Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/9c3_GurFtxlkeBx78y-CC7SA7ds.roa
File: 9c3_GurFtxlkeBx78y-CC7SA7ds.roa (raw, json)
Hash identifier: EvMxUB1DNdaa50kg/Po3/9SSCboGtLJXqCRVJ3y81ok=
Subject key identifier: F5:CD:FF:1A:EA:C5:B7:19:64:78:1C:7B:F3:2F:82:0B:B4:80:ED:DB
Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial: 01A03EA30B12CA8B83917A1FBD74B7B71DEB
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/9c3_GurFtxlkeBx78y-CC7SA7ds.roa
Signing time: Wed 26 Aug 2026 15:14:27 +0000
ROA not before: Wed 26 Aug 2026 15:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218979
IP address blocks: 82.119.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:a3:0b:12:ca:8b:83:91:7a:1f:bd:74:b7:b7:1d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
Validity
Not Before: Aug 26 15:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5cdff1aeac5b71964781c7bf32f820bb480eddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5b:85:fd:26:9f:50:89:4f:01:3b:34:34:0b:
04:e0:d7:3a:41:c9:c1:9e:b0:42:22:4c:ad:7d:ba:
e4:d7:c8:fb:9e:f0:eb:1e:cf:99:80:3a:3b:13:54:
18:e1:ca:ad:bb:ff:94:33:a4:4d:9a:d9:1d:68:cf:
96:30:41:e3:46:b9:f9:c1:4e:f3:01:9c:6e:c6:2c:
11:21:9d:56:55:aa:cc:a0:71:76:83:a6:63:b4:ad:
25:3f:82:ac:64:9b:c7:c9:fb:4d:21:7e:2e:b3:36:
73:db:43:24:f2:17:86:45:89:0d:c5:1a:73:39:84:
6a:0b:73:44:ab:1f:6b:1c:1d:49:dd:77:5a:83:1b:
77:c3:84:78:24:b2:80:c7:27:2a:50:c7:e9:07:e1:
28:ce:84:90:a2:b2:d1:50:ca:c2:28:6d:ae:7c:95:
71:ed:1a:12:ca:e6:6e:3c:f0:6a:60:b6:d2:41:10:
e1:52:64:76:05:95:03:75:bb:3b:4c:24:20:3c:17:
5a:f8:94:60:f8:c6:23:14:1e:ca:36:b7:82:79:de:
40:41:b4:fc:94:e6:1f:9d:09:f9:df:d1:b7:ac:7d:
2f:e3:95:df:ec:a4:a0:fb:ca:94:46:e4:e9:49:01:
c8:ff:fd:5e:99:12:a1:92:95:1e:62:be:6f:12:aa:
bb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CD:FF:1A:EA:C5:B7:19:64:78:1C:7B:F3:2F:82:0B:B4:80:ED:DB
X509v3 Authority Key Identifier:
keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/9c3_GurFtxlkeBx78y-CC7SA7ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.204.0/24
Signature Algorithm: sha256WithRSAEncryption
21:43:01:5c:d2:0a:5f:e0:ca:d1:8f:bc:13:cb:75:46:c9:56:
5d:85:2f:54:1d:ee:21:11:cd:97:cb:93:4c:6b:e9:dd:9c:f7:
e7:b3:3b:1a:93:37:6a:d7:f5:64:5a:45:b1:f8:d3:d6:a4:19:
27:d9:40:2d:9d:b6:03:e1:8f:9a:06:fa:d1:97:b5:1e:cf:05:
4e:f4:48:e7:18:2b:fc:80:2d:37:8a:f2:2f:63:4d:c5:df:4d:
fb:6d:ee:09:ad:3d:49:72:27:ea:90:43:e2:4b:2f:00:7a:e8:
d4:40:95:c0:63:99:b4:d1:72:57:11:d6:bb:39:2a:bb:a4:88:
d0:56:a9:3f:a5:94:04:20:78:6d:e3:43:5f:fd:6d:3b:31:3e:
25:e1:e4:6a:44:d9:85:46:c1:88:fb:b8:8f:64:1d:ca:ba:26:
a5:48:ae:3a:f6:18:ea:2d:70:c1:c7:0d:3c:b6:4e:9d:98:c3:
a9:52:81:a6:a6:bc:f8:5b:df:78:46:f0:bf:7c:75:df:04:47:
e4:67:1a:08:c3:0d:95:b1:a1:bf:f7:78:ad:1e:ba:4a:62:91:
cd:fb:63:67:d3:2c:7a:56:e6:a0:28:f4:da:1f:2e:24:d9:03:
5a:c4:58:92:9a:df:ae:b9:7a:74:52:b8:ac:b4:d0:89:24:27:
7d:dc:6d:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA+owsSyouDkXofvXS3tx3rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyODk3M2FmZmFhOTkzNmQzOTE0NmFhMTM2ZmJjYjA1MWI5
YWY5OWYwHhcNMjYwODI2MTUxNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWNkZmYxYWVhYzViNzE5NjQ3ODFjN2JmMzJmODIwYmI0ODBlZGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVuF/SafUIlPATs0NAsE4Nc6QcnB
nrBCIkytfbrk18j7nvDrHs+ZgDo7E1QY4cqtu/+UM6RNmtkdaM+WMEHjRrn5wU7z
AZxuxiwRIZ1WVarMoHF2g6ZjtK0lP4KsZJvHyftNIX4uszZz20Mk8heGRYkNxRpz
OYRqC3NEqx9rHB1J3Xdagxt3w4R4JLKAxycqUMfpB+EozoSQorLRUMrCKG2ufJVx
7RoSyuZuPPBqYLbSQRDhUmR2BZUDdbs7TCQgPBda+JRg+MYjFB7KNreCed5AQbT8
lOYfnQn539G3rH0v45Xf7KSg+8qURuTpSQHI//1emRKhkpUeYr5vEqq7uwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPXN/xrqxbcZZHgce/Mvggu0gO3bMB8GA1UdIwQY
MBaAFMKJc6/6qZNtORRqoTb7ywUbmvmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQt
MzQ2M2I1NmUzNzJjLzEvOWMzX0d1ckZ0eGxrZUJ4Nzh5LUNDN1NBN2RzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQtMzQ2M2I1NmUzNzJj
LzEvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUnfMMA0G
CSqGSIb3DQEBCwUAA4IBAQAhQwFc0gpf4MrRj7wTy3VGyVZdhS9UHe4hEc2Xy5NM
a+ndnPfnszsakzdq1/VkWkWx+NPWpBkn2UAtnbYD4Y+aBvrRl7UezwVO9EjnGCv8
gC03ivIvY03F3037be4JrT1JcifqkEPiSy8AeujUQJXAY5m00XJXEda7OSq7pIjQ
Vqk/pZQEIHht40Nf/W07MT4l4eRqRNmFRsGI+7iPZB3KuialSK469hjqLXDBxw08
tk6dmMOpUoGmprz4W994RvC/fHXfBEfkZxoIww2VsaG/93itHrpKYpHN+2Nn0yx6
VuagKPTaHy4k2QNaxFiSmt+uuXp0UristNCJJCd93G0Z
-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:33 2026 by rpki-client