Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/DW2EOj44CMMwCR0usWS86GpNRuo.roa
File: DW2EOj44CMMwCR0usWS86GpNRuo.roa (raw, json)
Hash identifier: sQgXXLUthUP2gqj6lU+oLctXL4scForYuITBv0USf24=
Subject key identifier: 0D:6D:84:3A:3E:38:08:C3:30:09:1D:2E:B1:64:BC:E8:6A:4D:46:EA
Certificate issuer: /CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Certificate serial: 019B7C7F2116C30AB7B75F1A51D9618F911A
Authority key identifier: A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/DW2EOj44CMMwCR0usWS86GpNRuo.roa
Signing time: Fri 02 Jan 2026 02:17:44 +0000
ROA not before: Fri 02 Jan 2026 02:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20493
IP address blocks: 185.113.160.0/22 maxlen: 24
193.108.21.0/24 maxlen: 24
2a06:6a00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:21:16:c3:0a:b7:b7:5f:1a:51:d9:61:8f:91:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Validity
Not Before: Jan 2 02:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d6d843a3e3808c330091d2eb164bce86a4d46ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:94:3b:eb:76:65:cc:d1:e8:9f:13:6f:99:45:
12:03:8a:b1:dc:24:51:c1:76:70:ab:80:51:74:5f:
5c:57:73:b3:04:1c:e8:ea:eb:18:4e:80:98:16:3b:
36:00:0e:9a:2f:2d:2c:8a:cc:fb:7c:eb:0f:5c:b3:
e4:1c:93:be:52:57:81:3a:32:87:19:38:1c:17:d8:
4b:7f:9b:8e:f9:6f:71:1d:dd:cd:ce:5d:35:10:d3:
b3:c5:2c:ae:58:dd:9a:b1:7c:ac:e3:5c:11:a1:b0:
b5:b3:0c:fb:33:02:0f:19:0e:1d:b9:90:bc:62:72:
82:cd:fb:38:74:0e:be:e6:1f:79:14:27:40:aa:0e:
8f:48:71:c0:a5:06:28:81:f5:e5:66:65:bb:c9:a7:
89:f7:4d:5b:54:8f:ce:0d:33:11:0b:47:6e:85:39:
90:89:40:4a:d1:39:4b:c3:d4:39:43:9a:d6:5f:ea:
9c:ff:bd:7c:84:97:77:a9:90:70:54:0d:98:e7:32:
ff:74:ca:96:68:e1:9d:8e:c6:f4:40:b6:bd:d6:ba:
e9:d5:25:6c:fc:4e:02:f0:70:98:ef:00:aa:6c:4c:
ce:72:8e:00:f5:20:2f:15:e9:47:f8:65:eb:4d:f7:
2b:e3:3a:06:ae:3a:9c:c9:e3:09:f4:7d:7b:09:b2:
42:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6D:84:3A:3E:38:08:C3:30:09:1D:2E:B1:64:BC:E8:6A:4D:46:EA
X509v3 Authority Key Identifier:
keyid:A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/DW2EOj44CMMwCR0usWS86GpNRuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.160.0/22
193.108.21.0/24
IPv6:
2a06:6a00::/29
Signature Algorithm: sha256WithRSAEncryption
22:04:97:10:e9:8f:02:cc:06:f8:3c:3c:4a:03:cd:ef:b9:02:
ed:6e:07:a6:af:7f:66:ac:da:62:ab:20:f9:b0:12:d4:09:26:
2e:48:e5:eb:48:fe:8b:d7:28:17:f0:5a:5e:b9:69:66:31:5f:
44:87:11:ef:09:2c:bd:8d:35:bd:d2:93:ec:5c:0a:f9:71:2a:
d9:2a:bf:82:fc:fd:e9:ba:26:0d:03:49:76:ef:27:01:70:27:
82:8f:30:dc:54:47:2d:ac:1b:8a:dc:f9:99:66:8c:de:ea:42:
89:79:25:12:22:7d:39:30:53:0c:d3:b6:b0:e9:da:6a:68:3e:
5b:97:fd:c0:17:0a:67:fd:a4:53:9d:66:27:bc:32:a6:13:ee:
a1:14:d3:ba:b2:43:cb:31:89:6d:37:b1:b8:58:6b:23:69:e2:
e6:d4:22:ce:44:5d:0a:f7:ab:9c:cc:b3:47:b1:6a:59:52:2b:
5d:0d:98:1e:c1:87:64:44:6c:5d:38:b8:2c:32:d1:89:cf:aa:
bd:06:43:fb:f9:3a:3f:23:2c:4f:60:2d:67:0e:75:4f:05:2d:
54:40:d7:2c:63:f8:ee:86:f5:7a:c7:c3:8d:f7:60:ff:69:90:
00:d3:28:51:a9:95:26:04:4f:50:23:92:94:96:e2:84:dc:36:
fa:0a:c2:96
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZt8fyEWwwq3t18aUdlhj5EaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZjAyMzE4ZjJjZTk3MmU3MjQwOGNjY2M3ZDMyMGFmMzBj
ZDJiMGQwHhcNMjYwMTAyMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDZkODQzYTNlMzgwOGMzMzAwOTFkMmViMTY0YmNlODZhNGQ0NmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZQ763ZlzNHonxNvmUUSA4qx3CRR
wXZwq4BRdF9cV3OzBBzo6usYToCYFjs2AA6aLy0sisz7fOsPXLPkHJO+UleBOjKH
GTgcF9hLf5uO+W9xHd3Nzl01ENOzxSyuWN2asXys41wRobC1swz7MwIPGQ4duZC8
YnKCzfs4dA6+5h95FCdAqg6PSHHApQYogfXlZmW7yaeJ901bVI/ODTMRC0duhTmQ
iUBK0TlLw9Q5Q5rWX+qc/718hJd3qZBwVA2Y5zL/dMqWaOGdjsb0QLa91rrp1SVs
/E4C8HCY7wCqbEzOco4A9SAvFelH+GXrTfcr4zoGrjqcyeMJ9H17CbJChwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFA1thDo+OAjDMAkdLrFkvOhqTUbqMB8GA1UdIwQY
MBaAFKjwIxjyzpcuckCMzMfTIK8wzSsNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVBBakdQTE9seTV5UUl6TXg5TWdyekROS3cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNDRhMDMtNDQ3Mi00MzE1LTg3NTgt
NzU0NGRmMzAwNGIyLzEvRFcyRU9qNDRDTU13Q1IwdXNXUzg2R3BOUnVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iNDRhMDMtNDQ3Mi00MzE1LTg3NTgtNzU0NGRmMzAwNGIy
LzEvcVBBakdQTE9seTV5UUl6TXg5TWdyekROS3cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuXGgAwQA
wWwVMA0EAgACMAcDBQMqBmoAMA0GCSqGSIb3DQEBCwUAA4IBAQAiBJcQ6Y8CzAb4
PDxKA83vuQLtbgemr39mrNpiqyD5sBLUCSYuSOXrSP6L1ygX8FpeuWlmMV9EhxHv
CSy9jTW90pPsXAr5cSrZKr+C/P3puiYNA0l27ycBcCeCjzDcVEctrBuK3PmZZoze
6kKJeSUSIn05MFMM07aw6dpqaD5bl/3AFwpn/aRTnWYnvDKmE+6hFNO6skPLMYlt
N7G4WGsjaeLm1CLORF0K96uczLNHsWpZUitdDZgewYdkRGxdOLgsMtGJz6q9BkP7
+To/IyxPYC1nDnVPBS1UQNcsY/juhvV6x8ON92D/aZAA0yhRqZUmBE9QI5KUluKE
3Db6CsKW
-----END CERTIFICATE-----
Generated at Tue Mar 3 03:44:42 2026 by rpki-client