Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nTr1OuPsSXI1f5H3fGhT31mrclE.roa
File: nTr1OuPsSXI1f5H3fGhT31mrclE.roa (raw, json)
Hash identifier: Fbp3zbZTTC1zc03WUwAqOUlSDLfv7iROSo7W90KcBUk=
Subject key identifier: 9D:3A:F5:3A:E3:EC:49:72:35:7F:91:F7:7C:68:53:DF:59:AB:72:51
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019FDB8C41F26717CD5435950C7237B9EE1F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nTr1OuPsSXI1f5H3fGhT31mrclE.roa
Signing time: Fri 07 Aug 2026 09:27:10 +0000
ROA not before: Fri 07 Aug 2026 09:27:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216139
IP address blocks: 193.222.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:8c:41:f2:67:17:cd:54:35:95:0c:72:37:b9:ee:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 7 09:27:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d3af53ae3ec4972357f91f77c6853df59ab7251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:a4:f7:60:86:27:7a:c8:fb:ae:a5:75:c5:
a8:db:7a:0f:c0:f4:d8:2e:c3:bc:0a:f3:31:73:8a:
51:1a:5b:26:33:5b:2a:ed:7b:94:26:ae:47:db:ad:
04:01:ca:a1:9b:01:36:d5:bc:9e:2b:4d:66:c1:04:
c4:98:33:10:25:23:ec:7e:15:8e:c0:c1:cf:73:0d:
a5:47:ae:8a:3c:16:36:50:32:89:9f:d7:cc:6d:2c:
13:32:50:9b:18:66:4b:51:08:fb:b8:8a:5d:e3:a0:
24:62:c7:07:67:6e:18:40:b4:87:27:3b:5d:95:3f:
b3:7e:6d:d9:9c:ac:be:bc:23:62:ce:ef:45:bc:50:
c9:8f:11:08:d6:8b:bf:9f:86:8d:f5:91:2b:b6:03:
29:c8:b7:da:a8:82:25:31:79:2c:89:1a:55:af:13:
73:75:18:50:07:e6:54:3b:b4:28:21:e6:b2:d8:cb:
b2:d4:77:e0:df:df:1d:dd:80:c3:35:26:88:0f:b0:
8c:fd:70:e9:b0:a6:bd:49:a4:d3:dc:28:c2:02:cd:
f7:51:26:9a:48:23:e9:34:a3:b4:27:3a:ac:e5:ef:
36:76:fc:8e:1c:42:31:03:9c:81:f1:45:87:03:a5:
e5:45:e9:d5:04:75:c5:10:ac:b4:d3:fe:52:6c:41:
77:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3A:F5:3A:E3:EC:49:72:35:7F:91:F7:7C:68:53:DF:59:AB:72:51
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nTr1OuPsSXI1f5H3fGhT31mrclE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.96.0/24
Signature Algorithm: sha256WithRSAEncryption
61:64:51:78:25:ce:c1:5b:47:0e:b2:5b:8e:de:fd:ab:a1:ac:
21:36:3f:08:0f:d6:2c:49:d0:40:3f:82:2b:03:cc:c4:2b:39:
37:ac:69:d8:35:6b:af:ee:2f:f8:90:87:6b:ca:67:29:8b:19:
78:6f:2e:60:e4:70:76:88:c1:97:80:a6:57:e2:67:77:64:e6:
c2:14:4e:10:51:b7:34:1c:31:de:1d:0c:57:de:51:6d:4e:0c:
1e:bf:0d:3f:bb:ff:65:79:82:5c:bf:3e:ba:5a:6e:ab:58:0c:
37:6c:7e:7d:58:64:85:38:67:6c:8f:fe:24:11:24:00:8f:76:
03:07:51:84:33:58:ab:8c:f5:84:61:a0:90:51:d8:b9:b5:e3:
a6:29:dc:c9:52:be:de:d1:87:8d:63:8c:ff:70:9e:bd:62:d7:
3e:bf:10:e4:b1:07:69:04:32:ca:10:0d:be:1b:a0:03:4f:4b:
71:13:19:4f:e1:49:35:c9:f5:da:37:fa:44:1f:3a:f2:41:82:
5f:e0:17:d4:f0:c9:b9:01:81:ba:b3:97:84:29:ba:fa:30:36:
5a:22:d5:45:7e:05:26:0d:a4:d4:1d:07:8c:13:2c:4b:ad:1b:
54:b8:22:3c:6b:24:42:ac:96:ec:4a:f7:24:26:f6:81:f4:a6:
b6:30:20:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/bjEHyZxfNVDWVDHI3ue4fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwODA3MDkyNzEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDNhZjUzYWUzZWM0OTcyMzU3ZjkxZjc3YzY4NTNkZjU5YWI3MjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCak92CGJ3rI+66ldcWo23oPwPTY
LsO8CvMxc4pRGlsmM1sq7XuUJq5H260EAcqhmwE21byeK01mwQTEmDMQJSPsfhWO
wMHPcw2lR66KPBY2UDKJn9fMbSwTMlCbGGZLUQj7uIpd46AkYscHZ24YQLSHJztd
lT+zfm3ZnKy+vCNizu9FvFDJjxEI1ou/n4aN9ZErtgMpyLfaqIIlMXksiRpVrxNz
dRhQB+ZUO7QoIeay2Muy1Hfg398d3YDDNSaID7CM/XDpsKa9SaTT3CjCAs33USaa
SCPpNKO0Jzqs5e82dvyOHEIxA5yB8UWHA6XlRenVBHXFEKy00/5SbEF3sQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ069Trj7ElyNX+R93xoU99Zq3JRMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvblRyMU91UHNTWEkxZjVIM2ZHaFQzMW1yY2xFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwd5gMA0G
CSqGSIb3DQEBCwUAA4IBAQBhZFF4Jc7BW0cOsluO3v2roawhNj8ID9YsSdBAP4Ir
A8zEKzk3rGnYNWuv7i/4kIdrymcpixl4by5g5HB2iMGXgKZX4md3ZObCFE4QUbc0
HDHeHQxX3lFtTgwevw0/u/9leYJcvz66Wm6rWAw3bH59WGSFOGdsj/4kESQAj3YD
B1GEM1irjPWEYaCQUdi5teOmKdzJUr7e0YeNY4z/cJ69Ytc+vxDksQdpBDLKEA2+
G6ADT0txExlP4Uk1yfXaN/pEHzryQYJf4BfU8Mm5AYG6s5eEKbr6MDZaItVFfgUm
DaTUHQeMEyxLrRtUuCI8ayRCrJbsSvckJvaB9Ka2MCD3
-----END CERTIFICATE-----
Generated at Fri Aug 7 16:22:41 2026 by rpki-client