Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/TaUt_QbnT12Cj0MJDAhR-kF-PEw.roa
File: TaUt_QbnT12Cj0MJDAhR-kF-PEw.roa (raw, json)
Hash identifier: zEveZ5gOVczcVTnDPyLcGk6kCF01sibDnDEggCPZLVo=
Subject key identifier: 4D:A5:2D:FD:06:E7:4F:5D:82:8F:43:09:0C:08:51:FA:41:7E:3C:4C
Certificate issuer: /CN=9ba94bc14937bb0b3632374355a446724104a981
Certificate serial: 019FBD6C8C141B39F5DE01F74EDB0C42D060
Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/TaUt_QbnT12Cj0MJDAhR-kF-PEw.roa
Signing time: Sat 01 Aug 2026 13:03:55 +0000
ROA not before: Sat 01 Aug 2026 13:03:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208949
IP address blocks: 193.151.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bd:6c:8c:14:1b:39:f5:de:01:f7:4e:db:0c:42:d0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981
Validity
Not Before: Aug 1 13:03:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4da52dfd06e74f5d828f43090c0851fa417e3c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3c:ad:26:95:24:fe:5e:1c:dd:b6:24:66:11:
7d:2c:1a:f8:a0:56:ee:4d:c9:e6:da:7d:2f:8e:90:
22:61:c1:a6:71:ef:ec:06:fa:3e:9a:02:42:b4:1b:
50:17:d8:ff:72:c9:16:86:5a:8f:de:2f:bc:ec:da:
b7:18:e0:5c:25:78:00:29:02:c3:0a:25:f8:2b:49:
59:bd:91:d1:8d:8f:8a:cb:1d:63:00:53:a5:a3:28:
41:ef:a9:d8:fe:85:04:2b:04:5c:99:2c:07:95:1f:
f0:1c:2f:f4:a4:5d:a4:90:94:5f:ac:c4:46:e4:04:
f9:e8:07:4d:05:a5:c7:b6:cc:40:db:ae:4e:0c:5b:
cc:b2:4d:c2:8f:a0:0c:b0:cb:8a:5e:b5:a7:75:38:
99:44:0e:12:55:35:02:25:8f:dc:41:a3:62:c9:15:
f4:b5:e6:a2:be:70:5b:e9:10:08:bb:df:d4:c2:e7:
9e:88:31:4e:93:1e:bb:59:19:f0:c9:63:6d:a9:22:
83:7b:d3:59:a2:89:44:4f:10:e6:6a:8b:dd:ed:74:
10:c5:d1:43:f7:87:f4:91:2e:39:e6:87:dd:fd:b8:
01:f3:4b:e5:12:43:f8:24:f7:93:2b:1e:fd:55:a4:
13:bf:43:58:55:72:a4:55:d7:ee:4d:2a:2f:56:b2:
23:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A5:2D:FD:06:E7:4F:5D:82:8F:43:09:0C:08:51:FA:41:7E:3C:4C
X509v3 Authority Key Identifier:
keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/TaUt_QbnT12Cj0MJDAhR-kF-PEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.109.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:da:1b:09:29:44:10:3c:23:cb:8b:cb:bf:0a:95:be:5c:95:
2b:d7:ce:39:0c:40:b8:da:dd:6a:1a:d8:1b:a9:84:19:a5:b7:
d4:27:53:61:e6:0e:19:d8:45:f7:a6:7c:0f:1e:bb:8e:3e:20:
22:bd:11:2f:13:33:f8:9e:ed:6f:66:34:a0:b8:75:d3:ef:16:
9b:8b:58:9d:6f:52:40:ae:d7:9d:9d:39:d6:1a:ed:f8:0f:e8:
b6:56:02:a3:ca:04:f7:c6:fb:cf:7d:64:a3:76:0c:23:03:79:
f9:84:01:b2:ae:f2:d5:e7:0b:f3:6f:45:0a:0c:a0:69:7f:73:
08:dc:a6:29:da:10:02:45:23:ab:00:48:d1:aa:04:53:90:83:
c9:20:af:0b:e9:e5:e4:c4:10:77:3f:31:13:75:8a:bb:84:93:
c2:a6:ba:11:d5:45:2a:40:18:08:70:9f:b8:1f:9f:58:8c:73:
94:a0:4b:70:68:02:90:cb:5f:10:89:9f:fa:88:3a:3d:77:36:
01:4f:8b:27:63:f9:fa:39:e6:f2:e0:21:22:e9:0d:7c:b5:3b:
39:ad:1d:36:e8:88:11:75:5f:cf:11:6a:74:5f:b5:4f:34:7f:
23:41:17:7f:c7:c4:0e:29:ad:d3:e1:ce:9d:be:91:8f:f2:7a:
31:ff:e8:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+9bIwUGzn13gH3TtsMQtBgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYTk0YmMxNDkzN2JiMGIzNjMyMzc0MzU1YTQ0NjcyNDEw
NGE5ODEwHhcNMjYwODAxMTMwMzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGE1MmRmZDA2ZTc0ZjVkODI4ZjQzMDkwYzA4NTFmYTQxN2UzYzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TytJpUk/l4c3bYkZhF9LBr4oFbu
Tcnm2n0vjpAiYcGmce/sBvo+mgJCtBtQF9j/cskWhlqP3i+87Nq3GOBcJXgAKQLD
CiX4K0lZvZHRjY+Kyx1jAFOloyhB76nY/oUEKwRcmSwHlR/wHC/0pF2kkJRfrMRG
5AT56AdNBaXHtsxA265ODFvMsk3Cj6AMsMuKXrWndTiZRA4SVTUCJY/cQaNiyRX0
teaivnBb6RAIu9/UwueeiDFOkx67WRnwyWNtqSKDe9NZoolETxDmaovd7XQQxdFD
94f0kS455ofd/bgB80vlEkP4JPeTKx79VaQTv0NYVXKkVdfuTSovVrIjiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE2lLf0G509dgo9DCQwIUfpBfjxMMB8GA1UdIwQY
MBaAFJupS8FJN7sLNjI3Q1WkRnJBBKmBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jYzc4NDMtZDEzNi00ZmZiLThiOTkt
ODM2YzMxMmFjOGMyLzEvVGFVdF9RYm5UMTJDajBNSkRBaFIta0YtUEV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jYzc4NDMtZDEzNi00ZmZiLThiOTktODM2YzMxMmFjOGMy
LzEvbTZsTHdVazN1d3MyTWpkRFZhUkdja0VFcVlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZdtMA0G
CSqGSIb3DQEBCwUAA4IBAQAd2hsJKUQQPCPLi8u/CpW+XJUr1845DEC42t1qGtgb
qYQZpbfUJ1Nh5g4Z2EX3pnwPHruOPiAivREvEzP4nu1vZjSguHXT7xabi1idb1JA
rtednTnWGu34D+i2VgKjygT3xvvPfWSjdgwjA3n5hAGyrvLV5wvzb0UKDKBpf3MI
3KYp2hACRSOrAEjRqgRTkIPJIK8L6eXkxBB3PzETdYq7hJPCproR1UUqQBgIcJ+4
H59YjHOUoEtwaAKQy18QiZ/6iDo9dzYBT4snY/n6Oeby4CEi6Q18tTs5rR026IgR
dV/PEWp0X7VPNH8jQRd/x8QOKa3T4c6dvpGP8nox/+gg
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:47 2026 by rpki-client