Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/AuCsa89iuYaLVAW-p74YRDf9z-g.roa
File: AuCsa89iuYaLVAW-p74YRDf9z-g.roa (raw, json)
Hash identifier: 6v+ocE4bgTY3ojTY1zPl5Q/QHvA7Jiy2d14yNwi0ioo=
Subject key identifier: 02:E0:AC:6B:CF:62:B9:86:8B:54:05:BE:A7:BE:18:44:37:FD:CF:E8
Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Certificate serial: 01A0A90365F4F251E3B247AFD1B930976A23
Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/AuCsa89iuYaLVAW-p74YRDf9z-g.roa
Signing time: Wed 16 Sep 2026 06:59:27 +0000
ROA not before: Wed 16 Sep 2026 06:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205089
IP address blocks: 141.0.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:03:65:f4:f2:51:e3:b2:47:af:d1:b9:30:97:6a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Validity
Not Before: Sep 16 06:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02e0ac6bcf62b9868b5405bea7be184437fdcfe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:85:fb:1f:6a:d1:79:09:86:d6:de:93:9a:
37:af:05:ba:dd:d9:c1:cf:25:1c:c9:f8:73:b5:ea:
52:6b:42:6d:6f:56:84:ea:85:df:7f:46:86:0f:5d:
fa:46:c6:0a:b7:18:9c:bd:1c:67:c4:4c:6d:43:27:
ba:41:55:8b:bf:50:3b:d9:bc:93:64:c2:30:08:af:
5c:ac:0c:67:64:0f:52:81:f6:fa:1e:38:f3:e8:6b:
2d:ab:3d:5c:4d:99:4a:53:f9:74:c3:fb:1f:c3:9a:
ea:2b:c3:c0:74:47:7a:fb:33:b6:16:91:60:2e:0a:
41:2b:5e:1c:bc:1f:a3:2e:5e:b9:6a:02:7a:da:33:
30:60:70:5e:81:b1:e6:06:ae:ee:bd:1c:6e:39:99:
c8:53:46:c4:89:b1:92:47:3d:e0:45:58:6b:df:0f:
16:45:95:ba:ea:68:36:fb:c1:aa:30:f2:3f:1c:e9:
b1:8e:91:80:04:4e:1b:ee:af:93:52:06:dd:8d:ea:
4c:e1:a3:6d:9a:f5:f5:f2:18:f9:54:89:1e:c7:a7:
92:0a:c8:44:75:d8:01:49:66:9e:e2:fe:cf:95:f9:
63:2a:03:07:7c:68:1c:f8:18:9d:2d:52:ae:ea:09:
7c:58:da:b4:bd:7e:f9:ec:ef:64:07:96:13:a7:0a:
d9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E0:AC:6B:CF:62:B9:86:8B:54:05:BE:A7:BE:18:44:37:FD:CF:E8
X509v3 Authority Key Identifier:
keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/AuCsa89iuYaLVAW-p74YRDf9z-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.0.187.0/24
Signature Algorithm: sha256WithRSAEncryption
18:b4:12:d6:1c:1b:73:7b:67:a6:1b:3a:e8:3b:fa:31:3e:1d:
14:9c:e5:f5:e5:5b:08:6d:7b:14:d3:a4:f1:9f:f2:35:66:c9:
ab:a0:05:e4:b5:ce:ae:5d:44:54:e8:94:01:6e:d2:3c:7e:62:
7d:e6:a7:69:6c:b6:1e:d2:25:ef:6d:3b:f8:09:f5:60:5c:14:
ba:b0:7c:75:8d:4c:4c:a1:7f:17:7f:94:df:e9:24:b7:a2:44:
95:95:db:c2:ce:b6:de:94:b5:57:14:38:77:4e:5e:7d:0f:9a:
45:f5:c9:eb:ac:4b:a6:f5:64:6c:96:a1:6d:54:08:b9:17:97:
b3:07:f0:fa:90:21:ba:01:3d:f9:d1:30:0c:01:53:19:dc:b5:
54:cc:d4:a4:cc:2d:62:3e:5d:5c:f9:b3:dc:db:a2:50:c8:04:
e0:9e:3d:f0:73:69:72:41:00:75:d2:5e:b9:f6:6f:a6:92:fc:
1c:7e:01:9e:e4:11:a1:eb:54:35:c6:b4:1f:e0:34:8b:4b:0b:
c8:7b:5e:2c:45:93:62:00:bb:9a:e4:d5:18:ab:fd:71:78:c7:
10:25:79:77:3f:2c:c8:2f:75:c9:67:5b:a8:15:65:68:6d:b5:
cb:f0:d2:51:c2:c3:45:04:63:d0:ca:18:c7:1f:f7:5f:56:5b:
54:fe:94:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCpA2X08lHjskev0bkwl2ojMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZDgwMjUxMmNjYjc0NWIyYTFiOGYzMTU3MTRlYmUzOTM5
NTQwM2UwHhcNMjYwOTE2MDY1OTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmUwYWM2YmNmNjJiOTg2OGI1NDA1YmVhN2JlMTg0NDM3ZmRjZmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIiF+x9q0XkJhtbek5o3rwW63dnB
zyUcyfhztepSa0Jtb1aE6oXff0aGD136RsYKtxicvRxnxExtQye6QVWLv1A72byT
ZMIwCK9crAxnZA9Sgfb6Hjjz6Gstqz1cTZlKU/l0w/sfw5rqK8PAdEd6+zO2FpFg
LgpBK14cvB+jLl65agJ62jMwYHBegbHmBq7uvRxuOZnIU0bEibGSRz3gRVhr3w8W
RZW66mg2+8GqMPI/HOmxjpGABE4b7q+TUgbdjepM4aNtmvX18hj5VIkex6eSCshE
ddgBSWae4v7PlfljKgMHfGgc+BidLVKu6gl8WNq0vX757O9kB5YTpwrZ3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFALgrGvPYrmGi1QFvqe+GEQ3/c/oMB8GA1UdIwQY
MBaAFIzYAlEsy3RbKhuPMVcU6+OTlUA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZDg5M2EtNWIxYS00ZDcwLTllYmIt
MzhlMDY4NTM2ZTZiLzEvQXVDc2E4OWl1WWFMVkFXLXA3NFlSRGY5ei1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8zZDg5M2EtNWIxYS00ZDcwLTllYmItMzhlMDY4NTM2ZTZi
LzEvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQC7MA0G
CSqGSIb3DQEBCwUAA4IBAQAYtBLWHBtze2emGzroO/oxPh0UnOX15VsIbXsU06Tx
n/I1ZsmroAXktc6uXURU6JQBbtI8fmJ95qdpbLYe0iXvbTv4CfVgXBS6sHx1jUxM
oX8Xf5Tf6SS3okSVldvCzrbelLVXFDh3Tl59D5pF9cnrrEum9WRslqFtVAi5F5ez
B/D6kCG6AT350TAMAVMZ3LVUzNSkzC1iPl1c+bPc26JQyATgnj3wc2lyQQB10l65
9m+mkvwcfgGe5BGh61Q1xrQf4DSLSwvIe14sRZNiALua5NUYq/1xeMcQJXl3PyzI
L3XJZ1uoFWVobbXL8NJRwsNFBGPQyhjHH/dfVltU/pQ5
-----END CERTIFICATE-----
Generated at Fri Sep 18 18:33:43 2026 by rpki-client