Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/apqOufkzZC3hvfLS0yrWU54SWG4.roa
File: apqOufkzZC3hvfLS0yrWU54SWG4.roa (raw, json)
Hash identifier: bdicC57sTedPfwJhANjdpge4Xu2b5dLjhbZNF/3RXQM=
Subject key identifier: 6A:9A:8E:B9:F9:33:64:2D:E1:BD:F2:D2:D3:2A:D6:53:9E:12:58:6E
Certificate issuer: /CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Certificate serial: 019B7DCA75FB05B53AECA32CB8F7C1070E81
Authority key identifier: 9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/apqOufkzZC3hvfLS0yrWU54SWG4.roa
Signing time: Fri 02 Jan 2026 08:19:39 +0000
ROA not before: Fri 02 Jan 2026 08:19:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48332
IP address blocks: 91.209.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:75:fb:05:b5:3a:ec:a3:2c:b8:f7:c1:07:0e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Validity
Not Before: Jan 2 08:19:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a9a8eb9f933642de1bdf2d2d32ad6539e12586e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:10:32:81:22:f3:07:a9:c6:24:22:93:13:59:
6c:e8:b5:c4:63:c6:db:8d:17:50:62:9c:07:09:03:
ca:d2:3a:e3:fd:f7:24:5c:7d:59:5c:ef:b5:26:02:
7c:b8:79:b6:f1:2e:a4:89:89:c9:c7:e6:90:31:38:
19:23:3c:2c:9c:c5:82:e5:3b:02:f2:94:f4:8e:11:
26:be:ba:b4:e2:f2:45:76:b9:84:9b:24:b6:4f:31:
0a:0c:ff:1e:46:d9:56:3b:4b:f4:d1:73:e7:a0:f8:
04:7e:ae:7a:bd:89:a9:56:77:96:0b:3d:12:51:2e:
ae:d0:01:6b:3e:13:82:cc:c9:b6:ac:f6:7b:e2:ef:
8d:a2:0d:89:73:ea:8c:5f:02:c4:bc:5a:f1:65:10:
e9:3f:2e:4d:23:e9:88:0c:15:c6:a1:fc:07:63:1c:
ae:60:66:b7:b7:bf:64:2e:12:c5:04:41:19:33:8a:
a0:f6:4d:8c:7d:26:07:24:56:da:c2:eb:73:89:20:
e6:5d:1c:ce:86:92:8b:8f:b0:e1:22:be:f0:09:27:
28:bb:63:a5:c9:21:83:a9:d6:d2:bb:92:1f:0f:cb:
1f:ab:7f:48:e7:a6:87:28:77:df:2b:a0:74:1e:0a:
9b:6e:eb:8b:4b:94:8b:b4:67:b2:46:dc:01:eb:8f:
87:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9A:8E:B9:F9:33:64:2D:E1:BD:F2:D2:D3:2A:D6:53:9E:12:58:6E
X509v3 Authority Key Identifier:
keyid:9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/apqOufkzZC3hvfLS0yrWU54SWG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.109.0/24
Signature Algorithm: sha256WithRSAEncryption
00:06:50:70:ec:66:08:f0:72:e9:63:e8:84:41:5a:51:fb:a8:
3b:7b:6f:c9:5b:de:05:6b:78:93:e4:eb:1d:c5:36:31:d0:99:
08:e8:d7:9e:ac:8d:33:29:16:5c:13:e7:28:83:33:8b:d4:74:
63:d2:4d:46:64:38:dc:95:c4:12:f6:29:1f:53:ef:7d:d8:30:
46:11:c0:65:71:74:20:d4:24:27:46:52:bc:3b:5e:b4:67:02:
4e:4b:6a:49:13:37:0d:b2:a8:e5:65:d4:06:a6:65:7a:80:32:
0f:d0:9f:85:3a:6d:72:6e:e6:b7:4d:52:a0:26:bf:bf:8d:5c:
23:d7:8b:96:25:e2:f9:57:c5:b4:a0:8d:3b:c8:01:dd:8e:3d:
64:2e:6b:64:66:f3:28:6e:62:d7:d1:27:fc:c4:f6:96:79:28:
79:8b:76:ed:a8:15:74:f2:33:7e:b3:1b:54:c8:0a:5c:66:c1:
62:b6:bc:4f:1b:fc:8a:3b:fa:c7:9c:26:8e:dd:16:a1:7c:92:
ef:db:14:ba:27:4c:da:8b:fb:f7:3e:a9:e3:82:af:b4:3b:f5:
51:6d:87:9d:38:fc:d9:b2:bc:e1:2d:b1:ab:40:c1:38:cb:12:
cb:6e:f5:86:8f:bf:03:36:5f:2b:b6:3b:13:ca:11:bd:53:48:
7d:e3:6b:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9ynX7BbU67KMsuPfBBw6BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMGE4YzE3NzkxMWY2NGMzMDU1NzM2ODgxNWI5ZTY3ZDhm
YzNjMGYwHhcNMjYwMTAyMDgxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTlhOGViOWY5MzM2NDJkZTFiZGYyZDJkMzJhZDY1MzllMTI1ODZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRAygSLzB6nGJCKTE1ls6LXEY8bb
jRdQYpwHCQPK0jrj/fckXH1ZXO+1JgJ8uHm28S6kiYnJx+aQMTgZIzwsnMWC5TsC
8pT0jhEmvrq04vJFdrmEmyS2TzEKDP8eRtlWO0v00XPnoPgEfq56vYmpVneWCz0S
US6u0AFrPhOCzMm2rPZ74u+Nog2Jc+qMXwLEvFrxZRDpPy5NI+mIDBXGofwHYxyu
YGa3t79kLhLFBEEZM4qg9k2MfSYHJFbawutziSDmXRzOhpKLj7DhIr7wCScou2Ol
ySGDqdbSu5IfD8sfq39I56aHKHffK6B0HgqbbuuLS5SLtGeyRtwB64+HDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGqajrn5M2Qt4b3y0tMq1lOeElhuMB8GA1UdIwQY
MBaAFJwKjBd5EfZMMFVzaIFbnmfY/DwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkFxTUYza1I5a3d3VlhOb2dWdWVaOWo4UEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy80YzczNzktMzY0OS00MWRlLTg5Zjct
ZDU2Mzc0ZTExNTdhLzEvYXBxT3Vma3paQzNodmZMUzB5cldVNTRTV0c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy80YzczNzktMzY0OS00MWRlLTg5ZjctZDU2Mzc0ZTExNTdh
LzEvbkFxTUYza1I5a3d3VlhOb2dWdWVaOWo4UEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9FtMA0G
CSqGSIb3DQEBCwUAA4IBAQAABlBw7GYI8HLpY+iEQVpR+6g7e2/JW94Fa3iT5Osd
xTYx0JkI6NeerI0zKRZcE+cogzOL1HRj0k1GZDjclcQS9ikfU+992DBGEcBlcXQg
1CQnRlK8O160ZwJOS2pJEzcNsqjlZdQGpmV6gDIP0J+FOm1ybua3TVKgJr+/jVwj
14uWJeL5V8W0oI07yAHdjj1kLmtkZvMobmLX0Sf8xPaWeSh5i3btqBV08jN+sxtU
yApcZsFitrxPG/yKO/rHnCaO3RahfJLv2xS6J0zai/v3Pqnjgq+0O/VRbYedOPzZ
srzhLbGrQME4yxLLbvWGj78DNl8rtjsTyhG9U0h942v7
-----END CERTIFICATE-----
Generated at Tue Mar 3 01:10:16 2026 by rpki-client