Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/9wwtrRgapHggpmafOoIRakXKgWA.roa
File: 9wwtrRgapHggpmafOoIRakXKgWA.roa (raw, json)
Hash identifier: 9XxZ7od9E/OVY/WT96L7AW+I7c7a65w9SdFXeI4vrKI=
Subject key identifier: F7:0C:2D:AD:18:1A:A4:78:20:A6:66:9F:3A:82:11:6A:45:CA:81:60
Certificate issuer: /CN=ee6f48fc8e6b5fd921de38057a14a0c098a8263b
Certificate serial: 019FD6431A33BB81B7F264EDB068D95460F7
Authority key identifier: EE:6F:48:FC:8E:6B:5F:D9:21:DE:38:05:7A:14:A0:C0:98:A8:26:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m9I_I5rX9kh3jgFehSgwJioJjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/9wwtrRgapHggpmafOoIRakXKgWA.roa
Signing time: Thu 06 Aug 2026 08:49:09 +0000
ROA not before: Thu 06 Aug 2026 08:49:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8426
IP address blocks: 194.15.218.0/24 maxlen: 24
194.127.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/7m9I_I5rX9kh3jgFehSgwJioJjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/7m9I_I5rX9kh3jgFehSgwJioJjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7m9I_I5rX9kh3jgFehSgwJioJjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:43:1a:33:bb:81:b7:f2:64:ed:b0:68:d9:54:60:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6f48fc8e6b5fd921de38057a14a0c098a8263b
Validity
Not Before: Aug 6 08:49:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f70c2dad181aa47820a6669f3a82116a45ca8160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:97:f6:72:41:6d:5e:61:47:67:a5:1c:bf:a4:
83:ae:c7:ac:04:b8:c5:ac:4f:b7:5f:b1:3f:8e:c2:
a7:7f:d4:e1:66:f5:1f:9b:3a:f9:33:e2:23:1e:39:
f8:65:1a:e3:bb:92:98:d4:87:cb:b3:40:6b:60:7c:
ad:12:ce:a8:80:99:32:02:52:5e:ad:f2:b1:65:42:
a1:9a:da:21:f4:0e:e5:b3:4b:21:bf:c5:25:b8:6b:
15:58:77:e3:46:f3:d2:50:92:dd:7f:2b:15:b6:03:
6a:86:dd:14:e8:cc:ee:0e:4e:c2:a8:8f:0f:66:44:
69:66:ec:11:f6:3d:ee:fb:06:c6:f3:92:85:2e:26:
d6:b9:85:ce:12:5a:aa:19:72:96:98:4d:67:87:7c:
44:e8:3e:f6:29:47:de:da:15:64:d1:34:a7:2b:67:
98:d7:c0:58:21:3f:00:a7:64:7c:81:b1:3f:c7:50:
76:37:7d:36:c6:73:8c:56:d4:74:82:0a:07:c5:b1:
7a:b2:3e:47:61:a0:a6:d7:61:90:15:d7:37:f9:18:
f4:23:dc:dd:5c:f7:93:ec:f7:c1:75:25:c2:c0:d1:
a2:54:90:dd:8e:a7:1f:5e:3f:71:fc:19:2a:85:52:
9e:58:81:d9:37:5a:c8:46:b6:29:52:60:f0:58:c7:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0C:2D:AD:18:1A:A4:78:20:A6:66:9F:3A:82:11:6A:45:CA:81:60
X509v3 Authority Key Identifier:
keyid:EE:6F:48:FC:8E:6B:5F:D9:21:DE:38:05:7A:14:A0:C0:98:A8:26:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9I_I5rX9kh3jgFehSgwJioJjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/9wwtrRgapHggpmafOoIRakXKgWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/216055-0737-4236-90a5-7b358698c988/1/7m9I_I5rX9kh3jgFehSgwJioJjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.218.0/24
194.127.157.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:26:70:46:f6:b4:3a:1c:1a:7b:b8:c9:b8:3a:72:a2:72:c2:
39:1d:8c:23:cd:98:5b:60:04:f4:09:4a:29:d1:c1:f6:40:72:
92:84:34:97:bc:97:c1:2f:39:27:cf:c6:77:fb:04:58:05:0b:
c0:6e:04:90:83:f0:03:c7:5d:79:30:25:50:ac:ea:7a:8f:54:
ae:15:ac:2f:2b:3e:0a:9d:47:8c:99:80:ba:98:91:94:d2:90:
7c:05:54:94:22:d9:7b:51:1e:37:d8:01:7f:18:96:32:65:71:
64:2b:31:e7:4c:c3:44:34:df:22:dc:54:80:8e:86:97:ba:3b:
f7:aa:c5:38:4d:fd:2e:5b:fd:d7:81:64:06:cf:55:5a:45:10:
43:40:66:70:61:3a:7c:e2:33:7a:e5:46:4f:d0:db:b7:86:48:
12:9c:29:a7:f1:69:c6:c1:8f:85:68:07:67:a9:91:11:e6:12:
8b:00:ae:a8:ea:2c:ee:01:2d:b5:21:27:0f:72:0e:01:81:bc:
ad:1a:90:c0:03:b3:6a:53:58:2f:fa:4c:29:66:b9:26:e8:e7:
16:a6:c3:a3:dc:b4:f2:61:2f:c8:1d:b1:a3:1c:9a:35:3f:11:
29:9f:6f:22:78:08:c4:59:7b:6d:01:65:05:12:02:6d:32:b2:
d9:a7:76:9e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/WQxozu4G38mTtsGjZVGD3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNmY0OGZjOGU2YjVmZDkyMWRlMzgwNTdhMTRhMGMwOThh
ODI2M2IwHhcNMjYwODA2MDg0OTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzBjMmRhZDE4MWFhNDc4MjBhNjY2OWYzYTgyMTE2YTQ1Y2E4MTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Jf2ckFtXmFHZ6Ucv6SDrsesBLjF
rE+3X7E/jsKnf9ThZvUfmzr5M+IjHjn4ZRrju5KY1IfLs0BrYHytEs6ogJkyAlJe
rfKxZUKhmtoh9A7ls0shv8UluGsVWHfjRvPSUJLdfysVtgNqht0U6MzuDk7CqI8P
ZkRpZuwR9j3u+wbG85KFLibWuYXOElqqGXKWmE1nh3xE6D72KUfe2hVk0TSnK2eY
18BYIT8Ap2R8gbE/x1B2N302xnOMVtR0ggoHxbF6sj5HYaCm12GQFdc3+Rj0I9zd
XPeT7PfBdSXCwNGiVJDdjqcfXj9x/BkqhVKeWIHZN1rIRrYpUmDwWMdDLQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPcMLa0YGqR4IKZmnzqCEWpFyoFgMB8GA1UdIwQY
MBaAFO5vSPyOa1/ZId44BXoUoMCYqCY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN205SV9JNXJYOWtoM2pnRmVoU2d3SmlvSmpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMTYwNTUtMDczNy00MjM2LTkwYTUt
N2IzNTg2OThjOTg4LzEvOXd3dHJSZ2FwSGdncG1hZk9vSVJha1hLZ1dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yMTYwNTUtMDczNy00MjM2LTkwYTUtN2IzNTg2OThjOTg4
LzEvN205SV9JNXJYOWtoM2pnRmVoU2d3SmlvSmpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwg/aAwQA
wn+dMA0GCSqGSIb3DQEBCwUAA4IBAQDEJnBG9rQ6HBp7uMm4OnKicsI5HYwjzZhb
YAT0CUop0cH2QHKShDSXvJfBLzknz8Z3+wRYBQvAbgSQg/ADx115MCVQrOp6j1Su
FawvKz4KnUeMmYC6mJGU0pB8BVSUItl7UR432AF/GJYyZXFkKzHnTMNENN8i3FSA
joaXujv3qsU4Tf0uW/3XgWQGz1VaRRBDQGZwYTp84jN65UZP0Nu3hkgSnCmn8WnG
wY+FaAdnqZER5hKLAK6o6izuAS21IScPcg4BgbytGpDAA7NqU1gv+kwpZrkm6OcW
psOj3LTyYS/IHbGjHJo1PxEpn28ieAjEWXttAWUFEgJtMrLZp3ae
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:58:56 2026 by rpki-client