Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/CjfmvJ0XRpbO26T6Bc03a8Ne2C0.roa
File: CjfmvJ0XRpbO26T6Bc03a8Ne2C0.roa (raw, json)
Hash identifier: hbMTywJkxAoG5vlp7Fd9e3h3SO2hZD0EHWgX/IJxhMw=
Subject key identifier: 0A:37:E6:BC:9D:17:46:96:CE:DB:A4:FA:05:CD:37:6B:C3:5E:D8:2D
Certificate issuer: /CN=9d6b9774c94876c98321de3201b11b75a1358d19
Certificate serial: 019C2EA68D28370F0F3C45814382092BE14B
Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/CjfmvJ0XRpbO26T6Bc03a8Ne2C0.roa
Signing time: Thu 05 Feb 2026 16:33:12 +0000
ROA not before: Thu 05 Feb 2026 16:33:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211462
IP address blocks: 193.32.87.0/24 maxlen: 24
2a0d:8140::/48 maxlen: 48
2a0d:8140:120::/48 maxlen: 48
2a0d:8140:2fff::/48 maxlen: 48
2a0d:8140:3fff::/48 maxlen: 48
2a0d:8140:4fff::/48 maxlen: 48
2a0d:8141::/48 maxlen: 48
2a0d:8142::/48 maxlen: 48
2a0d:8143::/48 maxlen: 48
2a0d:8144::/48 maxlen: 48
2a0d:8145::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2e:a6:8d:28:37:0f:0f:3c:45:81:43:82:09:2b:e1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19
Validity
Not Before: Feb 5 16:33:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a37e6bc9d174696cedba4fa05cd376bc35ed82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:88:6b:b7:20:7b:22:d8:c2:f8:4e:93:35:
df:6c:98:b0:a2:ab:ca:8b:28:75:98:2a:71:0b:4b:
03:a6:21:7d:e7:50:93:2f:be:11:85:4b:f1:95:81:
df:36:4b:27:97:a6:25:35:1f:81:b5:a5:e9:ad:40:
dd:fc:a9:07:48:e3:63:8d:2f:75:27:b3:24:8d:0e:
7b:d5:7f:89:44:84:d1:f7:30:1a:34:90:4b:55:8b:
65:88:8e:92:02:d1:25:cf:7b:e0:ff:2d:0d:c5:5f:
c4:21:7c:90:d0:a1:71:fd:cd:6f:51:9a:1e:96:e1:
74:4c:20:ce:c8:b3:c0:23:52:04:5b:13:dd:4b:47:
92:93:ab:6f:f8:6c:29:43:a6:98:88:3f:4a:4b:64:
4e:9f:57:24:c0:7f:e0:0f:69:f6:8a:44:80:7c:40:
e5:26:89:c4:31:d7:09:2f:26:ad:4b:a5:da:52:aa:
32:5c:2c:01:12:11:f0:19:37:93:52:1c:dd:12:4e:
df:85:4a:ba:4b:ba:29:4f:03:25:62:4b:fe:9e:e6:
e9:53:71:ca:d4:09:47:7e:bb:85:8e:41:ed:30:48:
cd:0c:5e:28:79:9d:d9:be:d8:30:ce:22:20:cc:4b:
91:b3:07:da:d8:1b:23:61:f4:3a:d1:1e:fe:6e:8f:
e4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:37:E6:BC:9D:17:46:96:CE:DB:A4:FA:05:CD:37:6B:C3:5E:D8:2D
X509v3 Authority Key Identifier:
keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/CjfmvJ0XRpbO26T6Bc03a8Ne2C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.87.0/24
IPv6:
2a0d:8140::/48
2a0d:8140:120::/48
2a0d:8140:2fff::/48
2a0d:8140:3fff::/48
2a0d:8140:4fff::/48
2a0d:8141::/48
2a0d:8142::/48
2a0d:8143::/48
2a0d:8144::/48
2a0d:8145::/48
Signature Algorithm: sha256WithRSAEncryption
24:d1:9d:0b:60:07:3a:d6:83:09:1c:85:bf:bd:f3:a3:6e:3a:
e7:99:98:74:28:e9:ac:62:0c:91:d5:e4:f3:36:0e:b4:53:3c:
32:40:e8:3d:ae:04:0a:4c:35:5b:dc:2d:3f:d8:d1:49:d2:68:
34:dd:f6:18:ec:b2:6a:3c:a5:a9:f7:75:d1:fd:d4:36:5e:cd:
a3:df:80:1c:53:69:44:32:ab:da:9e:89:93:7e:9d:0c:02:e4:
36:42:f1:f7:75:14:1d:f5:bf:01:af:17:0b:16:17:93:d8:83:
8e:97:4c:9e:d4:52:52:f5:a2:62:6e:98:bd:32:69:00:5d:47:
6c:cf:13:a7:09:a4:50:dc:24:76:76:df:24:1d:09:e8:3c:32:
42:80:ae:03:99:14:84:ec:5a:4b:e4:34:c8:79:a7:98:dc:90:
8a:e9:ec:f1:08:f8:1a:9f:3a:dd:74:2c:3f:43:97:f0:23:7e:
32:c2:76:3d:53:e7:d0:7e:be:f5:84:35:cb:81:c2:f3:85:0a:
aa:7b:15:73:50:d7:e8:b3:84:8f:8e:a3:94:82:94:3e:d3:64:
4d:25:c8:b2:c2:fd:51:3c:4d:ae:0e:d4:90:a5:14:3c:4b:a6:
da:b0:d7:0b:90:39:e7:c0:0d:b0:e2:d9:0c:19:b3:cf:d0:89:
30:a4:0b:ac
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgISAZwupo0oNw8PPEWBQ4IJK+FLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNmI5Nzc0Yzk0ODc2Yzk4MzIxZGUzMjAxYjExYjc1YTEz
NThkMTkwHhcNMjYwMjA1MTYzMzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTM3ZTZiYzlkMTc0Njk2Y2VkYmE0ZmEwNWNkMzc2YmMzNWVkODJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr22Ia7cgeyLYwvhOkzXfbJiwoqvK
iyh1mCpxC0sDpiF951CTL74RhUvxlYHfNksnl6YlNR+BtaXprUDd/KkHSONjjS91
J7MkjQ571X+JRITR9zAaNJBLVYtliI6SAtElz3vg/y0NxV/EIXyQ0KFx/c1vUZoe
luF0TCDOyLPAI1IEWxPdS0eSk6tv+GwpQ6aYiD9KS2ROn1ckwH/gD2n2ikSAfEDl
JonEMdcJLyatS6XaUqoyXCwBEhHwGTeTUhzdEk7fhUq6S7opTwMlYkv+nubpU3HK
1AlHfruFjkHtMEjNDF4oeZ3ZvtgwziIgzEuRswfa2BsjYfQ60R7+bo/kgQIDAQAB
o4ICbDCCAmgwHQYDVR0OBBYEFAo35rydF0aWztuk+gXNN2vDXtgtMB8GA1UdIwQY
MBaAFJ1rl3TJSHbJgyHeMgGxG3WhNY0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80MGNiOWMtYzQyNi00OGFiLTk5Njgt
YTU2YmRmYWRiODFlLzEvQ2pmbXZKMFhScGJPMjZUNkJjMDNhOE5lMkMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS80MGNiOWMtYzQyNi00OGFiLTk5NjgtYTU2YmRmYWRiODFl
LzEvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwDAQCAAEwBgMEAMEgVzBg
BAIAAjBaAwcAKg2BQAAAAwcAKg2BQAEgAwcAKg2BQC//AwcAKg2BQD//AwcAKg2B
QE//AwcAKg2BQQAAAwcAKg2BQgAAAwcAKg2BQwAAAwcAKg2BRAAAAwcAKg2BRQAA
MA0GCSqGSIb3DQEBCwUAA4IBAQAk0Z0LYAc61oMJHIW/vfOjbjrnmZh0KOmsYgyR
1eTzNg60UzwyQOg9rgQKTDVb3C0/2NFJ0mg03fYY7LJqPKWp93XR/dQ2Xs2j34Ac
U2lEMqvanomTfp0MAuQ2QvH3dRQd9b8BrxcLFheT2IOOl0ye1FJS9aJibpi9MmkA
XUdszxOnCaRQ3CR2dt8kHQnoPDJCgK4DmRSE7FpL5DTIeaeY3JCK6ezxCPganzrd
dCw/Q5fwI34ywnY9U+fQfr71hDXLgcLzhQqqexVzUNfos4SPjqOUgpQ+02RNJciy
wv1RPE2uDtSQpRQ8S6basNcLkDnnwA2w4tkMGbPP0IkwpAus
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:35:40 2026 by rpki-client