Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/N3v9vhiXihe0vzoaKb9-xZn_-1U.roa
File: N3v9vhiXihe0vzoaKb9-xZn_-1U.roa (raw, json)
Hash identifier: s9FU1yiS9iuedFt2SlgiwKZD50vgdzAM+sgCxxT8/SU=
Subject key identifier: 37:7B:FD:BE:18:97:8A:17:B4:BF:3A:1A:29:BF:7E:C5:99:FF:FB:55
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 01A08ADC97ED877734B3319036F26495200D
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/N3v9vhiXihe0vzoaKb9-xZn_-1U.roa
Signing time: Thu 10 Sep 2026 10:28:27 +0000
ROA not before: Thu 10 Sep 2026 10:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209242
IP address blocks: 45.8.211.0/24 maxlen: 24
194.53.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:dc:97:ed:87:77:34:b3:31:90:36:f2:64:95:20:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Sep 10 10:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=377bfdbe18978a17b4bf3a1a29bf7ec599fffb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1b:30:57:aa:95:2c:29:1c:00:e3:8b:3e:96:
d7:20:42:07:f2:a8:2e:f9:1d:11:70:0b:3b:fb:14:
4a:6e:b6:54:f4:8d:95:b7:6f:9f:aa:89:22:35:2b:
dc:5b:4f:c3:13:47:17:cb:26:b4:09:2e:93:44:b3:
ff:12:4e:eb:b7:b5:53:18:4f:12:12:b5:6b:61:ea:
c1:5b:5d:e4:45:6a:90:c8:b5:d2:47:41:42:2e:68:
e0:73:1a:d5:3b:fa:1b:6e:bb:94:54:ba:1b:79:98:
69:a8:c7:1c:cc:46:31:94:2d:dd:8b:98:2a:ba:8c:
07:81:d2:9e:ce:98:63:7a:c4:96:af:2f:99:9f:52:
f2:cc:06:d5:3a:c2:69:ea:e8:1d:c2:07:13:82:08:
8b:df:21:eb:51:ad:14:1a:c9:b9:a3:e9:fb:54:b6:
27:74:b8:35:ae:45:9e:5a:e2:ac:d7:4c:bc:fc:a5:
1f:96:92:c6:1a:16:f0:50:9c:40:e3:b4:df:31:6f:
1f:f2:11:26:01:a6:19:b8:23:a8:63:97:3f:b3:7b:
cf:7b:34:90:21:b0:b7:ac:4e:98:cd:57:ae:e8:ff:
3a:ff:dd:df:1e:83:46:57:15:e9:8a:5e:a2:04:ad:
01:94:0c:26:4d:94:b5:82:39:25:e7:78:89:a5:0c:
fa:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7B:FD:BE:18:97:8A:17:B4:BF:3A:1A:29:BF:7E:C5:99:FF:FB:55
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/N3v9vhiXihe0vzoaKb9-xZn_-1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.211.0/24
194.53.53.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ba:d7:00:46:55:55:b8:cc:9d:78:2d:91:99:a7:28:85:3c:
aa:14:26:03:9e:c5:72:58:39:1a:88:8a:6a:4e:45:71:1d:46:
76:49:8f:70:78:be:dd:60:80:a1:ba:a6:08:c8:4b:3b:a0:43:
f2:cb:c2:9f:6c:76:6c:13:fe:67:69:70:53:be:66:15:23:78:
54:c3:6d:42:29:ce:b6:c3:0c:7c:ce:94:8d:97:7c:eb:67:f1:
af:d2:fe:05:e0:8e:a0:bd:28:60:d4:31:c3:cf:43:a1:4e:c7:
7b:55:e4:76:3c:3e:60:a8:b7:2e:a0:4c:17:c8:47:84:d9:7d:
d2:59:10:0d:05:9d:67:2e:44:af:fd:ec:18:49:38:82:74:ae:
ea:e7:ee:1c:b0:ed:46:91:bb:0e:26:91:e6:fa:91:8d:70:81:
c7:47:0e:4c:dc:fb:67:ba:7a:5d:5e:96:dc:30:f9:b7:f1:96:
2f:0c:14:8d:a8:60:52:4f:11:5f:b9:e7:35:32:53:17:fa:90:
e4:5e:f3:fa:83:7c:c2:97:66:60:e1:bb:f2:a5:4c:5c:4c:b0:
ad:08:68:83:6d:7d:33:3a:88:e1:0a:26:38:53:b7:3f:ff:9e:
ee:9f:1e:b9:56:2a:0c:19:8a:5a:29:85:63:98:8a:e7:20:2e:
78:f9:c2:ef
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCK3Jfth3c0szGQNvJklSANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YTI0YzI4YmEyMDJmYzA4NmYwYjViYWEzMDJlNTdhZTg5
ZmUzMGEwHhcNMjYwOTEwMTAyODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzdiZmRiZTE4OTc4YTE3YjRiZjNhMWEyOWJmN2VjNTk5ZmZmYjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBswV6qVLCkcAOOLPpbXIEIH8qgu
+R0RcAs7+xRKbrZU9I2Vt2+fqokiNSvcW0/DE0cXyya0CS6TRLP/Ek7rt7VTGE8S
ErVrYerBW13kRWqQyLXSR0FCLmjgcxrVO/obbruUVLobeZhpqMcczEYxlC3di5gq
uowHgdKezphjesSWry+Zn1LyzAbVOsJp6ugdwgcTggiL3yHrUa0UGsm5o+n7VLYn
dLg1rkWeWuKs10y8/KUflpLGGhbwUJxA47TfMW8f8hEmAaYZuCOoY5c/s3vPezSQ
IbC3rE6YzVeu6P86/93fHoNGVxXpil6iBK0BlAwmTZS1gjkl53iJpQz6GwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDd7/b4Yl4oXtL86Gim/fsWZ//tVMB8GA1UdIwQY
MBaAFJmiTCi6IC/AhvC1uqMC5Xron+MKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt
YjU3YTM2ZjJhZmNkLzEvTjN2OXZoaVhpaGUwdnpvYUtiOS14Wm5fLTFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk
LzEvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQjTAwQA
wjU1MA0GCSqGSIb3DQEBCwUAA4IBAQCOutcARlVVuMydeC2RmacohTyqFCYDnsVy
WDkaiIpqTkVxHUZ2SY9weL7dYIChuqYIyEs7oEPyy8KfbHZsE/5naXBTvmYVI3hU
w21CKc62wwx8zpSNl3zrZ/Gv0v4F4I6gvShg1DHDz0OhTsd7VeR2PD5gqLcuoEwX
yEeE2X3SWRANBZ1nLkSv/ewYSTiCdK7q5+4csO1GkbsOJpHm+pGNcIHHRw5M3Ptn
unpdXpbcMPm38ZYvDBSNqGBSTxFfuec1MlMX+pDkXvP6g3zCl2Zg4bvypUxcTLCt
CGiDbX0zOojhCiY4U7c//57unx65VioMGYpaKYVjmIrnIC54+cLv
-----END CERTIFICATE-----
Generated at Sun Sep 20 18:37:18 2026 by rpki-client