Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/r9tO5dOM7W3cJ0IAJV4a9_UjU64.roa
File: r9tO5dOM7W3cJ0IAJV4a9_UjU64.roa (raw, json)
Hash identifier: 7p0HLcZz+BpTWdYxVEea5xby6zTSJ5cYhN5NEaQQ0nw=
Subject key identifier: AF:DB:4E:E5:D3:8C:ED:6D:DC:27:42:00:25:5E:1A:F7:F5:23:53:AE
Certificate issuer: /CN=d25c6c2e2b3e751887d3a572d1f60cf16324709e
Certificate serial: 01A01934BEEA72FDF8D51A8AC77759F46B6C
Authority key identifier: D2:5C:6C:2E:2B:3E:75:18:87:D3:A5:72:D1:F6:0C:F1:63:24:70:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lxsLis-dRiH06Vy0fYM8WMkcJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/r9tO5dOM7W3cJ0IAJV4a9_UjU64.roa
Signing time: Wed 19 Aug 2026 08:48:02 +0000
ROA not before: Wed 19 Aug 2026 08:48:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60926
IP address blocks: 193.160.139.0/24 maxlen: 24
193.160.159.0/24 maxlen: 24
193.160.238.0/24 maxlen: 24
193.160.253.0/24 maxlen: 24
2a0f:8f40::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lxsLis-dRiH06Vy0fYM8WMkcJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:34:be:ea:72:fd:f8:d5:1a:8a:c7:77:59:f4:6b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25c6c2e2b3e751887d3a572d1f60cf16324709e
Validity
Not Before: Aug 19 08:48:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afdb4ee5d38ced6ddc274200255e1af7f52353ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c6:fb:f7:9f:69:32:70:a7:81:02:45:26:24:
09:6f:e2:6b:89:e6:bf:e4:c5:be:27:90:e8:4a:4a:
16:a4:11:68:02:5f:4e:78:72:1a:16:dc:6d:13:ad:
7b:2a:b0:6a:c1:c8:37:4b:a4:09:d5:ad:22:03:5a:
c6:ac:40:05:05:27:df:01:fe:e6:4c:79:21:d3:7f:
90:64:bb:3a:a8:4f:04:f2:27:75:63:e6:9d:9d:b9:
78:4b:75:bd:bc:e9:be:47:43:08:8a:72:6c:3a:ca:
3c:8a:3b:7d:a7:97:34:df:67:a6:49:0a:25:41:95:
34:f6:8a:cc:35:9f:6a:49:46:9d:1c:33:3d:54:b6:
7f:60:1b:91:e5:df:91:d6:65:09:e3:1b:4e:3f:5f:
55:f4:3b:ab:0b:42:ee:dd:5d:ac:ef:04:76:c5:0b:
19:28:68:0d:85:e7:c8:7b:c3:ad:87:a5:bd:69:a2:
e9:9c:06:b3:4e:1d:58:2b:7d:78:77:b6:d7:91:8d:
ce:e0:64:43:8a:2a:2b:c5:44:7a:ae:a2:49:af:cf:
50:35:e4:66:56:0a:dc:33:0a:b4:04:c5:cc:ee:73:
08:05:4b:ed:a4:54:86:8b:af:08:22:fd:65:28:2c:
a2:e1:b3:e9:00:69:37:67:81:2f:dd:c5:e0:1c:3b:
fb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DB:4E:E5:D3:8C:ED:6D:DC:27:42:00:25:5E:1A:F7:F5:23:53:AE
X509v3 Authority Key Identifier:
keyid:D2:5C:6C:2E:2B:3E:75:18:87:D3:A5:72:D1:F6:0C:F1:63:24:70:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lxsLis-dRiH06Vy0fYM8WMkcJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/r9tO5dOM7W3cJ0IAJV4a9_UjU64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c582f7-123f-40b2-b007-4278f600fe96/1/0lxsLis-dRiH06Vy0fYM8WMkcJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.139.0/24
193.160.159.0/24
193.160.238.0/24
193.160.253.0/24
IPv6:
2a0f:8f40::/30
Signature Algorithm: sha256WithRSAEncryption
b1:b6:86:91:4b:55:00:c2:b7:42:6d:cf:74:ce:9d:4b:91:89:
73:f1:0f:64:91:e5:79:a6:4f:05:88:a6:83:6f:c7:2f:24:09:
82:71:07:e8:de:d6:9b:76:8a:ed:ae:01:f1:1d:b5:18:fe:7d:
fd:76:f4:df:18:7a:07:8a:81:ed:28:4d:5f:ff:ed:fe:77:2f:
53:d1:b9:fa:57:6f:e6:7c:fe:96:e5:c6:6c:4e:40:fc:06:89:
8f:76:26:5c:23:de:01:40:0b:73:5f:8e:0a:ad:cc:ac:65:ad:
e3:79:85:05:f7:dc:65:bb:8c:27:31:ca:e1:90:7a:fa:3e:21:
9f:ca:94:75:29:07:0b:d8:58:48:3a:a7:51:90:17:80:7a:b6:
09:85:25:99:80:8b:6e:4c:cc:a9:cc:ed:08:ba:9c:18:0f:48:
06:4c:22:01:25:03:92:22:94:ee:28:3f:95:91:f1:5e:2c:cd:
ca:18:66:aa:3e:32:61:11:78:fa:20:18:8c:69:66:31:a4:51:
96:0c:73:92:4a:b6:ef:e8:30:20:ac:ad:7a:b0:2f:3b:75:86:
d5:34:8d:df:dd:7f:56:48:5c:0d:13:c0:ee:40:8d:2e:ea:ee:
fc:fa:1c:12:77:a7:c6:13:dd:18:32:ab:d5:1a:37:37:5a:fa:
af:dc:b9:be
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAaAZNL7qcv341RqKx3dZ9GtsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNWM2YzJlMmIzZTc1MTg4N2QzYTU3MmQxZjYwY2YxNjMy
NDcwOWUwHhcNMjYwODE5MDg0ODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmRiNGVlNWQzOGNlZDZkZGMyNzQyMDAyNTVlMWFmN2Y1MjM1M2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08b7959pMnCngQJFJiQJb+Jriea/
5MW+J5DoSkoWpBFoAl9OeHIaFtxtE617KrBqwcg3S6QJ1a0iA1rGrEAFBSffAf7m
THkh03+QZLs6qE8E8id1Y+adnbl4S3W9vOm+R0MIinJsOso8ijt9p5c032emSQol
QZU09orMNZ9qSUadHDM9VLZ/YBuR5d+R1mUJ4xtOP19V9DurC0Lu3V2s7wR2xQsZ
KGgNhefIe8Oth6W9aaLpnAazTh1YK314d7bXkY3O4GRDiiorxUR6rqJJr89QNeRm
VgrcMwq0BMXM7nMIBUvtpFSGi68IIv1lKCyi4bPpAGk3Z4Ev3cXgHDv7SQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFK/bTuXTjO1t3CdCACVeGvf1I1OuMB8GA1UdIwQY
MBaAFNJcbC4rPnUYh9OlctH2DPFjJHCeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGx4c0xpcy1kUmlIMDZWeTBmWU04V01rY0o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jNTgyZjctMTIzZi00MGIyLWIwMDct
NDI3OGY2MDBmZTk2LzEvcjl0TzVkT003VzNjSjBJQUpWNGE5X1VqVTY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jNTgyZjctMTIzZi00MGIyLWIwMDctNDI3OGY2MDBmZTk2
LzEvMGx4c0xpcy1kUmlIMDZWeTBmWU04V01rY0o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAwaCLAwQA
waCfAwQAwaDuAwQAwaD9MA0EAgACMAcDBQIqD49AMA0GCSqGSIb3DQEBCwUAA4IB
AQCxtoaRS1UAwrdCbc90zp1LkYlz8Q9kkeV5pk8FiKaDb8cvJAmCcQfo3tabdort
rgHxHbUY/n39dvTfGHoHioHtKE1f/+3+dy9T0bn6V2/mfP6W5cZsTkD8BomPdiZc
I94BQAtzX44KrcysZa3jeYUF99xlu4wnMcrhkHr6PiGfypR1KQcL2FhIOqdRkBeA
erYJhSWZgItuTMypzO0IupwYD0gGTCIBJQOSIpTuKD+VkfFeLM3KGGaqPjJhEXj6
IBiMaWYxpFGWDHOSSrbv6DAgrK16sC87dYbVNI3f3X9WSFwNE8DuQI0u6u78+hwS
d6fGE90YMqvVGjc3Wvqv3Lm+
-----END CERTIFICATE-----
Generated at Thu Aug 27 07:05:50 2026 by rpki-client