Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/OtsuQqOLegUyp3rGLwwY30uztEE.roa
File: OtsuQqOLegUyp3rGLwwY30uztEE.roa (raw, json)
Hash identifier: zGm1ZJFNQlWZSOLRTdOjEZheOJDHHpoPQ1O4yk1r3yQ=
Subject key identifier: 3A:DB:2E:42:A3:8B:7A:05:32:A7:7A:C6:2F:0C:18:DF:4B:B3:B4:41
Certificate issuer: /CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Certificate serial: 01A0C44485E9CFECF7E97992BBAB100C0FFC
Authority key identifier: AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/OtsuQqOLegUyp3rGLwwY30uztEE.roa
Signing time: Mon 21 Sep 2026 14:00:20 +0000
ROA not before: Mon 21 Sep 2026 14:00:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41954
IP address blocks: 185.142.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:85:e9:cf:ec:f7:e9:79:92:bb:ab:10:0c:0f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Validity
Not Before: Sep 21 14:00:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3adb2e42a38b7a0532a77ac62f0c18df4bb3b441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:30:a8:bc:6f:51:86:8c:7b:26:4b:47:87:
b4:64:58:f5:79:cd:bb:0d:07:52:bb:1e:3e:90:26:
41:d8:7b:2e:94:5e:ef:d2:cb:48:65:27:c5:e2:27:
44:9c:65:33:70:f7:7a:1b:66:46:d9:e8:c1:e8:55:
f8:a2:bb:c1:f9:42:4d:44:48:d0:ab:0f:e0:fc:cb:
18:c8:4e:ca:fc:17:a4:f7:df:28:9e:81:b5:1d:43:
23:6f:c9:3c:ee:05:72:d4:5d:37:96:7d:a5:bf:8c:
4b:04:f6:e7:59:24:71:ce:82:ab:84:4e:10:72:a3:
c3:ec:54:cb:95:5c:d3:26:10:ee:37:a2:cd:eb:34:
47:72:62:8b:f6:fb:6e:a9:81:b2:0c:98:73:20:8d:
d7:bf:8a:93:70:01:df:5b:e0:a6:47:ff:7e:2c:c6:
35:6d:99:1b:4e:b8:1c:19:a8:23:5b:3d:25:64:cf:
90:71:8b:db:1b:bb:7d:07:57:2d:06:2a:02:96:52:
a3:ac:59:2e:25:72:f9:c5:d0:4c:54:4c:92:d0:14:
c3:63:bd:ec:bb:8a:a2:72:8b:3c:77:4a:09:36:64:
6f:ed:87:40:92:cf:45:6f:e1:10:59:c8:67:0a:90:
7b:9f:a3:e9:04:2d:d8:d8:fb:6b:51:41:2b:3a:74:
b7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DB:2E:42:A3:8B:7A:05:32:A7:7A:C6:2F:0C:18:DF:4B:B3:B4:41
X509v3 Authority Key Identifier:
keyid:AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/OtsuQqOLegUyp3rGLwwY30uztEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.218.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:b0:85:fb:90:d4:d0:64:ea:5d:f5:de:25:07:8b:76:2b:a0:
fe:01:64:47:ad:73:3f:4a:4a:e1:9b:51:91:fc:c1:a4:49:8d:
11:da:f4:18:05:11:77:2b:a7:a4:8b:0a:b5:96:d7:23:40:e2:
b0:27:7a:f3:9a:b0:49:5c:7f:c2:fe:69:49:de:62:7e:18:7f:
de:52:33:3e:1e:dc:1e:9c:74:4b:4d:ee:a2:1c:de:45:38:8a:
f7:73:9a:85:a2:64:2d:e2:ad:e7:76:42:b2:b1:59:3b:27:cd:
92:da:dd:4a:14:3f:6e:aa:78:0c:08:b8:36:fa:52:3c:c0:0b:
cb:d0:0e:e5:79:ec:0d:83:38:aa:9f:81:ef:19:9c:0d:36:e0:
c9:28:ef:99:b3:18:98:2d:de:86:d1:52:8c:d2:ba:c2:71:b8:
56:b5:4d:10:1b:60:b8:bb:8f:9a:09:41:c0:c7:4b:48:7b:59:
2a:d1:0b:cc:33:2d:0d:13:a1:41:2e:1f:e7:c2:01:86:f5:ef:
2e:e6:a9:cc:1d:1b:e5:f6:7c:aa:59:84:f6:96:05:43:82:6b:
31:4f:15:cf:47:b1:6c:04:c2:2d:1a:21:ad:67:08:f3:1b:ed:
ad:cc:f3:9c:3b:3f:2a:b9:26:8e:1d:93:24:87:35:9e:6d:09:
8d:7d:0b:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDERIXpz+z36XmSu6sQDA/8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOWUyN2ZmODg0ZDFmZjdmNDdhYmQwMDUwZWQxMGUwMWVk
Y2VkZmIwHhcNMjYwOTIxMTQwMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWRiMmU0MmEzOGI3YTA1MzJhNzdhYzYyZjBjMThkZjRiYjNiNDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupYwqLxvUYaMeyZLR4e0ZFj1ec27
DQdSux4+kCZB2HsulF7v0stIZSfF4idEnGUzcPd6G2ZG2ejB6FX4orvB+UJNREjQ
qw/g/MsYyE7K/Bek998onoG1HUMjb8k87gVy1F03ln2lv4xLBPbnWSRxzoKrhE4Q
cqPD7FTLlVzTJhDuN6LN6zRHcmKL9vtuqYGyDJhzII3Xv4qTcAHfW+CmR/9+LMY1
bZkbTrgcGagjWz0lZM+QcYvbG7t9B1ctBioCllKjrFkuJXL5xdBMVEyS0BTDY73s
u4qicos8d0oJNmRv7YdAks9Fb+EQWchnCpB7n6PpBC3Y2PtrUUErOnS3lQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDrbLkKji3oFMqd6xi8MGN9Ls7RBMB8GA1UdIwQY
MBaAFK+eJ/+ITR/39Hq9AFDtEOAe3O37MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjU0bl80aE5IX2YwZXIwQVVPMFE0QjdjN2ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yN2E0MmUtMjc2NS00ZTZmLWE3ZjMt
ZDI4NmRjYjMwY2QyLzEvT3RzdVFxT0xlZ1V5cDNyR0x3d1kzMHV6dEVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8yN2E0MmUtMjc2NS00ZTZmLWE3ZjMtZDI4NmRjYjMwY2Qy
LzEvcjU0bl80aE5IX2YwZXIwQVVPMFE0QjdjN2ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY7aMA0G
CSqGSIb3DQEBCwUAA4IBAQAfsIX7kNTQZOpd9d4lB4t2K6D+AWRHrXM/Skrhm1GR
/MGkSY0R2vQYBRF3K6ekiwq1ltcjQOKwJ3rzmrBJXH/C/mlJ3mJ+GH/eUjM+Htwe
nHRLTe6iHN5FOIr3c5qFomQt4q3ndkKysVk7J82S2t1KFD9uqngMCLg2+lI8wAvL
0A7leewNgziqn4HvGZwNNuDJKO+ZsxiYLd6G0VKM0rrCcbhWtU0QG2C4u4+aCUHA
x0tIe1kq0QvMMy0NE6FBLh/nwgGG9e8u5qnMHRvl9nyqWYT2lgVDgmsxTxXPR7Fs
BMItGiGtZwjzG+2tzPOcOz8quSaOHZMkhzWebQmNfQvH
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:17:43 2026 by rpki-client