Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/3OVMsE-5ZEupDMfX9MTlCyp2wkM.roa
File: 3OVMsE-5ZEupDMfX9MTlCyp2wkM.roa (raw, json)
Hash identifier: z6ut5tdJDvXB8Jzf9s56+SPQvAn7Qp00GIZZPe2eAlQ=
Subject key identifier: DC:E5:4C:B0:4F:B9:64:4B:A9:0C:C7:D7:F4:C4:E5:0B:2A:76:C2:43
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 01A0439937988D433A96A2F6231A89B8330D
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/3OVMsE-5ZEupDMfX9MTlCyp2wkM.roa
Signing time: Thu 27 Aug 2026 14:21:49 +0000
ROA not before: Thu 27 Aug 2026 14:21:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207743
IP address blocks: 188.119.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:99:37:98:8d:43:3a:96:a2:f6:23:1a:89:b8:33:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Aug 27 14:21:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dce54cb04fb9644ba90cc7d7f4c4e50b2a76c243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:4a:63:61:a0:2e:4a:e4:e3:b3:6f:24:19:
0e:88:d9:f4:ab:a9:d2:41:e7:3e:97:97:36:1c:22:
42:81:81:bc:33:4a:62:5d:b2:d2:40:c2:bb:01:68:
be:08:3d:ad:9c:ad:8a:f8:57:71:7f:80:2a:87:e2:
bc:e4:64:e8:65:96:ac:89:57:33:58:1b:67:4b:0c:
92:5b:58:b8:4b:2d:6d:a5:fa:8b:33:33:51:08:19:
08:14:5b:e1:5d:6f:49:df:d3:e2:69:ca:a0:0f:06:
c8:db:3c:1b:0d:b6:41:0e:95:38:df:ed:f6:d1:dc:
59:b9:64:e1:04:90:32:ca:6c:21:21:12:51:8a:a0:
e9:26:e3:64:b3:9a:80:8f:82:18:64:c7:7b:d5:d4:
a0:06:30:f8:6e:23:a2:83:f2:a3:d8:9e:60:ae:19:
b4:58:28:f8:ba:ee:76:dd:71:4c:86:c3:93:c2:40:
d7:de:27:43:19:7d:91:79:1c:2c:af:1d:6e:8a:f3:
1b:49:c1:22:63:34:cd:95:5b:9c:f8:13:46:17:be:
af:1b:50:8c:0f:a5:d0:8d:33:77:a4:27:e6:b4:af:
88:e5:64:06:af:9c:bd:ba:a2:ba:d2:ad:b4:9f:78:
7b:23:61:00:ce:99:fd:dc:ea:fc:c2:f5:cb:ef:b5:
e3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E5:4C:B0:4F:B9:64:4B:A9:0C:C7:D7:F4:C4:E5:0B:2A:76:C2:43
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/3OVMsE-5ZEupDMfX9MTlCyp2wkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.119.156.0/23
Signature Algorithm: sha256WithRSAEncryption
07:a4:d9:44:c9:e7:f1:11:c5:88:f7:06:91:a2:e5:87:bd:f2:
d3:71:e9:55:a6:46:b5:ae:f9:df:88:39:6a:8b:5b:f9:f1:e4:
36:16:8a:93:38:49:2c:14:cb:6b:1d:fb:56:52:7d:ee:b3:2a:
7f:b3:34:31:82:18:41:5f:ef:8c:5f:67:b9:7a:d4:07:0b:d3:
72:31:69:78:29:12:fe:cf:a3:2b:f1:7c:52:ad:02:b4:21:ca:
5c:4c:ca:2e:0a:a3:77:59:04:8c:39:a5:c3:cf:84:12:9f:f5:
72:0a:6c:dc:81:95:d6:f0:f7:43:41:ad:0f:0b:9e:10:df:86:
09:ae:0d:55:f4:f8:59:64:e1:f1:91:e8:51:07:72:4f:d5:d7:
78:e5:15:ae:95:ff:47:6a:c8:aa:4e:6b:eb:f1:6a:6b:0d:7c:
16:e8:e3:36:df:00:ba:0b:a3:ad:3c:8f:60:31:64:0d:54:fe:
17:37:c0:54:d1:dc:b9:bf:70:a6:b6:b9:95:d2:66:fb:13:c3:
5d:b8:ae:e2:bb:28:12:63:ab:74:ea:de:57:7e:2b:71:26:1c:
39:48:db:26:7c:81:30:1c:b0:30:55:a1:7a:a0:f1:48:cd:0d:
6f:97:0b:a7:0a:58:b8:91:ee:0b:6f:36:3a:8e:9c:3c:b0:28:
ea:89:b1:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBDmTeYjUM6lqL2IxqJuDMNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4
ZDFkMjYwHhcNMjYwODI3MTQyMTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2U1NGNiMDRmYjk2NDRiYTkwY2M3ZDdmNGM0ZTUwYjJhNzZjMjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaVKY2GgLkrk47NvJBkOiNn0q6nS
Qec+l5c2HCJCgYG8M0piXbLSQMK7AWi+CD2tnK2K+Fdxf4Aqh+K85GToZZasiVcz
WBtnSwySW1i4Sy1tpfqLMzNRCBkIFFvhXW9J39PiacqgDwbI2zwbDbZBDpU43+32
0dxZuWThBJAyymwhIRJRiqDpJuNks5qAj4IYZMd71dSgBjD4biOig/Kj2J5grhm0
WCj4uu523XFMhsOTwkDX3idDGX2ReRwsrx1uivMbScEiYzTNlVuc+BNGF76vG1CM
D6XQjTN3pCfmtK+I5WQGr5y9uqK60q20n3h7I2EAzpn93Or8wvXL77Xj4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNzlTLBPuWRLqQzH1/TE5QsqdsJDMB8GA1UdIwQY
MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt
ZmE5Y2I1MWNkMGYxLzEvM09WTXNFLTVaRXVwRE1mWDlNVGxDeXAyd2tNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx
LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvHecMA0G
CSqGSIb3DQEBCwUAA4IBAQAHpNlEyefxEcWI9waRouWHvfLTcelVpka1rvnfiDlq
i1v58eQ2FoqTOEksFMtrHftWUn3usyp/szQxghhBX++MX2e5etQHC9NyMWl4KRL+
z6Mr8XxSrQK0IcpcTMouCqN3WQSMOaXDz4QSn/VyCmzcgZXW8PdDQa0PC54Q34YJ
rg1V9PhZZOHxkehRB3JP1dd45RWulf9HasiqTmvr8WprDXwW6OM23wC6C6OtPI9g
MWQNVP4XN8BU0dy5v3CmtrmV0mb7E8NduK7iuygSY6t06t5XfitxJhw5SNsmfIEw
HLAwVaF6oPFIzQ1vlwunCli4ke4LbzY6jpw8sCjqibFV
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:13:59 2026 by rpki-client