Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/09I350KEMMvsvPe6M8I1cJsDKeU.roa
File: 09I350KEMMvsvPe6M8I1cJsDKeU.roa (raw, json)
Hash identifier: BIa6ZOdxabUdYmm/UU6G7QFOkGcLnbK9+FcHW7ZlUbs=
Subject key identifier: D3:D2:37:E7:42:84:30:CB:EC:BC:F7:BA:33:C2:35:70:9B:03:29:E5
Certificate issuer: /CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Certificate serial: 019B7E383BE429297E145F6E343888820FF6
Authority key identifier: B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/09I350KEMMvsvPe6M8I1cJsDKeU.roa
Signing time: Fri 02 Jan 2026 10:19:33 +0000
ROA not before: Fri 02 Jan 2026 10:19:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49651
IP address blocks: 194.180.56.0/22 maxlen: 24
194.180.56.0/24 maxlen: 24
194.180.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:3b:e4:29:29:7e:14:5f:6e:34:38:88:82:0f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Validity
Not Before: Jan 2 10:19:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3d237e7428430cbecbcf7ba33c235709b0329e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:88:3c:f7:91:8e:4f:1c:87:fb:d2:bd:0d:88:
11:66:b2:93:88:13:91:05:22:8b:34:59:7c:82:56:
dc:ff:ea:f0:b4:81:c8:d2:35:be:d3:c3:b1:e0:df:
56:ea:b4:7a:f3:6b:25:bf:b4:92:12:37:35:e9:9b:
5c:2b:7b:2c:42:5c:52:26:bd:cd:5a:39:c3:76:90:
84:1c:5a:6d:a9:8e:0d:46:19:85:0b:85:95:87:f7:
ba:d2:62:d9:72:21:12:f1:bb:14:a5:2c:c0:45:fd:
83:7a:4f:84:2d:69:22:98:92:e0:75:c3:bc:83:7c:
cd:b4:ad:8d:06:68:98:58:46:fa:fd:63:fc:8d:3d:
74:2c:99:70:5b:8e:36:6e:4e:19:11:c8:ab:9d:b6:
a3:78:f3:c9:b3:a9:56:0b:24:6c:c5:57:7a:2c:91:
15:bb:be:fa:07:22:58:85:31:b0:64:ec:3a:bd:c9:
21:3f:5d:88:56:49:7e:48:52:26:f5:0d:61:09:70:
70:ba:35:cd:89:d3:d4:5f:52:f2:cf:db:46:19:d4:
c6:55:52:99:9b:ee:fe:13:5f:30:e3:9d:ee:b4:c5:
45:e6:2c:35:05:6e:bb:05:6c:09:41:63:b5:03:37:
50:8c:fe:f7:42:3a:ec:51:ce:6d:9a:09:c2:de:1f:
58:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D2:37:E7:42:84:30:CB:EC:BC:F7:BA:33:C2:35:70:9B:03:29:E5
X509v3 Authority Key Identifier:
keyid:B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/09I350KEMMvsvPe6M8I1cJsDKeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.56.0/22
Signature Algorithm: sha256WithRSAEncryption
37:b6:c6:96:64:41:f1:5b:01:92:3c:0e:d3:53:5b:6f:f6:4c:
9d:d8:05:78:b7:5d:c4:e8:55:62:c0:e1:62:10:e3:3a:79:ef:
47:24:92:98:c1:da:d3:95:82:c3:e8:c2:be:f1:aa:cc:44:22:
d1:88:6c:37:d2:64:0b:35:7b:28:86:c9:6f:33:b5:44:fa:f4:
f5:97:8c:f2:df:60:b4:96:bf:28:c8:b7:0e:45:fa:44:71:34:
cc:94:6e:04:ff:28:1a:77:9b:cd:b3:66:08:31:e9:ea:63:38:
30:57:74:bb:e9:69:a9:7b:42:f3:38:73:6d:1b:d5:c7:db:0f:
04:75:61:43:88:2a:65:72:ea:2b:6e:69:99:30:cf:8a:4a:d1:
1d:10:5f:62:df:16:88:43:0d:0f:af:04:cc:37:ae:3f:35:90:
6a:c6:08:5f:3e:ce:8d:b4:3d:94:bb:6d:30:20:3a:6b:83:08:
e6:14:d1:3c:39:19:9f:e7:1a:b9:af:e2:d6:0f:2f:28:13:72:
b2:ff:72:73:70:74:ae:85:9b:c9:61:31:a8:b9:8f:5c:c4:46:
c7:15:cd:99:14:fd:61:05:fa:0f:a1:17:78:a8:73:01:05:95:
3d:f7:8f:a5:1a:2b:68:e9:f1:93:bb:fe:95:08:bf:3a:b9:28:
8f:63:f3:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+ODvkKSl+FF9uNDiIgg/2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0M2FhMmFkYmU5ZDQwNDEzNzMzOWYyMGZkNTg2MjNjOGEz
OWYxMzAwHhcNMjYwMTAyMTAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2QyMzdlNzQyODQzMGNiZWNiY2Y3YmEzM2MyMzU3MDliMDMyOWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArog895GOTxyH+9K9DYgRZrKTiBOR
BSKLNFl8glbc/+rwtIHI0jW+08Ox4N9W6rR682slv7SSEjc16ZtcK3ssQlxSJr3N
WjnDdpCEHFptqY4NRhmFC4WVh/e60mLZciES8bsUpSzARf2Dek+ELWkimJLgdcO8
g3zNtK2NBmiYWEb6/WP8jT10LJlwW442bk4ZEcirnbajePPJs6lWCyRsxVd6LJEV
u776ByJYhTGwZOw6vckhP12IVkl+SFIm9Q1hCXBwujXNidPUX1Lyz9tGGdTGVVKZ
m+7+E18w453utMVF5iw1BW67BWwJQWO1AzdQjP73QjrsUc5tmgnC3h9YnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNPSN+dChDDL7Lz3ujPCNXCbAynlMB8GA1UdIwQY
MBaAFLQ6oq2+nUBBNzOfIP1YYjyKOfEwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERxaXJiNmRRRUUzTTU4Z19WaGlQSW81OFRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yNjJmNDAtNDhjNy00M2M2LTlkODMt
MTU0OGFjMTM1NmJlLzEvMDlJMzUwS0VNTXZzdlBlNk04STFjSnNES2VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yNjJmNDAtNDhjNy00M2M2LTlkODMtMTU0OGFjMTM1NmJl
LzEvdERxaXJiNmRRRUUzTTU4Z19WaGlQSW81OFRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwrQ4MA0G
CSqGSIb3DQEBCwUAA4IBAQA3tsaWZEHxWwGSPA7TU1tv9kyd2AV4t13E6FViwOFi
EOM6ee9HJJKYwdrTlYLD6MK+8arMRCLRiGw30mQLNXsohslvM7VE+vT1l4zy32C0
lr8oyLcORfpEcTTMlG4E/ygad5vNs2YIMenqYzgwV3S76Wmpe0LzOHNtG9XH2w8E
dWFDiCplcuorbmmZMM+KStEdEF9i3xaIQw0PrwTMN64/NZBqxghfPs6NtD2Uu20w
IDprgwjmFNE8ORmf5xq5r+LWDy8oE3Ky/3JzcHSuhZvJYTGouY9cxEbHFc2ZFP1h
BfoPoRd4qHMBBZU994+lGito6fGTu/6VCL86uSiPY/Oq
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:48:09 2026 by rpki-client