fb:ab:7b:92:9f:f0:d8:62:13:87:f1:f2:b1:
23:ad:13:59:a6:90:f0:64:7e:f9:e1:eb:25:9d:ed:
a2:b3:13:77:b5:e5:05:94:90:34:22:fb:45:15:03:
bc:56:e5:44:49:c2:5c:67:08:dc:ad:bd:1b:15:f5:
a5:72:dd:ab:3d:19:40:ee:b8:51:b9:56:3f:5f:91:
03:3c:4b:f6:7b:e5:14:2f:ba:f7:12:04:12:b1:2d:
e7:f4:71:51:3a:24:f7:66:dd:fd:76:a6:6d:ef:96:
19:ec:cf:4e:fd:d0:1c:9f:52:e0:f6:48:66:07:48:
99:3b:16:48:01:f7:64:af:8d:83:6e:69:7b:cc:30:
bf:43:9c:07:50:b0:15:c5:e2:b8:1c:d7:6e:c9:b1:
43:43:3e:98:da:bd:02:52:eb:dd:22:4a:1f:43:b3:
c2:6c:b9:27:2c:a8:ba:c7:73:35:01:ec:de:e9:8c:
74:fa:51:21:64:b7:ac:cf:21:fd:60:09:e5:52:c4:
4b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:99:4F:FA:24:E0:9D:FD:01:6C:42:29:0A:29:4F:65:4F:C5:F0:AA
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/9JlP-iTgnf0BbEIpCilPZU_F8Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.109.0/24
Signature Algorithm: sha256WithRSAEncryption
53:3e:c4:65:3e:da:8a:cb:f6:f4:66:39:84:30:e8:66:eb:57:
27:58:c3:39:ae:aa:ef:b2:64:fb:e8:63:54:5b:2b:37:6f:61:
f7:d1:cf:f1:be:41:b6:61:c9:36:e0:77:e3:5e:af:a6:f0:4f:
80:83:03:d4:18:84:9e:ef:ec:e8:54:ff:08:92:ee:e7:af:58:
f9:fb:3d:e2:2a:5d:9c:9a:c5:e5:7a:7a:81:45:5e:80:56:57:
2e:17:d7:47:87:ca:89:f3:90:27:65:e2:41:61:d6:bf:b7:bb:
55:99:72:9d:9a:6f:c6:6d:5c:fa:9e:a7:2b:7b:b7:68:1b:e4:
24:ee:3e:df:ff:94:8d:32:ca:f8:d7:28:11:c8:0c:7c:6c:1a:
2f:3e:b3:63:d0:06:b8:5e:7c:27:34:88:d9:ba:23:e7:0f:94:
1a:f4:fc:61:9c:30:ca:58:35:24:4b:96:03:af:fe:43:ca:ee:
9c:76:26:a8:46:90:0b:d0:b2:d2:76:96:f5:2a:2c:dc:8d:da:
29:2a:c0:cc:fe:bc:09:b9:7b:80:88:d4:97:32:19:08:a3:09:
b3:f7:00:86:a2:97:b3:42:6e:f1:a6:90:c5:82:3f:b5:ea:03:
c6:7e:b3:d3:93:30:55:a0:09:fa:ed:f0:87:03:3d:1b:37:f1:
f0:01:17:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaClEwEQDfi7mHjzZT/u+V0gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYwOTE1MTIzODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDk5NGZmYTI0ZTA5ZGZkMDE2YzQyMjkwYTI5NGY2NTRmYzVmMGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySy312hl7rXIJwduEgfQZQygQCSC
oCHOC5mJc+o1mmA6ClpfzqjIyCdYWwUrhjUa+LUsJXzmmv8Peqkz4/ure5Kf8Nhi
E4fx8rEjrRNZppDwZH754eslne2isxN3teUFlJA0IvtFFQO8VuVEScJcZwjcrb0b
FfWlct2rPRlA7rhRuVY/X5EDPEv2e+UUL7r3EgQSsS3n9HFROiT3Zt39dqZt75YZ
7M9O/dAcn1Lg9khmB0iZOxZIAfdkr42Dbml7zDC/Q5wHULAVxeK4HNduybFDQz6Y
2r0CUuvdIkofQ7PCbLknLKi6x3M1Aeze6Yx0+lEhZLeszyH9YAnlUsRLzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPSZT/ok4J39AWxCKQopT2VPxfCqMB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvOUpsUC1pVGduZjBCYkVJcENpbFBaVV9GOEtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbttMA0G
CSqGSIb3DQEBCwUAA4IBAQBTPsRlPtqKy/b0ZjmEMOhm61cnWMM5rqrvsmT76GNU
Wys3b2H30c/xvkG2Yck24HfjXq+m8E+AgwPUGISe7+zoVP8Iku7nr1j5+z3iKl2c
msXlenqBRV6AVlcuF9dHh8qJ85AnZeJBYda/t7tVmXKdmm/GbVz6nqcre7doG+Qk
7j7f/5SNMsr41ygRyAx8bBovPrNj0Aa4XnwnNIjZuiPnD5Qa9PxhnDDKWDUkS5YD
r/5Dyu6cdiaoRpAL0LLSdpb1KizcjdopKsDM/rwJuXuAiNSXMhkIowmz9wCGopez
Qm7xppDFgj+16gPGfrPTkzBVoAn67fCHAz0bN/HwAReK
-----END CERTIFICATE-----
Generated at Tue Sep 22 08:05:09 2026 by rpki-client