Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/nA3yFpvo_ySzcP0KBXIm2Ivs5cg.roa
File: nA3yFpvo_ySzcP0KBXIm2Ivs5cg.roa (raw, json)
Hash identifier: eVx3I98uePmp1nQvnRoKLAzLvxAThSUeWzUyWIJE9go=
Subject key identifier: 9C:0D:F2:16:9B:E8:FF:24:B3:70:FD:0A:05:72:26:D8:8B:EC:E5:C8
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 019EABFB93778E544D2AB8DB647EB85E06F9
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/nA3yFpvo_ySzcP0KBXIm2Ivs5cg.roa
Signing time: Tue 09 Jun 2026 10:44:11 +0000
ROA not before: Tue 09 Jun 2026 10:44:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209946
IP address blocks: 185.100.157.0/24 maxlen: 24
185.102.115.0/24 maxlen: 24
185.177.239.0/24 maxlen: 24
193.221.200.0/23 maxlen: 24
217.145.226.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 16:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ab:fb:93:77:8e:54:4d:2a:b8:db:64:7e:b8:5e:06:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jun 9 10:44:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c0df2169be8ff24b370fd0a057226d88bece5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:59:69:9d:e2:fd:1c:f3:72:b3:4a:ff:75:a4:
50:71:0a:a6:3a:bd:4d:5d:19:83:ff:2c:69:af:2d:
1f:67:b0:d0:9b:0a:7c:7b:4c:57:3c:2d:bd:ea:b5:
a4:7f:cf:dc:8d:d1:f5:9e:36:87:4d:ed:9a:74:53:
01:de:db:63:b4:71:5d:a5:41:2a:1b:97:c0:20:90:
b1:f1:46:19:6d:a6:75:40:5d:cd:f4:28:a1:8d:d4:
30:78:a8:37:a7:14:1f:97:3e:e0:8d:bd:71:0c:97:
a3:2d:d4:cc:00:44:ab:e4:7a:78:d9:49:e3:86:a3:
ca:e1:79:b4:c9:e9:13:16:91:ce:41:f4:18:74:6a:
62:ca:87:32:91:6e:42:d0:d8:f0:a3:04:ad:8e:99:
63:71:a4:99:06:08:48:ee:3e:9f:ba:b8:6b:37:9a:
f5:33:27:cf:0b:23:84:68:1d:c6:bf:92:dc:da:96:
f0:e4:62:43:70:ed:2f:d5:7f:97:a5:6f:e2:6d:d5:
bd:d5:de:11:e0:55:49:b1:e4:d2:e2:9b:a4:c4:9d:
9c:6d:4b:a5:52:b5:dc:d5:2e:15:41:bd:60:19:73:
5e:60:50:ff:18:09:0b:85:14:b5:e8:e3:34:44:c6:
26:22:33:09:c8:c9:5f:4f:41:80:04:47:26:f5:fe:
7f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0D:F2:16:9B:E8:FF:24:B3:70:FD:0A:05:72:26:D8:8B:EC:E5:C8
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/nA3yFpvo_ySzcP0KBXIm2Ivs5cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.157.0/24
185.102.115.0/24
185.177.239.0/24
193.221.200.0/23
217.145.226.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:85:fb:5e:fb:18:e7:64:75:de:93:3b:7c:67:fb:8e:f3:f1:
42:b1:87:94:83:ea:40:48:e9:30:28:07:5e:30:b0:57:bd:e6:
61:98:91:aa:68:97:33:09:74:0c:14:1d:dc:13:ac:36:0a:9a:
a3:f3:79:6a:b7:6a:8f:4b:be:4c:f1:69:04:4e:ef:12:02:1d:
16:d6:e5:65:38:5d:23:c3:2d:f1:73:ce:69:87:89:4e:cc:b9:
c1:71:35:e7:88:b3:05:bf:52:d8:52:78:90:89:da:ff:2e:15:
6b:82:61:fc:4f:2d:b0:14:93:c3:e2:b5:8a:e1:f0:ee:7d:09:
eb:34:63:e5:3c:74:be:9f:4d:90:49:59:78:46:ff:b7:df:77:
2f:39:b5:67:55:0f:6a:49:46:27:bb:3c:ee:e8:ff:b1:d2:dd:
8b:61:4c:64:ab:6c:fe:aa:ea:ab:d4:82:2e:53:c2:6d:ca:95:
af:cd:46:20:a8:92:17:dc:83:a8:06:e0:bd:5c:d5:58:27:aa:
6f:6b:1b:38:da:e6:04:20:b3:87:e2:14:e9:28:e4:d4:1b:4e:
5e:9b:8f:26:d6:bc:8e:2e:78:ae:30:8a:50:60:9d:e9:c8:bd:
1d:d0:68:7b:72:eb:a3:18:35:fe:1d:29:58:ad:3b:1a:2f:4c:
32:5f:05:23
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ6r+5N3jlRNKrjbZH64Xgb5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4
OWU4NWIwHhcNMjYwNjA5MTA0NDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzBkZjIxNjliZThmZjI0YjM3MGZkMGEwNTcyMjZkODhiZWNlNWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnllpneL9HPNys0r/daRQcQqmOr1N
XRmD/yxpry0fZ7DQmwp8e0xXPC296rWkf8/cjdH1njaHTe2adFMB3ttjtHFdpUEq
G5fAIJCx8UYZbaZ1QF3N9CihjdQweKg3pxQflz7gjb1xDJejLdTMAESr5Hp42Unj
hqPK4Xm0yekTFpHOQfQYdGpiyocykW5C0NjwowStjpljcaSZBghI7j6furhrN5r1
MyfPCyOEaB3Gv5Lc2pbw5GJDcO0v1X+XpW/ibdW91d4R4FVJseTS4pukxJ2cbUul
UrXc1S4VQb1gGXNeYFD/GAkLhRS16OM0RMYmIjMJyMlfT0GABEcm9f5/ewIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFJwN8hab6P8ks3D9CgVyJtiL7OXIMB8GA1UdIwQY
MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt
NmVlNTM0ZDkyZTUyLzEvbkEzeUZwdm9feVN6Y1AwS0JYSW0ySXZzNWNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy
LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAuWSdAwQA
uWZzAwQAubHvAwQBwd3IAwQB2ZHiMA0GCSqGSIb3DQEBCwUAA4IBAQBdhfte+xjn
ZHXekzt8Z/uO8/FCsYeUg+pASOkwKAdeMLBXveZhmJGqaJczCXQMFB3cE6w2Cpqj
83lqt2qPS75M8WkETu8SAh0W1uVlOF0jwy3xc85ph4lOzLnBcTXniLMFv1LYUniQ
idr/LhVrgmH8Ty2wFJPD4rWK4fDufQnrNGPlPHS+n02QSVl4Rv+333cvObVnVQ9q
SUYnuzzu6P+x0t2LYUxkq2z+quqr1IIuU8JtypWvzUYgqJIX3IOoBuC9XNVYJ6pv
axs42uYEILOH4hTpKOTUG05em48m1ryOLniuMIpQYJ3pyL0d0Gh7cuujGDX+HSlY
rTsaL0wyXwUj
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:49:43 2026 by rpki-client