Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2SGLoddtWhbGa2iOlS_s9R_o9cY.roa
File: 2SGLoddtWhbGa2iOlS_s9R_o9cY.roa (raw, json)
Hash identifier: S9dW+qurbo135ScFmTFhEvXTN6cskINIxr/8ycNKD6Q=
Subject key identifier: D9:21:8B:A1:D7:6D:5A:16:C6:6B:68:8E:95:2F:EC:F5:1F:E8:F5:C6
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A0761EBCA6831916F5749EBB2F2EF8D971
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2SGLoddtWhbGa2iOlS_s9R_o9cY.roa
Signing time: Sun 06 Sep 2026 09:48:40 +0000
ROA not before: Sun 06 Sep 2026 09:48:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 192.124.191.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
212.193.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 18:44:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:76:1e:bc:a6:83:19:16:f5:74:9e:bb:2f:2e:f8:d9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 6 09:48:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9218ba1d76d5a16c66b688e952fecf51fe8f5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6c:2f:94:cb:d2:db:fa:24:8b:6b:33:3c:a0:
53:5e:1c:7f:c3:28:39:7f:5f:d4:5e:dd:db:ef:3a:
e4:4e:6d:8c:c8:05:79:27:ed:28:00:b7:31:4b:cc:
e2:46:11:a1:42:00:f9:3d:8e:45:d8:70:53:2e:ca:
d2:ca:70:6f:47:03:5c:e3:a9:db:28:00:31:1d:a0:
67:c8:f9:63:41:e0:2d:8c:5e:0d:f3:1b:07:da:02:
ec:5a:fe:8a:c8:78:31:6e:b0:92:e6:9e:58:de:8a:
07:29:3a:0b:3a:df:82:10:0c:14:8a:06:6d:96:65:
5a:01:74:a9:f0:1f:c3:7a:df:df:8b:a3:8b:99:c1:
b7:9a:c0:64:66:ab:bc:1e:cc:20:d7:2d:df:ba:f3:
d7:45:47:91:41:86:9a:c1:27:e0:0e:50:e2:95:91:
f1:89:f6:21:f7:09:e1:68:04:1a:c7:68:aa:ba:38:
d5:40:2b:38:73:61:35:e8:44:ea:b1:e5:3d:fa:e6:
02:b3:55:04:1f:23:d7:cc:74:a0:e4:51:0e:d7:a3:
7e:54:f3:40:7e:f7:79:ee:29:c7:96:4d:36:82:61:
23:24:8d:84:df:2d:26:a9:8a:f3:82:c9:09:e7:af:
fa:50:03:f9:bc:81:7c:ae:b9:45:0e:dd:e7:e8:4d:
da:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:21:8B:A1:D7:6D:5A:16:C6:6B:68:8E:95:2F:EC:F5:1F:E8:F5:C6
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2SGLoddtWhbGa2iOlS_s9R_o9cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.191.0/24
193.124.91.0/24
194.87.12.0/24
194.87.22.0/24
194.87.40.0/24
194.87.124.0/24
195.133.6.0/24
195.133.85.0/24
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
72:fb:50:d1:9b:ba:bd:cf:89:4e:ae:b7:48:85:8c:8e:16:1a:
7f:c4:91:5e:55:e2:f1:4e:be:a7:27:16:1f:ba:85:7b:12:07:
be:63:06:72:c8:bd:ec:33:99:4c:19:f8:2f:27:47:9f:77:90:
a8:01:16:84:62:72:37:ef:c7:41:54:1f:a9:3d:56:ee:41:62:
a8:ba:c0:b7:6a:9f:70:f7:a7:00:00:fd:8b:27:a4:c2:71:fc:
14:c9:7e:49:53:f9:11:13:33:16:39:bf:3e:45:b3:63:77:2d:
24:dd:82:97:52:95:c3:92:82:a1:4a:21:c0:c3:29:33:e0:01:
d7:45:0e:fc:48:7d:86:12:fd:5d:c8:5c:64:5d:6a:be:0c:73:
e0:7b:a8:67:63:ce:0e:3a:bc:e5:33:29:9d:f5:99:08:50:07:
b4:e0:bb:11:ee:86:a9:7c:c2:d9:ed:46:94:b8:4c:ed:eb:82:
20:de:9e:c2:49:71:48:92:ae:85:22:b6:7e:34:91:08:5b:77:
83:ba:21:cf:e1:6f:43:54:7a:7e:8d:cf:70:89:9e:93:f2:65:
aa:ad:04:6a:9b:40:fd:b1:12:7d:31:aa:b0:5e:83:c4:36:69:
52:81:d0:8b:46:3b:35:3d:69:0c:b9:38:f5:16:00:32:f8:2c:
67:70:d4:45
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAaB2HrymgxkW9XSeuy8u+NlxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYwOTA2MDk0ODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTIxOGJhMWQ3NmQ1YTE2YzY2YjY4OGU5NTJmZWNmNTFmZThmNWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmwvlMvS2/oki2szPKBTXhx/wyg5
f1/UXt3b7zrkTm2MyAV5J+0oALcxS8ziRhGhQgD5PY5F2HBTLsrSynBvRwNc46nb
KAAxHaBnyPljQeAtjF4N8xsH2gLsWv6KyHgxbrCS5p5Y3ooHKToLOt+CEAwUigZt
lmVaAXSp8B/Det/fi6OLmcG3msBkZqu8Hswg1y3fuvPXRUeRQYaawSfgDlDilZHx
ifYh9wnhaAQax2iqujjVQCs4c2E16ETqseU9+uYCs1UEHyPXzHSg5FEO16N+VPNA
fvd57inHlk02gmEjJI2E3y0mqYrzgskJ56/6UAP5vIF8rrlFDt3n6E3amQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFNkhi6HXbVoWxmtojpUv7PUf6PXGMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvMlNHTG9kZHRXaGJHYTJpT2xTX3M5Ul9vOWNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAwHy/AwQA
wXxbAwQAwlcMAwQAwlcWAwQAwlcoAwQAwld8AwQAw4UGAwQAw4VVAwQA1MEOMA0G
CSqGSIb3DQEBCwUAA4IBAQBy+1DRm7q9z4lOrrdIhYyOFhp/xJFeVeLxTr6nJxYf
uoV7Ege+YwZyyL3sM5lMGfgvJ0efd5CoARaEYnI378dBVB+pPVbuQWKousC3ap9w
96cAAP2LJ6TCcfwUyX5JU/kREzMWOb8+RbNjdy0k3YKXUpXDkoKhSiHAwykz4AHX
RQ78SH2GEv1dyFxkXWq+DHPge6hnY84OOrzlMymd9ZkIUAe04LsR7oapfMLZ7UaU
uEzt64Ig3p7CSXFIkq6FIrZ+NJEIW3eDuiHP4W9DVHp+jc9wiZ6T8mWqrQRqm0D9
sRJ9MaqwXoPENmlSgdCLRjs1PWkMuTj1FgAy+CxncNRF
-----END CERTIFICATE-----
Generated at Wed Sep 9 03:40:19 2026 by rpki-client