Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/9AW6r27TH1EAMHjd_YZSU0oU4EI.roa
File: 9AW6r27TH1EAMHjd_YZSU0oU4EI.roa (raw, json)
Hash identifier: sFiHnzyiCe1Zzs5hkDs9Dt0DaEXmrCEsdbf1l81uvzo=
Subject key identifier: F4:05:BA:AF:6E:D3:1F:51:00:30:78:DD:FD:86:52:53:4A:14:E0:42
Certificate issuer: /CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Certificate serial: 01A0BFA660AB4D17171E94B7C84FE9CAE936
Authority key identifier: E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/9AW6r27TH1EAMHjd_YZSU0oU4EI.roa
Signing time: Sun 20 Sep 2026 16:29:07 +0000
ROA not before: Sun 20 Sep 2026 16:29:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 87.192.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:a6:60:ab:4d:17:17:1e:94:b7:c8:4f:e9:ca:e9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Validity
Not Before: Sep 20 16:29:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f405baaf6ed31f51003078ddfd8652534a14e042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e5:30:49:7e:c5:17:2e:10:e7:7b:20:79:f9:
67:7c:c4:2e:f6:f3:a0:e7:7d:7a:9f:12:eb:7e:a1:
fa:64:fc:49:6f:98:cf:51:0e:2b:d0:d5:a4:f7:5a:
33:73:71:05:0c:c1:59:90:5c:a4:c2:7f:42:d8:af:
ea:12:fa:33:41:9b:8c:ae:8b:90:98:0e:eb:17:44:
7b:25:85:ad:76:d2:39:03:b0:0f:62:61:29:ab:1e:
19:92:d3:e3:e4:36:f7:b3:fe:6c:46:bf:c6:ca:90:
48:64:1c:d0:9c:16:79:88:35:d1:ab:b9:b7:e0:38:
d7:ce:91:ed:10:11:a8:69:4f:fc:87:29:82:46:ee:
c7:e8:18:79:f6:4b:fc:eb:f6:f9:16:41:76:a2:12:
64:8d:cf:71:40:ad:55:a0:7c:cf:ac:f0:f4:24:34:
4f:56:63:5b:28:73:a0:69:4b:dd:9c:16:11:a3:f1:
d8:b1:17:91:3b:f4:01:54:d3:bd:35:3e:04:2b:df:
02:5e:de:16:f7:34:2c:9b:4e:82:25:8f:b1:4a:d0:
1b:8b:06:f0:23:1d:b2:c0:50:ff:b4:51:54:e2:98:
a8:af:c6:50:6f:b7:66:b5:56:91:d2:c3:53:41:bd:
44:cf:9d:e8:46:81:61:bb:3b:50:37:89:7c:df:eb:
1b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:05:BA:AF:6E:D3:1F:51:00:30:78:DD:FD:86:52:53:4A:14:E0:42
X509v3 Authority Key Identifier:
keyid:E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/9AW6r27TH1EAMHjd_YZSU0oU4EI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.192.44.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e6:66:02:d7:1c:35:db:c9:68:25:dc:59:d3:f5:1b:f4:5e:
c9:35:bd:4c:c8:90:16:fd:62:cc:32:16:ed:88:7e:ef:ba:e1:
f2:f4:ef:29:5b:b5:ef:a7:88:5a:d9:14:94:af:4f:16:86:23:
7d:ef:ed:49:8f:66:ac:80:50:df:ca:79:51:cb:80:55:6f:24:
b9:3e:8a:72:ef:90:77:8c:ac:6c:9e:f7:ce:fa:48:29:48:c0:
f9:e2:c8:bf:17:cb:81:f0:6d:00:34:d8:39:fc:bd:bb:4b:a8:
29:4a:27:74:b8:8b:2a:14:4b:20:60:7b:c3:00:9a:eb:63:0d:
b3:bc:3f:77:78:01:6f:ff:57:61:24:02:54:55:95:19:8c:15:
9a:8f:e1:e1:01:b5:bd:b5:df:f4:1d:bd:44:bb:cf:05:52:4f:
fb:0a:20:df:bb:08:9f:bd:ca:16:68:a0:f8:ec:6e:63:ba:ab:
09:b3:6a:2f:b0:66:a5:ff:1c:90:c2:a8:87:3a:06:35:c8:d3:
81:17:ae:e3:8c:d0:66:6b:79:9f:a9:76:b0:b6:bd:90:ef:41:
f4:38:48:0d:7f:2c:c0:5e:28:f2:d1:43:b6:9e:06:05:a1:f8:
9a:69:4e:3c:43:4d:cc:05:6e:56:fa:f7:f4:36:34:e3:da:ac:
66:68:bd:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaC/pmCrTRcXHpS3yE/pyuk2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NGQzNWQ0ZDY0NTllZjVmMzU1M2VhMzEwZTBjNjViYjNi
MGYwZDkwHhcNMjYwOTIwMTYyOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDA1YmFhZjZlZDMxZjUxMDAzMDc4ZGRmZDg2NTI1MzRhMTRlMDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eUwSX7FFy4Q53sgeflnfMQu9vOg
5316nxLrfqH6ZPxJb5jPUQ4r0NWk91ozc3EFDMFZkFykwn9C2K/qEvozQZuMrouQ
mA7rF0R7JYWtdtI5A7APYmEpqx4ZktPj5Db3s/5sRr/GypBIZBzQnBZ5iDXRq7m3
4DjXzpHtEBGoaU/8hymCRu7H6Bh59kv86/b5FkF2ohJkjc9xQK1VoHzPrPD0JDRP
VmNbKHOgaUvdnBYRo/HYsReRO/QBVNO9NT4EK98CXt4W9zQsm06CJY+xStAbiwbw
Ix2ywFD/tFFU4pior8ZQb7dmtVaR0sNTQb1Ez53oRoFhuztQN4l83+sbRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPQFuq9u0x9RADB43f2GUlNKFOBCMB8GA1UdIwQY
MBaAFOhNNdTWRZ7181U+oxDgxluzsPDZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkUwMTFOWkZudlh6VlQ2akVPREdXN093OE5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9lYzNmOGMtZGM3YS00MGQyLThmNDQt
YTUyNDgzODc3NmJkLzEvOUFXNnIyN1RIMUVBTUhqZF9ZWlNVMG9VNEVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9lYzNmOGMtZGM3YS00MGQyLThmNDQtYTUyNDgzODc3NmJk
LzEvNkUwMTFOWkZudlh6VlQ2akVPREdXN093OE5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV8AsMA0G
CSqGSIb3DQEBCwUAA4IBAQAa5mYC1xw128loJdxZ0/Ub9F7JNb1MyJAW/WLMMhbt
iH7vuuHy9O8pW7Xvp4ha2RSUr08WhiN97+1Jj2asgFDfynlRy4BVbyS5Popy75B3
jKxsnvfO+kgpSMD54si/F8uB8G0ANNg5/L27S6gpSid0uIsqFEsgYHvDAJrrYw2z
vD93eAFv/1dhJAJUVZUZjBWaj+HhAbW9td/0Hb1Eu88FUk/7CiDfuwifvcoWaKD4
7G5juqsJs2ovsGal/xyQwqiHOgY1yNOBF67jjNBma3mfqXawtr2Q70H0OEgNfyzA
Xijy0UO2ngYFofiaaU48Q03MBW5W+vf0NjTj2qxmaL0C
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:53:47 2026 by rpki-client