Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/DOY9uvEMESG_CBAXCSTil8tUjqU.roa
File: DOY9uvEMESG_CBAXCSTil8tUjqU.roa (raw, json)
Hash identifier: GcKQdemMAmtXK23rDUqm0T27HdRKJ8Tv/9Se0Lcmk2c=
Subject key identifier: 0C:E6:3D:BA:F1:0C:11:21:BF:08:10:17:09:24:E2:97:CB:54:8E:A5
Certificate issuer: /CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Certificate serial: 01A0A454F9C6839816AA8860DD0436F6FAD8
Authority key identifier: AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/DOY9uvEMESG_CBAXCSTil8tUjqU.roa
Signing time: Tue 15 Sep 2026 09:10:27 +0000
ROA not before: Tue 15 Sep 2026 09:10:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47225
IP address blocks: 89.46.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:54:f9:c6:83:98:16:aa:88:60:dd:04:36:f6:fa:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Validity
Not Before: Sep 15 09:10:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ce63dbaf10c1121bf0810170924e297cb548ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f8:e2:57:c8:22:41:44:ac:4d:fa:56:45:8f:
d3:6b:f7:9d:8f:02:c6:f6:bc:64:f0:56:96:df:3b:
d9:2d:e9:a0:eb:2b:c4:b5:79:67:3d:15:95:10:61:
ff:5d:57:a8:64:42:8c:c6:f2:d5:f3:b4:fe:28:8b:
74:f4:0f:72:95:95:05:8f:ad:03:f9:75:bc:47:19:
9b:5c:04:ad:97:93:73:2f:51:f9:52:76:19:0a:2c:
29:5e:42:93:29:b1:22:33:f0:b8:c0:b8:11:50:81:
6a:2e:fd:6e:4b:ab:1d:23:39:1b:a7:ad:85:94:ab:
9f:5d:51:45:72:b6:9c:32:ef:3c:36:92:fb:39:e2:
16:dc:e0:7f:7a:bf:14:55:4f:68:d2:a3:59:71:3a:
be:3d:a8:8c:66:75:75:6f:ce:47:6b:c5:3d:67:14:
01:b2:b3:76:2d:98:05:9e:2f:61:ae:bf:47:dd:2b:
37:5c:cf:7b:ce:50:70:80:fb:ca:49:f2:92:10:1e:
75:fd:a4:ae:b7:23:44:d3:9c:81:7c:e7:7b:d7:6d:
6c:95:ca:f7:e7:ad:c3:1c:7a:c9:bc:01:e0:85:ae:
fa:3f:a4:87:67:d1:a6:d5:7e:d1:28:0c:12:fd:19:
f6:a2:9d:52:9c:41:22:15:8f:52:b7:7a:c2:a5:22:
2e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E6:3D:BA:F1:0C:11:21:BF:08:10:17:09:24:E2:97:CB:54:8E:A5
X509v3 Authority Key Identifier:
keyid:AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/DOY9uvEMESG_CBAXCSTil8tUjqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.243.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a3:16:d0:72:96:4a:15:d8:a7:fd:34:97:57:95:bb:49:68:
d9:c9:86:4f:f0:f0:d8:71:b3:92:b8:42:84:5b:e9:83:69:1f:
ca:93:e9:ef:5a:38:d4:00:72:bf:6f:93:94:1f:9a:56:98:23:
20:75:fe:e4:2c:cf:d2:b5:e8:07:a5:86:54:5e:92:ff:d7:ea:
12:73:e6:9f:53:77:a4:7d:5b:41:da:c7:e8:31:98:ae:22:e6:
58:5c:d0:9f:d7:b0:c0:09:ab:d6:d4:ea:5a:8a:3d:50:42:41:
82:6d:5e:81:6d:12:ec:b8:22:e3:aa:01:cf:62:43:78:3d:f3:
23:38:32:43:05:11:ae:0c:0e:69:18:08:eb:9a:c6:9e:41:1d:
81:be:88:ed:0f:a6:d0:1a:a2:35:a9:57:76:d7:a2:3f:79:36:
03:ad:80:00:58:40:0e:aa:38:bd:e7:f9:bc:77:2d:ea:cb:e9:
24:70:8e:f8:8d:56:3f:19:ff:b4:35:cc:c3:37:1c:00:80:3c:
6a:62:bc:47:8f:de:6f:0b:b6:87:d2:86:c8:1f:77:64:86:66:
df:a4:db:19:01:ff:56:c1:ba:d0:87:dd:df:0d:30:92:eb:1b:
af:61:1e:c6:66:5c:68:9f:0c:4d:d0:70:90:d3:bc:b6:91:dc:
7c:a4:d9:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCkVPnGg5gWqohg3QQ29vrYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOWUyN2ZmODg0ZDFmZjdmNDdhYmQwMDUwZWQxMGUwMWVk
Y2VkZmIwHhcNMjYwOTE1MDkxMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2U2M2RiYWYxMGMxMTIxYmYwODEwMTcwOTI0ZTI5N2NiNTQ4ZWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vjiV8giQUSsTfpWRY/Ta/edjwLG
9rxk8FaW3zvZLemg6yvEtXlnPRWVEGH/XVeoZEKMxvLV87T+KIt09A9ylZUFj60D
+XW8RxmbXAStl5NzL1H5UnYZCiwpXkKTKbEiM/C4wLgRUIFqLv1uS6sdIzkbp62F
lKufXVFFcracMu88NpL7OeIW3OB/er8UVU9o0qNZcTq+PaiMZnV1b85Ha8U9ZxQB
srN2LZgFni9hrr9H3Ss3XM97zlBwgPvKSfKSEB51/aSutyNE05yBfOd7121slcr3
563DHHrJvAHgha76P6SHZ9Gm1X7RKAwS/Rn2op1SnEEiFY9St3rCpSIuTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAzmPbrxDBEhvwgQFwkk4pfLVI6lMB8GA1UdIwQY
MBaAFK+eJ/+ITR/39Hq9AFDtEOAe3O37MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjU0bl80aE5IX2YwZXIwQVVPMFE0QjdjN2ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yN2E0MmUtMjc2NS00ZTZmLWE3ZjMt
ZDI4NmRjYjMwY2QyLzEvRE9ZOXV2RU1FU0dfQ0JBWENTVGlsOHRVanFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8yN2E0MmUtMjc2NS00ZTZmLWE3ZjMtZDI4NmRjYjMwY2Qy
LzEvcjU0bl80aE5IX2YwZXIwQVVPMFE0QjdjN2ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWS7zMA0G
CSqGSIb3DQEBCwUAA4IBAQBIoxbQcpZKFdin/TSXV5W7SWjZyYZP8PDYcbOSuEKE
W+mDaR/Kk+nvWjjUAHK/b5OUH5pWmCMgdf7kLM/StegHpYZUXpL/1+oSc+afU3ek
fVtB2sfoMZiuIuZYXNCf17DACavW1Opaij1QQkGCbV6BbRLsuCLjqgHPYkN4PfMj
ODJDBRGuDA5pGAjrmsaeQR2BvojtD6bQGqI1qVd216I/eTYDrYAAWEAOqji95/m8
dy3qy+kkcI74jVY/Gf+0NczDNxwAgDxqYrxHj95vC7aH0obIH3dkhmbfpNsZAf9W
wbrQh93fDTCS6xuvYR7GZlxonwxN0HCQ07y2kdx8pNlU
-----END CERTIFICATE-----
Generated at Mon Sep 21 08:18:00 2026 by rpki-client