Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/7nT8XALHUuYGLw19lxws4CDKyCI.roa
File: 7nT8XALHUuYGLw19lxws4CDKyCI.roa (raw, json)
Hash identifier: W7vAi5uZI/nCWSVS2gW6IW3/NsxpF7bQkVhL7K1q/CI=
Subject key identifier: EE:74:FC:5C:02:C7:52:E6:06:2F:0D:7D:97:1C:2C:E0:20:CA:C8:22
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 01A01439CEB946E7E7E423E0BD3B5859E828
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/7nT8XALHUuYGLw19lxws4CDKyCI.roa
Signing time: Tue 18 Aug 2026 09:35:27 +0000
ROA not before: Tue 18 Aug 2026 09:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402151
IP address blocks: 109.229.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 06:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:39:ce:b9:46:e7:e7:e4:23:e0:bd:3b:58:59:e8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Aug 18 09:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee74fc5c02c752e6062f0d7d971c2ce020cac822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3a:38:68:6e:63:a2:26:6f:a2:f4:54:16:35:
d0:31:66:2e:2b:ce:2a:d1:6f:b0:4d:81:ee:28:ce:
df:e4:e7:85:c6:23:38:9d:b7:35:84:18:29:5c:57:
ce:1f:6f:c0:0d:80:6a:4b:19:c3:5d:ff:1f:1f:84:
1a:14:08:c6:23:9f:b0:57:56:e8:bc:71:f3:dc:17:
82:6c:4d:18:5b:9a:fd:e2:0b:50:6c:ee:a8:ab:92:
97:a6:7f:6b:73:87:f3:ec:64:c5:db:4e:fa:b5:d8:
8c:4c:a0:84:02:72:bb:c0:d1:a9:f8:ea:32:77:43:
cc:1b:7f:23:97:77:bd:0d:ef:2a:28:77:4f:76:e1:
d5:1c:66:1b:e2:64:e2:d0:0d:f7:a4:9d:c9:0d:f9:
77:4f:60:88:13:ff:97:51:a2:45:ad:39:92:44:1f:
71:7c:65:81:56:2b:5c:ab:3c:ee:2e:02:0e:2d:ef:
81:20:33:9e:9e:7d:12:9a:ec:68:87:50:a7:d6:2f:
4b:32:01:1b:44:e0:34:19:f7:21:80:18:d4:b7:0b:
f0:69:52:3f:64:9f:b0:8b:d9:4f:c3:26:d1:a1:2b:
67:99:0f:55:4a:ce:d4:93:06:a8:64:fe:f7:05:2e:
56:c7:f1:41:46:12:1a:10:8f:9c:ed:a7:81:23:79:
a6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:74:FC:5C:02:C7:52:E6:06:2F:0D:7D:97:1C:2C:E0:20:CA:C8:22
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/7nT8XALHUuYGLw19lxws4CDKyCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.229.216.0/23
Signature Algorithm: sha256WithRSAEncryption
51:a6:35:a8:d7:99:5d:9f:d5:74:98:7f:bf:5a:54:41:59:00:
8a:c8:16:9a:9b:38:bb:7b:0c:0d:c4:36:9a:69:39:fd:de:1b:
cb:ca:16:04:7c:0e:b4:c7:df:44:3c:be:b2:81:cb:12:f2:4a:
14:b6:df:03:59:c4:48:c0:38:07:90:9c:c2:40:cc:8b:0c:79:
e1:f7:85:04:03:e5:e5:a0:c7:98:43:92:8c:00:7c:2f:c9:50:
f0:cc:e7:c8:92:69:31:6c:9d:a7:b7:5c:78:ff:e8:f3:01:86:
16:19:6d:ed:b9:fa:e3:cc:4a:51:4c:55:42:2e:b3:d8:63:b3:
4b:76:d2:23:95:df:24:1d:a4:a3:25:7a:60:84:87:8b:08:90:
52:9f:b4:fb:95:f3:84:39:4e:a9:4d:d5:90:ef:5e:40:32:72:
8a:e6:84:fe:e8:f3:32:e6:ea:c1:62:c5:67:6f:c6:78:5f:b7:
03:10:dd:24:0b:02:9d:37:b2:48:30:29:8f:87:02:0a:00:e6:
9b:dc:96:a4:6c:46:76:cc:f3:e4:16:ca:61:09:7a:84:ff:39:
81:3f:5c:51:67:f5:8e:e3:3e:7d:2c:a4:29:8f:e8:94:c7:f6:
65:0d:f2:19:14:fc:89:e8:f4:7d:9d:c2:4d:7e:af:0f:b3:7b:
a9:29:1c:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAUOc65Rufn5CPgvTtYWegoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4
ZjY2Y2MwHhcNMjYwODE4MDkzNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTc0ZmM1YzAyYzc1MmU2MDYyZjBkN2Q5NzFjMmNlMDIwY2FjODIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjo4aG5joiZvovRUFjXQMWYuK84q
0W+wTYHuKM7f5OeFxiM4nbc1hBgpXFfOH2/ADYBqSxnDXf8fH4QaFAjGI5+wV1bo
vHHz3BeCbE0YW5r94gtQbO6oq5KXpn9rc4fz7GTF2076tdiMTKCEAnK7wNGp+Ooy
d0PMG38jl3e9De8qKHdPduHVHGYb4mTi0A33pJ3JDfl3T2CIE/+XUaJFrTmSRB9x
fGWBVitcqzzuLgIOLe+BIDOenn0Smuxoh1Cn1i9LMgEbROA0GfchgBjUtwvwaVI/
ZJ+wi9lPwybRoStnmQ9VSs7UkwaoZP73BS5Wx/FBRhIaEI+c7aeBI3mmEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO50/FwCx1LmBi8NfZccLOAgysgiMB8GA1UdIwQY
MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt
YTFiOTZiOWI3MGY4LzEvN25UOFhBTEhVdVlHTHcxOWx4d3M0Q0RLeUNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4
LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbeXYMA0G
CSqGSIb3DQEBCwUAA4IBAQBRpjWo15ldn9V0mH+/WlRBWQCKyBaamzi7ewwNxDaa
aTn93hvLyhYEfA60x99EPL6ygcsS8koUtt8DWcRIwDgHkJzCQMyLDHnh94UEA+Xl
oMeYQ5KMAHwvyVDwzOfIkmkxbJ2nt1x4/+jzAYYWGW3tufrjzEpRTFVCLrPYY7NL
dtIjld8kHaSjJXpghIeLCJBSn7T7lfOEOU6pTdWQ715AMnKK5oT+6PMy5urBYsVn
b8Z4X7cDEN0kCwKdN7JIMCmPhwIKAOab3JakbEZ2zPPkFsphCXqE/zmBP1xRZ/WO
4z59LKQpj+iUx/ZlDfIZFPyJ6PR9ncJNfq8Ps3upKRwe
-----END CERTIFICATE-----
Generated at Thu Aug 27 15:52:56 2026 by rpki-client