Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/K0Zub9dKWzCjs4OtkVc_n0LFVVw.roa
File: K0Zub9dKWzCjs4OtkVc_n0LFVVw.roa (raw, json)
Hash identifier: WAtq4VjFyxJkBBrD+rRuoVlhMvETsjV5L4Bhvcl0PsU=
Subject key identifier: 2B:46:6E:6F:D7:4A:5B:30:A3:B3:83:AD:91:57:3F:9F:42:C5:55:5C
Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456
Certificate serial: 019C9995F27B02D266D01DF344F7D633D88C
Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/K0Zub9dKWzCjs4OtkVc_n0LFVVw.roa
Signing time: Thu 26 Feb 2026 10:54:26 +0000
ROA not before: Thu 26 Feb 2026 10:54:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200823
IP address blocks: 109.107.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:99:95:f2:7b:02:d2:66:d0:1d:f3:44:f7:d6:33:d8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456
Validity
Not Before: Feb 26 10:54:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b466e6fd74a5b30a3b383ad91573f9f42c5555c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:ab:02:ca:73:ee:ea:c8:29:d4:f7:f2:1c:
1a:10:06:26:6a:7e:4d:bd:5b:2a:78:3f:fa:9b:3d:
9e:76:4a:b4:70:df:3f:88:71:88:f6:4e:2f:9a:b0:
e4:e1:28:9c:a2:83:b3:9e:e6:8e:39:f2:1b:4c:42:
ef:06:9a:e4:b8:15:f9:7a:1c:f6:e7:05:5f:3f:36:
44:a8:b7:af:02:4f:fd:10:bb:12:10:22:f8:6e:cb:
cd:0a:1a:b1:b1:d8:34:e6:60:42:ab:0e:74:57:90:
77:e1:2b:0e:de:02:30:59:c9:d3:74:e5:a7:d9:0e:
1d:94:9d:06:ce:b9:4b:03:05:a5:c3:13:ee:8a:70:
99:d6:0b:82:95:45:23:fc:85:b3:cc:9d:8a:f2:75:
19:0b:b0:b6:1f:60:d7:c8:46:96:69:c4:76:b2:ba:
73:cc:43:83:ee:a1:84:c8:fe:6a:45:eb:0f:66:20:
f3:a0:ba:e0:0e:b9:de:ec:05:b7:93:6d:8e:a9:46:
10:91:58:1e:d6:81:2a:a6:88:51:62:0f:99:21:5d:
54:dc:58:60:8d:c7:62:a8:26:fe:60:b1:53:9a:ef:
d4:90:58:f4:7f:7b:72:a7:d6:fd:01:80:b9:23:74:
6a:75:47:04:ed:4f:00:55:70:b0:a4:a3:fe:66:27:
d2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:46:6E:6F:D7:4A:5B:30:A3:B3:83:AD:91:57:3F:9F:42:C5:55:5C
X509v3 Authority Key Identifier:
keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/K0Zub9dKWzCjs4OtkVc_n0LFVVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.168.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:1c:11:07:8e:25:33:9f:77:e3:65:75:96:68:98:45:32:48:
dc:8f:aa:2c:fe:2e:92:38:b2:bc:a5:e1:b4:2f:39:bc:4a:6a:
16:22:a9:4e:49:78:3e:2c:52:a3:1e:0d:b4:33:b9:e6:2d:48:
db:cc:58:ac:89:6e:fa:69:df:c9:a9:74:d6:55:66:bb:a6:05:
76:10:41:9e:3e:31:13:87:98:b3:66:cd:a0:60:f7:b3:71:40:
40:db:a6:58:0e:50:e7:cc:9e:dc:f4:c2:39:bb:b2:a2:73:a4:
59:c5:7d:88:07:45:a8:e0:45:5c:8b:3d:0d:fa:43:1c:e4:dd:
aa:1f:5a:6d:99:51:51:05:74:ac:19:a2:f0:e5:a3:85:b4:5b:
e5:9a:a5:c6:41:e9:12:a6:98:c4:9c:0e:5a:9f:a4:72:cd:b3:
8c:a4:ff:98:f9:7d:17:a5:cf:a5:24:3d:24:07:66:7c:06:56:
01:eb:31:f7:3b:4c:d6:fe:5e:ba:33:7c:67:af:15:b7:bc:80:
6b:59:e7:9e:ae:73:63:f2:b7:ca:d9:8c:72:e0:19:a1:7a:1b:
34:40:8a:aa:f9:ca:81:bc:9f:91:78:91:94:37:66:04:13:a6:
e3:74:61:5e:12:1b:98:67:bc:91:3c:e1:e0:7a:bc:be:0e:84:
4c:04:e3:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZyZlfJ7AtJm0B3zRPfWM9iMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4
ZmU0NTYwHhcNMjYwMjI2MTA1NDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjQ2NmU2ZmQ3NGE1YjMwYTNiMzgzYWQ5MTU3M2Y5ZjQyYzU1NTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyberAspz7urIKdT38hwaEAYman5N
vVsqeD/6mz2edkq0cN8/iHGI9k4vmrDk4SicooOznuaOOfIbTELvBprkuBX5ehz2
5wVfPzZEqLevAk/9ELsSECL4bsvNChqxsdg05mBCqw50V5B34SsO3gIwWcnTdOWn
2Q4dlJ0GzrlLAwWlwxPuinCZ1guClUUj/IWzzJ2K8nUZC7C2H2DXyEaWacR2srpz
zEOD7qGEyP5qResPZiDzoLrgDrne7AW3k22OqUYQkVge1oEqpohRYg+ZIV1U3Fhg
jcdiqCb+YLFTmu/UkFj0f3typ9b9AYC5I3RqdUcE7U8AVXCwpKP+ZifSAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCtGbm/XSlswo7ODrZFXP59CxVVcMB8GA1UdIwQY
MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt
ZGVlM2VkNDk3YWVlLzEvSzBadWI5ZEtXekNqczRPdGtWY19uMExGVlZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl
LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWuoMA0G
CSqGSIb3DQEBCwUAA4IBAQC7HBEHjiUzn3fjZXWWaJhFMkjcj6os/i6SOLK8peG0
Lzm8SmoWIqlOSXg+LFKjHg20M7nmLUjbzFisiW76ad/JqXTWVWa7pgV2EEGePjET
h5izZs2gYPezcUBA26ZYDlDnzJ7c9MI5u7Kic6RZxX2IB0Wo4EVciz0N+kMc5N2q
H1ptmVFRBXSsGaLw5aOFtFvlmqXGQekSppjEnA5an6RyzbOMpP+Y+X0Xpc+lJD0k
B2Z8BlYB6zH3O0zW/l66M3xnrxW3vIBrWeeernNj8rfK2Yxy4Bmhehs0QIqq+cqB
vJ+ReJGUN2YEE6bjdGFeEhuYZ7yRPOHgery+DoRMBOMp
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:23:09 2026 by rpki-client