Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/23322a-b7a4-4632-bde6-b19ab3c2d0ed/1/CdBv0Bq4MxXF7cS5YGBDnebFrG4.roa
File: CdBv0Bq4MxXF7cS5YGBDnebFrG4.roa (raw, json)
Hash identifier: OpXgldlACDzWIRzJ5FMUs1BN6KpyeKQrkTOYJVvOfRM=
Subject key identifier: 09:D0:6F:D0:1A:B8:33:15:C5:ED:C4:B9:60:60:43:9D:E6:C5:AC:6E
Certificate issuer: /CN=e6894e85de6b483158f43d800eb2e7b3fd8813df
Certificate serial: 01A0E6AF6D5AAEF73FE55CD935F48CDECC89
Authority key identifier: E6:89:4E:85:DE:6B:48:31:58:F4:3D:80:0E:B2:E7:B3:FD:88:13:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5olOhd5rSDFY9D2ADrLns_2IE98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/23322a-b7a4-4632-bde6-b19ab3c2d0ed/1/CdBv0Bq4MxXF7cS5YGBDnebFrG4.roa
Signing time: Mon 28 Sep 2026 06:24:11 +0000
ROA not before: Mon 28 Sep 2026 06:24:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15694
IP address blocks: 193.27.82.0/24 maxlen: 24
193.27.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/23322a-b7a4-4632-bde6-b19ab3c2d0ed/1/5olOhd5rSDFY9D2ADrLns_2IE98.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/23322a-b7a4-4632-bde6-b19ab3c2d0ed/1/5olOhd5rSDFY9D2ADrLns_2IE98.mft
rsync://rpki.ripe.net/repository/DEFAULT/5olOhd5rSDFY9D2ADrLns_2IE98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:af:6d:5a:ae:f7:3f:e5:5c:d9:35:f4:8c:de:cc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6894e85de6b483158f43d800eb2e7b3fd8813df
Validity
Not Before: Sep 28 06:24:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09d06fd01ab83315c5edc4b96060439de6c5ac6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6e:ab:9c:76:80:0c:0b:6a:c0:fa:a5:17:ce:
2b:b8:41:d6:6a:d7:f3:5d:0c:c0:bd:a8:4c:2f:5c:
28:d3:29:01:41:bc:10:ea:32:88:2b:e8:2b:76:86:
a2:23:64:5e:4e:6a:4c:13:0d:20:81:dc:60:b4:f9:
0e:85:7b:5c:64:15:cd:e7:15:85:b4:27:a4:0d:c0:
4e:ac:d7:65:fe:b8:2f:10:ab:a8:6e:a1:dc:40:04:
9f:cd:06:4f:5c:98:13:01:49:3f:e5:3f:6f:59:79:
cd:6c:70:e1:89:a6:24:81:d2:e8:ce:70:a9:41:75:
b2:8e:e4:a6:30:79:ff:86:8d:a7:41:4d:8a:61:a2:
a9:d3:5f:13:ad:21:c9:4f:49:18:a3:6a:d6:81:d4:
cd:6a:5f:4e:19:3e:1c:b6:e1:0f:21:e5:7d:33:08:
ea:14:f3:d8:c8:7c:f6:9f:56:a4:51:5a:b9:54:e7:
dc:31:c2:15:1d:ce:c0:70:06:c6:35:6b:f8:9f:22:
23:28:f9:bc:e4:47:db:7a:ea:6b:e5:24:90:2f:5e:
8a:2f:ca:1f:13:78:9a:e8:e9:ca:cc:8b:bc:0e:ea:
0c:b3:4d:25:27:22:38:0b:79:26:d6:8d:9c:5f:56:
f5:78:40:7a:de:cc:68:49:e9:ea:68:4a:6b:61:c3:
00:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D0:6F:D0:1A:B8:33:15:C5:ED:C4:B9:60:60:43:9D:E6:C5:AC:6E
X509v3 Authority Key Identifier:
keyid:E6:89:4E:85:DE:6B:48:31:58:F4:3D:80:0E:B2:E7:B3:FD:88:13:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5olOhd5rSDFY9D2ADrLns_2IE98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/23322a-b7a4-4632-bde6-b19ab3c2d0ed/1/CdBv0Bq4MxXF7cS5YGBDnebFrG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/23322a-b7a4-4632-bde6-b19ab3c2d0ed/1/5olOhd5rSDFY9D2ADrLns_2IE98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.82.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:67:a1:57:dc:32:92:8e:a6:e3:90:9c:3f:1c:35:cd:70:75:
05:78:09:7f:35:1f:27:6b:6b:5b:cd:91:4f:4d:d0:f2:85:29:
ee:fc:50:fd:4b:69:17:91:47:8d:e8:17:45:e2:fd:df:38:7e:
03:b6:5d:8e:78:94:52:e3:8a:49:f1:62:13:f7:98:27:2e:fb:
35:7e:93:7e:f5:49:c3:f5:74:32:3a:40:2b:72:20:f9:df:e6:
ac:61:14:25:c9:54:03:29:31:2a:39:1d:72:04:4f:a0:b1:34:
f5:11:82:b9:ab:45:45:5f:a6:e2:10:6c:d2:96:fa:84:df:95:
c1:ae:3e:ff:a2:25:0a:d5:e6:5f:37:96:a2:be:cd:9c:c8:8c:
80:57:d0:f8:06:7c:30:c1:4f:67:e0:90:9b:0d:e5:a8:51:31:
6b:c1:44:ee:5f:cc:63:1e:13:25:10:5e:dc:3a:de:3d:36:12:
3b:90:40:88:e0:a0:ed:00:4a:9d:af:b0:56:d0:44:0c:6e:59:
f7:06:30:80:06:6b:46:cf:e5:8f:b8:e1:2f:a2:98:15:0c:28:
e6:c1:0a:6f:b1:35:72:41:57:24:35:bd:c5:f0:6c:cb:3a:07:
1f:73:f1:43:21:e2:53:f9:b4:10:bd:c9:01:2e:c5:b9:b1:9a:
df:47:96:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDmr21arvc/5VzZNfSM3syJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ODk0ZTg1ZGU2YjQ4MzE1OGY0M2Q4MDBlYjJlN2IzZmQ4
ODEzZGYwHhcNMjYwOTI4MDYyNDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWQwNmZkMDFhYjgzMzE1YzVlZGM0Yjk2MDYwNDM5ZGU2YzVhYzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5W6rnHaADAtqwPqlF84ruEHWatfz
XQzAvahML1wo0ykBQbwQ6jKIK+grdoaiI2ReTmpMEw0ggdxgtPkOhXtcZBXN5xWF
tCekDcBOrNdl/rgvEKuobqHcQASfzQZPXJgTAUk/5T9vWXnNbHDhiaYkgdLoznCp
QXWyjuSmMHn/ho2nQU2KYaKp018TrSHJT0kYo2rWgdTNal9OGT4ctuEPIeV9Mwjq
FPPYyHz2n1akUVq5VOfcMcIVHc7AcAbGNWv4nyIjKPm85Efbeupr5SSQL16KL8of
E3ia6OnKzIu8DuoMs00lJyI4C3km1o2cX1b1eEB63sxoSenqaEprYcMAxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAnQb9AauDMVxe3EuWBgQ53mxaxuMB8GA1UdIwQY
MBaAFOaJToXea0gxWPQ9gA6y57P9iBPfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW9sT2hkNXJTREZZOUQyQURyTG5zXzJJRTk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8yMzMyMmEtYjdhNC00NjMyLWJkZTYt
YjE5YWIzYzJkMGVkLzEvQ2RCdjBCcTRNeFhGN2NTNVlHQkRuZWJGckc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8yMzMyMmEtYjdhNC00NjMyLWJkZTYtYjE5YWIzYzJkMGVk
LzEvNW9sT2hkNXJTREZZOUQyQURyTG5zXzJJRTk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwRtSMA0G
CSqGSIb3DQEBCwUAA4IBAQCxZ6FX3DKSjqbjkJw/HDXNcHUFeAl/NR8na2tbzZFP
TdDyhSnu/FD9S2kXkUeN6BdF4v3fOH4Dtl2OeJRS44pJ8WIT95gnLvs1fpN+9UnD
9XQyOkArciD53+asYRQlyVQDKTEqOR1yBE+gsTT1EYK5q0VFX6biEGzSlvqE35XB
rj7/oiUK1eZfN5aivs2cyIyAV9D4BnwwwU9n4JCbDeWoUTFrwUTuX8xjHhMlEF7c
Ot49NhI7kECI4KDtAEqdr7BW0EQMbln3BjCABmtGz+WPuOEvopgVDCjmwQpvsTVy
QVckNb3F8GzLOgcfc/FDIeJT+bQQvckBLsW5sZrfR5Y7
-----END CERTIFICATE-----
Generated at Wed Oct 28 18:41:22 2026 by rpki-client