Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/w-g9EUxKOtgFE5rf6jRVRa8B7aQ.roa
File: w-g9EUxKOtgFE5rf6jRVRa8B7aQ.roa (raw, json)
Hash identifier: V67Y6C537HMNAsGY9bRCuGZ6echEOhzyPmdBPlRkQsM=
Subject key identifier: C3:E8:3D:11:4C:4A:3A:D8:05:13:9A:DF:EA:34:55:45:AF:01:ED:A4
Certificate issuer: /CN=e04ed602bbf65f5f2396fd8095c3d986146741fe
Certificate serial: 019F236939470BBDACEC2E09395BDDC5F90C
Authority key identifier: E0:4E:D6:02:BB:F6:5F:5F:23:96:FD:80:95:C3:D9:86:14:67:41:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4E7WArv2X18jlv2AlcPZhhRnQf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/w-g9EUxKOtgFE5rf6jRVRa8B7aQ.roa
Signing time: Thu 02 Jul 2026 15:18:46 +0000
ROA not before: Thu 02 Jul 2026 15:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211201
IP address blocks: 81.85.102.0/23 maxlen: 24
193.33.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/4E7WArv2X18jlv2AlcPZhhRnQf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/4E7WArv2X18jlv2AlcPZhhRnQf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4E7WArv2X18jlv2AlcPZhhRnQf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 09:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:39:47:0b:bd:ac:ec:2e:09:39:5b:dd:c5:f9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e04ed602bbf65f5f2396fd8095c3d986146741fe
Validity
Not Before: Jul 2 15:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3e83d114c4a3ad805139adfea345545af01eda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:f4:85:e3:d4:40:2f:2b:89:1d:a5:17:e9:
fd:5c:f3:2d:fe:f3:02:95:a4:06:c5:e3:57:08:ac:
d4:cd:d7:54:76:95:5b:60:46:e1:9b:3f:09:22:dd:
de:91:7c:b9:ea:51:5f:80:7d:55:ee:36:2e:01:85:
8f:c2:3a:81:24:7b:e5:f2:74:c7:a8:57:50:ce:67:
ea:3c:a3:bc:5f:17:f9:49:d1:0d:41:6a:b8:a4:9a:
28:a6:28:2e:0c:ab:12:9a:d5:0e:7e:21:60:c5:84:
69:89:1e:17:02:b9:8a:2f:4a:24:f2:b7:4e:9b:36:
2c:1b:f8:67:73:64:c8:e6:ed:40:0a:b9:d0:42:98:
fd:91:74:07:61:10:14:cd:7b:67:33:4c:97:73:a6:
20:21:b0:63:8c:39:c0:d3:ba:1d:52:c1:54:cb:15:
9a:9a:86:dd:13:dc:d5:31:6a:51:01:e9:d6:82:8a:
9b:53:34:29:e8:0e:b0:c0:59:eb:92:cd:0c:c7:57:
ee:1c:2c:52:a0:f5:cf:df:df:30:1e:1d:41:2c:f6:
49:56:65:15:1c:b1:bf:86:5f:71:de:f2:7f:53:57:
17:65:03:fd:39:ff:a0:30:e2:46:30:55:39:92:e2:
d0:43:18:b7:1e:5b:40:9f:82:e9:f7:90:39:b2:dc:
eb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E8:3D:11:4C:4A:3A:D8:05:13:9A:DF:EA:34:55:45:AF:01:ED:A4
X509v3 Authority Key Identifier:
keyid:E0:4E:D6:02:BB:F6:5F:5F:23:96:FD:80:95:C3:D9:86:14:67:41:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4E7WArv2X18jlv2AlcPZhhRnQf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/w-g9EUxKOtgFE5rf6jRVRa8B7aQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/4E7WArv2X18jlv2AlcPZhhRnQf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.85.102.0/23
193.33.96.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:37:61:83:34:9d:84:89:95:9d:c3:5e:69:d3:dd:49:19:f8:
71:d8:6b:ea:20:94:de:42:31:2c:03:59:33:0a:5a:07:c5:16:
f7:d5:36:ae:ee:33:7d:a8:8d:72:b2:2c:07:3b:89:f2:95:93:
fe:b3:ad:99:22:7c:79:a8:3f:06:3f:a5:77:1e:a7:93:0e:90:
d6:d5:77:e1:c6:5f:c9:de:f2:80:1d:6f:f9:0c:3c:a2:3b:4f:
19:1a:fb:76:5a:1e:47:bf:3f:74:13:7b:57:58:53:f4:46:70:
90:88:8e:5e:59:89:2e:f5:ab:81:af:89:64:3f:be:3f:10:30:
fd:4a:85:e8:e9:2d:12:0e:83:39:0c:9f:19:09:49:f3:af:41:
6e:48:06:9d:73:43:8a:f1:ef:b0:39:2b:90:55:52:6d:99:c4:
15:c6:3b:f1:f2:d5:13:d7:3d:64:ec:2c:d7:50:dd:d8:1f:8b:
bf:96:31:ca:da:ff:01:c8:1b:c1:e0:9e:9e:65:e7:78:21:17:
fa:67:9f:cc:0d:b6:6b:1f:3d:56:fa:fd:7e:a2:92:fd:a9:a7:
34:9f:23:fb:4e:67:1b:79:ff:36:67:05:4d:76:87:86:9f:bd:
e5:b3:8c:19:f1:5c:22:17:26:18:38:1e:07:de:4e:fe:87:0a:
ef:7c:79:0c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8jaTlHC72s7C4JOVvdxfkMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNGVkNjAyYmJmNjVmNWYyMzk2ZmQ4MDk1YzNkOTg2MTQ2
NzQxZmUwHhcNMjYwNzAyMTUxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2U4M2QxMTRjNGEzYWQ4MDUxMzlhZGZlYTM0NTU0NWFmMDFlZGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTD0hePUQC8riR2lF+n9XPMt/vMC
laQGxeNXCKzUzddUdpVbYEbhmz8JIt3ekXy56lFfgH1V7jYuAYWPwjqBJHvl8nTH
qFdQzmfqPKO8Xxf5SdENQWq4pJoopiguDKsSmtUOfiFgxYRpiR4XArmKL0ok8rdO
mzYsG/hnc2TI5u1ACrnQQpj9kXQHYRAUzXtnM0yXc6YgIbBjjDnA07odUsFUyxWa
mobdE9zVMWpRAenWgoqbUzQp6A6wwFnrks0Mx1fuHCxSoPXP398wHh1BLPZJVmUV
HLG/hl9x3vJ/U1cXZQP9Of+gMOJGMFU5kuLQQxi3HltAn4Lp95A5stzroQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMPoPRFMSjrYBROa3+o0VUWvAe2kMB8GA1UdIwQY
MBaAFOBO1gK79l9fI5b9gJXD2YYUZ0H+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEU3V0FydjJYMThqbHYyQWxjUFpoaFJuUWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9mMGNjNDEtYjNlNy00NmZmLWE5NzYt
MjlkZjRlMjYxMWYxLzEvdy1nOUVVeEtPdGdGRTVyZjZqUlZSYThCN2FRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9mMGNjNDEtYjNlNy00NmZmLWE5NzYtMjlkZjRlMjYxMWYx
LzEvNEU3V0FydjJYMThqbHYyQWxjUFpoaFJuUWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUVVmAwQA
wSFgMA0GCSqGSIb3DQEBCwUAA4IBAQA7N2GDNJ2EiZWdw15p091JGfhx2GvqIJTe
QjEsA1kzCloHxRb31Tau7jN9qI1ysiwHO4nylZP+s62ZInx5qD8GP6V3HqeTDpDW
1Xfhxl/J3vKAHW/5DDyiO08ZGvt2Wh5Hvz90E3tXWFP0RnCQiI5eWYku9auBr4lk
P74/EDD9SoXo6S0SDoM5DJ8ZCUnzr0FuSAadc0OK8e+wOSuQVVJtmcQVxjvx8tUT
1z1k7CzXUN3YH4u/ljHK2v8ByBvB4J6eZed4IRf6Z5/MDbZrHz1W+v1+opL9qac0
nyP7Tmcbef82ZwVNdoeGn73ls4wZ8VwiFyYYOB4H3k7+hwrvfHkM
-----END CERTIFICATE-----
Generated at Sun Jul 19 18:47:16 2026 by rpki-client