Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/0EjZecwBBAe7gj4B38NKcAdvVqQ.roa
File: 0EjZecwBBAe7gj4B38NKcAdvVqQ.roa (raw, json)
Hash identifier: LrBTNS2rQ9a2kQJTHyUHfQ/3VciR/DEOj3SyOhIuTGk=
Subject key identifier: D0:48:D9:79:CC:01:04:07:BB:82:3E:01:DF:C3:4A:70:07:6F:56:A4
Certificate issuer: /CN=af2bf82fda28e08f6229460ba2e24141464331e5
Certificate serial: 019B7A5A958FCC0360CC6C5DD25551C2541C
Authority key identifier: AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/0EjZecwBBAe7gj4B38NKcAdvVqQ.roa
Signing time: Thu 01 Jan 2026 16:18:35 +0000
ROA not before: Thu 01 Jan 2026 16:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204943
IP address blocks: 185.235.48.0/22 maxlen: 22
2a0d:4b00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:95:8f:cc:03:60:cc:6c:5d:d2:55:51:c2:54:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2bf82fda28e08f6229460ba2e24141464331e5
Validity
Not Before: Jan 1 16:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d048d979cc010407bb823e01dfc34a70076f56a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:31:86:bc:b1:11:b3:8d:b4:eb:a8:bf:ed:
8a:41:ed:cc:06:36:25:db:6b:7a:b6:d6:9e:0e:d1:
be:78:15:50:a8:f0:c1:53:bb:6d:08:dc:b6:4f:f3:
f3:91:ec:f0:a8:65:a3:30:32:ce:82:05:af:8e:0f:
92:83:71:0c:d2:99:84:5a:02:b2:ac:81:ed:62:da:
f9:b8:93:91:f9:fd:90:e1:65:b9:e9:19:90:62:c3:
92:5e:9f:82:20:46:c2:0f:ba:6c:b9:d1:85:ae:9d:
87:d8:57:60:79:0b:91:0d:fe:4f:94:b6:31:3b:91:
0f:78:f8:2b:e4:1e:0f:e6:e4:2c:8b:eb:eb:70:bf:
06:c0:fc:18:0e:c9:8e:21:b5:58:bc:50:30:69:ed:
38:fe:f8:b9:df:ef:32:3c:68:2f:15:1a:1e:3d:08:
a2:6e:fd:dc:4a:54:06:b4:37:e1:07:09:d0:2a:a1:
70:f0:72:eb:48:b9:b9:5e:84:86:d0:98:6a:1d:74:
c6:bc:a2:ef:0e:61:c0:b1:83:de:a4:4f:d5:71:84:
98:d9:d4:0b:70:b1:45:3e:ea:d6:f4:6a:a6:0a:93:
12:67:78:41:f7:5a:26:cc:46:2d:ad:f6:b6:27:ec:
40:c5:a8:12:f7:8f:f5:d6:8a:86:94:94:fd:5a:ef:
06:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:48:D9:79:CC:01:04:07:BB:82:3E:01:DF:C3:4A:70:07:6F:56:A4
X509v3 Authority Key Identifier:
keyid:AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/0EjZecwBBAe7gj4B38NKcAdvVqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.48.0/22
IPv6:
2a0d:4b00::/29
Signature Algorithm: sha256WithRSAEncryption
36:d5:86:0d:2f:f6:cd:b9:ee:42:68:df:1a:33:11:16:7d:f1:
cf:f7:69:a6:ab:1d:61:13:43:be:58:a0:fa:00:be:07:ec:e6:
f4:d8:f6:6d:64:1b:ac:cd:19:a4:21:9a:8e:35:69:45:4a:1f:
25:19:4f:de:7b:50:ac:53:31:24:34:d4:b0:3c:c5:44:b4:b8:
66:6e:90:14:42:9b:70:75:78:ad:6a:4a:fe:ca:28:c9:95:c6:
63:68:24:c0:0e:93:4a:3e:06:90:a4:36:cf:c9:02:da:e1:2e:
16:2d:c9:08:13:36:79:8e:4b:84:f9:96:41:42:16:03:30:70:
87:00:d2:91:9b:bc:04:ae:5e:f8:56:6e:83:b7:32:eb:c1:b4:
a5:e1:d3:70:0d:7a:3d:31:14:0c:a3:f9:0f:2b:eb:89:b8:59:
15:9c:17:e1:60:08:25:13:58:ea:be:b3:d1:ca:4a:55:c3:96:
ca:cd:ba:77:c1:5e:75:c5:83:ea:08:99:29:67:99:76:b9:73:
c7:25:5d:14:5b:df:16:54:bb:a4:87:34:0e:42:c6:43:03:6f:
02:e9:93:0e:6a:31:e9:38:ec:d9:ba:bf:96:db:a6:a4:36:81:
b1:78:cf:65:22:64:36:ec:2a:d1:81:1e:5f:9b:b1:45:74:9e:
56:ee:cb:18
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZt6WpWPzANgzGxd0lVRwlQcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMmJmODJmZGEyOGUwOGY2MjI5NDYwYmEyZTI0MTQxNDY0
MzMxZTUwHhcNMjYwMTAxMTYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDQ4ZDk3OWNjMDEwNDA3YmI4MjNlMDFkZmMzNGE3MDA3NmY1NmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiYxhryxEbONtOuov+2KQe3MBjYl
22t6ttaeDtG+eBVQqPDBU7ttCNy2T/PzkezwqGWjMDLOggWvjg+Sg3EM0pmEWgKy
rIHtYtr5uJOR+f2Q4WW56RmQYsOSXp+CIEbCD7psudGFrp2H2FdgeQuRDf5PlLYx
O5EPePgr5B4P5uQsi+vrcL8GwPwYDsmOIbVYvFAwae04/vi53+8yPGgvFRoePQii
bv3cSlQGtDfhBwnQKqFw8HLrSLm5XoSG0JhqHXTGvKLvDmHAsYPepE/VcYSY2dQL
cLFFPurW9GqmCpMSZ3hB91omzEYtrfa2J+xAxagS94/11oqGlJT9Wu8GcwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNBI2XnMAQQHu4I+Ad/DSnAHb1akMB8GA1UdIwQY
MBaAFK8r+C/aKOCPYilGC6LiQUFGQzHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnl2NEw5b280STlpS1VZTG91SkJRVVpETWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zYjkxYTItZDJhNy00ZTY5LTljODYt
YmRmMzkxN2E5MjY3LzEvMEVqWmVjd0JCQWU3Z2o0QjM4TktjQWR2VnFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8zYjkxYTItZDJhNy00ZTY5LTljODYtYmRmMzkxN2E5MjY3
LzEvcnl2NEw5b280STlpS1VZTG91SkJRVVpETWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCueswMA0E
AgACMAcDBQMqDUsAMA0GCSqGSIb3DQEBCwUAA4IBAQA21YYNL/bNue5CaN8aMxEW
ffHP92mmqx1hE0O+WKD6AL4H7Ob02PZtZBuszRmkIZqONWlFSh8lGU/ee1CsUzEk
NNSwPMVEtLhmbpAUQptwdXitakr+yijJlcZjaCTADpNKPgaQpDbPyQLa4S4WLckI
EzZ5jkuE+ZZBQhYDMHCHANKRm7wErl74Vm6DtzLrwbSl4dNwDXo9MRQMo/kPK+uJ
uFkVnBfhYAglE1jqvrPRykpVw5bKzbp3wV51xYPqCJkpZ5l2uXPHJV0UW98WVLuk
hzQOQsZDA28C6ZMOajHpOOzZur+W26akNoGxeM9lImQ27CrRgR5fm7FFdJ5W7ssY
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:35:43 2026 by rpki-client