Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/9kaVTL-pQ2rDV2PSl0bgS_1vqrU.roa
File: 9kaVTL-pQ2rDV2PSl0bgS_1vqrU.roa (raw, json)
Hash identifier: EVjfUOUimz3ybXSCJhjw0hH765mxqtHAnIuPVQGkWyE=
Subject key identifier: F6:46:95:4C:BF:A9:43:6A:C3:57:63:D2:97:46:E0:4B:FD:6F:AA:B5
Certificate issuer: /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Certificate serial: 01A08ABC23F438AC66676943EEA109A56783
Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/9kaVTL-pQ2rDV2PSl0bgS_1vqrU.roa
Signing time: Thu 10 Sep 2026 09:53:00 +0000
ROA not before: Thu 10 Sep 2026 09:53:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25233
IP address blocks: 77.64.0.0/17 maxlen: 17
77.64.40.0/24 maxlen: 24
78.93.0.0/16 maxlen: 16
78.93.28.0/24 maxlen: 24
78.93.45.0/24 maxlen: 24
78.93.50.0/24 maxlen: 24
78.93.92.0/22 maxlen: 22
78.93.96.0/22 maxlen: 22
78.93.107.0/24 maxlen: 24
78.93.108.0/24 maxlen: 24
78.93.109.0/24 maxlen: 24
78.93.144.0/24 maxlen: 24
78.93.145.0/24 maxlen: 24
78.93.146.0/24 maxlen: 24
78.93.147.0/24 maxlen: 24
78.93.148.0/24 maxlen: 24
78.93.149.0/24 maxlen: 24
78.93.150.0/24 maxlen: 24
78.93.151.0/24 maxlen: 24
78.93.152.0/24 maxlen: 24
78.93.153.0/24 maxlen: 24
78.93.154.0/24 maxlen: 24
78.93.155.0/24 maxlen: 24
78.93.156.0/24 maxlen: 24
78.93.157.0/24 maxlen: 24
78.93.158.0/24 maxlen: 24
78.93.159.0/24 maxlen: 24
78.93.160.0/24 maxlen: 24
78.93.161.0/24 maxlen: 24
84.22.224.0/19 maxlen: 19
84.22.231.0/24 maxlen: 24
84.22.234.0/24 maxlen: 24
84.22.238.0/24 maxlen: 24
84.22.241.0/24 maxlen: 24
84.22.254.0/24 maxlen: 24
86.60.64.0/18 maxlen: 18
86.60.101.0/24 maxlen: 24
86.60.107.0/24 maxlen: 24
86.60.109.0/24 maxlen: 24
86.60.112.0/21 maxlen: 21
86.60.126.0/24 maxlen: 24
212.93.192.0/19 maxlen: 19
212.93.196.0/24 maxlen: 24
212.100.192.0/19 maxlen: 19
212.100.210.0/24 maxlen: 24
212.100.218.0/24 maxlen: 24
212.100.223.0/24 maxlen: 24
212.116.192.0/19 maxlen: 19
213.184.160.0/19 maxlen: 19
2a02:df0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:bc:23:f4:38:ac:66:67:69:43:ee:a1:09:a5:67:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Validity
Not Before: Sep 10 09:53:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f646954cbfa9436ac35763d29746e04bfd6faab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dd:e6:7f:85:56:d0:d1:ef:1b:18:86:4a:9c:
6b:41:31:22:b5:5c:61:0a:f8:36:f3:ad:e7:13:a3:
f7:b2:f9:8b:81:8c:56:59:d3:df:c7:c0:fd:0c:52:
ff:fe:60:18:1c:f3:56:bd:66:b3:0d:02:21:9c:43:
9d:ac:1e:af:2b:4d:0d:66:ee:36:b0:76:9d:97:cf:
68:3b:98:70:0a:89:a8:54:cf:85:a2:60:1a:32:6e:
af:33:74:43:d8:33:92:7c:86:45:d9:e3:38:76:d4:
65:d3:f9:49:cf:ec:d8:e2:99:4e:64:3a:d8:7f:e9:
87:87:1d:58:c4:d0:d0:ef:10:7e:05:2c:ed:b2:e2:
95:09:4d:fb:83:ee:e4:48:c4:f1:36:ce:c6:2e:a3:
35:37:fb:36:a1:f0:3c:a3:64:75:26:82:81:25:d7:
e4:6f:25:29:20:8b:86:2a:ce:49:47:a9:0b:8b:a8:
78:01:c7:38:e7:ce:5e:6b:db:a5:a3:85:cf:c7:89:
00:5c:73:75:a6:0c:f6:7c:42:8d:45:46:3d:4e:a1:
a2:10:58:b2:4c:08:9c:9c:ba:1c:b4:4e:98:35:1c:
5e:75:87:43:e0:e4:33:af:06:52:cf:ce:63:3f:4a:
1a:9a:6a:de:cd:6e:ba:3a:f6:03:69:40:9f:75:a0:
5b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:46:95:4C:BF:A9:43:6A:C3:57:63:D2:97:46:E0:4B:FD:6F:AA:B5
X509v3 Authority Key Identifier:
keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/9kaVTL-pQ2rDV2PSl0bgS_1vqrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.64.0.0/17
78.93.0.0/16
84.22.224.0/19
86.60.64.0/18
212.93.192.0/19
212.100.192.0/19
212.116.192.0/19
213.184.160.0/19
IPv6:
2a02:df0::/32
Signature Algorithm: sha256WithRSAEncryption
1f:2c:83:ff:76:da:8d:86:8e:2f:f0:6a:6d:0b:2f:a5:04:1a:
26:42:4d:94:fb:23:f1:ee:31:9f:b2:89:96:08:b6:bd:6c:14:
54:fa:31:d7:f6:7e:c7:bb:75:d0:f6:9f:f6:8f:0f:45:85:2b:
a1:75:d2:a3:b3:a8:ba:47:03:ac:16:d7:92:cc:51:2b:6a:19:
03:72:cd:34:a3:aa:bd:63:05:19:95:83:bb:b9:5c:83:8a:56:
d1:cb:7a:5f:26:ad:ad:21:e9:07:a6:2d:86:8d:eb:7f:bc:dd:
65:96:f6:54:0d:10:2d:2f:e5:d2:ab:d9:74:1f:5a:cf:12:a5:
c4:e1:22:a6:6b:71:48:36:8a:eb:46:6c:ea:42:15:b1:d5:2c:
2e:db:3b:af:18:1d:2a:58:b7:05:de:37:04:e0:39:8f:79:b4:
8f:0e:7c:68:bb:92:65:fe:2e:d8:46:f1:2c:ff:5b:88:66:da:
a0:47:6e:15:4b:93:e0:ee:3a:b1:8b:f0:04:b8:21:57:48:1d:
90:a9:cb:fa:f4:c2:16:ab:3c:e2:ba:4f:9f:1d:d3:43:92:a0:
d2:b8:aa:cb:d7:75:f2:2b:b8:0a:2a:2f:79:3b:f9:7c:53:fa:
3c:87:3c:ac:aa:0a:1b:77:95:b0:67:49:b0:8b:75:fe:20:25:
6a:c9:3a:f5
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAaCKvCP0OKxmZ2lD7qEJpWeDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNDNlOWUyNjc5NTZlN2YyNjJjMTdmMDA4OWYwZjYwYmE3
YWJlZmIwHhcNMjYwOTEwMDk1MzAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjQ2OTU0Y2JmYTk0MzZhYzM1NzYzZDI5NzQ2ZTA0YmZkNmZhYWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm93mf4VW0NHvGxiGSpxrQTEitVxh
Cvg2863nE6P3svmLgYxWWdPfx8D9DFL//mAYHPNWvWazDQIhnEOdrB6vK00NZu42
sHadl89oO5hwComoVM+FomAaMm6vM3RD2DOSfIZF2eM4dtRl0/lJz+zY4plOZDrY
f+mHhx1YxNDQ7xB+BSztsuKVCU37g+7kSMTxNs7GLqM1N/s2ofA8o2R1JoKBJdfk
byUpIIuGKs5JR6kLi6h4Acc4585ea9ulo4XPx4kAXHN1pgz2fEKNRUY9TqGiEFiy
TAicnLoctE6YNRxedYdD4OQzrwZSz85jP0oammrezW66OvYDaUCfdaBb7QIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFPZGlUy/qUNqw1dj0pdG4Ev9b6q1MB8GA1UdIwQY
MBaAFFpD6eJnlW5/JiwX8AifD2C6er77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGIt
NzljODk4N2E4YjFjLzEvOWthVlRMLXBRMnJEVjJQU2wwYmdTXzF2cXJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGItNzljODk4N2E4YjFj
LzEvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjA1BAIAATAvAwQHTUAAAwMA
Tl0DBAVUFuADBAZWPEADBAXUXcADBAXUZMADBAXUdMADBAXVuKAwDQQCAAIwBwMF
ACoCDfAwDQYJKoZIhvcNAQELBQADggEBAB8sg/922o2Gji/wam0LL6UEGiZCTZT7
I/HuMZ+yiZYItr1sFFT6Mdf2fse7ddD2n/aPD0WFK6F10qOzqLpHA6wW15LMUStq
GQNyzTSjqr1jBRmVg7u5XIOKVtHLel8mra0h6QemLYaN63+83WWW9lQNEC0v5dKr
2XQfWs8SpcThIqZrcUg2iutGbOpCFbHVLC7bO68YHSpYtwXeNwTgOY95tI8OfGi7
kmX+LthG8Sz/W4hm2qBHbhVLk+DuOrGL8AS4IVdIHZCpy/r0wharPOK6T58d00OS
oNK4qsvXdfIruAoqL3k7+XxT+jyHPKyqCht3lbBnSbCLdf4gJWrJOvU=
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:22:22 2026 by rpki-client