Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/Ja3rDxt90AroBt3QfGvg-I25W6o.roa
File: Ja3rDxt90AroBt3QfGvg-I25W6o.roa (raw, json)
Hash identifier: rzFqZxATN8r1OfbR2IwYqqAdReVkWGyQF7aAc3rl7gY=
Subject key identifier: 25:AD:EB:0F:1B:7D:D0:0A:E8:06:DD:D0:7C:6B:E0:F8:8D:B9:5B:AA
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A13441F537D9CD0A71292DABC323E7C6A3
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/Ja3rDxt90AroBt3QfGvg-I25W6o.roa
Signing time: Tue 13 Oct 2026 07:54:59 +0000
ROA not before: Tue 13 Oct 2026 07:54:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198969
IP address blocks: 85.204.177.0/24 maxlen: 24
188.208.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:41:f5:37:d9:cd:0a:71:29:2d:ab:c3:23:e7:c6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Oct 13 07:54:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25adeb0f1b7dd00ae806ddd07c6be0f88db95baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a8:03:4e:80:43:27:c6:5b:c8:81:91:bd:80:
4d:9c:95:e4:51:e1:43:95:b1:4e:5d:52:51:46:9c:
b8:06:0a:65:54:69:b4:14:1d:8b:c8:18:f7:2f:ee:
ae:67:13:09:7d:50:a1:81:33:50:14:f4:eb:c9:0b:
a0:c6:39:aa:3b:3b:4a:8f:52:7f:fd:20:28:3b:fc:
86:bd:00:1f:24:de:19:15:b8:42:e8:67:86:78:5d:
df:c9:bb:30:57:5a:b6:d1:fd:27:d5:9b:fc:30:6c:
18:06:59:9f:cf:f2:c7:b4:36:e0:79:e5:78:3f:e8:
95:8e:7a:49:14:ce:50:06:d9:17:ca:32:a9:54:53:
81:ed:aa:48:04:86:23:39:b9:8b:ae:f4:01:92:53:
c7:49:e4:8d:c9:86:e1:8a:0a:45:c4:e0:20:18:de:
1b:c9:0d:85:1b:b9:c5:18:d7:a5:a8:34:47:71:9c:
c5:0e:13:d3:42:20:4a:17:15:87:78:71:b7:6e:12:
ba:fe:1d:8f:fe:9f:85:23:54:09:7c:4c:f0:c5:3c:
97:d5:63:2f:6f:25:fc:cd:78:31:a2:2f:d8:89:06:
b1:64:18:0e:02:e2:8c:64:40:5e:c6:31:ae:a2:ea:
e5:dd:1b:7c:54:5d:bc:fd:d8:5f:e7:83:d1:60:ac:
83:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AD:EB:0F:1B:7D:D0:0A:E8:06:DD:D0:7C:6B:E0:F8:8D:B9:5B:AA
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/Ja3rDxt90AroBt3QfGvg-I25W6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.177.0/24
188.208.96.0/24
Signature Algorithm: sha256WithRSAEncryption
63:be:7a:f9:3a:4d:ed:5b:ba:69:02:e5:02:b4:74:eb:2c:92:
3f:36:f1:7b:73:ca:b7:c8:ac:f2:6e:cd:a0:5e:20:88:ec:8b:
06:d3:51:c2:dd:c5:a7:10:69:6d:14:9d:07:e1:32:49:7d:f8:
ab:ce:a6:4a:14:cd:4c:7b:5e:80:33:78:0f:a9:eb:92:56:b3:
f1:03:ff:eb:52:a1:8b:d4:11:b7:3e:c0:c4:e8:b3:82:20:0f:
6b:f5:17:51:8b:d7:0b:32:5e:c4:b4:cc:b2:90:12:55:27:21:
a9:fa:f2:49:e0:d0:35:ba:ef:90:7e:61:9c:9f:0a:b9:3f:e8:
83:c2:30:fd:93:05:35:95:c3:cf:1a:7d:21:f0:76:00:16:22:
24:34:64:5c:56:2a:36:3c:71:be:1d:6c:f8:1c:a2:4d:01:95:
39:c2:2d:46:cf:fb:34:9b:f7:38:b0:4a:88:f0:f2:5f:21:2e:
63:7a:89:f0:af:7b:eb:20:83:01:20:49:ed:c1:2b:93:56:a8:
90:ba:b3:fe:65:39:1f:2e:28:0d:b7:41:8a:17:8e:c4:4e:37:
dc:21:7c:e6:98:9d:11:3c:c5:42:8c:50:6d:7a:25:23:f8:4b:
03:dc:e0:5d:b7:46:0c:88:08:2b:33:23:da:02:c2:d7:e5:83:
1f:ba:d2:24
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaE0QfU32c0KcSktq8Mj58ajMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk
OGIyZjcwHhcNMjYxMDEzMDc1NDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWFkZWIwZjFiN2RkMDBhZTgwNmRkZDA3YzZiZTBmODhkYjk1YmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwagDToBDJ8ZbyIGRvYBNnJXkUeFD
lbFOXVJRRpy4BgplVGm0FB2LyBj3L+6uZxMJfVChgTNQFPTryQugxjmqOztKj1J/
/SAoO/yGvQAfJN4ZFbhC6GeGeF3fybswV1q20f0n1Zv8MGwYBlmfz/LHtDbgeeV4
P+iVjnpJFM5QBtkXyjKpVFOB7apIBIYjObmLrvQBklPHSeSNyYbhigpFxOAgGN4b
yQ2FG7nFGNelqDRHcZzFDhPTQiBKFxWHeHG3bhK6/h2P/p+FI1QJfEzwxTyX1WMv
byX8zXgxoi/YiQaxZBgOAuKMZEBexjGuourl3Rt8VF28/dhf54PRYKyDRQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCWt6w8bfdAK6Abd0Hxr4PiNuVuqMB8GA1UdIwQY
MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct
YmJlYTI5MThlMTAyLzEvSmEzckR4dDkwQXJvQnQzUWZHdmctSTI1VzZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy
LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVcyxAwQA
vNBgMA0GCSqGSIb3DQEBCwUAA4IBAQBjvnr5Ok3tW7ppAuUCtHTrLJI/NvF7c8q3
yKzybs2gXiCI7IsG01HC3cWnEGltFJ0H4TJJffirzqZKFM1Me16AM3gPqeuSVrPx
A//rUqGL1BG3PsDE6LOCIA9r9RdRi9cLMl7EtMyykBJVJyGp+vJJ4NA1uu+QfmGc
nwq5P+iDwjD9kwU1lcPPGn0h8HYAFiIkNGRcVio2PHG+HWz4HKJNAZU5wi1Gz/s0
m/c4sEqI8PJfIS5jeonwr3vrIIMBIEntwSuTVqiQurP+ZTkfLigNt0GKF47ETjfc
IXzmmJ0RPMVCjFBteiUj+EsD3OBdt0YMiAgrMyPaAsLX5YMfutIk
-----END CERTIFICATE-----
Generated at Thu Oct 22 20:23:48 2026 by rpki-client