Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DG2KYwvtzA0oDs0b9qyszhl6ISE.roa
File: DG2KYwvtzA0oDs0b9qyszhl6ISE.roa (raw, json)
Hash identifier: KJQZznyCeK0VLZ+8+V8ZfaKOA+G6r2Mc8oeCg/Sb/7s=
Subject key identifier: 0C:6D:8A:63:0B:ED:CC:0D:28:0E:CD:1B:F6:AC:AC:CE:19:7A:21:21
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A07A3447321DCEBD164F8614788B922FB0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DG2KYwvtzA0oDs0b9qyszhl6ISE.roa
Signing time: Mon 07 Sep 2026 04:50:41 +0000
ROA not before: Mon 07 Sep 2026 04:50:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210644
IP address blocks: 193.47.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Sep 2026 05:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7a:34:47:32:1d:ce:bd:16:4f:86:14:78:8b:92:2f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 7 04:50:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c6d8a630bedcc0d280ecd1bf6acacce197a2121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:71:34:13:3c:d7:72:88:11:3e:06:44:a3:
cf:cc:f1:c3:58:79:47:69:1d:ec:b4:03:15:08:45:
38:55:d2:9f:25:c4:8b:2f:2c:8b:44:4c:6b:4c:d5:
52:c8:b0:31:0c:d0:6d:06:2e:9b:93:aa:8b:23:b5:
54:71:95:d5:d7:30:fb:9d:d1:6d:4c:b7:ad:38:bf:
c6:f5:94:db:60:28:f5:df:c2:39:a7:ce:f4:78:01:
d9:0c:26:b4:b0:34:0b:a7:1f:13:d7:90:b0:c1:dc:
ad:d7:22:99:e0:fa:d0:61:61:f2:ca:a2:87:c5:e6:
6f:56:81:6f:03:c9:f0:b2:24:a8:69:37:79:34:3f:
87:86:55:f9:86:3c:ba:67:38:49:d7:c0:f4:03:b3:
c5:34:1c:e3:2e:e2:46:c6:6a:ec:d0:c4:ec:c2:c3:
5d:de:a0:b5:d5:b6:02:8d:5b:0b:10:4c:4a:77:a1:
68:35:1f:fd:89:b5:cf:73:39:54:98:50:e4:89:7e:
8e:e3:de:dc:1c:5e:d5:38:7f:72:a6:8c:4a:03:7f:
7b:0d:cd:21:b5:ed:73:3b:d0:10:3a:0a:85:08:4b:
b1:5e:ee:59:19:b4:1b:89:e5:25:47:e5:ab:94:0e:
41:4c:44:a5:e0:6a:e5:83:7b:87:e5:87:c0:ce:a8:
25:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6D:8A:63:0B:ED:CC:0D:28:0E:CD:1B:F6:AC:AC:CE:19:7A:21:21
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DG2KYwvtzA0oDs0b9qyszhl6ISE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.61.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:52:ed:00:f4:2c:ff:e6:4a:ef:8d:c7:5c:cb:33:a0:dc:16:
4f:75:bc:7a:ea:c7:59:f5:9e:8a:b9:4c:08:88:e2:89:8b:cc:
d6:b1:8f:c7:9d:a0:99:4a:b3:4e:17:ee:ec:16:d0:c4:4b:b7:
7b:3a:d6:3f:54:98:b2:3e:e7:b2:88:a2:09:b1:0e:68:cd:6a:
2c:87:59:42:01:ee:6f:22:24:17:c0:2a:6f:43:0c:71:18:ea:
c6:b5:22:35:84:4f:3c:4e:9c:76:ad:6a:a1:3e:0e:9b:b3:ef:
4b:47:19:2c:31:61:d8:aa:7b:98:44:5d:f0:e5:3e:aa:aa:26:
a9:35:f0:4d:fb:b2:39:78:64:98:53:ec:e7:fc:49:f5:57:45:
89:f5:c0:e8:23:a2:d0:02:8c:46:6f:0d:7a:98:d2:19:de:21:
1a:2f:5d:31:76:cb:35:2f:42:da:cf:de:81:b9:46:5a:13:32:
69:5b:49:90:7e:e4:db:e1:9b:c3:29:66:e9:dd:46:96:94:36:
66:6e:42:49:28:d6:ce:78:51:2e:7f:75:b1:49:01:49:bb:a0:
a4:9b:bf:d1:c9:80:54:72:c7:53:74:e0:8a:9b:e0:92:5a:23:
e5:cd:13:93:7e:27:38:39:f5:47:6f:e4:b4:78:e6:61:2b:39:
cf:db:4f:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaB6NEcyHc69Fk+GFHiLki+wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwOTA3MDQ1MDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzZkOGE2MzBiZWRjYzBkMjgwZWNkMWJmNmFjYWNjZTE5N2EyMTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFxxNBM813KIET4GRKPPzPHDWHlH
aR3stAMVCEU4VdKfJcSLLyyLRExrTNVSyLAxDNBtBi6bk6qLI7VUcZXV1zD7ndFt
TLetOL/G9ZTbYCj138I5p870eAHZDCa0sDQLpx8T15Cwwdyt1yKZ4PrQYWHyyqKH
xeZvVoFvA8nwsiSoaTd5ND+HhlX5hjy6ZzhJ18D0A7PFNBzjLuJGxmrs0MTswsNd
3qC11bYCjVsLEExKd6FoNR/9ibXPczlUmFDkiX6O497cHF7VOH9ypoxKA397Dc0h
te1zO9AQOgqFCEuxXu5ZGbQbieUlR+WrlA5BTESl4Grlg3uH5YfAzqgl2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAxtimML7cwNKA7NG/asrM4ZeiEhMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvREcyS1l3dnR6QTBvRHMwYjlxeXN6aGw2SVNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS89MA0G
CSqGSIb3DQEBCwUAA4IBAQAaUu0A9Cz/5krvjcdcyzOg3BZPdbx66sdZ9Z6KuUwI
iOKJi8zWsY/HnaCZSrNOF+7sFtDES7d7OtY/VJiyPueyiKIJsQ5ozWosh1lCAe5v
IiQXwCpvQwxxGOrGtSI1hE88Tpx2rWqhPg6bs+9LRxksMWHYqnuYRF3w5T6qqiap
NfBN+7I5eGSYU+zn/En1V0WJ9cDoI6LQAoxGbw16mNIZ3iEaL10xdss1L0Laz96B
uUZaEzJpW0mQfuTb4ZvDKWbp3UaWlDZmbkJJKNbOeFEuf3WxSQFJu6Ckm7/RyYBU
csdTdOCKm+CSWiPlzROTfic4OfVHb+S0eOZhKznP209M
-----END CERTIFICATE-----
Generated at Mon Sep 7 12:34:15 2026 by rpki-client