Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/ad0e10-0196-4751-a718-3ed3bf6762d0/1/CNxmEVESKi3VdzXhEwExU9DPZz4.roa
File: CNxmEVESKi3VdzXhEwExU9DPZz4.roa (raw, json)
Hash identifier: wiIIkgfI8xTRZVHzJS4Y8nVdrsK8cwAvgmVx/dnkzjI=
Subject key identifier: 08:DC:66:11:51:12:2A:2D:D5:77:35:E1:13:01:31:53:D0:CF:67:3E
Certificate issuer: /CN=b84a366ea86230effae8316ab4956b15645c4d43
Certificate serial: 01A0480526C119007EF5C5CAA5CD6C264B28
Authority key identifier: B8:4A:36:6E:A8:62:30:EF:FA:E8:31:6A:B4:95:6B:15:64:5C:4D:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEo2bqhiMO_66DFqtJVrFWRcTUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ad0e10-0196-4751-a718-3ed3bf6762d0/1/CNxmEVESKi3VdzXhEwExU9DPZz4.roa
Signing time: Fri 28 Aug 2026 10:58:12 +0000
ROA not before: Fri 28 Aug 2026 10:58:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202053
IP address blocks: 193.104.38.0/24 maxlen: 24
2001:67c:70::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ad0e10-0196-4751-a718-3ed3bf6762d0/1/uEo2bqhiMO_66DFqtJVrFWRcTUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ad0e10-0196-4751-a718-3ed3bf6762d0/1/uEo2bqhiMO_66DFqtJVrFWRcTUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/uEo2bqhiMO_66DFqtJVrFWRcTUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:05:26:c1:19:00:7e:f5:c5:ca:a5:cd:6c:26:4b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b84a366ea86230effae8316ab4956b15645c4d43
Validity
Not Before: Aug 28 10:58:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08dc661151122a2dd57735e113013153d0cf673e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:19:67:6b:27:e6:0c:d1:28:8a:87:da:f2:a5:
ce:46:76:e6:6d:55:2b:57:37:02:17:a8:92:31:b1:
8d:25:8c:9c:05:dd:5c:34:98:72:5c:47:fa:58:68:
5e:a4:db:8d:36:97:45:a0:01:10:24:63:55:64:ca:
9a:b9:af:92:9c:33:81:84:af:38:0c:d4:a0:84:68:
9f:f3:bc:6f:5d:52:ab:c4:ea:4c:0c:c2:68:6e:88:
e5:42:af:ef:e9:7c:71:94:5d:b4:93:6c:22:cc:e3:
da:8a:f0:e5:e1:4d:34:15:c4:db:7c:f7:ed:c2:51:
8b:4e:48:e0:2d:c1:8b:86:ec:64:6b:7d:d9:eb:57:
fc:85:e1:ff:a1:68:9e:c6:6c:f8:83:b0:b5:d2:9f:
dc:8b:cf:a0:e4:b4:a1:a5:7a:47:db:c6:9e:3b:dc:
f6:4e:49:86:f5:b6:73:d9:5f:e0:c2:a9:48:71:c3:
ab:51:87:de:09:43:27:1f:a0:a6:0d:cd:7a:49:56:
56:a6:b1:d4:c8:7e:cf:8b:58:6d:c2:8a:7b:b8:7a:
b3:da:af:c3:ce:f3:dc:f8:44:c9:0d:9e:d9:70:0c:
ea:58:a7:d4:47:0f:85:ea:e9:20:f0:b3:2f:ee:ea:
0c:a1:95:bd:5e:5f:b3:29:9c:ae:59:0f:52:e1:11:
9b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DC:66:11:51:12:2A:2D:D5:77:35:E1:13:01:31:53:D0:CF:67:3E
X509v3 Authority Key Identifier:
keyid:B8:4A:36:6E:A8:62:30:EF:FA:E8:31:6A:B4:95:6B:15:64:5C:4D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEo2bqhiMO_66DFqtJVrFWRcTUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ad0e10-0196-4751-a718-3ed3bf6762d0/1/CNxmEVESKi3VdzXhEwExU9DPZz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ad0e10-0196-4751-a718-3ed3bf6762d0/1/uEo2bqhiMO_66DFqtJVrFWRcTUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.38.0/24
IPv6:
2001:67c:70::/48
Signature Algorithm: sha256WithRSAEncryption
59:b7:7c:c5:ef:28:2d:d9:a2:2a:7e:b4:cb:29:02:ef:21:6e:
7a:33:90:f1:28:54:86:cf:ba:47:b4:d5:75:83:4d:75:94:52:
b1:0d:38:42:5c:8e:b9:f8:de:e8:c0:75:bb:7f:c3:89:97:58:
59:22:4e:3f:d3:8f:83:e0:2a:f1:dc:b2:13:3a:ef:4b:cf:9c:
b4:64:3a:98:60:ae:58:b4:f6:b8:80:a4:65:06:fa:63:42:48:
d2:4a:bd:54:fe:0e:4c:1b:4f:ee:c6:05:f7:4f:af:e4:f1:83:
86:cd:b7:bf:67:6c:e7:42:75:69:b0:e7:87:3b:9a:f8:99:6e:
06:3e:65:50:71:d7:7d:8d:b0:41:98:ef:73:fc:fe:95:fd:56:
91:28:f2:0c:04:9a:ef:b0:06:b1:53:17:2d:d7:98:48:b3:50:
b2:5b:3b:f5:2b:ea:9f:1e:76:e1:5c:46:e9:b0:ba:33:b2:0b:
e3:ac:99:27:3c:7e:5b:42:90:5d:56:2a:fa:ed:99:2d:03:1f:
e2:68:ae:b4:42:1d:49:8e:d5:75:36:a0:e3:0e:d5:5b:22:93:
d9:de:3a:fa:b0:d0:e1:81:f4:0c:67:e7:5b:37:49:33:95:2b:
04:d1:0b:5b:4e:90:52:9a:0e:f2:03:d5:35:fc:8d:26:9e:fe:
e5:48:d4:95
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAaBIBSbBGQB+9cXKpc1sJksoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NGEzNjZlYTg2MjMwZWZmYWU4MzE2YWI0OTU2YjE1NjQ1
YzRkNDMwHhcNMjYwODI4MTA1ODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGRjNjYxMTUxMTIyYTJkZDU3NzM1ZTExMzAxMzE1M2QwY2Y2NzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRlnayfmDNEoiofa8qXORnbmbVUr
VzcCF6iSMbGNJYycBd1cNJhyXEf6WGhepNuNNpdFoAEQJGNVZMqaua+SnDOBhK84
DNSghGif87xvXVKrxOpMDMJobojlQq/v6XxxlF20k2wizOPaivDl4U00FcTbfPft
wlGLTkjgLcGLhuxka33Z61f8heH/oWiexmz4g7C10p/ci8+g5LShpXpH28aeO9z2
TkmG9bZz2V/gwqlIccOrUYfeCUMnH6CmDc16SVZWprHUyH7Pi1htwop7uHqz2q/D
zvPc+ETJDZ7ZcAzqWKfURw+F6ukg8LMv7uoMoZW9Xl+zKZyuWQ9S4RGbvwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAjcZhFREiot1Xc14RMBMVPQz2c+MB8GA1UdIwQY
MBaAFLhKNm6oYjDv+ugxarSVaxVkXE1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUVvMmJxaGlNT182NkRGcXRKVnJGV1JjVFVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9hZDBlMTAtMDE5Ni00NzUxLWE3MTgt
M2VkM2JmNjc2MmQwLzEvQ054bUVWRVNLaTNWZHpYaEV3RXhVOURQWno0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9hZDBlMTAtMDE5Ni00NzUxLWE3MTgtM2VkM2JmNjc2MmQw
LzEvdUVvMmJxaGlNT182NkRGcXRKVnJGV1JjVFVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwWgmMA8E
AgACMAkDBwAgAQZ8AHAwDQYJKoZIhvcNAQELBQADggEBAFm3fMXvKC3Zoip+tMsp
Au8hbnozkPEoVIbPuke01XWDTXWUUrENOEJcjrn43ujAdbt/w4mXWFkiTj/Tj4Pg
KvHcshM670vPnLRkOphgrli09riApGUG+mNCSNJKvVT+DkwbT+7GBfdPr+Txg4bN
t79nbOdCdWmw54c7mviZbgY+ZVBx132NsEGY73P8/pX9VpEo8gwEmu+wBrFTFy3X
mEizULJbO/Ur6p8eduFcRumwujOyC+OsmSc8fltCkF1WKvrtmS0DH+JorrRCHUmO
1XU2oOMO1Vsik9neOvqw0OGB9Axn51s3STOVKwTRC1tOkFKaDvID1TX8jSae/uVI
1JU=
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:08:31 2026 by rpki-client