Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/Jq8tSpHCPm8aOvj5YR5spOyG0OQ.roa
File: Jq8tSpHCPm8aOvj5YR5spOyG0OQ.roa (raw, json)
Hash identifier: Pn0S8DzQ2Xu0ldHpGgdexEjNKnZKArRFS5cB3kO/K54=
Subject key identifier: 26:AF:2D:4A:91:C2:3E:6F:1A:3A:F8:F9:61:1E:6C:A4:EC:86:D0:E4
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01A0ADE0985273934F775B3D0A0507CEAD74
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/Jq8tSpHCPm8aOvj5YR5spOyG0OQ.roa
Signing time: Thu 17 Sep 2026 05:39:32 +0000
ROA not before: Thu 17 Sep 2026 05:39:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.23.93.0/24 maxlen: 24
178.254.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 19:51:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ad:e0:98:52:73:93:4f:77:5b:3d:0a:05:07:ce:ad:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Sep 17 05:39:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26af2d4a91c23e6f1a3af8f9611e6ca4ec86d0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2a:d7:ae:16:9c:75:24:5f:76:b7:51:3a:15:
e3:4c:ab:aa:a8:ca:3a:63:09:22:b0:e9:b5:11:b0:
8e:9f:b3:d5:c0:ca:94:fe:e6:3c:f8:32:a1:67:52:
71:7b:69:4c:cf:e6:b5:06:15:fa:01:90:d6:ed:f0:
2a:43:1d:c3:a6:f2:74:9a:6b:c2:ca:90:bc:1e:66:
02:b0:92:73:07:b0:a2:83:c3:f8:ff:49:a8:57:1c:
fd:9f:df:6f:61:83:da:db:d2:af:c3:cb:96:2f:6e:
90:00:17:1c:14:ba:8f:28:cb:79:20:53:0c:9e:00:
99:0c:51:ea:f3:7d:b2:9f:fc:4a:2f:f3:36:bc:c6:
e1:c0:65:48:7b:8b:52:63:04:61:3e:1d:d7:29:b2:
36:dd:dd:5c:6b:5a:c1:2b:1d:11:d7:87:c9:14:71:
6e:93:ae:73:25:e1:ba:12:fb:e8:ef:20:43:42:db:
07:73:ba:98:68:f8:96:82:78:27:bc:b7:82:47:c1:
a0:d8:96:5d:0b:db:86:73:fb:3b:3d:9f:9d:b9:78:
da:c7:26:2c:d8:c0:56:ba:84:0e:80:b1:aa:46:df:
04:b5:70:67:eb:9e:20:c8:f3:f3:32:11:46:5b:2b:
b8:cd:c1:20:9e:1f:8b:16:5c:48:ca:6e:80:41:d2:
f9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AF:2D:4A:91:C2:3E:6F:1A:3A:F8:F9:61:1E:6C:A4:EC:86:D0:E4
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/Jq8tSpHCPm8aOvj5YR5spOyG0OQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.93.0/24
178.254.178.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:0a:b0:e8:71:45:63:44:58:bc:52:66:2d:85:9f:4a:88:27:
5d:31:a6:0e:80:8b:83:a0:d9:cf:86:07:cd:d6:e8:ef:0f:a5:
b4:9e:c9:2b:df:34:20:fb:e4:88:a6:7a:e4:56:cb:e4:63:4e:
d0:82:34:70:a1:ba:87:65:13:98:fe:6e:50:63:9b:18:d3:ae:
6e:ad:aa:32:86:6f:21:3f:16:64:e5:cc:e3:ce:36:f5:10:23:
ce:28:03:b7:ac:01:82:50:63:c9:11:33:e4:bc:20:6e:cb:4d:
e2:43:22:3d:d9:39:02:dc:77:bb:b6:2d:b4:9c:43:f3:9c:f1:
9a:79:66:fd:37:37:dc:72:bb:a7:57:88:33:00:b8:84:3f:e2:
02:f4:92:69:c5:74:f6:e1:30:25:0f:b7:d2:2a:65:6e:fe:ad:
77:51:f0:23:6e:f8:90:18:dc:a9:17:9f:12:4d:22:f4:5a:d0:
76:15:02:2f:96:d1:d0:98:cb:79:5b:7c:09:79:ef:b0:ee:41:
d9:a2:27:44:43:3b:2a:09:34:75:00:c4:12:d3:44:4e:12:a2:
9d:8e:e8:a6:e1:ee:f7:30:df:48:09:33:68:a1:63:f8:91:f3:
38:68:54:06:08:4e:a7:ba:f7:d2:22:51:b3:b1:c6:7f:2f:e2:
03:7a:eb:7f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCt4JhSc5NPd1s9CgUHzq10MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk
OWNlMTYwHhcNMjYwOTE3MDUzOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmFmMmQ0YTkxYzIzZTZmMWEzYWY4Zjk2MTFlNmNhNGVjODZkMGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCrXrhacdSRfdrdROhXjTKuqqMo6
YwkisOm1EbCOn7PVwMqU/uY8+DKhZ1Jxe2lMz+a1BhX6AZDW7fAqQx3DpvJ0mmvC
ypC8HmYCsJJzB7Cig8P4/0moVxz9n99vYYPa29Kvw8uWL26QABccFLqPKMt5IFMM
ngCZDFHq832yn/xKL/M2vMbhwGVIe4tSYwRhPh3XKbI23d1ca1rBKx0R14fJFHFu
k65zJeG6Evvo7yBDQtsHc7qYaPiWgngnvLeCR8Gg2JZdC9uGc/s7PZ+duXjaxyYs
2MBWuoQOgLGqRt8EtXBn654gyPPzMhFGWyu4zcEgnh+LFlxIym6AQdL5nQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCavLUqRwj5vGjr4+WEebKTshtDkMB8GA1UdIwQY
MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt
MGY2NmMxODg3OTE2LzEvSnE4dFNwSENQbThhT3ZqNVlSNXNwT3lHME9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2
LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWRddAwQA
sv6yMA0GCSqGSIb3DQEBCwUAA4IBAQAqCrDocUVjRFi8UmYthZ9KiCddMaYOgIuD
oNnPhgfN1ujvD6W0nskr3zQg++SIpnrkVsvkY07QgjRwobqHZROY/m5QY5sY065u
raoyhm8hPxZk5czjzjb1ECPOKAO3rAGCUGPJETPkvCBuy03iQyI92TkC3He7ti20
nEPznPGaeWb9NzfccrunV4gzALiEP+IC9JJpxXT24TAlD7fSKmVu/q13UfAjbviQ
GNypF58STSL0WtB2FQIvltHQmMt5W3wJee+w7kHZoidEQzsqCTR1AMQS00ROEqKd
juim4e73MN9ICTNooWP4kfM4aFQGCE6nuvfSIlGzscZ/L+IDeut/
-----END CERTIFICATE-----
Generated at Fri Sep 18 05:22:58 2026 by rpki-client