Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0gqu3i6jChvD_yZvV8yVmWbt-Fo.roa
File: 0gqu3i6jChvD_yZvV8yVmWbt-Fo.roa (raw, json)
Hash identifier: hflSjO3CEZ6Utbc3XRTVybJGRm4hZTcIfI1+OG8plig=
Subject key identifier: D2:0A:AE:DE:2E:A3:0A:1B:C3:FF:26:6F:57:CC:95:99:66:ED:F8:5A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A12450294EF9ED7703AA75ABD7DD7B2E67
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0gqu3i6jChvD_yZvV8yVmWbt-Fo.roa
Signing time: Sat 10 Oct 2026 05:36:35 +0000
ROA not before: Sat 10 Oct 2026 05:36:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215439
IP address blocks: 89.144.16.0/24 maxlen: 24
94.103.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:50:29:4e:f9:ed:77:03:aa:75:ab:d7:dd:7b:2e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 10 05:36:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d20aaede2ea30a1bc3ff266f57cc959966edf85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:ef:14:8a:75:72:96:30:51:3a:8e:fe:d4:
4d:07:7a:da:e5:46:85:0a:6e:28:87:5f:12:e7:96:
5e:a0:83:2a:be:1b:9b:8a:52:bb:3d:42:cf:53:a0:
a7:82:3d:40:63:11:70:34:49:67:13:db:37:d2:24:
f3:d7:8b:f6:6a:c2:4f:65:a4:ce:40:ea:39:1b:9a:
47:0c:4f:b7:c2:75:51:2a:07:44:f8:a7:a3:87:c2:
b5:76:64:2c:a8:5c:ce:df:68:0b:fa:cc:4f:1c:b0:
72:ee:58:4f:86:e0:ee:d9:a1:52:64:d4:a7:4e:2a:
f4:98:2f:f4:50:f7:0f:1d:b1:0a:7c:53:30:fb:11:
98:9b:15:40:ad:a7:da:86:60:50:4d:61:b4:7f:8c:
9a:2d:5b:17:59:20:1b:f6:b8:e0:30:10:1b:ac:9f:
80:02:4c:20:66:1a:6d:0d:b4:71:eb:46:fd:82:c8:
7b:b0:8a:6a:db:5e:24:4c:80:24:cd:a3:fc:77:e6:
ff:e7:77:ee:e5:e6:14:7b:1c:5a:47:61:64:e7:01:
0f:fa:9a:b9:64:c6:f1:7d:94:42:96:00:76:91:c3:
48:cd:6b:e4:dc:d7:b5:5b:99:0a:f2:ea:82:ef:bd:
94:4c:fe:c3:7f:e4:5a:7f:85:06:c7:4d:ce:5c:98:
ce:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0A:AE:DE:2E:A3:0A:1B:C3:FF:26:6F:57:CC:95:99:66:ED:F8:5A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0gqu3i6jChvD_yZvV8yVmWbt-Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.16.0/24
94.103.169.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:dd:0c:7a:3e:cf:ca:27:1f:47:1d:8a:09:41:c9:27:17:41:
75:13:1f:8e:0f:96:b1:7b:1a:77:ea:60:66:36:01:4d:89:16:
93:a5:68:23:d9:d3:d1:da:c6:65:e4:14:83:eb:1f:dd:e7:46:
a9:07:d8:9d:91:05:d6:b2:97:0a:f0:92:dd:83:85:c7:12:88:
73:fe:41:0b:51:6d:37:24:da:f3:41:6e:82:eb:b9:93:eb:0e:
2c:6a:e2:38:ba:f4:e4:f1:34:df:da:b9:30:bd:19:38:13:ba:
2c:04:4d:cd:b7:49:98:b4:8e:d4:f5:fb:de:68:e4:00:b9:d9:
7e:b2:c9:28:4c:3f:a8:7b:30:7e:65:b6:4c:f0:7b:17:43:2c:
28:71:0f:36:64:5a:6f:9a:cd:41:0e:29:f4:16:29:6e:8d:0b:
ab:b3:d1:68:0e:54:60:75:73:12:ed:d1:93:da:93:4f:22:3c:
4d:6a:11:c0:cf:c6:68:61:9f:58:3b:c4:be:52:4d:e0:0b:00:
40:ee:f8:a5:16:ce:b1:21:7f:aa:c9:a9:2e:06:3d:eb:41:27:
42:22:06:dc:6e:8a:09:ca:e0:6b:29:3d:45:ee:d8:b7:c8:2b:
31:17:82:22:39:d0:65:1e:56:3a:2f:42:e9:0e:bc:68:80:87:
7a:15:17:2a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaEkUClO+e13A6p1q9fdey5nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYxMDEwMDUzNjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjBhYWVkZTJlYTMwYTFiYzNmZjI2NmY1N2NjOTU5OTY2ZWRmODVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWbvFIp1cpYwUTqO/tRNB3ra5UaF
Cm4oh18S55ZeoIMqvhubilK7PULPU6Cngj1AYxFwNElnE9s30iTz14v2asJPZaTO
QOo5G5pHDE+3wnVRKgdE+Kejh8K1dmQsqFzO32gL+sxPHLBy7lhPhuDu2aFSZNSn
Tir0mC/0UPcPHbEKfFMw+xGYmxVArafahmBQTWG0f4yaLVsXWSAb9rjgMBAbrJ+A
AkwgZhptDbRx60b9gsh7sIpq214kTIAkzaP8d+b/53fu5eYUexxaR2Fk5wEP+pq5
ZMbxfZRClgB2kcNIzWvk3Ne1W5kK8uqC772UTP7Df+Raf4UGx03OXJjOIQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNIKrt4uowobw/8mb1fMlZlm7fhaMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvMGdxdTNpNmpDaHZEX3ladlY4eVZtV2J0LUZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWZAQAwQA
XmepMA0GCSqGSIb3DQEBCwUAA4IBAQA+3Qx6Ps/KJx9HHYoJQcknF0F1Ex+OD5ax
exp36mBmNgFNiRaTpWgj2dPR2sZl5BSD6x/d50apB9idkQXWspcK8JLdg4XHEohz
/kELUW03JNrzQW6C67mT6w4sauI4uvTk8TTf2rkwvRk4E7osBE3Nt0mYtI7U9fve
aOQAudl+sskoTD+oezB+ZbZM8HsXQywocQ82ZFpvms1BDin0FilujQurs9FoDlRg
dXMS7dGT2pNPIjxNahHAz8ZoYZ9YO8S+Uk3gCwBA7vilFs6xIX+qyakuBj3rQSdC
IgbcbooJyuBrKT1F7ti3yCsxF4IiOdBlHlY6L0LpDrxogId6FRcq
-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:29 2026 by rpki-client