Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/u160Jah7hr6D732oGKFsXLBVoaM.roa
File: u160Jah7hr6D732oGKFsXLBVoaM.roa (raw, json)
Hash identifier: jqJUVyD95/VoCXLkI72WeORMPIzKdKLuEWQQeOaKueE=
Subject key identifier: BB:5E:B4:25:A8:7B:86:BE:83:EF:7D:A8:18:A1:6C:5C:B0:55:A1:A3
Certificate issuer: /CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
Certificate serial: 01A0AE9A5E7D92AF998646C4508EFE1B900E
Authority key identifier: 8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/u160Jah7hr6D732oGKFsXLBVoaM.roa
Signing time: Thu 17 Sep 2026 09:02:27 +0000
ROA not before: Thu 17 Sep 2026 09:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28818
IP address blocks: 195.72.113.0/24 maxlen: 24
195.72.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:9a:5e:7d:92:af:99:86:46:c4:50:8e:fe:1b:90:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
Validity
Not Before: Sep 17 09:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb5eb425a87b86be83ef7da818a16c5cb055a1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b1:3c:b3:3e:07:c9:4d:ea:43:31:4a:50:93:
8c:7f:9c:9f:4a:99:71:af:c8:76:77:ed:79:2f:9e:
ff:e9:9f:de:b2:d4:d1:06:0c:3d:34:e0:12:cb:0a:
8a:65:83:50:18:65:8d:e0:c9:0b:e2:cc:71:91:50:
30:3f:80:48:6a:ec:18:9e:72:82:f5:af:7d:ac:38:
4f:2b:cf:cc:ba:9b:59:1d:cb:dc:c1:0b:e8:1d:d2:
a4:ff:69:50:06:96:60:e0:0e:1f:45:de:77:82:ec:
75:d7:91:49:1e:4e:b6:f1:f0:e7:d9:53:fb:1b:38:
ba:4b:f5:84:07:bd:02:ae:b0:b6:88:20:ed:4e:95:
60:31:34:0d:31:09:4e:3f:97:f2:3d:53:1c:2a:60:
8b:42:64:19:91:89:29:c2:78:54:64:95:c5:70:44:
08:78:ca:0a:dc:9b:08:bd:ed:9c:27:d1:61:c8:eb:
05:fe:48:d0:e9:e4:b0:fd:f0:1a:98:e4:bf:36:87:
51:54:22:17:24:67:01:f8:7b:04:32:27:7d:14:22:
e3:78:0d:6a:55:8e:be:ff:40:01:f3:67:b1:12:31:
39:25:de:3d:bc:20:24:ad:0a:d0:18:57:d5:e7:76:
5f:97:7f:c8:8c:92:06:5f:ca:29:65:c4:c2:35:70:
85:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5E:B4:25:A8:7B:86:BE:83:EF:7D:A8:18:A1:6C:5C:B0:55:A1:A3
X509v3 Authority Key Identifier:
keyid:8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/u160Jah7hr6D732oGKFsXLBVoaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.72.113.0-195.72.115.255
Signature Algorithm: sha256WithRSAEncryption
47:58:76:5e:69:52:e5:88:bd:24:2f:18:a7:b4:19:92:e4:bd:
ac:a1:d7:27:af:23:22:2c:c8:ec:b5:ac:5f:d9:6d:48:f7:a4:
18:6c:cd:d7:12:e4:7f:9a:60:ce:0d:1e:13:d6:dc:18:74:c8:
b1:93:c9:d8:0f:b7:58:70:99:cc:87:80:9b:af:9b:a5:0b:e4:
83:3b:99:f2:c6:e0:2b:a4:e1:45:38:4b:85:26:5a:fc:f4:99:
1d:14:1b:51:7b:e2:04:7e:86:ba:80:86:bd:0d:69:9b:b7:38:
e2:9d:08:8f:06:62:35:59:3c:24:96:5a:bf:c3:eb:a1:57:3b:
b1:ae:18:ed:f4:4f:44:b5:6e:3e:88:48:a2:3f:f8:f3:d0:37:
72:a7:05:35:6f:de:14:7f:b0:99:85:f2:3a:f4:a0:90:14:60:
fe:ef:47:a2:70:2f:01:e7:78:fc:a0:69:ac:0f:dd:1a:08:94:
f1:48:4a:3c:f6:45:ac:f1:1b:d7:f9:6f:42:1f:b6:60:b4:96:
1f:85:9d:27:dd:78:22:64:d2:9b:f8:35:f5:dd:4a:73:50:02:
92:34:5f:f8:df:e6:4c:82:97:07:a6:1a:e1:d7:62:46:22:89:
f7:49:9c:e5:7d:bc:91:5f:46:1e:96:ae:cb:45:3c:05:5f:3c:
b0:3c:0d:39
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAaCuml59kq+ZhkbEUI7+G5AOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjODk4MDFiMTlhYTk3MjhhZDRmNmJiNzE4NWMxMWYxNGI5
ZDhkN2MwHhcNMjYwOTE3MDkwMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjVlYjQyNWE4N2I4NmJlODNlZjdkYTgxOGExNmM1Y2IwNTVhMWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbE8sz4HyU3qQzFKUJOMf5yfSplx
r8h2d+15L57/6Z/estTRBgw9NOASywqKZYNQGGWN4MkL4sxxkVAwP4BIauwYnnKC
9a99rDhPK8/MuptZHcvcwQvoHdKk/2lQBpZg4A4fRd53gux115FJHk628fDn2VP7
Gzi6S/WEB70CrrC2iCDtTpVgMTQNMQlOP5fyPVMcKmCLQmQZkYkpwnhUZJXFcEQI
eMoK3JsIve2cJ9FhyOsF/kjQ6eSw/fAamOS/NodRVCIXJGcB+HsEMid9FCLjeA1q
VY6+/0AB82exEjE5Jd49vCAkrQrQGFfV53Zfl3/IjJIGX8opZcTCNXCFEwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFLtetCWoe4a+g+99qBihbFywVaGjMB8GA1UdIwQY
MBaAFIyJgBsZqpcorU9rtxhcEfFLnY18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakltQUd4bXFseWl0VDJ1M0dGd1I4VXVkalh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8zMDY2Y2EtZTAxNy00ZjYxLWFkYzUt
NzI4ZTk5NjdkYWNhLzEvdTE2MEphaDdocjZENzMyb0dLRnNYTEJWb2FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8zMDY2Y2EtZTAxNy00ZjYxLWFkYzUtNzI4ZTk5NjdkYWNh
LzEvakltQUd4bXFseWl0VDJ1M0dGd1I4VXVkalh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADDSHED
BALDSHAwDQYJKoZIhvcNAQELBQADggEBAEdYdl5pUuWIvSQvGKe0GZLkvayh1yev
IyIsyOy1rF/ZbUj3pBhszdcS5H+aYM4NHhPW3Bh0yLGTydgPt1hwmcyHgJuvm6UL
5IM7mfLG4Cuk4UU4S4UmWvz0mR0UG1F74gR+hrqAhr0NaZu3OOKdCI8GYjVZPCSW
Wr/D66FXO7GuGO30T0S1bj6ISKI/+PPQN3KnBTVv3hR/sJmF8jr0oJAUYP7vR6Jw
LwHnePygaawP3RoIlPFISjz2RazxG9f5b0IftmC0lh+FnSfdeCJk0pv4NfXdSnNQ
ApI0X/jf5kyClwemGuHXYkYiifdJnOV9vJFfRh6WrstFPAVfPLA8DTk=
-----END CERTIFICATE-----
Generated at Fri Oct 30 14:08:14 2026 by rpki-client