Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/35cdf3-2110-4b90-9934-30812d9e3429/1/0-Kq8JhekEwMATB4Jq4vPV1o2EA.roa
File: 0-Kq8JhekEwMATB4Jq4vPV1o2EA.roa (raw, json)
Hash identifier: x3WbjY2+9e4VpCttB1stFL71S7XcyqEUBA1zxosZSo0=
Subject key identifier: D3:E2:AA:F0:98:5E:90:4C:0C:01:30:78:26:AE:2F:3D:5D:68:D8:40
Certificate issuer: /CN=22945c67de62202dd86df9ab8a906e66fe177186
Certificate serial: 019FD6552D96CF145D55C7BCBA8B2DF4AF4E
Authority key identifier: 22:94:5C:67:DE:62:20:2D:D8:6D:F9:AB:8A:90:6E:66:FE:17:71:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpRcZ95iIC3YbfmripBuZv4XcYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/35cdf3-2110-4b90-9934-30812d9e3429/1/0-Kq8JhekEwMATB4Jq4vPV1o2EA.roa
Signing time: Thu 06 Aug 2026 09:08:54 +0000
ROA not before: Thu 06 Aug 2026 09:08:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57803
IP address blocks: 91.245.66.0/23 maxlen: 23
147.78.8.0/22 maxlen: 22
185.200.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/35cdf3-2110-4b90-9934-30812d9e3429/1/IpRcZ95iIC3YbfmripBuZv4XcYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/35cdf3-2110-4b90-9934-30812d9e3429/1/IpRcZ95iIC3YbfmripBuZv4XcYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IpRcZ95iIC3YbfmripBuZv4XcYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:55:2d:96:cf:14:5d:55:c7:bc:ba:8b:2d:f4:af:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22945c67de62202dd86df9ab8a906e66fe177186
Validity
Not Before: Aug 6 09:08:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3e2aaf0985e904c0c01307826ae2f3d5d68d840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1c:6c:77:f3:7f:1e:fd:c1:9b:e2:07:e8:8b:
ba:57:d5:aa:19:3d:93:0f:be:2f:48:32:24:d6:13:
cf:39:9e:72:15:f0:5b:94:76:44:cb:e0:8b:16:09:
77:3d:39:d6:49:79:07:5d:e6:b2:8e:d5:08:c4:52:
1f:49:d8:6b:91:a1:18:0c:c8:4b:ee:97:e3:47:4d:
ec:45:e6:a0:04:e9:d4:6c:3a:bc:52:8f:9b:a1:e6:
83:bc:36:1a:2f:a6:5d:a1:3b:26:f6:e3:4d:df:dd:
9b:78:6a:40:ee:9d:5b:2a:33:22:03:bc:a1:d2:93:
cc:dd:f6:16:79:87:fb:25:4a:7d:7a:53:0c:e6:43:
7f:37:dc:14:b4:d0:bd:3a:84:1b:98:0e:03:c2:7b:
10:49:ef:91:93:9a:34:ff:f4:3a:df:42:6f:d9:af:
86:cd:22:2e:4d:bd:03:9c:f6:35:70:b3:bb:a0:ea:
81:77:9b:4e:bf:a2:e1:56:dc:48:8a:87:0c:cb:3d:
49:75:c3:ec:e6:26:f9:92:01:96:91:fa:d6:23:20:
ff:47:95:ba:e8:41:80:56:36:74:74:42:c3:b0:28:
a1:47:21:e5:58:8b:60:f2:4b:99:f6:46:86:8a:45:
8d:99:56:e7:93:a8:e1:0c:2c:9a:60:41:a4:ea:0c:
1e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E2:AA:F0:98:5E:90:4C:0C:01:30:78:26:AE:2F:3D:5D:68:D8:40
X509v3 Authority Key Identifier:
keyid:22:94:5C:67:DE:62:20:2D:D8:6D:F9:AB:8A:90:6E:66:FE:17:71:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpRcZ95iIC3YbfmripBuZv4XcYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/35cdf3-2110-4b90-9934-30812d9e3429/1/0-Kq8JhekEwMATB4Jq4vPV1o2EA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/35cdf3-2110-4b90-9934-30812d9e3429/1/IpRcZ95iIC3YbfmripBuZv4XcYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.66.0/23
147.78.8.0/22
185.200.171.0/24
Signature Algorithm: sha256WithRSAEncryption
35:9d:d9:ff:bf:b7:d5:b5:12:03:45:69:cc:69:44:31:dd:9f:
ab:61:4c:97:b9:7d:95:b3:24:72:39:fd:0e:88:95:3a:a5:13:
8d:00:da:1f:3d:94:66:1f:5e:02:bf:96:3b:c5:c9:d3:e4:e3:
eb:f3:18:5c:e1:17:a3:dd:b5:63:61:e0:b4:f8:92:47:0c:75:
9d:cb:6c:4b:c0:33:0a:28:9b:28:e1:f0:73:27:14:41:1f:4c:
d1:fb:84:e9:91:5f:26:44:3d:c4:1c:8c:3a:f5:dc:c0:e8:83:
68:a5:e0:64:4b:20:24:46:26:7b:a0:24:28:01:72:a0:1b:c2:
50:77:ab:68:76:08:94:d3:fe:7f:41:23:8a:ee:af:9d:39:8e:
d1:81:8a:58:e2:34:22:fc:a1:85:0d:09:bf:25:88:67:60:52:
b3:5e:9f:d0:0e:e0:89:1e:9e:09:3d:d8:5e:a7:ff:1d:a4:cc:
d1:83:35:d2:f8:c5:96:a7:30:62:55:f7:23:89:77:82:d3:b7:
1b:73:ea:76:27:2f:bb:91:db:7e:48:31:b2:89:44:da:c3:27:
ae:fb:bc:53:40:3e:56:b3:45:19:14:fb:8a:c7:0c:0c:06:2b:
cb:74:12:a8:91:9d:62:64:2f:5f:f3:f4:6d:7c:4a:57:65:40:
9a:d6:c4:b4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ/WVS2WzxRdVce8uost9K9OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyOTQ1YzY3ZGU2MjIwMmRkODZkZjlhYjhhOTA2ZTY2ZmUx
NzcxODYwHhcNMjYwODA2MDkwODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2UyYWFmMDk4NWU5MDRjMGMwMTMwNzgyNmFlMmYzZDVkNjhkODQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxxsd/N/Hv3Bm+IH6Iu6V9WqGT2T
D74vSDIk1hPPOZ5yFfBblHZEy+CLFgl3PTnWSXkHXeayjtUIxFIfSdhrkaEYDMhL
7pfjR03sReagBOnUbDq8Uo+boeaDvDYaL6ZdoTsm9uNN392beGpA7p1bKjMiA7yh
0pPM3fYWeYf7JUp9elMM5kN/N9wUtNC9OoQbmA4DwnsQSe+Rk5o0//Q630Jv2a+G
zSIuTb0DnPY1cLO7oOqBd5tOv6LhVtxIiocMyz1JdcPs5ib5kgGWkfrWIyD/R5W6
6EGAVjZ0dELDsCihRyHlWItg8kuZ9kaGikWNmVbnk6jhDCyaYEGk6gwelQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNPiqvCYXpBMDAEweCauLz1daNhAMB8GA1UdIwQY
MBaAFCKUXGfeYiAt2G35q4qQbmb+F3GGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXBSY1o5NWlJQzNZYmZtcmlwQnVadjRYY1lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8zNWNkZjMtMjExMC00YjkwLTk5MzQt
MzA4MTJkOWUzNDI5LzEvMC1LcThKaGVrRXdNQVRCNEpxNHZQVjFvMkVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8zNWNkZjMtMjExMC00YjkwLTk5MzQtMzA4MTJkOWUzNDI5
LzEvSXBSY1o5NWlJQzNZYmZtcmlwQnVadjRYY1lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW/VCAwQC
k04IAwQAucirMA0GCSqGSIb3DQEBCwUAA4IBAQA1ndn/v7fVtRIDRWnMaUQx3Z+r
YUyXuX2VsyRyOf0OiJU6pRONANofPZRmH14Cv5Y7xcnT5OPr8xhc4Rej3bVjYeC0
+JJHDHWdy2xLwDMKKJso4fBzJxRBH0zR+4TpkV8mRD3EHIw69dzA6INopeBkSyAk
RiZ7oCQoAXKgG8JQd6todgiU0/5/QSOK7q+dOY7RgYpY4jQi/KGFDQm/JYhnYFKz
Xp/QDuCJHp4JPdhep/8dpMzRgzXS+MWWpzBiVfcjiXeC07cbc+p2Jy+7kdt+SDGy
iUTawyeu+7xTQD5Ws0UZFPuKxwwMBivLdBKokZ1iZC9f8/RtfEpXZUCa1sS0
-----END CERTIFICATE-----
Generated at Thu Sep 10 02:47:53 2026 by rpki-client