Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/c4Qf9cjp1Zuiyk0ZV_2t8e_U7qw.roa
File: c4Qf9cjp1Zuiyk0ZV_2t8e_U7qw.roa (raw, json)
Hash identifier: l61lmJGYF+47jzqFgSAHtGTYQ02LLii0JStcef3Q1S8=
Subject key identifier: 73:84:1F:F5:C8:E9:D5:9B:A2:CA:4D:19:57:FD:AD:F1:EF:D4:EE:AC
Certificate issuer: /CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb
Certificate serial: 01A019526F5DB213A8EA50E3CE2BE1FC21C8
Authority key identifier: C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/c4Qf9cjp1Zuiyk0ZV_2t8e_U7qw.roa
Signing time: Wed 19 Aug 2026 09:20:27 +0000
ROA not before: Wed 19 Aug 2026 09:20:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206082
IP address blocks: 91.239.38.0/23 maxlen: 23
185.196.208.0/22 maxlen: 22
185.221.100.0/22 maxlen: 22
185.221.102.0/24 maxlen: 24
2001:67c:11c0::/48 maxlen: 48
2a0a:7240::/29 maxlen: 29
2a0a:7240::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:52:6f:5d:b2:13:a8:ea:50:e3:ce:2b:e1:fc:21:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb
Validity
Not Before: Aug 19 09:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73841ff5c8e9d59ba2ca4d1957fdadf1efd4eeac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a0:e0:b5:67:af:34:b2:ff:86:b7:de:dd:1f:
97:20:8d:4e:b6:a1:05:14:1d:0f:f0:95:af:29:ce:
8e:fe:26:b4:fd:ad:83:02:10:a2:3a:95:59:28:ce:
df:40:fc:99:8e:b5:12:df:e5:6d:f5:b7:f7:ad:4d:
7c:dd:b7:f2:08:12:c1:65:d0:84:db:0e:ee:cf:c9:
e6:7d:e1:40:4d:ba:00:9d:3e:b1:07:54:67:d6:8c:
9a:88:fb:33:d4:2f:35:66:2b:85:53:d8:f9:b7:5c:
90:b7:50:f1:26:b6:7d:5f:64:72:75:f7:c7:65:47:
5d:62:22:44:74:18:e5:eb:fa:b3:f9:5e:5f:57:6d:
a2:ab:81:9a:3a:6a:62:83:ef:0e:71:6f:a9:37:d2:
48:69:89:93:68:19:11:bb:31:ea:67:a8:b7:20:61:
6c:46:74:e8:24:40:4a:c9:34:90:b0:89:20:4f:33:
02:e5:8c:3b:cd:3f:dc:9d:2d:08:db:c0:b8:4b:25:
d6:a1:61:73:06:5e:f1:a1:d1:58:3b:0d:a5:18:ac:
60:79:d0:06:c9:0c:1d:44:5d:df:89:35:15:15:dd:
86:0f:bb:4a:75:2f:6e:ca:a8:78:90:86:86:c5:23:
fe:53:e9:64:6a:12:bc:92:83:69:d9:15:38:c8:76:
f0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:84:1F:F5:C8:E9:D5:9B:A2:CA:4D:19:57:FD:AD:F1:EF:D4:EE:AC
X509v3 Authority Key Identifier:
keyid:C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/c4Qf9cjp1Zuiyk0ZV_2t8e_U7qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.38.0/23
185.196.208.0/22
185.221.100.0/22
IPv6:
2001:67c:11c0::/48
2a0a:7240::/29
Signature Algorithm: sha256WithRSAEncryption
31:fe:d5:a2:69:64:4d:d3:92:45:63:fe:f2:47:e4:ad:c8:a4:
ab:c6:4f:32:74:09:6c:a1:4e:dd:9b:bc:03:8d:5b:43:e1:c6:
d6:9e:a5:06:d5:27:39:0c:e8:cb:c3:d7:d0:1c:c0:d7:84:50:
0c:7f:6c:08:74:1f:3f:07:44:07:57:18:58:aa:d0:08:c9:b4:
e7:d9:35:24:7f:29:ce:d7:5e:bb:71:81:4b:ac:7c:90:f1:0b:
24:f3:a3:22:37:68:43:3c:ef:a7:46:d5:42:e1:d7:25:e3:84:
fe:5c:70:57:2c:2f:9b:c2:b3:dd:f6:84:c4:eb:87:56:e2:a3:
ea:74:15:65:e8:23:5a:85:af:2d:79:8f:ed:77:10:64:32:67:
91:66:0f:92:8f:f4:f6:99:8d:74:c6:3e:7e:fb:67:4f:98:70:
d3:58:74:37:0f:1f:8a:50:ae:a3:7b:41:31:9f:f5:c4:88:1a:
97:f7:86:20:44:2c:89:ea:0f:b0:3c:23:9d:b5:63:65:64:13:
58:d8:86:7a:a2:a1:76:b4:b3:9b:56:6f:cc:f5:39:6b:86:4c:
d8:7f:da:54:66:26:07:27:fe:65:0b:cb:a8:93:e3:69:f6:6d:
cd:bc:db:a1:e3:4e:8c:f0:aa:28:47:3b:c3:fe:a0:21:0d:38:
83:34:12:89
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAaAZUm9dshOo6lDjzivh/CHIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyOTc0MDliYzI3YzU4NDNlMmIxNmFjNjdjZGI2YTE1NWMy
ZjczZmIwHhcNMjYwODE5MDkyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Mzg0MWZmNWM4ZTlkNTliYTJjYTRkMTk1N2ZkYWRmMWVmZDRlZWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKDgtWevNLL/hrfe3R+XII1OtqEF
FB0P8JWvKc6O/ia0/a2DAhCiOpVZKM7fQPyZjrUS3+Vt9bf3rU183bfyCBLBZdCE
2w7uz8nmfeFATboAnT6xB1Rn1oyaiPsz1C81ZiuFU9j5t1yQt1DxJrZ9X2RydffH
ZUddYiJEdBjl6/qz+V5fV22iq4GaOmpig+8OcW+pN9JIaYmTaBkRuzHqZ6i3IGFs
RnToJEBKyTSQsIkgTzMC5Yw7zT/cnS0I28C4SyXWoWFzBl7xodFYOw2lGKxgedAG
yQwdRF3fiTUVFd2GD7tKdS9uyqh4kIaGxSP+U+lkahK8koNp2RU4yHbw1wIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFHOEH/XI6dWbospNGVf9rfHv1O6sMB8GA1UdIwQY
MBaAFMKXQJvCfFhD4rFqxnzbahVcL3P7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3BkQW04SjhXRVBpc1dyR2ZOdHFGVnd2Y19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jOGJmOGUtMTFhZC00NTllLWI3NjMt
NmMwMjhhNGQ4NWRhLzEvYzRRZjljanAxWnVpeWswWlZfMnQ4ZV9VN3F3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jOGJmOGUtMTFhZC00NTllLWI3NjMtNmMwMjhhNGQ4NWRh
LzEvd3BkQW04SjhXRVBpc1dyR2ZOdHFGVnd2Y19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAYBAIAATASAwQBW+8mAwQC
ucTQAwQCud1kMBYEAgACMBADBwAgAQZ8EcADBQMqCnJAMA0GCSqGSIb3DQEBCwUA
A4IBAQAx/tWiaWRN05JFY/7yR+StyKSrxk8ydAlsoU7dm7wDjVtD4cbWnqUG1Sc5
DOjLw9fQHMDXhFAMf2wIdB8/B0QHVxhYqtAIybTn2TUkfynO1167cYFLrHyQ8Qsk
86MiN2hDPO+nRtVC4dcl44T+XHBXLC+bwrPd9oTE64dW4qPqdBVl6CNaha8teY/t
dxBkMmeRZg+Sj/T2mY10xj5++2dPmHDTWHQ3Dx+KUK6je0Exn/XEiBqX94YgRCyJ
6g+wPCOdtWNlZBNY2IZ6oqF2tLObVm/M9TlrhkzYf9pUZiYHJ/5lC8uok+Np9m3N
vNuh406M8KooRzvD/qAhDTiDNBKJ
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:52:09 2026 by rpki-client