Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/pAfK5uyrkctmgL3yONsl0eqIljM.roa
File: pAfK5uyrkctmgL3yONsl0eqIljM.roa (raw, json)
Hash identifier: 7kLx+h7kf/bkG2ztU/Ol4zBBOF4hzYF/UN8V7F0vcSQ=
Subject key identifier: A4:07:CA:E6:EC:AB:91:CB:66:80:BD:F2:38:DB:25:D1:EA:88:96:33
Certificate issuer: /CN=00e0b4eaf9c10791f353ba987de2360a138417bd
Certificate serial: 01A05C2EE58236BCDD61493DD7D5A27816A0
Authority key identifier: 00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/pAfK5uyrkctmgL3yONsl0eqIljM.roa
Signing time: Tue 01 Sep 2026 08:56:12 +0000
ROA not before: Tue 01 Sep 2026 08:56:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147241
IP address blocks: 195.93.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:2e:e5:82:36:bc:dd:61:49:3d:d7:d5:a2:78:16:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e0b4eaf9c10791f353ba987de2360a138417bd
Validity
Not Before: Sep 1 08:56:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a407cae6ecab91cb6680bdf238db25d1ea889633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:f3:1e:a1:f7:d2:45:55:03:5c:a8:69:17:
46:8f:6a:c2:97:c6:c4:b5:ea:f1:0a:34:27:19:a1:
ba:15:90:45:81:a4:71:3e:59:e7:98:8a:86:16:6c:
7a:d3:32:14:79:34:aa:af:3f:44:ed:de:10:20:a9:
96:34:f7:80:1c:c6:3e:66:35:66:db:48:e7:2a:a1:
5d:08:c4:6e:27:55:f2:b5:dd:50:06:21:bc:72:c1:
b5:7d:1b:da:d0:70:8a:de:23:63:d0:0f:2a:b0:ab:
9a:6b:71:b2:fa:13:52:e8:b7:4f:9e:40:22:30:8d:
5e:d8:2a:58:e8:dc:29:b9:7f:0a:eb:c0:92:12:e5:
c2:01:fe:74:1b:a2:95:03:09:b9:18:fd:c4:c3:f7:
93:c7:5e:45:ad:cb:ab:28:6f:68:5c:29:93:38:04:
7c:56:53:08:c9:79:b7:34:bd:18:a4:a2:91:7d:fe:
d9:8b:db:a5:aa:05:8a:d7:5e:03:f8:22:b7:e9:b8:
bb:bc:c0:08:c7:df:35:9e:f3:56:80:00:e4:81:34:
6c:ed:fa:f6:f4:4c:2c:d5:e9:76:63:f8:ac:1e:cf:
af:80:42:1e:16:3e:de:af:45:aa:3c:a5:55:f1:5b:
35:8f:00:91:0d:a6:03:09:ea:96:ed:2a:32:8d:27:
19:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:07:CA:E6:EC:AB:91:CB:66:80:BD:F2:38:DB:25:D1:EA:88:96:33
X509v3 Authority Key Identifier:
keyid:00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/pAfK5uyrkctmgL3yONsl0eqIljM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.227.0/24
Signature Algorithm: sha256WithRSAEncryption
08:e2:1b:7c:eb:10:3f:d7:d9:3a:b6:59:bf:dd:43:9c:f8:9d:
5f:23:c5:a4:26:d5:7f:9e:c0:2f:6b:44:f7:66:67:4d:0d:fe:
44:92:3a:93:a1:e6:23:6e:00:51:b3:ad:94:22:52:00:7d:c6:
ae:23:7d:b7:2e:56:ff:33:a2:43:87:16:ee:55:89:2f:a7:40:
e5:35:65:1a:dd:a7:10:0c:cc:ee:76:83:a5:6c:98:a9:02:52:
ee:cf:e4:37:5d:b5:f0:44:c3:ba:7c:8b:32:a5:b3:5e:5d:f8:
a4:46:cd:e6:0f:1c:ee:f2:18:4f:c9:97:b1:45:ab:6a:32:39:
d6:a5:9b:74:47:24:2b:ee:82:16:ff:9c:aa:8c:b6:62:67:66:
d4:4e:53:c7:fe:af:ce:4f:95:a7:59:b9:ad:18:8b:50:56:72:
09:79:c9:42:b8:a9:a8:54:4c:7f:b2:50:f9:b5:8e:a5:ce:a3:
0b:88:d1:f1:6c:1c:3b:98:25:cb:90:19:71:aa:fe:2c:28:18:
1d:d6:8f:59:c5:5c:23:50:9b:a9:a7:6c:1b:61:a2:8b:f4:97:
87:5b:3b:c6:04:0d:be:85:c1:85:14:d3:5d:fd:72:cb:af:a8:
b9:55:87:b1:78:4d:9d:e0:14:ed:23:47:38:bf:16:eb:80:c2:
be:ac:36:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBcLuWCNrzdYUk919WieBagMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZTBiNGVhZjljMTA3OTFmMzUzYmE5ODdkZTIzNjBhMTM4
NDE3YmQwHhcNMjYwOTAxMDg1NjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDA3Y2FlNmVjYWI5MWNiNjY4MGJkZjIzOGRiMjVkMWVhODg5NjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFjzHqH30kVVA1yoaRdGj2rCl8bE
terxCjQnGaG6FZBFgaRxPlnnmIqGFmx60zIUeTSqrz9E7d4QIKmWNPeAHMY+ZjVm
20jnKqFdCMRuJ1Xytd1QBiG8csG1fRva0HCK3iNj0A8qsKuaa3Gy+hNS6LdPnkAi
MI1e2CpY6NwpuX8K68CSEuXCAf50G6KVAwm5GP3Ew/eTx15FrcurKG9oXCmTOAR8
VlMIyXm3NL0YpKKRff7Zi9ulqgWK114D+CK36bi7vMAIx981nvNWgADkgTRs7fr2
9Ews1el2Y/isHs+vgEIeFj7er0WqPKVV8Vs1jwCRDaYDCeqW7SoyjScZQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKQHyubsq5HLZoC98jjbJdHqiJYzMB8GA1UdIwQY
MBaAFADgtOr5wQeR81O6mH3iNgoThBe9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU9DMDZ2bkJCNUh6VTdxWWZlSTJDaE9FRjcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yMTAwNDMtNWFmZS00NTZmLWIzZjgt
ZGMwMjc0MzJlNWE1LzEvcEFmSzV1eXJrY3RtZ0wzeU9Oc2wwZXFJbGpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8yMTAwNDMtNWFmZS00NTZmLWIzZjgtZGMwMjc0MzJlNWE1
LzEvQU9DMDZ2bkJCNUh6VTdxWWZlSTJDaE9FRjcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw13jMA0G
CSqGSIb3DQEBCwUAA4IBAQAI4ht86xA/19k6tlm/3UOc+J1fI8WkJtV/nsAva0T3
ZmdNDf5EkjqToeYjbgBRs62UIlIAfcauI323Llb/M6JDhxbuVYkvp0DlNWUa3acQ
DMzudoOlbJipAlLuz+Q3XbXwRMO6fIsypbNeXfikRs3mDxzu8hhPyZexRatqMjnW
pZt0RyQr7oIW/5yqjLZiZ2bUTlPH/q/OT5WnWbmtGItQVnIJeclCuKmoVEx/slD5
tY6lzqMLiNHxbBw7mCXLkBlxqv4sKBgd1o9ZxVwjUJupp2wbYaKL9JeHWzvGBA2+
hcGFFNNd/XLLr6i5VYexeE2d4BTtI0c4vxbrgMK+rDY7
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:35:39 2026 by rpki-client