Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/m2JTyGp4X6-RsWcP55ddpkw-Hg0.roa
File: m2JTyGp4X6-RsWcP55ddpkw-Hg0.roa (raw, json)
Hash identifier: 4rgGHVodyolHBv2C9f3mYQBlduQorUGZxt4DTiTwjJY=
Subject key identifier: 9B:62:53:C8:6A:78:5F:AF:91:B1:67:0F:E7:97:5D:A6:4C:3E:1E:0D
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01A0AF14BEEE42C8E2AE21635F0E0358D105
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/m2JTyGp4X6-RsWcP55ddpkw-Hg0.roa
Signing time: Thu 17 Sep 2026 11:16:07 +0000
ROA not before: Thu 17 Sep 2026 11:16:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 109.111.34.0/23 maxlen: 24
109.111.40.0/23 maxlen: 24
109.111.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:14:be:ee:42:c8:e2:ae:21:63:5f:0e:03:58:d1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Sep 17 11:16:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b6253c86a785faf91b1670fe7975da64c3e1e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:16:a9:ec:6e:22:5c:8c:5c:55:a1:22:b8:97:
ec:76:f5:12:9d:c9:c6:c9:df:29:6c:3d:e3:21:a8:
9d:74:87:9a:e7:33:c0:87:e1:44:ee:ec:b7:f5:74:
80:fb:d2:df:b9:89:97:07:c1:d1:71:48:d7:6a:58:
56:61:3a:c0:e5:2d:77:f5:37:3e:da:c6:e5:4c:1e:
66:45:1b:37:74:d0:68:f1:3e:be:5f:43:77:e1:19:
93:51:fb:e2:80:c7:82:c1:a3:18:37:f0:8e:64:d3:
7b:96:8a:3d:2b:49:85:ac:63:f5:e0:9c:8e:26:06:
ad:bf:d9:a6:8b:b0:43:a1:30:5f:03:b7:ba:de:ea:
32:3f:41:10:50:25:e4:54:a4:01:19:ca:90:14:c6:
84:b7:54:9a:a7:33:4f:5f:0c:2c:ec:6b:65:01:c0:
4c:3f:75:84:8e:d9:8e:56:49:42:c2:19:ff:c2:d8:
e0:66:b5:5f:1e:20:96:9c:e7:54:99:54:eb:12:bc:
c9:dc:15:9b:48:5b:6a:42:38:b1:34:6d:a7:d7:32:
4b:2b:16:45:ac:f6:77:0d:86:b1:77:51:28:87:d0:
ab:c7:33:85:29:6e:af:e7:2f:a4:e8:0c:e0:90:3e:
3e:8f:3b:83:df:24:6c:92:5c:4e:fc:94:94:c0:b9:
d7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:62:53:C8:6A:78:5F:AF:91:B1:67:0F:E7:97:5D:A6:4C:3E:1E:0D
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/m2JTyGp4X6-RsWcP55ddpkw-Hg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.34.0/23
109.111.40.0/23
109.111.48.0/23
Signature Algorithm: sha256WithRSAEncryption
97:40:b9:60:cf:7c:fe:28:f2:a6:e5:65:53:96:10:58:76:cd:
c0:a1:af:a4:b5:2a:52:b3:fe:b4:5c:7f:b1:d4:2c:92:dd:e8:
c6:cc:51:21:73:b1:4c:44:62:7b:a7:d2:10:cd:d8:35:af:21:
96:31:12:19:5a:f7:e1:74:b4:c3:c5:83:d3:69:2b:38:88:90:
98:f9:09:52:04:0b:b4:2e:bb:72:98:fc:92:56:e5:ea:25:41:
61:7f:42:fc:19:10:56:ef:45:6c:a4:fd:a2:1b:1b:eb:54:b1:
ce:4f:12:dd:13:ec:18:94:64:fd:94:68:86:ae:96:b6:30:42:
6e:d4:38:cc:ac:33:0c:35:5a:bd:56:6c:19:d2:a4:53:ba:cf:
84:c5:fd:3d:04:03:71:9e:b1:c2:b3:3f:e9:4d:9b:0a:31:48:
b9:2c:2d:b0:65:a7:38:7e:6d:d1:a4:26:5f:4b:e3:0a:bb:90:
b7:d4:3f:54:31:b7:73:73:73:0d:6f:02:9e:52:d7:7a:85:40:
f9:91:31:fa:bd:9a:0d:0c:e1:7d:75:09:a3:80:6e:5c:8f:ce:
97:dd:a7:0a:2d:fa:d7:be:cc:a8:94:77:ae:f9:da:76:6f:2b:
f6:97:20:96:fe:c7:eb:ff:ec:56:c2:97:50:36:fe:65:21:25:
47:8b:ae:99
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaCvFL7uQsjiriFjXw4DWNEFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl
ZWNkYjYwHhcNMjYwOTE3MTExNjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjYyNTNjODZhNzg1ZmFmOTFiMTY3MGZlNzk3NWRhNjRjM2UxZTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBap7G4iXIxcVaEiuJfsdvUSncnG
yd8pbD3jIaiddIea5zPAh+FE7uy39XSA+9LfuYmXB8HRcUjXalhWYTrA5S139Tc+
2sblTB5mRRs3dNBo8T6+X0N34RmTUfvigMeCwaMYN/COZNN7loo9K0mFrGP14JyO
Jgatv9mmi7BDoTBfA7e63uoyP0EQUCXkVKQBGcqQFMaEt1SapzNPXwws7GtlAcBM
P3WEjtmOVklCwhn/wtjgZrVfHiCWnOdUmVTrErzJ3BWbSFtqQjixNG2n1zJLKxZF
rPZ3DYaxd1Eoh9CrxzOFKW6v5y+k6AzgkD4+jzuD3yRsklxO/JSUwLnXLQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJtiU8hqeF+vkbFnD+eXXaZMPh4NMB8GA1UdIwQY
MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt
NjY0NTc3MjRjMmQzLzEvbTJKVHlHcDRYNi1Sc1djUDU1ZGRwa3ctSGcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz
LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBbW8iAwQB
bW8oAwQBbW8wMA0GCSqGSIb3DQEBCwUAA4IBAQCXQLlgz3z+KPKm5WVTlhBYds3A
oa+ktSpSs/60XH+x1CyS3ejGzFEhc7FMRGJ7p9IQzdg1ryGWMRIZWvfhdLTDxYPT
aSs4iJCY+QlSBAu0LrtymPySVuXqJUFhf0L8GRBW70VspP2iGxvrVLHOTxLdE+wY
lGT9lGiGrpa2MEJu1DjMrDMMNVq9VmwZ0qRTus+Exf09BANxnrHCsz/pTZsKMUi5
LC2wZac4fm3RpCZfS+MKu5C31D9UMbdzc3MNbwKeUtd6hUD5kTH6vZoNDOF9dQmj
gG5cj86X3acKLfrXvsyolHeu+dp2byv2lyCW/sfr/+xWwpdQNv5lISVHi66Z
-----END CERTIFICATE-----
Generated at Fri Sep 18 01:29:49 2026 by rpki-client