Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/pC_rZlIbwEr7vMtZE6BLnKFhkjo.roa
File: pC_rZlIbwEr7vMtZE6BLnKFhkjo.roa (raw, json)
Hash identifier: DDiufBot2z3oX+2RZxG2JEHDnkreGqKnf5XhZxIEUqQ=
Subject key identifier: A4:2F:EB:66:52:1B:C0:4A:FB:BC:CB:59:13:A0:4B:9C:A1:61:92:3A
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 019D90A3C139C7A84AF5B47C18AC780B9671
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/pC_rZlIbwEr7vMtZE6BLnKFhkjo.roa
Signing time: Wed 15 Apr 2026 10:15:44 +0000
ROA not before: Wed 15 Apr 2026 10:15:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216334
IP address blocks: 207.89.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:90:a3:c1:39:c7:a8:4a:f5:b4:7c:18:ac:78:0b:96:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Apr 15 10:15:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a42feb66521bc04afbbccb5913a04b9ca161923a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e1:42:61:45:1f:60:52:72:2a:9e:38:a0:45:
55:42:7f:ae:81:9f:1e:c4:24:d9:01:0f:b8:44:c5:
ef:df:82:a5:50:ba:47:64:d9:22:73:89:55:5a:7e:
60:40:40:f1:9c:95:c1:b7:a5:3b:10:85:d2:e1:dc:
0e:02:cd:41:19:4f:01:58:7b:8b:a2:71:5a:f5:9c:
62:56:d0:16:5b:a9:3d:4a:01:0d:0e:96:93:e7:a7:
68:91:19:38:13:68:e5:59:24:fa:90:69:49:ac:35:
80:60:15:43:0e:91:d3:72:e8:37:c0:e8:63:02:c6:
7d:a8:36:06:c7:09:56:8a:12:06:e0:6b:fb:06:e4:
f6:89:92:ff:35:e1:5e:a0:06:10:4d:5c:3e:fd:b9:
e7:d5:0b:c9:b7:10:31:01:6c:30:c4:0d:22:0e:6b:
16:cc:e5:7d:e7:c7:a3:9c:be:12:32:43:85:bf:4e:
34:7b:23:ed:e3:34:75:4e:32:1d:37:ca:d5:3e:9d:
5d:74:64:bb:f8:17:7f:fb:53:fe:3e:5e:91:6b:85:
d0:a0:bb:a0:7b:92:92:4f:c0:79:63:0d:1f:84:d6:
16:bd:79:67:4b:50:2c:2f:a7:ff:c6:d0:98:69:ba:
e3:bd:0d:f1:2f:8b:7a:67:1d:55:d4:30:ce:34:98:
6e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2F:EB:66:52:1B:C0:4A:FB:BC:CB:59:13:A0:4B:9C:A1:61:92:3A
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/pC_rZlIbwEr7vMtZE6BLnKFhkjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.89.16.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:25:62:73:f6:19:8a:1f:87:57:cf:4e:d7:32:a8:8f:53:42:
b3:dd:92:dd:96:7f:3d:f3:0f:e3:88:48:fd:f6:c7:83:bf:8e:
3c:90:21:8f:ec:98:c2:54:a0:b1:62:29:02:d3:cd:8e:be:1b:
41:b5:3b:03:d7:40:df:7e:66:7e:13:1e:93:c0:c1:5e:b9:e7:
d2:df:76:85:cd:c8:27:c8:ef:38:dd:45:1d:e9:fd:24:f4:7a:
1d:5b:eb:d9:97:93:88:89:e3:68:58:d8:6f:8c:d7:ad:84:8b:
92:58:4a:77:4a:d8:e7:fb:74:e2:34:d7:e5:28:4a:31:ef:ca:
22:8d:20:d8:e8:93:b8:65:a4:7a:69:17:cd:66:e2:7e:1b:b5:
16:b2:b8:5f:8b:9a:ba:fe:cd:7d:cc:b2:95:03:01:55:a8:3a:
23:2d:89:9c:10:86:dd:dc:32:68:40:cb:fe:24:26:29:bd:6c:
68:a1:e0:72:c1:d0:12:9a:0b:b5:2b:b9:26:34:78:4f:00:31:
73:85:07:10:37:b8:c3:14:e1:f6:22:b7:4b:39:ea:b7:14:79:
d3:06:41:a4:c9:e0:a9:a2:0b:17:77:3c:c2:52:7a:87:5b:d4:
3e:09:cd:66:b0:16:b7:de:d1:d0:82:66:2b:4f:d6:93:db:d3:
5b:ff:54:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2Qo8E5x6hK9bR8GKx4C5ZxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNjQ0MWQ5ZDgwN2UwZDc4Y2U3NTIxM2ExMDM0MDBlZTE0
YTdjZGMwHhcNMjYwNDE1MTAxNTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDJmZWI2NjUyMWJjMDRhZmJiY2NiNTkxM2EwNGI5Y2ExNjE5MjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uFCYUUfYFJyKp44oEVVQn+ugZ8e
xCTZAQ+4RMXv34KlULpHZNkic4lVWn5gQEDxnJXBt6U7EIXS4dwOAs1BGU8BWHuL
onFa9ZxiVtAWW6k9SgENDpaT56dokRk4E2jlWST6kGlJrDWAYBVDDpHTcug3wOhj
AsZ9qDYGxwlWihIG4Gv7BuT2iZL/NeFeoAYQTVw+/bnn1QvJtxAxAWwwxA0iDmsW
zOV958ejnL4SMkOFv040eyPt4zR1TjIdN8rVPp1ddGS7+Bd/+1P+Pl6Ra4XQoLug
e5KST8B5Yw0fhNYWvXlnS1AsL6f/xtCYabrjvQ3xL4t6Zx1V1DDONJhuaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKQv62ZSG8BK+7zLWROgS5yhYZI6MB8GA1UdIwQY
MBaAFMpkQdnYB+DXjOdSE6EDQA7hSnzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYt
MmUyOGI5NjQ5OGE5LzEvcENfclpsSWJ3RXI3dk10WkU2QkxuS0Zoa2pvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYtMmUyOGI5NjQ5OGE5
LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz1kQMA0G
CSqGSIb3DQEBCwUAA4IBAQB8JWJz9hmKH4dXz07XMqiPU0Kz3ZLdln898w/jiEj9
9seDv448kCGP7JjCVKCxYikC082OvhtBtTsD10DffmZ+Ex6TwMFeuefS33aFzcgn
yO843UUd6f0k9HodW+vZl5OIieNoWNhvjNethIuSWEp3Stjn+3TiNNflKEox78oi
jSDY6JO4ZaR6aRfNZuJ+G7UWsrhfi5q6/s19zLKVAwFVqDojLYmcEIbd3DJoQMv+
JCYpvWxooeBywdASmgu1K7kmNHhPADFzhQcQN7jDFOH2IrdLOeq3FHnTBkGkyeCp
ogsXdzzCUnqHW9Q+Cc1msBa33tHQgmYrT9aT29Nb/1Re
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:01:46 2026 by rpki-client