Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/S9nvXfZmvv-AUfyFgOb5W9wnFis.roa
File: S9nvXfZmvv-AUfyFgOb5W9wnFis.roa (raw, json)
Hash identifier: mxPnd58Crabl3A4j2m2YQgA8Nblt6IuBOV4xQvlN3Qw=
Subject key identifier: 4B:D9:EF:5D:F6:66:BE:FF:80:51:FC:85:80:E6:F9:5B:DC:27:16:2B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0477441B7A8C0FA9ECF80811100B5DBBF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/S9nvXfZmvv-AUfyFgOb5W9wnFis.roa
Signing time: Fri 28 Aug 2026 08:19:56 +0000
ROA not before: Fri 28 Aug 2026 08:19:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214668
IP address blocks: 81.161.238.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
193.37.41.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Aug 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:74:41:b7:a8:c0:fa:9e:cf:80:81:11:00:b5:db:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 28 08:19:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4bd9ef5df666beff8051fc8580e6f95bdc27162b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:68:14:f3:4c:d4:0f:03:40:b7:1d:d7:d6:c9:
8b:48:ee:ac:77:da:34:bf:69:c5:00:c0:0c:e6:55:
aa:ba:b3:c0:5d:da:d4:a9:cb:38:df:e6:8b:ff:1f:
c7:ae:a9:94:e1:49:70:66:f0:9f:83:af:e9:0f:9c:
93:82:7a:69:25:fb:c2:6e:5d:6e:54:c7:33:a5:05:
fb:ca:15:67:2e:eb:8c:d3:a7:55:4b:25:36:19:7a:
7c:c4:8c:1a:7f:8d:02:e4:3c:19:c4:2a:1c:d5:17:
ae:22:78:75:c3:80:d6:b3:6e:d9:9a:b8:de:11:bf:
f9:63:ec:72:34:88:24:ae:a5:98:25:6c:ac:34:99:
96:d3:2f:1b:8c:de:dd:cb:55:d1:28:f5:1b:d9:41:
df:91:ad:a9:e2:b5:02:e6:85:55:30:f9:98:98:f5:
fa:91:2e:6a:ab:d3:35:17:a6:0a:c0:31:db:8e:09:
68:f6:85:c1:3f:11:1d:50:67:19:b9:50:7a:b1:3a:
d8:24:f8:9c:d1:09:5e:11:17:50:b4:c6:95:0f:a9:
36:c6:1e:28:7c:5f:c8:2d:9b:0d:b5:96:ca:c3:76:
47:08:05:76:34:ee:37:39:67:31:1f:8e:01:61:b4:
80:4e:c5:e2:3c:50:96:16:ef:0c:c2:45:98:be:2e:
dd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D9:EF:5D:F6:66:BE:FF:80:51:FC:85:80:E6:F9:5B:DC:27:16:2B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/S9nvXfZmvv-AUfyFgOb5W9wnFis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.238.0/24
185.222.160.0/24
193.37.41.0/24
193.37.44.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:78:1c:d3:e7:ec:e8:f8:45:49:a8:3a:6a:65:b0:6b:96:b0:
df:25:c7:70:b4:60:f8:c2:e2:c4:6b:5b:58:dd:3f:bc:3f:4f:
62:52:7a:bd:91:2f:0e:50:d8:fa:55:82:4e:25:18:a3:75:fb:
6b:4d:19:39:8d:8c:e8:f0:06:cb:9c:c1:d7:ac:4c:ff:a1:3e:
bd:68:23:41:b8:58:9d:b8:29:cf:f0:3b:89:5a:c3:12:5a:0a:
af:d3:ed:b9:f7:4a:bb:63:22:8d:6a:16:c4:98:89:d4:f9:81:
c2:86:d4:d6:6c:92:e3:eb:b1:36:84:93:5a:57:31:66:aa:90:
34:5a:8f:23:96:d7:d8:04:c0:3c:40:7f:03:ad:d5:1c:ae:3f:
ec:38:3d:29:e5:3b:fe:f0:ab:4e:23:ac:e5:ce:50:46:82:7b:
ef:05:5a:ba:01:0a:15:d6:ce:92:ab:c7:40:47:61:b6:54:77:
d2:59:d5:1f:d8:04:39:11:4b:61:26:30:a0:4b:25:14:93:e1:
19:2d:be:f5:a0:53:16:8f:ab:ad:fa:5e:8f:95:21:fd:50:64:
19:3d:bc:83:07:eb:2c:cb:b2:31:c9:de:4b:ba:c7:67:6c:3a:
bc:c7:24:5c:6f:94:a4:c2:29:5f:2c:70:17:32:b4:2f:90:a6:
4e:73:1f:7e
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaBHdEG3qMD6ns+AgREAtdu/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwODI4MDgxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmQ5ZWY1ZGY2NjZiZWZmODA1MWZjODU4MGU2Zjk1YmRjMjcxNjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9GgU80zUDwNAtx3X1smLSO6sd9o0
v2nFAMAM5lWqurPAXdrUqcs43+aL/x/HrqmU4UlwZvCfg6/pD5yTgnppJfvCbl1u
VMczpQX7yhVnLuuM06dVSyU2GXp8xIwaf40C5DwZxCoc1ReuInh1w4DWs27Zmrje
Eb/5Y+xyNIgkrqWYJWysNJmW0y8bjN7dy1XRKPUb2UHfka2p4rUC5oVVMPmYmPX6
kS5qq9M1F6YKwDHbjglo9oXBPxEdUGcZuVB6sTrYJPic0QleERdQtMaVD6k2xh4o
fF/ILZsNtZbKw3ZHCAV2NO43OWcxH44BYbSATsXiPFCWFu8MwkWYvi7dswIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFEvZ7132Zr7/gFH8hYDm+VvcJxYrMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvUzludlhmWm12di1BVWZ5RmdPYjVXOXduRmlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUaHuAwQA
ud6gAwQAwSUpAwQAwSUsMA0GCSqGSIb3DQEBCwUAA4IBAQCLeBzT5+zo+EVJqDpq
ZbBrlrDfJcdwtGD4wuLEa1tY3T+8P09iUnq9kS8OUNj6VYJOJRijdftrTRk5jYzo
8AbLnMHXrEz/oT69aCNBuFiduCnP8DuJWsMSWgqv0+2590q7YyKNahbEmInU+YHC
htTWbJLj67E2hJNaVzFmqpA0Wo8jltfYBMA8QH8DrdUcrj/sOD0p5Tv+8KtOI6zl
zlBGgnvvBVq6AQoV1s6Sq8dAR2G2VHfSWdUf2AQ5EUthJjCgSyUUk+EZLb71oFMW
j6ut+l6PlSH9UGQZPbyDB+ssy7Ixyd5LusdnbDq8xyRcb5SkwilfLHAXMrQvkKZO
cx9+
-----END CERTIFICATE-----
Generated at Fri Aug 28 10:33:25 2026 by rpki-client