Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/pdv29nkeNVZwnAAeJaWdQW_1VL4.roa
File: pdv29nkeNVZwnAAeJaWdQW_1VL4.roa (raw, json)
Hash identifier: fB/JSAQUaZyElsKjF4i3d/FqzocJgaIjhcdv4wB8pG4=
Subject key identifier: A5:DB:F6:F6:79:1E:35:56:70:9C:00:1E:25:A5:9D:41:6F:F5:54:BE
Certificate issuer: /CN=b90f40bdb9e664769e917590f78db6e77193d751
Certificate serial: 01A0CE0B615A5A21B7F1CCA1C2D5955B1138
Authority key identifier: B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/pdv29nkeNVZwnAAeJaWdQW_1VL4.roa
Signing time: Wed 23 Sep 2026 11:34:07 +0000
ROA not before: Wed 23 Sep 2026 11:34:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198691
IP address blocks: 185.237.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:0b:61:5a:5a:21:b7:f1:cc:a1:c2:d5:95:5b:11:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b90f40bdb9e664769e917590f78db6e77193d751
Validity
Not Before: Sep 23 11:34:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5dbf6f6791e3556709c001e25a59d416ff554be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:f3:46:05:49:aa:ed:f0:78:0b:26:90:8f:
ea:a7:a9:a2:33:05:63:3b:52:4d:46:29:9a:66:9d:
c9:d4:54:56:f9:91:29:ff:61:95:b8:6b:db:f2:af:
c6:08:34:ae:f8:f4:a9:36:2c:6d:12:49:c7:f3:3a:
49:96:45:64:f1:ef:ba:7b:e9:d3:a5:7f:6c:5a:3d:
41:8d:bd:47:7a:c9:86:26:7b:29:60:fa:c8:4c:73:
a3:f4:42:b1:27:56:e5:71:f9:84:ec:a2:c6:d2:da:
99:06:94:5c:86:68:d4:d9:38:f2:c7:aa:e2:48:b1:
46:ba:8b:44:d5:fc:f6:7e:44:1f:b1:af:b1:55:eb:
1e:d3:43:46:46:99:79:3e:10:57:8f:f9:52:4c:79:
85:26:f1:2b:0b:a1:9b:79:2f:cd:57:ca:ae:4d:a4:
bb:a1:da:ac:25:c6:6a:e4:4f:66:6b:76:13:fc:08:
b5:29:bb:c8:73:97:84:f4:5a:75:48:e4:99:25:b8:
6c:b1:62:8f:aa:75:04:c5:c0:0c:22:c0:b3:22:c0:
1d:26:5b:e7:ee:8b:3b:b6:02:43:6e:41:f3:62:73:
cf:d8:7b:d8:18:49:87:3e:cf:ea:e8:39:24:e5:d1:
2f:98:c7:64:82:65:4b:f4:17:f9:a2:31:a6:2f:2d:
8b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DB:F6:F6:79:1E:35:56:70:9C:00:1E:25:A5:9D:41:6F:F5:54:BE
X509v3 Authority Key Identifier:
keyid:B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/pdv29nkeNVZwnAAeJaWdQW_1VL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.240.0/22
Signature Algorithm: sha256WithRSAEncryption
15:93:65:4d:ea:b1:b7:0d:65:69:bd:dc:e1:44:f5:ae:49:a9:
98:55:7e:7c:f7:ab:57:18:0b:d6:71:13:55:22:0c:8e:78:7e:
50:09:44:93:85:d2:84:ba:07:27:9d:14:71:62:19:31:2c:b0:
01:34:45:e2:dd:7d:b5:65:b7:26:1c:cc:fb:2d:48:d5:e4:28:
89:19:64:96:b7:d0:a4:01:5a:30:fa:e8:31:e4:1f:fe:0d:45:
81:35:a6:58:50:40:dc:a7:ba:f0:c5:b7:95:56:e2:9b:c4:31:
b5:2b:84:68:3c:70:96:10:bc:50:1a:a7:c4:95:a3:b0:62:6f:
1c:6d:33:6b:24:3a:ab:61:ef:3a:f5:71:c8:3d:b4:6c:7d:1d:
f5:f9:e2:a1:c1:12:2e:0b:78:27:f1:dc:73:43:4b:0f:4f:57:
6e:c9:46:e2:5e:f5:8a:9e:e8:7e:06:ab:05:eb:4f:b6:82:68:
1e:66:c0:bb:7c:e3:dc:33:d8:05:e6:e1:fa:20:d1:13:9a:ec:
10:8d:91:b5:e9:93:04:6a:a8:9a:41:9c:8f:c5:61:54:d2:3b:
58:d5:05:e1:4c:68:79:fb:55:b2:34:33:9d:49:dc:7e:4b:29:
77:fd:96:bb:21:a2:08:26:0c:d5:c1:7f:9c:0b:1e:d6:c7:74:
6c:f9:26:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDOC2FaWiG38cyhwtWVWxE4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MGY0MGJkYjllNjY0NzY5ZTkxNzU5MGY3OGRiNmU3NzE5
M2Q3NTEwHhcNMjYwOTIzMTEzNDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWRiZjZmNjc5MWUzNTU2NzA5YzAwMWUyNWE1OWQ0MTZmZjU1NGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun7zRgVJqu3weAsmkI/qp6miMwVj
O1JNRimaZp3J1FRW+ZEp/2GVuGvb8q/GCDSu+PSpNixtEknH8zpJlkVk8e+6e+nT
pX9sWj1Bjb1HesmGJnspYPrITHOj9EKxJ1blcfmE7KLG0tqZBpRchmjU2Tjyx6ri
SLFGuotE1fz2fkQfsa+xVese00NGRpl5PhBXj/lSTHmFJvErC6GbeS/NV8quTaS7
odqsJcZq5E9ma3YT/Ai1KbvIc5eE9Fp1SOSZJbhssWKPqnUExcAMIsCzIsAdJlvn
7os7tgJDbkHzYnPP2HvYGEmHPs/q6Dkk5dEvmMdkgmVL9Bf5ojGmLy2LWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKXb9vZ5HjVWcJwAHiWlnUFv9VS+MB8GA1UdIwQY
MBaAFLkPQL255mR2npF1kPeNtudxk9dRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVE5QXZibm1aSGFla1hXUTk0MjI1M0dUMTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iOTJjYzMtZGRmMS00M2NiLWI0YjEt
NDE1NGRhNWNlYjliLzEvcGR2Mjlua2VOVlp3bkFBZUphV2RRV18xVkw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9iOTJjYzMtZGRmMS00M2NiLWI0YjEtNDE1NGRhNWNlYjli
LzEvdVE5QXZibm1aSGFla1hXUTk0MjI1M0dUMTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCue3wMA0G
CSqGSIb3DQEBCwUAA4IBAQAVk2VN6rG3DWVpvdzhRPWuSamYVX5896tXGAvWcRNV
IgyOeH5QCUSThdKEugcnnRRxYhkxLLABNEXi3X21ZbcmHMz7LUjV5CiJGWSWt9Ck
AVow+ugx5B/+DUWBNaZYUEDcp7rwxbeVVuKbxDG1K4RoPHCWELxQGqfElaOwYm8c
bTNrJDqrYe869XHIPbRsfR31+eKhwRIuC3gn8dxzQ0sPT1duyUbiXvWKnuh+BqsF
60+2gmgeZsC7fOPcM9gF5uH6INETmuwQjZG16ZMEaqiaQZyPxWFU0jtY1QXhTGh5
+1WyNDOdSdx+Syl3/Za7IaIIJgzVwX+cCx7Wx3Rs+SZ6
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:43:08 2026 by rpki-client