Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/9M7uavtWIIeK75nWGIqSww27GsQ.roa
File: 9M7uavtWIIeK75nWGIqSww27GsQ.roa (raw, json)
Hash identifier: 55M7B1ssCxaoIh3tg4zSC62U7RhQQq9EuG7C8vfLirM=
Subject key identifier: F4:CE:EE:6A:FB:56:20:87:8A:EF:99:D6:18:8A:92:C3:0D:BB:1A:C4
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039824E32AD9FC38E5760586ABA95732C
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/9M7uavtWIIeK75nWGIqSww27GsQ.roa
Signing time: Tue 25 Aug 2026 15:20:35 +0000
ROA not before: Tue 25 Aug 2026 15:20:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207121
IP address blocks: 193.38.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:4e:32:ad:9f:c3:8e:57:60:58:6a:ba:95:73:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4ceee6afb5620878aef99d6188a92c30dbb1ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:6a:a3:8e:de:0e:57:1d:22:61:ad:76:1e:
c8:02:75:a9:7c:be:02:6e:79:56:f0:7a:9e:05:8e:
ba:ca:8f:09:1c:56:92:2e:9f:5e:43:16:d4:c9:4e:
cc:59:d4:3c:9e:7f:20:4f:8a:25:97:cc:c8:6b:0a:
27:9b:9c:61:e5:d6:31:86:6c:02:0c:6f:67:1c:14:
81:92:9e:8d:64:ab:cd:2b:3f:64:87:59:23:35:11:
53:d8:62:4b:9b:ac:92:6a:49:2a:c8:7f:3e:fd:a8:
d1:f2:b0:0b:f3:7e:eb:09:d2:38:cd:29:fe:5b:be:
71:9d:2f:68:b7:aa:7e:13:b1:29:52:b5:6d:68:8b:
57:6e:ee:c7:4b:26:60:49:06:10:81:46:fb:a4:c1:
14:4d:1c:f7:af:b0:f5:2a:fc:83:53:9a:af:7d:da:
77:a8:67:c1:0d:ce:de:fb:a0:39:4d:f8:48:1d:34:
87:aa:39:8e:11:32:dd:ac:9e:c4:4d:76:e5:a1:f7:
78:5a:58:a0:41:5c:c5:17:eb:8d:aa:9c:65:67:f2:
ca:f3:fc:50:4d:98:bd:b7:e1:62:d5:e4:e2:ca:dc:
21:0c:fd:9c:83:d8:98:e6:d5:5b:c0:17:20:5e:ce:
f1:6b:84:c8:22:9f:19:e5:55:c2:bf:eb:6c:69:41:
cb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CE:EE:6A:FB:56:20:87:8A:EF:99:D6:18:8A:92:C3:0D:BB:1A:C4
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/9M7uavtWIIeK75nWGIqSww27GsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.46.0/24
Signature Algorithm: sha256WithRSAEncryption
61:35:89:4e:f5:df:da:32:96:13:b9:f6:d2:61:59:4a:13:91:
d8:42:5e:a4:9f:29:ec:37:bd:b1:eb:0c:aa:fa:58:2d:00:b9:
e8:c3:2e:d9:9f:cf:b0:1c:f3:56:54:e8:1b:f6:24:4c:9b:81:
f1:3b:ea:ed:60:24:d4:d4:db:47:a7:2b:72:f7:21:a9:53:11:
72:34:c0:59:9b:87:d2:d3:14:7e:f1:a4:11:f5:99:d9:9d:9f:
56:22:c6:0c:6a:84:dc:61:bc:10:29:7b:d4:6a:5c:1c:9c:92:
72:5b:f5:da:44:79:ca:10:d4:f8:df:b0:94:73:70:0b:4f:90:
a7:be:88:8c:7b:2a:79:6d:63:4d:0e:99:d2:e5:76:50:07:b0:
ec:8d:59:fc:84:f0:1e:05:b2:28:43:9c:ca:02:cf:1a:49:5e:
ea:61:7e:96:fc:cc:08:bf:1e:c7:9f:4a:74:7b:04:e6:db:5c:
93:6e:ea:72:10:d2:af:f8:27:ca:6d:16:3d:d6:76:c2:5d:43:
06:af:2f:ec:9e:be:09:be:3e:b3:28:8e:42:56:af:e9:ac:34:
f5:26:56:6b:c9:04:8c:38:0b:36:6d:3b:f7:a3:38:6b:fe:d9:
5e:9a:18:90:db:93:81:d1:a3:c2:d5:d2:f5:62:53:85:1b:1f:
0f:45:48:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA5gk4yrZ/DjldgWGq6lXMsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYwODI1MTUyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGNlZWU2YWZiNTYyMDg3OGFlZjk5ZDYxODhhOTJjMzBkYmIxYWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZRqo47eDlcdImGtdh7IAnWpfL4C
bnlW8HqeBY66yo8JHFaSLp9eQxbUyU7MWdQ8nn8gT4oll8zIawonm5xh5dYxhmwC
DG9nHBSBkp6NZKvNKz9kh1kjNRFT2GJLm6ySakkqyH8+/ajR8rAL837rCdI4zSn+
W75xnS9ot6p+E7EpUrVtaItXbu7HSyZgSQYQgUb7pMEUTRz3r7D1KvyDU5qvfdp3
qGfBDc7e+6A5TfhIHTSHqjmOETLdrJ7ETXblofd4WligQVzFF+uNqpxlZ/LK8/xQ
TZi9t+Fi1eTiytwhDP2cg9iY5tVbwBcgXs7xa4TIIp8Z5VXCv+tsaUHL2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPTO7mr7ViCHiu+Z1hiKksMNuxrEMB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvOU03dWF2dFdJSWVLNzVuV0dJcVN3dzI3R3NRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSYuMA0G
CSqGSIb3DQEBCwUAA4IBAQBhNYlO9d/aMpYTufbSYVlKE5HYQl6knynsN72x6wyq
+lgtALnowy7Zn8+wHPNWVOgb9iRMm4HxO+rtYCTU1NtHpyty9yGpUxFyNMBZm4fS
0xR+8aQR9ZnZnZ9WIsYMaoTcYbwQKXvUalwcnJJyW/XaRHnKENT437CUc3ALT5Cn
voiMeyp5bWNNDpnS5XZQB7DsjVn8hPAeBbIoQ5zKAs8aSV7qYX6W/MwIvx7Hn0p0
ewTm21yTbupyENKv+CfKbRY91nbCXUMGry/snr4Jvj6zKI5CVq/prDT1JlZryQSM
OAs2bTv3ozhr/tlemhiQ25OB0aPC1dL1YlOFGx8PRUiK
-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:52 2026 by rpki-client