Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/P1rq--wiDi76LUxjVzXH29sgybw.roa
File: P1rq--wiDi76LUxjVzXH29sgybw.roa (raw, json)
Hash identifier: SPvPSEDad4qsS0oBYZ6qjYjCdcZiG9BnjnuYqxJo1XY=
Subject key identifier: 3F:5A:EA:FB:EC:22:0E:2E:FA:2D:4C:63:57:35:C7:DB:DB:20:C9:BC
Certificate issuer: /CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Certificate serial: 019C9FF654E3CE8127C0988EB0FD70D87D05
Authority key identifier: 1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/P1rq--wiDi76LUxjVzXH29sgybw.roa
Signing time: Fri 27 Feb 2026 16:37:26 +0000
ROA not before: Fri 27 Feb 2026 16:37:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214192
IP address blocks: 194.88.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9f:f6:54:e3:ce:81:27:c0:98:8e:b0:fd:70:d8:7d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Validity
Not Before: Feb 27 16:37:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f5aeafbec220e2efa2d4c635735c7dbdb20c9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:01:a5:b1:96:d0:49:9d:cf:25:66:32:35:9d:
41:5e:9c:b9:aa:36:bd:49:31:dc:b7:e1:e0:ea:e0:
03:dc:90:e2:ac:d5:39:2c:48:f3:df:5a:33:53:35:
a9:1a:7a:8e:c2:29:75:f8:ee:e2:bd:69:b9:32:a3:
8c:98:87:4b:59:0b:cc:c7:b3:5c:ee:e3:b7:ae:fa:
c5:35:80:8f:12:d5:ed:d1:83:97:40:4b:be:ea:98:
2b:ea:ed:ec:e7:41:fa:02:cd:1e:69:b2:62:2f:4c:
c1:01:ea:6e:a1:d0:25:f1:b3:a2:52:67:21:57:20:
97:5c:18:29:e6:8f:7b:74:22:7f:aa:75:26:c3:67:
68:7a:f5:65:55:8e:50:7c:ec:cd:6b:81:51:5a:b8:
d8:0f:ba:17:c3:f6:0e:c3:f5:a8:e6:01:12:0c:01:
6f:fd:e5:3e:70:06:d8:37:93:21:5e:5d:4a:fe:7e:
1c:68:46:9f:71:ad:3b:0e:25:4f:e8:0e:03:1e:e3:
f9:46:fa:e4:68:98:16:1e:d8:d9:ef:d1:73:41:a7:
10:27:09:aa:25:d4:26:85:2c:cb:3d:ce:68:5a:57:
ab:cc:c1:3b:e2:0f:b4:5a:29:97:7c:d5:d5:1c:92:
e1:95:80:d1:30:4a:10:87:ba:75:ca:41:f4:6a:4e:
02:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5A:EA:FB:EC:22:0E:2E:FA:2D:4C:63:57:35:C7:DB:DB:20:C9:BC
X509v3 Authority Key Identifier:
keyid:1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/P1rq--wiDi76LUxjVzXH29sgybw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.232.0/24
Signature Algorithm: sha256WithRSAEncryption
24:d1:84:7f:4c:88:c1:b9:a0:ab:c2:1c:c6:ac:17:e9:65:60:
5c:05:ee:8f:d2:bc:85:96:de:86:11:8f:88:26:c2:e3:ec:56:
72:1c:bc:a0:1a:8c:15:47:59:62:25:76:f3:16:63:2b:00:4e:
53:1f:07:67:20:47:40:66:91:fb:25:13:ca:55:74:46:36:15:
66:54:82:0b:1a:e9:c3:75:f4:39:58:90:3b:34:7e:b7:8e:65:
11:ee:37:ad:53:da:cc:7a:8e:bf:16:6b:17:99:35:55:e7:e3:
9c:6c:7d:f9:f6:67:ea:1c:9d:bf:43:9f:d2:45:a8:08:76:43:
2e:8e:0a:b8:fa:aa:0a:c6:fd:36:2b:cf:93:26:5c:8e:0c:87:
4d:3a:7e:86:72:be:99:73:53:e0:57:01:f9:28:b5:3d:cf:49:
b1:9e:c8:19:bd:cc:9f:d9:85:4e:71:97:65:8d:ba:1a:2d:98:
71:3f:95:64:b1:f4:b8:94:a2:7f:d7:88:ec:e9:70:1e:a8:c8:
4c:2b:34:66:e9:c7:4f:8c:a7:6b:85:2f:76:b2:65:28:16:01:
76:c3:b6:ed:78:01:b9:7c:cc:bf:41:6f:9c:1e:9a:ba:0b:68:
73:8d:09:54:7d:fd:83:96:92:ce:72:db:3a:c7:46:b6:db:10:
de:e8:a6:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZyf9lTjzoEnwJiOsP1w2H0FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNGU2YTFkM2NjMWU0ZjNkYzAxYWI5NmM5NDE5NmI5YzQ5
ZDI5MTYwHhcNMjYwMjI3MTYzNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjVhZWFmYmVjMjIwZTJlZmEyZDRjNjM1NzM1YzdkYmRiMjBjOWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgGlsZbQSZ3PJWYyNZ1BXpy5qja9
STHct+Hg6uAD3JDirNU5LEjz31ozUzWpGnqOwil1+O7ivWm5MqOMmIdLWQvMx7Nc
7uO3rvrFNYCPEtXt0YOXQEu+6pgr6u3s50H6As0eabJiL0zBAepuodAl8bOiUmch
VyCXXBgp5o97dCJ/qnUmw2doevVlVY5QfOzNa4FRWrjYD7oXw/YOw/Wo5gESDAFv
/eU+cAbYN5MhXl1K/n4caEafca07DiVP6A4DHuP5RvrkaJgWHtjZ79FzQacQJwmq
JdQmhSzLPc5oWlerzME74g+0WimXfNXVHJLhlYDRMEoQh7p1ykH0ak4CYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD9a6vvsIg4u+i1MY1c1x9vbIMm8MB8GA1UdIwQY
MBaAFBxOah08weTz3AGrlslBlrnEnSkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEU1cUhUekI1UFBjQWF1V3lVR1d1Y1NkS1JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85NmIxMTctZmQzYi00Zjc0LWIzYmYt
MWE0MmY2MzJjMzA3LzEvUDFycS0td2lEaTc2TFV4alZ6WEgyOXNneWJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi85NmIxMTctZmQzYi00Zjc0LWIzYmYtMWE0MmY2MzJjMzA3
LzEvSEU1cUhUekI1UFBjQWF1V3lVR1d1Y1NkS1JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwljoMA0G
CSqGSIb3DQEBCwUAA4IBAQAk0YR/TIjBuaCrwhzGrBfpZWBcBe6P0ryFlt6GEY+I
JsLj7FZyHLygGowVR1liJXbzFmMrAE5THwdnIEdAZpH7JRPKVXRGNhVmVIILGunD
dfQ5WJA7NH63jmUR7jetU9rMeo6/FmsXmTVV5+OcbH359mfqHJ2/Q5/SRagIdkMu
jgq4+qoKxv02K8+TJlyODIdNOn6Gcr6Zc1PgVwH5KLU9z0mxnsgZvcyf2YVOcZdl
jboaLZhxP5VksfS4lKJ/14js6XAeqMhMKzRm6cdPjKdrhS92smUoFgF2w7bteAG5
fMy/QW+cHpq6C2hzjQlUff2DlpLOcts6x0a22xDe6Ka+
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:28:46 2026 by rpki-client