Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/CMqg3OWl9Y4C5f8MEm60JHK3sZk.roa
File: CMqg3OWl9Y4C5f8MEm60JHK3sZk.roa (raw, json)
Hash identifier: x7w597JCJrIznBwM2ePcXZZJOgPD4hgH+TTkBP//0Qs=
Subject key identifier: 08:CA:A0:DC:E5:A5:F5:8E:02:E5:FF:0C:12:6E:B4:24:72:B7:B1:99
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0398241F8B5B8B00F54AD4E35312E629B
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/CMqg3OWl9Y4C5f8MEm60JHK3sZk.roa
Signing time: Tue 25 Aug 2026 15:20:32 +0000
ROA not before: Tue 25 Aug 2026 15:20:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197354
IP address blocks: 194.93.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:41:f8:b5:b8:b0:0f:54:ad:4e:35:31:2e:62:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08caa0dce5a5f58e02e5ff0c126eb42472b7b199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:eb:a0:de:b3:51:c1:f9:06:0a:e8:ea:5b:0a:
f0:7f:17:32:13:0a:51:db:a4:7e:01:1a:95:12:a5:
e7:c2:4a:4c:a4:e8:3c:c3:bf:01:f6:ae:4e:a9:fa:
59:79:02:68:29:9d:e6:03:fc:f7:1f:73:52:7c:f5:
26:d2:1e:99:a9:8e:82:cf:89:e8:86:33:47:c4:3b:
47:b5:ff:c0:e9:04:d1:11:d6:58:57:be:64:a2:6a:
51:69:5b:b7:e8:f8:97:89:c4:ee:d5:f2:54:b8:e5:
1c:c7:c4:95:90:f4:fe:e5:91:96:bb:84:0a:7c:0d:
4a:9d:34:4c:e3:9c:88:68:85:86:e3:38:d6:a5:8f:
91:ca:69:0b:21:62:59:e2:61:ac:6e:8a:6e:07:c7:
28:6f:94:9b:89:14:99:b3:f9:59:4f:c2:d9:ef:d3:
e6:e0:26:51:0e:0e:0c:0b:cb:d1:f2:ba:f0:20:90:
48:15:7b:91:96:5e:7e:49:e5:07:13:9e:a1:0e:ec:
14:ab:92:9c:d4:c0:86:c2:e4:ae:b6:ce:fd:4b:4b:
67:d8:0e:65:b5:39:a4:4f:d7:c3:b5:c3:90:62:9c:
5b:9c:57:b1:5b:b5:52:7c:52:a0:69:c3:cf:55:70:
da:ec:42:f3:1c:c6:21:ae:1f:e6:91:0e:d0:0b:db:
6a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CA:A0:DC:E5:A5:F5:8E:02:E5:FF:0C:12:6E:B4:24:72:B7:B1:99
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/CMqg3OWl9Y4C5f8MEm60JHK3sZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.63.0/24
Signature Algorithm: sha256WithRSAEncryption
31:64:dc:32:84:24:a0:4c:db:99:11:31:82:d9:b4:30:d0:18:
a0:4a:02:56:85:6d:a0:7c:dd:0f:50:2f:02:7e:3d:31:d7:5a:
dc:ac:ce:41:77:96:5c:5a:87:ff:37:77:0f:b3:f2:30:90:40:
82:f5:55:23:1e:b4:95:74:1a:f0:27:a1:5a:52:87:8e:ba:f5:
15:42:55:8f:a8:2a:c8:19:90:4e:33:99:a0:42:27:b1:82:f2:
fc:98:ef:23:06:9b:3b:9f:36:ba:5b:ed:3b:74:54:17:9b:8d:
c3:58:2c:d3:2a:a4:af:ff:7c:32:79:e1:7e:6f:e8:b0:74:dc:
42:56:8d:1a:fa:56:2d:5e:72:fb:e8:12:12:3c:5f:b0:ea:0b:
f9:92:cb:01:84:59:c0:2d:c2:d9:1f:ca:7f:63:25:07:16:67:
4e:ae:86:48:26:ae:99:7a:35:ab:a8:9c:4c:72:6a:85:9d:f9:
dd:74:63:12:8c:c3:ff:a7:35:58:d6:d0:f5:69:d5:97:12:79:
81:50:2c:21:e2:6e:4a:86:4b:14:52:3c:a7:ce:08:e0:25:34:
aa:5d:3b:72:d3:c7:44:19:b2:7a:12:aa:a3:07:b1:aa:ec:da:
69:95:6d:b1:32:af:d9:e5:72:20:46:df:f8:c0:e2:16:45:5b:
47:e4:75:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA5gkH4tbiwD1StTjUxLmKbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYwODI1MTUyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGNhYTBkY2U1YTVmNThlMDJlNWZmMGMxMjZlYjQyNDcyYjdiMTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOug3rNRwfkGCujqWwrwfxcyEwpR
26R+ARqVEqXnwkpMpOg8w78B9q5OqfpZeQJoKZ3mA/z3H3NSfPUm0h6ZqY6Cz4no
hjNHxDtHtf/A6QTREdZYV75kompRaVu36PiXicTu1fJUuOUcx8SVkPT+5ZGWu4QK
fA1KnTRM45yIaIWG4zjWpY+RymkLIWJZ4mGsbopuB8cob5SbiRSZs/lZT8LZ79Pm
4CZRDg4MC8vR8rrwIJBIFXuRll5+SeUHE56hDuwUq5Kc1MCGwuSuts79S0tn2A5l
tTmkT9fDtcOQYpxbnFexW7VSfFKgacPPVXDa7ELzHMYhrh/mkQ7QC9tq/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAjKoNzlpfWOAuX/DBJutCRyt7GZMB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvQ01xZzNPV2w5WTRDNWY4TUVtNjBKSEszc1prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwl0/MA0G
CSqGSIb3DQEBCwUAA4IBAQAxZNwyhCSgTNuZETGC2bQw0BigSgJWhW2gfN0PUC8C
fj0x11rcrM5Bd5ZcWof/N3cPs/IwkECC9VUjHrSVdBrwJ6FaUoeOuvUVQlWPqCrI
GZBOM5mgQiexgvL8mO8jBps7nza6W+07dFQXm43DWCzTKqSv/3wyeeF+b+iwdNxC
Vo0a+lYtXnL76BISPF+w6gv5kssBhFnALcLZH8p/YyUHFmdOroZIJq6ZejWrqJxM
cmqFnfnddGMSjMP/pzVY1tD1adWXEnmBUCwh4m5KhksUUjynzgjgJTSqXTty08dE
GbJ6EqqjB7Gq7NpplW2xMq/Z5XIgRt/4wOIWRVtH5HWw
-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:07 2026 by rpki-client