Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Dn9O3Hg1LniWbRCJrfFCOCEs0gM.roa
File: Dn9O3Hg1LniWbRCJrfFCOCEs0gM.roa (raw, json)
Hash identifier: kqqNoy0anJ34DkFYeX4WbpE6KpSDvttdZYzayqSypVI=
Subject key identifier: 0E:7F:4E:DC:78:35:2E:78:96:6D:10:89:AD:F1:42:38:21:2C:D2:03
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 019ECF99A6D0EE5A9720BD535EC813090687
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Dn9O3Hg1LniWbRCJrfFCOCEs0gM.roa
Signing time: Tue 16 Jun 2026 08:43:33 +0000
ROA not before: Tue 16 Jun 2026 08:43:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219429
IP address blocks: 193.37.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:99:a6:d0:ee:5a:97:20:bd:53:5e:c8:13:09:06:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jun 16 08:43:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e7f4edc78352e78966d1089adf14238212cd203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e0:39:4f:07:9b:cb:06:97:50:80:01:63:d2:
6c:fd:b7:d9:63:e7:25:d2:7a:54:f4:1f:67:a4:9d:
58:b6:a6:45:47:f8:85:9c:10:96:dc:76:0d:f4:bd:
6a:b7:c8:b2:be:8a:78:c4:04:0a:ff:3b:a6:d1:1b:
5b:b7:14:5f:5e:b0:de:43:16:43:91:08:59:bd:e0:
ac:3c:05:a8:fd:08:75:67:56:8d:f7:6d:11:14:43:
ee:83:48:e4:65:97:5d:e8:cf:b3:a6:91:11:3a:73:
a5:04:7a:8d:84:46:71:bb:c0:6c:6c:7e:f8:67:90:
08:5b:d0:37:31:85:e2:64:88:ec:5d:c5:f5:1f:67:
34:a1:fb:1e:2a:2e:4c:74:ff:7a:8e:25:d4:bc:ca:
d0:4b:54:99:7c:8e:63:49:7e:cb:1c:4d:9d:f7:c2:
d3:71:c4:1f:33:21:6c:42:1f:03:ce:3d:da:ff:94:
c4:c0:5e:51:b2:d9:78:d1:f0:39:ed:ae:1e:f2:d3:
b0:12:43:c6:21:e6:93:60:08:9e:a7:8c:8f:08:96:
61:16:25:64:b5:2f:94:f5:21:15:f1:fb:b2:fd:2c:
6c:6d:31:ca:04:22:aa:35:ae:74:d4:3c:26:10:8a:
20:61:92:48:93:35:34:fc:26:43:3a:9c:27:74:c6:
56:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7F:4E:DC:78:35:2E:78:96:6D:10:89:AD:F1:42:38:21:2C:D2:03
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Dn9O3Hg1LniWbRCJrfFCOCEs0gM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.197.0/24
Signature Algorithm: sha256WithRSAEncryption
59:56:ff:1f:b0:7d:24:4f:3c:b5:ad:82:25:0a:f2:0e:64:90:
fa:e8:ed:32:4b:5d:b0:c2:65:c5:1d:f7:9b:07:e6:14:0a:ec:
9e:60:61:18:25:f1:c8:4f:16:11:5a:33:f6:62:dc:0e:2e:b2:
2c:78:44:09:04:f7:15:c4:27:0c:5d:b0:e1:e8:dd:6f:21:5b:
41:a5:fc:74:8d:7f:fa:39:d1:d8:6d:e7:11:89:8c:62:e4:2a:
29:74:d3:97:00:26:28:73:0a:c7:ed:c7:38:47:23:1c:b1:4a:
78:b4:8c:93:47:e6:3c:d6:10:ef:85:67:f0:2b:1e:c0:9d:08:
b2:4e:e6:7d:a1:f2:5b:32:8d:3c:b0:57:fe:0d:45:b9:1f:33:
40:e6:93:e2:59:a7:47:82:9f:95:fa:66:95:34:b7:7a:33:6f:
84:ea:bc:0c:3e:08:00:09:09:d0:ae:89:64:37:93:98:5e:8d:
08:93:93:c0:e1:3f:33:79:2d:a0:0a:d9:bb:51:eb:7e:3e:e9:
ab:30:89:e2:81:39:e6:2f:d3:3a:ea:5a:b1:f5:18:e5:ee:59:
e2:35:54:27:a9:a1:00:6f:4d:0c:10:78:91:c7:54:36:9f:62:
b5:65:f9:4e:73:d9:e0:5a:0e:94:b8:fe:c5:07:0f:53:fa:5b:
57:e6:64:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7PmabQ7lqXIL1TXsgTCQaHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjYwNjE2MDg0MzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTdmNGVkYzc4MzUyZTc4OTY2ZDEwODlhZGYxNDIzODIxMmNkMjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OA5TwebywaXUIABY9Js/bfZY+cl
0npU9B9npJ1YtqZFR/iFnBCW3HYN9L1qt8iyvop4xAQK/zum0RtbtxRfXrDeQxZD
kQhZveCsPAWo/Qh1Z1aN920RFEPug0jkZZdd6M+zppEROnOlBHqNhEZxu8BsbH74
Z5AIW9A3MYXiZIjsXcX1H2c0ofseKi5MdP96jiXUvMrQS1SZfI5jSX7LHE2d98LT
ccQfMyFsQh8Dzj3a/5TEwF5Rstl40fA57a4e8tOwEkPGIeaTYAiep4yPCJZhFiVk
tS+U9SEV8fuy/SxsbTHKBCKqNa501DwmEIogYZJIkzU0/CZDOpwndMZWfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA5/Ttx4NS54lm0Qia3xQjghLNIDMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvRG45TzNIZzFMbmlXYlJDSnJmRkNPQ0VzMGdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSXFMA0G
CSqGSIb3DQEBCwUAA4IBAQBZVv8fsH0kTzy1rYIlCvIOZJD66O0yS12wwmXFHfeb
B+YUCuyeYGEYJfHITxYRWjP2YtwOLrIseEQJBPcVxCcMXbDh6N1vIVtBpfx0jX/6
OdHYbecRiYxi5CopdNOXACYocwrH7cc4RyMcsUp4tIyTR+Y81hDvhWfwKx7AnQiy
TuZ9ofJbMo08sFf+DUW5HzNA5pPiWadHgp+V+maVNLd6M2+E6rwMPggACQnQrolk
N5OYXo0Ik5PA4T8zeS2gCtm7Uet+PumrMInigTnmL9M66lqx9Rjl7lniNVQnqaEA
b00MEHiRx1Q2n2K1ZflOc9ngWg6UuP7FBw9T+ltX5mSP
-----END CERTIFICATE-----
Generated at Wed Jun 17 13:33:22 2026 by rpki-client