Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/9a2b8a-a558-4f43-9adf-67648099d8e1/1/r0ErFB9jCD4xbUhMnw9fU4li-3o.roa
File: r0ErFB9jCD4xbUhMnw9fU4li-3o.roa (raw, json)
Hash identifier: g57/KRcIS2omYrdJOqYvOIP4Higa58DGPvJrJE8+WvY=
Subject key identifier: AF:41:2B:14:1F:63:08:3E:31:6D:48:4C:9F:0F:5F:53:89:62:FB:7A
Certificate issuer: /CN=16c788bf63c1a9c79c11454fe396d2716aa1d378
Certificate serial: 01A085736618A6E5B2DACB3AEADCC5F23721
Authority key identifier: 16:C7:88:BF:63:C1:A9:C7:9C:11:45:4F:E3:96:D2:71:6A:A1:D3:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FseIv2PBqcecEUVP45bScWqh03g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/9a2b8a-a558-4f43-9adf-67648099d8e1/1/r0ErFB9jCD4xbUhMnw9fU4li-3o.roa
Signing time: Wed 09 Sep 2026 09:15:27 +0000
ROA not before: Wed 09 Sep 2026 09:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201658
IP address blocks: 195.62.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/9a2b8a-a558-4f43-9adf-67648099d8e1/1/FseIv2PBqcecEUVP45bScWqh03g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/9a2b8a-a558-4f43-9adf-67648099d8e1/1/FseIv2PBqcecEUVP45bScWqh03g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FseIv2PBqcecEUVP45bScWqh03g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:73:66:18:a6:e5:b2:da:cb:3a:ea:dc:c5:f2:37:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16c788bf63c1a9c79c11454fe396d2716aa1d378
Validity
Not Before: Sep 9 09:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af412b141f63083e316d484c9f0f5f538962fb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:65:eb:fa:5b:cf:7f:29:80:f4:31:05:97:b7:
1d:b3:e4:f5:a9:45:2d:9a:a7:6d:f8:6a:ea:8c:f1:
7f:dc:63:6f:ad:e0:66:95:eb:47:40:52:f5:9c:7e:
08:43:1d:b0:52:e2:3c:38:4b:02:15:dd:bc:55:f1:
9f:85:ef:93:f6:26:7c:6d:2b:c1:b0:3a:51:95:b8:
b2:60:c4:c9:7a:39:36:3f:07:af:fc:6c:69:31:18:
cc:24:a5:9a:68:c1:19:1f:43:6d:ae:19:0b:42:f2:
d7:12:af:e2:d1:60:f0:95:34:f2:48:db:39:00:60:
24:8f:89:f2:c8:55:98:bb:4d:da:2c:d3:76:1a:c1:
23:3d:a2:28:e9:da:e4:76:f3:6a:24:0b:ae:f0:30:
58:02:4c:b2:c2:d4:e5:a0:47:9e:1d:97:77:49:2d:
14:9e:57:38:cf:74:85:6a:cc:78:f2:a6:09:2b:ea:
3b:8f:b3:8e:29:f7:9a:59:58:b9:26:02:74:99:b5:
27:7f:0e:92:ea:b0:4b:f4:af:9f:80:b6:f8:32:05:
3d:5c:ac:55:d5:0a:88:27:b9:2a:53:79:cd:27:b3:
1e:03:c4:0a:f0:c3:71:aa:b5:a9:8e:d9:a7:65:d1:
35:26:dc:1a:75:d2:26:65:7e:1f:b7:c9:f7:25:e6:
69:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:41:2B:14:1F:63:08:3E:31:6D:48:4C:9F:0F:5F:53:89:62:FB:7A
X509v3 Authority Key Identifier:
keyid:16:C7:88:BF:63:C1:A9:C7:9C:11:45:4F:E3:96:D2:71:6A:A1:D3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FseIv2PBqcecEUVP45bScWqh03g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9a2b8a-a558-4f43-9adf-67648099d8e1/1/r0ErFB9jCD4xbUhMnw9fU4li-3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/9a2b8a-a558-4f43-9adf-67648099d8e1/1/FseIv2PBqcecEUVP45bScWqh03g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.30.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:e1:3d:72:38:c8:04:5e:1e:e8:78:01:f4:51:9e:d1:70:98:
b1:63:1e:2f:ec:f6:78:b3:a2:8c:ce:7c:1b:88:cf:0f:76:6d:
58:b7:97:3f:fb:56:c6:28:91:86:e6:2b:fe:8c:6a:bc:f6:30:
49:90:65:59:cd:48:60:3b:30:2d:0f:c6:a6:5e:17:59:09:bc:
d3:52:aa:20:d0:a4:50:08:95:22:59:23:e8:68:0b:2b:58:fa:
22:15:06:f9:d9:79:e1:24:ae:2e:51:91:08:bf:a6:19:6a:4c:
7f:9b:75:73:7f:90:e2:39:27:6b:fe:c3:0b:d8:5b:40:52:e0:
b6:33:92:57:98:b5:af:e1:d4:59:2d:5d:92:91:a2:20:67:dd:
a7:36:43:7c:f0:4f:35:7b:67:a7:1c:99:b7:87:b6:16:76:13:
82:27:2b:85:2c:cc:89:b0:20:9f:c8:e2:62:78:e7:7f:9f:b9:
3c:52:a2:8e:87:4a:dc:3c:89:67:5f:cc:ad:7c:dc:d8:40:50:
db:39:63:0e:6d:fa:41:b5:d6:4f:1a:84:96:fd:e1:1c:9f:e2:
70:3e:b6:ee:bd:37:bf:87:9a:3c:1a:d4:04:97:ff:94:99:9b:
da:8a:85:70:ce:da:6f:89:73:e2:c8:ea:a8:b5:90:03:f2:6e:
d2:f8:e1:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCFc2YYpuWy2ss66tzF8jchMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2Yzc4OGJmNjNjMWE5Yzc5YzExNDU0ZmUzOTZkMjcxNmFh
MWQzNzgwHhcNMjYwOTA5MDkxNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjQxMmIxNDFmNjMwODNlMzE2ZDQ4NGM5ZjBmNWY1Mzg5NjJmYjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GXr+lvPfymA9DEFl7cds+T1qUUt
mqdt+GrqjPF/3GNvreBmletHQFL1nH4IQx2wUuI8OEsCFd28VfGfhe+T9iZ8bSvB
sDpRlbiyYMTJejk2Pwev/GxpMRjMJKWaaMEZH0NtrhkLQvLXEq/i0WDwlTTySNs5
AGAkj4nyyFWYu03aLNN2GsEjPaIo6drkdvNqJAuu8DBYAkyywtTloEeeHZd3SS0U
nlc4z3SFasx48qYJK+o7j7OOKfeaWVi5JgJ0mbUnfw6S6rBL9K+fgLb4MgU9XKxV
1QqIJ7kqU3nNJ7MeA8QK8MNxqrWpjtmnZdE1JtwaddImZX4ft8n3JeZpDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK9BKxQfYwg+MW1ITJ8PX1OJYvt6MB8GA1UdIwQY
MBaAFBbHiL9jwanHnBFFT+OW0nFqodN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnNlSXYyUEJxY2VjRVVWUDQ1YlNjV3FoMDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi85YTJiOGEtYTU1OC00ZjQzLTlhZGYt
Njc2NDgwOTlkOGUxLzEvcjBFckZCOWpDRDR4YlVoTW53OWZVNGxpLTNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi85YTJiOGEtYTU1OC00ZjQzLTlhZGYtNjc2NDgwOTlkOGUx
LzEvRnNlSXYyUEJxY2VjRVVWUDQ1YlNjV3FoMDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwz4eMA0G
CSqGSIb3DQEBCwUAA4IBAQA94T1yOMgEXh7oeAH0UZ7RcJixYx4v7PZ4s6KMznwb
iM8Pdm1Yt5c/+1bGKJGG5iv+jGq89jBJkGVZzUhgOzAtD8amXhdZCbzTUqog0KRQ
CJUiWSPoaAsrWPoiFQb52XnhJK4uUZEIv6YZakx/m3Vzf5DiOSdr/sML2FtAUuC2
M5JXmLWv4dRZLV2SkaIgZ92nNkN88E81e2enHJm3h7YWdhOCJyuFLMyJsCCfyOJi
eOd/n7k8UqKOh0rcPIlnX8ytfNzYQFDbOWMObfpBtdZPGoSW/eEcn+JwPrbuvTe/
h5o8GtQEl/+UmZvaioVwztpviXPiyOqotZAD8m7S+OFe
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:50:29 2026 by rpki-client