Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/pvqnTAmZTCtaDIGRIJLpV3RVRq8.roa
File: pvqnTAmZTCtaDIGRIJLpV3RVRq8.roa (raw, json)
Hash identifier: ELaRN/1CLckouMuTm/tPdmNa5GWM0lES+K7y8P8juTs=
Subject key identifier: A6:FA:A7:4C:09:99:4C:2B:5A:0C:81:91:20:92:E9:57:74:55:46:AF
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 019FAE4EE8D44DD778F6136371BE1B65972B
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/pvqnTAmZTCtaDIGRIJLpV3RVRq8.roa
Signing time: Wed 29 Jul 2026 14:37:14 +0000
ROA not before: Wed 29 Jul 2026 14:37:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4766
IP address blocks: 109.229.220.0/23 maxlen: 24
195.3.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:4e:e8:d4:4d:d7:78:f6:13:63:71:be:1b:65:97:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jul 29 14:37:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6faa74c09994c2b5a0c81912092e957745546af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:71:7c:9c:e7:50:be:e7:03:d9:f3:3d:c2:22:
7c:d8:49:4b:6a:03:8b:75:58:da:28:6b:e4:c4:84:
7f:a3:b8:07:bd:9b:1f:ce:7e:1c:78:d3:41:ec:2a:
f8:a2:5c:0c:ce:5c:87:ff:d5:e0:f9:06:2d:05:d1:
a3:71:ef:0b:e0:56:cc:68:a8:21:ae:00:71:b6:4d:
c5:46:d4:14:58:79:62:80:42:ef:72:8b:ec:6d:b4:
eb:ed:b9:70:df:53:2a:30:00:c2:5c:9a:91:a0:9f:
89:04:53:27:67:c2:d4:0f:a9:94:9b:77:7f:dc:b1:
5f:f9:89:17:2f:4b:91:c9:7e:5a:bb:ff:65:45:6d:
a9:fe:5f:db:52:a4:8e:85:f1:b3:31:f6:18:98:32:
89:af:41:d6:fe:36:aa:7e:25:74:36:7e:59:e2:59:
ac:a5:0c:bb:86:86:88:2b:b0:09:55:44:4f:18:f9:
37:d9:1b:32:93:1c:92:20:b5:9a:da:24:1a:d8:d0:
c8:8b:d8:49:18:02:54:9a:84:92:90:a2:a7:3a:2c:
52:65:ea:9a:82:79:ab:5f:86:96:c7:23:d9:44:07:
6a:41:eb:64:ac:8b:40:65:3f:16:f4:75:1e:a6:87:
71:9b:91:c1:1d:78:f6:fb:ea:3c:60:a2:f2:e8:fc:
0a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FA:A7:4C:09:99:4C:2B:5A:0C:81:91:20:92:E9:57:74:55:46:AF
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/pvqnTAmZTCtaDIGRIJLpV3RVRq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.229.220.0/23
195.3.144.0/23
Signature Algorithm: sha256WithRSAEncryption
04:86:3b:0b:08:2c:cb:6e:73:11:0b:d0:f3:39:cf:5e:23:df:
4c:43:69:23:a2:11:d3:6e:e8:a3:a6:56:0d:cd:92:e9:27:04:
b0:a3:5c:a7:2b:b3:d8:b3:8a:3b:de:a9:e5:51:f8:ae:75:f3:
d0:d9:1c:30:27:25:e6:e0:59:51:8e:4e:2e:11:b2:89:23:cd:
1e:43:ea:24:46:ae:41:04:ef:c6:84:fa:d3:31:3d:d6:f5:2b:
25:a0:16:a0:a8:1a:4f:55:6e:68:d0:f5:69:55:8e:44:8c:b7:
d5:ad:57:05:76:a5:38:2f:49:c2:2f:e3:19:51:4f:40:31:42:
3f:16:88:be:bf:63:6b:90:1c:ed:90:00:ce:4f:8d:05:55:7f:
6d:c1:87:fc:7b:fc:36:88:af:3f:99:70:34:20:ae:26:a1:3f:
ab:55:a6:94:ed:ac:1d:06:85:a7:69:c1:74:ee:a8:69:5d:ac:
9d:40:81:3a:07:17:fd:74:e7:7b:b7:78:3d:d9:0a:a6:fb:01:
e7:0e:66:af:f1:d5:2e:e3:d9:b4:fb:aa:e4:5b:3d:11:f2:e9:
92:77:07:de:8e:64:1f:45:8d:cf:a4:b4:87:5f:ec:81:01:17:
cf:c2:6c:33:8e:c6:a9:f6:82:a3:e9:34:51:78:7e:85:04:5a:
e3:5d:f8:bf
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ+uTujUTdd49hNjcb4bZZcrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4
ZjY2Y2MwHhcNMjYwNzI5MTQzNzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmZhYTc0YzA5OTk0YzJiNWEwYzgxOTEyMDkyZTk1Nzc0NTU0NmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XF8nOdQvucD2fM9wiJ82ElLagOL
dVjaKGvkxIR/o7gHvZsfzn4ceNNB7Cr4olwMzlyH/9Xg+QYtBdGjce8L4FbMaKgh
rgBxtk3FRtQUWHligELvcovsbbTr7blw31MqMADCXJqRoJ+JBFMnZ8LUD6mUm3d/
3LFf+YkXL0uRyX5au/9lRW2p/l/bUqSOhfGzMfYYmDKJr0HW/jaqfiV0Nn5Z4lms
pQy7hoaIK7AJVURPGPk32RsykxySILWa2iQa2NDIi9hJGAJUmoSSkKKnOixSZeqa
gnmrX4aWxyPZRAdqQetkrItAZT8W9HUepodxm5HBHXj2++o8YKLy6PwKAwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKb6p0wJmUwrWgyBkSCS6Vd0VUavMB8GA1UdIwQY
MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt
YTFiOTZiOWI3MGY4LzEvcHZxblRBbVpUQ3RhRElHUklKTHBWM1JWUnE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4
LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBbeXcAwQB
wwOQMA0GCSqGSIb3DQEBCwUAA4IBAQAEhjsLCCzLbnMRC9DzOc9eI99MQ2kjohHT
buijplYNzZLpJwSwo1ynK7PYs4o73qnlUfiudfPQ2RwwJyXm4FlRjk4uEbKJI80e
Q+okRq5BBO/GhPrTMT3W9SsloBagqBpPVW5o0PVpVY5EjLfVrVcFdqU4L0nCL+MZ
UU9AMUI/Foi+v2NrkBztkADOT40FVX9twYf8e/w2iK8/mXA0IK4moT+rVaaU7awd
BoWnacF07qhpXaydQIE6Bxf9dOd7t3g92Qqm+wHnDmav8dUu49m0+6rkWz0R8umS
dwfejmQfRY3PpLSHX+yBARfPwmwzjsap9oKj6TRReH6FBFrjXfi/
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:37 2026 by rpki-client