Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/L9HRdKXgIjtTXTa2OnSR-F6SU6I.roa
File: L9HRdKXgIjtTXTa2OnSR-F6SU6I.roa (raw, json)
Hash identifier: pbZSLrUws7WLcuJcBbuB88zJq1bp92Bn9EPdlugGqbk=
Subject key identifier: 2F:D1:D1:74:A5:E0:22:3B:53:5D:36:B6:3A:74:91:F8:5E:92:53:A2
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A048FF19092F2CC9575FE4B5B680A98C56
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/L9HRdKXgIjtTXTa2OnSR-F6SU6I.roa
Signing time: Fri 28 Aug 2026 15:31:12 +0000
ROA not before: Fri 28 Aug 2026 15:31:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402546
IP address blocks: 201.4.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:ff:19:09:2f:2c:c9:57:5f:e4:b5:b6:80:a9:8c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 28 15:31:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fd1d174a5e0223b535d36b63a7491f85e9253a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:48:89:a3:9e:80:62:e4:aa:26:d1:e1:5a:98:
a9:17:56:bd:1b:ab:a3:7e:c0:7d:14:8e:a6:49:1e:
fe:20:81:dd:6b:f5:e2:53:3a:f8:6d:98:d1:08:30:
69:1a:55:c8:33:c4:ef:14:70:7a:fe:e2:94:81:4e:
bd:6b:e4:b2:6e:62:9b:3f:50:e9:68:10:0a:30:7d:
39:68:93:5e:f4:52:4f:63:34:56:c9:74:53:21:a1:
f9:48:d7:b5:08:0f:c3:e6:d8:ae:2d:4e:71:8d:a4:
54:8d:16:57:3f:76:a8:26:ee:55:06:1c:f5:aa:1e:
e9:a6:64:3d:84:6a:1c:47:6a:db:be:bf:04:58:c2:
e0:d7:6e:45:be:94:41:68:c7:c2:98:1a:af:17:59:
59:b8:4a:70:b9:d8:e8:9c:f5:da:b4:b1:f2:68:a6:
40:f0:44:f1:3b:79:4a:b6:31:46:5b:07:c0:ef:2f:
8a:05:03:3c:d4:48:7b:5f:af:87:c6:0d:9c:fe:8c:
e1:6e:18:e0:d4:1f:5c:ee:53:d7:98:dc:eb:d4:93:
fb:e7:2c:5a:d2:da:b4:79:1a:43:3e:33:07:de:16:
57:73:32:71:8c:54:3c:f7:e5:49:a5:da:2c:aa:d3:
cd:bc:20:03:23:73:ab:54:12:90:5b:ae:b4:22:b4:
06:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D1:D1:74:A5:E0:22:3B:53:5D:36:B6:3A:74:91:F8:5E:92:53:A2
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/L9HRdKXgIjtTXTa2OnSR-F6SU6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.79.0/24
Signature Algorithm: sha256WithRSAEncryption
84:bc:5d:74:c3:b4:a7:ed:9a:09:6f:0c:7d:36:e1:eb:47:c4:
80:4f:09:99:81:96:68:81:3d:2b:82:2f:2f:e6:bb:f5:ba:3b:
b9:79:c9:ae:43:4e:4e:d6:8f:76:6e:0c:1e:d1:12:e6:f9:69:
25:22:56:f6:32:90:d9:06:21:26:75:27:65:0d:32:a9:8e:cb:
cb:04:29:dd:2a:6e:2d:c1:db:20:d3:40:32:28:43:81:f4:30:
c8:30:8e:ca:05:e2:2d:24:68:cc:7a:e1:26:08:b5:61:07:66:
e3:87:b7:05:fe:99:57:dd:34:b4:6f:e0:9c:7b:b5:b4:7b:ba:
1c:66:cc:e9:bf:de:61:9d:86:22:d7:3b:e7:54:f4:42:5b:6f:
24:dc:7c:c9:b7:39:19:16:77:65:62:dd:3e:71:fb:56:a4:c2:
f7:7a:eb:9f:09:c5:33:a3:ba:38:94:9d:ac:17:fb:b4:86:15:
50:c4:92:f7:b5:ac:04:50:b9:af:9c:1c:17:a4:22:9f:a7:b1:
12:d5:69:f6:de:2a:c6:60:9e:49:85:77:8f:8c:b2:d6:77:76:
7c:f0:24:ce:e0:03:a9:cb:8d:60:3b:dc:9a:d0:70:5d:c9:0d:
df:46:98:c0:1f:db:ac:8e:54:f1:5c:66:b1:2a:8b:ee:38:39:
8a:03:08:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBI/xkJLyzJV1/ktbaAqYxWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYwODI4MTUzMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmQxZDE3NGE1ZTAyMjNiNTM1ZDM2YjYzYTc0OTFmODVlOTI1M2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UiJo56AYuSqJtHhWpipF1a9G6uj
fsB9FI6mSR7+IIHda/XiUzr4bZjRCDBpGlXIM8TvFHB6/uKUgU69a+SybmKbP1Dp
aBAKMH05aJNe9FJPYzRWyXRTIaH5SNe1CA/D5tiuLU5xjaRUjRZXP3aoJu5VBhz1
qh7ppmQ9hGocR2rbvr8EWMLg125FvpRBaMfCmBqvF1lZuEpwudjonPXatLHyaKZA
8ETxO3lKtjFGWwfA7y+KBQM81Eh7X6+Hxg2c/ozhbhjg1B9c7lPXmNzr1JP75yxa
0tq0eRpDPjMH3hZXczJxjFQ89+VJpdosqtPNvCADI3OrVBKQW660IrQGHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC/R0XSl4CI7U102tjp0kfheklOiMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvTDlIUmRLWGdJanRUWFRhMk9uU1ItRjZTVTZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyQRPMA0G
CSqGSIb3DQEBCwUAA4IBAQCEvF10w7Sn7ZoJbwx9NuHrR8SATwmZgZZogT0rgi8v
5rv1uju5ecmuQ05O1o92bgwe0RLm+WklIlb2MpDZBiEmdSdlDTKpjsvLBCndKm4t
wdsg00AyKEOB9DDIMI7KBeItJGjMeuEmCLVhB2bjh7cF/plX3TS0b+Cce7W0e7oc
Zszpv95hnYYi1zvnVPRCW28k3HzJtzkZFndlYt0+cftWpML3euufCcUzo7o4lJ2s
F/u0hhVQxJL3tawEULmvnBwXpCKfp7ES1Wn23irGYJ5JhXePjLLWd3Z88CTO4AOp
y41gO9ya0HBdyQ3fRpjAH9usjlTxXGaxKovuODmKAwj9
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:40:14 2026 by rpki-client