Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/Cegt9gCk36CfyQoZLzS4cnrOmWA.roa
File: Cegt9gCk36CfyQoZLzS4cnrOmWA.roa (raw, json)
Hash identifier: yHvXAS+TMxPI4zuMGTC5jZ53ix1/BV7IdsaANR877aM=
Subject key identifier: 09:E8:2D:F6:00:A4:DF:A0:9F:C9:0A:19:2F:34:B8:72:7A:CE:99:60
Certificate issuer: /CN=a9f347103ef349ad82f1b6ac43e76c0ffa38c2f8
Certificate serial: 019F2368B16782BB8F63EB33C97FCC29BF76
Authority key identifier: A9:F3:47:10:3E:F3:49:AD:82:F1:B6:AC:43:E7:6C:0F:FA:38:C2:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfNHED7zSa2C8basQ-dsD_o4wvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/Cegt9gCk36CfyQoZLzS4cnrOmWA.roa
Signing time: Thu 02 Jul 2026 15:18:11 +0000
ROA not before: Thu 02 Jul 2026 15:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8896
IP address blocks: 91.223.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfNHED7zSa2C8basQ-dsD_o4wvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b1:67:82:bb:8f:63:eb:33:c9:7f:cc:29:bf:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f347103ef349ad82f1b6ac43e76c0ffa38c2f8
Validity
Not Before: Jul 2 15:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09e82df600a4dfa09fc90a192f34b8727ace9960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:28:60:19:e5:95:1d:72:5b:e3:7a:8d:cb:e6:
76:17:de:bc:06:42:8a:c0:9a:08:ee:d7:0a:c9:14:
d1:f8:65:88:85:29:37:53:9c:a9:f6:07:db:0a:3a:
c3:33:d1:ff:5b:be:7e:ab:5f:55:be:7d:58:2e:70:
14:cc:7d:0d:93:71:46:88:69:95:d2:ac:87:23:a7:
ac:04:75:c7:ff:20:c0:20:0f:83:d3:69:26:d6:30:
7b:92:9f:61:73:72:bd:53:35:04:18:6b:68:f5:ae:
1d:1e:5f:7e:dd:34:67:96:de:6b:99:21:9d:c8:e7:
d1:92:bd:69:86:4c:f2:38:8c:ba:d5:61:4c:44:f1:
51:81:13:dc:c6:bf:a7:ab:de:63:e0:af:75:83:57:
b3:3a:4f:ab:58:77:98:58:5f:56:85:42:a9:71:41:
a4:11:99:01:6b:86:c8:29:7d:25:89:08:56:5c:81:
1c:3e:1c:8c:09:80:2c:d1:57:2f:4b:25:ee:d4:92:
00:2c:f7:41:7d:be:fd:d9:77:45:c6:37:8a:95:bd:
51:a3:de:eb:f3:d7:6a:c6:3a:32:83:24:88:fe:ac:
0c:e2:24:29:b3:64:4e:54:35:40:42:06:1d:be:f2:
be:e8:be:d3:d0:3a:77:f5:29:0b:26:ad:5b:b4:ac:
70:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E8:2D:F6:00:A4:DF:A0:9F:C9:0A:19:2F:34:B8:72:7A:CE:99:60
X509v3 Authority Key Identifier:
keyid:A9:F3:47:10:3E:F3:49:AD:82:F1:B6:AC:43:E7:6C:0F:FA:38:C2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfNHED7zSa2C8basQ-dsD_o4wvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/Cegt9gCk36CfyQoZLzS4cnrOmWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.85.0/24
Signature Algorithm: sha256WithRSAEncryption
51:bf:83:60:68:6b:03:94:e5:49:2c:e4:b0:9a:ba:d7:82:4c:
d2:ea:0c:89:79:e2:a9:20:f8:86:ac:9b:2f:6d:f3:13:35:5a:
14:c1:48:f3:5b:46:d4:30:e0:27:80:14:46:64:12:5e:16:d0:
d1:d1:24:21:2d:fb:a3:f9:f4:00:41:e9:fb:40:65:dd:9c:c6:
88:39:1c:71:27:91:5f:98:89:65:de:d9:02:e8:fc:41:fc:5f:
20:a2:de:b0:27:e4:48:03:09:5d:66:7e:3e:94:21:15:3a:48:
39:df:8f:46:2d:a8:d2:19:f8:17:b6:02:f4:08:6f:a7:00:03:
14:09:91:54:07:d5:f7:a4:20:4b:00:6b:5e:b3:5f:1b:85:4f:
e6:5e:79:09:68:07:b1:7a:de:d3:ca:1a:c4:a7:fa:ac:a8:2a:
b9:48:16:3a:84:47:43:9d:e5:01:20:51:db:cc:6a:f8:02:8d:
a0:4c:3b:37:ee:0f:30:4a:2f:6e:3d:c9:3e:7d:32:30:f0:16:
83:5e:4c:e6:de:67:65:6b:aa:1a:34:99:43:f2:bc:cd:1b:14:
80:9f:bb:be:3f:5b:94:f2:77:98:79:cf:7f:df:c2:2b:7a:ad:
43:86:40:f9:22:ba:5b:08:df:58:10:3e:00:07:2c:9c:08:03:
af:8e:6e:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaLFngruPY+szyX/MKb92MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZjM0NzEwM2VmMzQ5YWQ4MmYxYjZhYzQzZTc2YzBmZmEz
OGMyZjgwHhcNMjYwNzAyMTUxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWU4MmRmNjAwYTRkZmEwOWZjOTBhMTkyZjM0Yjg3MjdhY2U5OTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ihgGeWVHXJb43qNy+Z2F968BkKK
wJoI7tcKyRTR+GWIhSk3U5yp9gfbCjrDM9H/W75+q19Vvn1YLnAUzH0Nk3FGiGmV
0qyHI6esBHXH/yDAIA+D02km1jB7kp9hc3K9UzUEGGto9a4dHl9+3TRnlt5rmSGd
yOfRkr1phkzyOIy61WFMRPFRgRPcxr+nq95j4K91g1ezOk+rWHeYWF9WhUKpcUGk
EZkBa4bIKX0liQhWXIEcPhyMCYAs0VcvSyXu1JIALPdBfb792XdFxjeKlb1Ro97r
89dqxjoygySI/qwM4iQps2ROVDVAQgYdvvK+6L7T0Dp39SkLJq1btKxwXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAnoLfYApN+gn8kKGS80uHJ6zplgMB8GA1UdIwQY
MBaAFKnzRxA+80mtgvG2rEPnbA/6OML4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWZOSEVEN3pTYTJDOGJhc1EtZHNEX280d3ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9kYTI1YzktNGZlMS00NWRhLThlNzQt
MmJlYTM0Yjg5MzhiLzEvQ2VndDlnQ2szNkNmeVFvWkx6UzRjbnJPbVdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9kYTI1YzktNGZlMS00NWRhLThlNzQtMmJlYTM0Yjg5Mzhi
LzEvcWZOSEVEN3pTYTJDOGJhc1EtZHNEX280d3ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW99VMA0G
CSqGSIb3DQEBCwUAA4IBAQBRv4NgaGsDlOVJLOSwmrrXgkzS6gyJeeKpIPiGrJsv
bfMTNVoUwUjzW0bUMOAngBRGZBJeFtDR0SQhLfuj+fQAQen7QGXdnMaIORxxJ5Ff
mIll3tkC6PxB/F8got6wJ+RIAwldZn4+lCEVOkg5349GLajSGfgXtgL0CG+nAAMU
CZFUB9X3pCBLAGtes18bhU/mXnkJaAexet7TyhrEp/qsqCq5SBY6hEdDneUBIFHb
zGr4Ao2gTDs37g8wSi9uPck+fTIw8BaDXkzm3mdla6oaNJlD8rzNGxSAn7u+P1uU
8neYec9/38Ireq1DhkD5IrpbCN9YED4AByycCAOvjm5V
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:32 2026 by rpki-client