Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/CC-E9kDBg6k16GvFdXpt0v0N9c0.roa
File: CC-E9kDBg6k16GvFdXpt0v0N9c0.roa (raw, json)
Hash identifier: XoR9Xbt76Dj+y6aqOpHi+5O2JWpDsd3FUW+Ej0CkOKs=
Subject key identifier: 08:2F:84:F6:40:C1:83:A9:35:E8:6B:C5:75:7A:6D:D2:FD:0D:F5:CD
Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539
Certificate serial: 01A09F23A0C9861B88B93A0D1FFB0B973D20
Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/CC-E9kDBg6k16GvFdXpt0v0N9c0.roa
Signing time: Mon 14 Sep 2026 08:58:27 +0000
ROA not before: Mon 14 Sep 2026 08:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 193.193.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:23:a0:c9:86:1b:88:b9:3a:0d:1f:fb:0b:97:3d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4945e46764029d2581d820c3373fa445855539
Validity
Not Before: Sep 14 08:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=082f84f640c183a935e86bc5757a6dd2fd0df5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f8:f7:9a:b5:d0:27:2c:04:07:a0:ca:63:67:
2e:a8:71:bc:60:c2:00:5e:a7:d1:21:a2:0d:f7:cc:
cb:04:af:55:d5:66:fa:9d:47:2e:f5:d6:30:db:bb:
e9:d1:a4:ea:41:4e:79:f6:92:84:98:b7:28:6b:cd:
09:04:49:a5:fd:3c:3b:50:cb:65:23:24:be:95:bf:
da:51:9e:32:cd:35:db:05:a9:6d:ed:06:8b:71:6a:
3b:03:89:77:e0:1a:6e:9e:ec:9d:68:5c:03:32:fb:
2b:40:e6:ad:93:f9:40:73:99:da:20:54:fc:95:74:
5e:55:1a:93:99:c7:62:37:60:97:bb:df:0c:45:a4:
3b:09:6e:1c:37:1c:15:04:29:4f:6f:a0:da:bc:f4:
5a:28:3d:f3:e8:2f:fa:16:2d:ba:ca:0d:b9:a3:ef:
eb:6b:4d:29:5b:6b:f0:92:d2:ad:d4:4c:bb:ad:2e:
82:52:ea:78:c0:56:3c:ad:c2:c8:2c:7f:15:5f:a2:
15:d5:01:b6:c3:16:db:f2:3a:64:5a:de:52:fa:7c:
f0:80:0a:d7:98:b4:31:66:aa:40:19:ff:0b:59:8f:
35:c5:da:14:0c:fb:fc:d8:d5:b5:a4:6c:20:98:c0:
f8:f2:cb:a9:8c:61:c5:6e:17:0f:72:d8:f7:a8:0f:
ea:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2F:84:F6:40:C1:83:A9:35:E8:6B:C5:75:7A:6D:D2:FD:0D:F5:CD
X509v3 Authority Key Identifier:
keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/CC-E9kDBg6k16GvFdXpt0v0N9c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.193.197.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:15:5d:b6:52:b9:2f:92:b8:84:e8:9c:14:e0:04:e5:d5:76:
d8:24:4c:b6:04:f2:ae:19:7c:19:7b:8c:3b:a5:c3:a8:ad:9d:
76:eb:c5:0d:9a:70:b6:b9:4f:e4:70:24:e6:6c:5d:60:e4:ac:
63:ec:9f:1e:8b:f0:c9:8a:8a:93:83:ff:ba:67:6e:8c:e3:06:
38:d0:64:a8:e3:13:3d:86:2c:6f:03:58:0c:43:db:ec:cd:15:
7e:b0:e0:3d:26:7c:b4:b0:17:b8:ce:be:cc:ff:7f:52:78:c9:
2d:4b:83:f7:7c:d1:66:8f:5a:6f:05:4b:94:21:5c:18:09:f5:
18:fa:06:0b:ad:d6:c8:2b:a1:4c:5c:a8:4a:57:48:22:2e:42:
73:68:35:3a:c4:cc:c4:b8:1c:83:fd:15:4b:01:f0:24:70:f3:
8d:ae:9e:44:1d:9f:92:7f:ea:cc:fd:ff:cd:23:6b:6f:d6:4f:
fa:4a:48:c6:8b:8c:c5:61:27:5b:bf:7d:c0:02:14:4d:97:72:
ad:97:6b:04:c4:00:2e:29:6e:08:7a:77:78:a4:07:ec:22:07:
b7:9e:ff:0e:06:24:f8:05:59:23:9f:ad:7d:aa:96:d3:1e:61:
fd:04:48:a4:d9:e3:72:5d:84:a3:b6:d8:e1:69:7c:ee:ac:27:
48:36:f1:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCfI6DJhhuIuToNH/sLlz0gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNDk0NWU0Njc2NDAyOWQyNTgxZDgyMGMzMzczZmE0NDU4
NTU1MzkwHhcNMjYwOTE0MDg1ODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODJmODRmNjQwYzE4M2E5MzVlODZiYzU3NTdhNmRkMmZkMGRmNWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPj3mrXQJywEB6DKY2cuqHG8YMIA
XqfRIaIN98zLBK9V1Wb6nUcu9dYw27vp0aTqQU559pKEmLcoa80JBEml/Tw7UMtl
IyS+lb/aUZ4yzTXbBalt7QaLcWo7A4l34BpunuydaFwDMvsrQOatk/lAc5naIFT8
lXReVRqTmcdiN2CXu98MRaQ7CW4cNxwVBClPb6DavPRaKD3z6C/6Fi26yg25o+/r
a00pW2vwktKt1Ey7rS6CUup4wFY8rcLILH8VX6IV1QG2wxbb8jpkWt5S+nzwgArX
mLQxZqpAGf8LWY81xdoUDPv82NW1pGwgmMD48supjGHFbhcPctj3qA/qZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAgvhPZAwYOpNehrxXV6bdL9DfXNMB8GA1UdIwQY
MBaAFDpJReRnZAKdJYHYIMM3P6RFhVU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1Njgt
MzM2YWM5NDU2NDY0LzEvQ0MtRTlrREJnNmsxNkd2RmRYcHQwdjBOOWMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1NjgtMzM2YWM5NDU2NDY0
LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcHFMA0G
CSqGSIb3DQEBCwUAA4IBAQA7FV22UrkvkriE6JwU4ATl1XbYJEy2BPKuGXwZe4w7
pcOorZ1268UNmnC2uU/kcCTmbF1g5Kxj7J8ei/DJioqTg/+6Z26M4wY40GSo4xM9
hixvA1gMQ9vszRV+sOA9Jny0sBe4zr7M/39SeMktS4P3fNFmj1pvBUuUIVwYCfUY
+gYLrdbIK6FMXKhKV0giLkJzaDU6xMzEuByD/RVLAfAkcPONrp5EHZ+Sf+rM/f/N
I2tv1k/6SkjGi4zFYSdbv33AAhRNl3Ktl2sExAAuKW4Iend4pAfsIge3nv8OBiT4
BVkjn619qpbTHmH9BEik2eNyXYSjttjhaXzurCdINvF9
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:38:04 2026 by rpki-client