Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/8OitLpw0dsq3bJueMk5mfw-4mBk.roa
File: 8OitLpw0dsq3bJueMk5mfw-4mBk.roa (raw, json)
Hash identifier: fK9JZ7qX/SNcvGwfyLts434oLNN1a2W6BWiNxhwi1lg=
Subject key identifier: F0:E8:AD:2E:9C:34:76:CA:B7:6C:9B:9E:32:4E:66:7F:0F:B8:98:19
Certificate issuer: /CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Certificate serial: 01A0C44627D856FD162A79BB30C620F9B875
Authority key identifier: AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/8OitLpw0dsq3bJueMk5mfw-4mBk.roa
Signing time: Mon 21 Sep 2026 14:02:07 +0000
ROA not before: Mon 21 Sep 2026 14:02:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211701
IP address blocks: 185.131.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:46:27:d8:56:fd:16:2a:79:bb:30:c6:20:f9:b8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Validity
Not Before: Sep 21 14:02:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0e8ad2e9c3476cab76c9b9e324e667f0fb89819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:38:47:eb:15:43:4c:ed:93:08:32:06:57:c6:
77:11:ba:0c:48:1d:9b:b1:27:61:93:22:ed:f5:a4:
6e:cf:4d:1c:73:fe:f1:9c:58:4b:6b:72:52:c6:bb:
0c:df:50:f3:97:7a:96:ea:aa:69:7e:9e:47:a0:7a:
ef:88:57:b1:ca:33:3d:50:f0:14:54:8c:7f:a5:98:
1b:06:09:52:95:fe:13:a0:dd:6a:a1:89:a6:0e:66:
46:cb:87:b1:7a:83:28:e4:68:cb:36:a3:da:2b:8b:
c0:d0:b1:35:12:ab:2c:b8:0c:3c:11:9e:2f:8b:59:
63:2b:58:a8:1b:8f:bf:48:86:bb:00:24:a2:a2:41:
4c:49:3d:71:bd:90:be:ea:dd:69:ac:87:d6:ef:19:
41:af:a0:e4:1e:f8:b7:88:37:87:d4:6c:b6:7e:37:
dd:2f:2d:aa:f9:34:52:7c:53:b3:51:d9:e3:57:9e:
09:d0:58:30:21:de:46:86:a4:38:71:65:4b:64:a9:
39:22:61:53:72:14:ac:e6:e5:c2:a6:ad:2d:cd:fc:
3c:70:3f:a4:55:f3:d5:03:76:5c:f2:fe:49:ef:b6:
70:b5:de:9e:4e:1b:ac:03:6b:2f:6d:32:22:96:2c:
f5:67:24:41:30:3b:9c:e3:58:44:4b:3c:15:11:81:
a4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E8:AD:2E:9C:34:76:CA:B7:6C:9B:9E:32:4E:66:7F:0F:B8:98:19
X509v3 Authority Key Identifier:
keyid:AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/8OitLpw0dsq3bJueMk5mfw-4mBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.223.0/24
Signature Algorithm: sha256WithRSAEncryption
15:61:b0:48:d4:60:c2:58:35:a3:0d:b6:35:f6:25:13:0b:df:
fe:eb:13:d2:08:93:00:c3:1b:54:1e:a2:5e:2f:13:68:8b:d6:
69:c0:13:c2:9c:13:c0:d5:27:50:a2:56:72:da:b6:fd:e6:92:
3d:91:9d:63:55:ca:3c:e5:86:14:4e:c2:21:55:ce:18:e8:15:
07:dd:7f:4c:1f:c7:45:24:4c:51:c5:de:2f:89:11:dd:bb:b1:
6f:70:e0:a9:e1:54:43:7c:94:47:f2:e3:91:fe:23:14:41:db:
4c:1a:4c:d8:ad:93:09:0c:fb:54:8d:a6:7f:22:e3:26:a8:44:
3a:0c:0e:d9:8d:35:9e:be:38:33:9e:ca:ae:97:b9:30:ed:86:
cf:41:47:41:e3:a4:af:bb:2c:bd:b6:a8:df:ee:12:bb:9d:aa:
01:c8:40:03:f7:93:ac:33:fd:b5:b9:12:58:c9:a3:c6:2f:54:
86:45:20:1b:16:cd:0a:c4:30:01:58:dd:a8:6e:ce:1a:c8:0b:
b3:29:aa:81:b4:48:7c:d7:94:34:fa:a8:ba:84:fe:35:6d:fb:
c7:5c:5e:4c:82:b7:61:7e:db:57:76:10:74:71:21:fb:17:64:
62:a0:63:3a:31:83:cf:c0:48:02:91:02:ed:cd:08:ff:5c:f9:
fc:9f:79:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDERifYVv0WKnm7MMYg+bh1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOWUyN2ZmODg0ZDFmZjdmNDdhYmQwMDUwZWQxMGUwMWVk
Y2VkZmIwHhcNMjYwOTIxMTQwMjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGU4YWQyZTljMzQ3NmNhYjc2YzliOWUzMjRlNjY3ZjBmYjg5ODE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzhH6xVDTO2TCDIGV8Z3EboMSB2b
sSdhkyLt9aRuz00cc/7xnFhLa3JSxrsM31Dzl3qW6qppfp5HoHrviFexyjM9UPAU
VIx/pZgbBglSlf4ToN1qoYmmDmZGy4exeoMo5GjLNqPaK4vA0LE1EqssuAw8EZ4v
i1ljK1ioG4+/SIa7ACSiokFMST1xvZC+6t1prIfW7xlBr6DkHvi3iDeH1Gy2fjfd
Ly2q+TRSfFOzUdnjV54J0FgwId5GhqQ4cWVLZKk5ImFTchSs5uXCpq0tzfw8cD+k
VfPVA3Zc8v5J77Zwtd6eThusA2svbTIiliz1ZyRBMDuc41hESzwVEYGkqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPDorS6cNHbKt2ybnjJOZn8PuJgZMB8GA1UdIwQY
MBaAFK+eJ/+ITR/39Hq9AFDtEOAe3O37MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjU0bl80aE5IX2YwZXIwQVVPMFE0QjdjN2ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yN2E0MmUtMjc2NS00ZTZmLWE3ZjMt
ZDI4NmRjYjMwY2QyLzEvOE9pdExwdzBkc3EzYkp1ZU1rNW1mdy00bUJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8yN2E0MmUtMjc2NS00ZTZmLWE3ZjMtZDI4NmRjYjMwY2Qy
LzEvcjU0bl80aE5IX2YwZXIwQVVPMFE0QjdjN2ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYPfMA0G
CSqGSIb3DQEBCwUAA4IBAQAVYbBI1GDCWDWjDbY19iUTC9/+6xPSCJMAwxtUHqJe
LxNoi9ZpwBPCnBPA1SdQolZy2rb95pI9kZ1jVco85YYUTsIhVc4Y6BUH3X9MH8dF
JExRxd4viRHdu7FvcOCp4VRDfJRH8uOR/iMUQdtMGkzYrZMJDPtUjaZ/IuMmqEQ6
DA7ZjTWevjgznsqul7kw7YbPQUdB46Svuyy9tqjf7hK7naoByEAD95OsM/21uRJY
yaPGL1SGRSAbFs0KxDABWN2obs4ayAuzKaqBtEh815Q0+qi6hP41bfvHXF5Mgrdh
fttXdhB0cSH7F2RioGM6MYPPwEgCkQLtzQj/XPn8n3nZ
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:54:17 2026 by rpki-client