Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/9KIvoORxt_G9uGhi2HHOC7oyWcw.roa
File: 9KIvoORxt_G9uGhi2HHOC7oyWcw.roa (raw, json)
Hash identifier: jtbwNmyZAs86gDjVyI414SxVcZ/dmJBcWJD0knrxxAk=
Subject key identifier: F4:A2:2F:A0:E4:71:B7:F1:BD:B8:68:62:D8:71:CE:0B:BA:32:59:CC
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A04D9D0B4D42E936F5E875A9E43201F5E0
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/9KIvoORxt_G9uGhi2HHOC7oyWcw.roa
Signing time: Sat 29 Aug 2026 13:02:12 +0000
ROA not before: Sat 29 Aug 2026 13:02:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 191.44.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4d:9d:0b:4d:42:e9:36:f5:e8:75:a9:e4:32:01:f5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 29 13:02:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4a22fa0e471b7f1bdb86862d871ce0bba3259cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9e:e3:93:2e:f6:80:18:bf:d2:d8:35:e3:f5:
6f:8f:3c:25:da:14:8c:1e:8c:61:c8:65:df:37:e0:
92:92:99:74:c7:91:78:51:ef:22:39:bb:fa:e9:44:
3f:c5:4e:ca:da:dc:d4:a8:12:39:32:81:c0:cc:c0:
28:e0:67:e7:b3:de:1e:ce:c0:70:7b:d8:f8:c7:eb:
9f:cf:93:b5:f5:74:e8:39:8b:b1:b6:0d:47:c1:8a:
96:9f:08:f6:a3:6b:0a:83:21:a7:5f:3a:56:7f:7e:
46:d7:e7:84:21:03:ae:a3:6e:38:e3:6e:30:65:db:
f6:f2:5c:48:ac:be:b0:72:53:43:71:9f:b5:1b:22:
67:8b:34:90:1f:20:dc:75:24:cf:26:68:e2:4b:eb:
70:42:d3:a8:7b:8a:06:88:6c:2b:56:da:53:35:5e:
be:e3:bd:1a:28:a7:5e:79:06:2e:8d:42:d1:f9:5c:
53:fa:38:41:1b:91:b8:eb:1b:21:71:22:88:d9:97:
55:e9:39:4c:28:93:bd:b1:8c:84:f7:d4:be:65:75:
64:77:50:58:df:fa:4c:a1:02:b0:1d:92:22:62:fb:
7a:6d:30:5b:80:80:f8:c6:97:f6:dc:ae:99:1f:2c:
d2:4d:ed:69:60:51:f9:3c:b6:f8:53:8c:d4:0f:8e:
5b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A2:2F:A0:E4:71:B7:F1:BD:B8:68:62:D8:71:CE:0B:BA:32:59:CC
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/9KIvoORxt_G9uGhi2HHOC7oyWcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.85.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ee:30:33:0d:cb:ce:a6:9f:93:9a:b6:d2:d2:f2:2f:af:cd:
6c:8c:8a:23:9c:53:9d:8b:4b:dd:09:2c:86:1d:ca:90:bf:f5:
86:d7:66:0e:03:ab:90:bf:c7:47:f0:cf:03:a9:c4:ff:99:4d:
f8:07:5e:23:a9:c8:a1:f3:67:5e:bc:37:9a:f9:4d:91:79:02:
60:d1:5a:e5:9a:20:32:cc:e1:b6:a2:ce:04:4a:09:6d:ed:68:
ba:38:af:ce:49:70:4b:4b:18:1e:9b:94:02:b5:0b:0a:6c:cd:
d5:9c:b0:24:1a:56:78:02:41:5f:5e:42:9f:76:3d:d8:b6:95:
71:41:88:ce:ec:54:01:90:41:c8:56:04:07:58:9e:cb:7a:5c:
91:7e:8c:bd:47:fb:aa:6a:78:4b:ce:98:85:3c:b2:05:03:74:
db:db:24:06:f8:1e:50:5c:44:68:d6:93:83:75:13:03:a3:71:
cf:39:f4:15:12:52:79:d9:b9:ab:a7:4d:b8:ad:df:f5:a8:46:
e6:94:2e:35:13:5b:1b:12:73:92:23:7c:b4:e6:bf:d4:0f:f3:
8b:47:c3:de:f0:77:bb:12:da:0d:16:c1:9b:35:b3:06:0f:7a:
6d:dd:eb:d9:8f:82:cf:90:e6:08:b4:8b:ae:6f:e0:09:e1:2e:
73:f3:29:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBNnQtNQuk29eh1qeQyAfXgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYwODI5MTMwMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGEyMmZhMGU0NzFiN2YxYmRiODY4NjJkODcxY2UwYmJhMzI1OWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ7jky72gBi/0tg14/Vvjzwl2hSM
HoxhyGXfN+CSkpl0x5F4Ue8iObv66UQ/xU7K2tzUqBI5MoHAzMAo4Gfns94ezsBw
e9j4x+ufz5O19XToOYuxtg1HwYqWnwj2o2sKgyGnXzpWf35G1+eEIQOuo244424w
Zdv28lxIrL6wclNDcZ+1GyJnizSQHyDcdSTPJmjiS+twQtOoe4oGiGwrVtpTNV6+
470aKKdeeQYujULR+VxT+jhBG5G46xshcSKI2ZdV6TlMKJO9sYyE99S+ZXVkd1BY
3/pMoQKwHZIiYvt6bTBbgID4xpf23K6ZHyzSTe1pYFH5PLb4U4zUD45bXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPSiL6DkcbfxvbhoYthxzgu6MlnMMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvOUtJdm9PUnh0X0c5dUdoaTJISE9DN295V2N3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvyxVMA0G
CSqGSIb3DQEBCwUAA4IBAQAv7jAzDcvOpp+TmrbS0vIvr81sjIojnFOdi0vdCSyG
HcqQv/WG12YOA6uQv8dH8M8DqcT/mU34B14jqcih82devDea+U2ReQJg0VrlmiAy
zOG2os4ESglt7Wi6OK/OSXBLSxgem5QCtQsKbM3VnLAkGlZ4AkFfXkKfdj3YtpVx
QYjO7FQBkEHIVgQHWJ7LelyRfoy9R/uqanhLzpiFPLIFA3Tb2yQG+B5QXERo1pOD
dRMDo3HPOfQVElJ52bmrp024rd/1qEbmlC41E1sbEnOSI3y05r/UD/OLR8Pe8He7
EtoNFsGbNbMGD3pt3evZj4LPkOYItIuub+AJ4S5z8ymq
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:30:17 2026 by rpki-client