Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/9BMpPQCXYa9iAWdP2TQAreaKWyQ.roa
File: 9BMpPQCXYa9iAWdP2TQAreaKWyQ.roa (raw, json)
Hash identifier: xV21n8W5dIy0xlrUtRbBzIVLWmesJ+mUBCHJFnPnvhs=
Subject key identifier: F4:13:29:3D:00:97:61:AF:62:01:67:4F:D9:34:00:AD:E6:8A:5B:24
Certificate issuer: /CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Certificate serial: 01A038D6FA9B93D1B37522E7D53E5A5CB7C5
Authority key identifier: 4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/9BMpPQCXYa9iAWdP2TQAreaKWyQ.roa
Signing time: Tue 25 Aug 2026 12:13:27 +0000
ROA not before: Tue 25 Aug 2026 12:13:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202230
IP address blocks: 185.32.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:d6:fa:9b:93:d1:b3:75:22:e7:d5:3e:5a:5c:b7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Validity
Not Before: Aug 25 12:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f413293d009761af6201674fd93400ade68a5b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:2d:ba:37:7c:12:ec:93:63:08:08:f3:ee:5b:
e4:a4:7c:3d:9d:41:e6:3e:c2:23:7f:dd:c2:be:33:
6d:50:62:c4:de:2e:8c:c8:e5:d3:2d:46:a5:c1:38:
78:af:f7:88:1b:be:0a:6f:24:4b:ec:fc:21:9a:6c:
20:f7:7f:cb:a5:19:04:38:8b:81:32:a2:68:41:3d:
9f:6c:21:86:12:c2:49:bf:4e:3c:19:5f:40:7c:a1:
65:fb:4c:0a:8f:73:71:f2:82:89:ce:85:90:6a:25:
7f:35:01:1e:0f:2a:19:8c:13:5b:52:31:63:66:20:
4f:36:3e:b2:df:13:a5:cc:79:35:15:4a:92:60:5b:
4a:69:6a:94:b1:1c:6a:a1:b2:86:59:cf:9e:41:3a:
c0:e3:01:a0:81:fa:65:29:56:57:f1:10:89:1b:f2:
7b:57:bc:11:8f:5d:05:c5:b6:d4:e8:76:04:32:f2:
72:4f:64:27:a7:1e:18:4c:cb:c1:bb:1f:2b:c0:3c:
b5:67:70:f9:76:d7:ed:74:5b:d9:2c:d7:85:b0:7c:
85:b2:82:34:e0:96:dc:17:da:27:c2:66:2d:be:40:
aa:64:65:34:06:00:f3:f4:57:b6:f6:cb:7a:8a:c8:
f5:6f:f6:6b:e6:3e:1b:72:ed:8f:5e:27:89:8a:09:
74:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:13:29:3D:00:97:61:AF:62:01:67:4F:D9:34:00:AD:E6:8A:5B:24
X509v3 Authority Key Identifier:
keyid:4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/9BMpPQCXYa9iAWdP2TQAreaKWyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.89.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:03:c4:5e:8e:e5:ef:64:a9:7e:b9:ad:2b:bd:ac:04:d9:65:
a5:7d:3a:46:e7:9e:02:94:a8:64:5d:69:16:af:58:20:a1:2a:
7f:8e:b0:c1:1d:64:73:94:fb:f1:1c:73:50:c0:62:eb:4b:12:
6a:8e:e5:8e:bf:de:25:15:80:b8:dc:56:0e:2d:16:9a:a2:53:
5e:59:8b:12:d0:13:36:b1:cd:7c:e1:ec:41:75:58:da:40:e7:
45:c7:c2:02:37:ad:20:a9:fd:92:75:da:a1:5d:dc:32:d2:2d:
23:c2:27:f1:c9:de:ed:b4:91:fa:27:ac:2d:34:69:6b:b7:6a:
fe:f5:2f:06:4c:77:f0:19:62:79:42:38:e0:46:5c:e1:17:30:
92:87:cf:e0:0d:93:41:ce:a0:0a:e8:e8:ba:1d:69:a8:b8:f5:
0d:9d:a2:b3:df:d1:89:7b:6e:50:98:42:93:bc:93:f6:98:1f:
83:80:dd:fc:e2:4a:ba:7e:00:a1:49:73:df:66:1e:ce:d2:56:
3e:80:61:28:1c:aa:70:f9:45:36:29:af:09:59:14:89:8c:5b:
9e:32:ff:2f:d7:7f:fc:2d:b8:85:82:bd:0c:95:4c:b8:55:16:
b0:fb:14:d9:ac:33:e0:fa:f7:d5:78:34:ad:c4:68:8c:2c:c9:
5c:cb:54:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA41vqbk9GzdSLn1T5aXLfFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNDg5ZjY2MTU5Zjc3YmI1OGQyYmJjN2U0ZmMxZGZkOWRk
Y2IwMzQwHhcNMjYwODI1MTIxMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDEzMjkzZDAwOTc2MWFmNjIwMTY3NGZkOTM0MDBhZGU2OGE1YjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8i26N3wS7JNjCAjz7lvkpHw9nUHm
PsIjf93CvjNtUGLE3i6MyOXTLUalwTh4r/eIG74KbyRL7Pwhmmwg93/LpRkEOIuB
MqJoQT2fbCGGEsJJv048GV9AfKFl+0wKj3Nx8oKJzoWQaiV/NQEeDyoZjBNbUjFj
ZiBPNj6y3xOlzHk1FUqSYFtKaWqUsRxqobKGWc+eQTrA4wGggfplKVZX8RCJG/J7
V7wRj10FxbbU6HYEMvJyT2Qnpx4YTMvBux8rwDy1Z3D5dtftdFvZLNeFsHyFsoI0
4JbcF9onwmYtvkCqZGU0BgDz9Fe29st6isj1b/Zr5j4bcu2PXieJigl05wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPQTKT0Al2GvYgFnT9k0AK3milskMB8GA1UdIwQY
MBaAFE5In2YVn3e7WNK7x+T8Hf2d3LA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGtpZlpoV2ZkN3RZMHJ2SDVQd2RfWjNjc0RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hNTgxOTctZWIwOS00NDE1LWE2MWQt
YWJkNjFhYTgyNDI2LzEvOUJNcFBRQ1hZYTlpQVdkUDJUUUFyZWFLV3lRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hNTgxOTctZWIwOS00NDE1LWE2MWQtYWJkNjFhYTgyNDI2
LzEvVGtpZlpoV2ZkN3RZMHJ2SDVQd2RfWjNjc0RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSBZMA0G
CSqGSIb3DQEBCwUAA4IBAQDEA8RejuXvZKl+ua0rvawE2WWlfTpG554ClKhkXWkW
r1ggoSp/jrDBHWRzlPvxHHNQwGLrSxJqjuWOv94lFYC43FYOLRaaolNeWYsS0BM2
sc184exBdVjaQOdFx8ICN60gqf2SddqhXdwy0i0jwifxyd7ttJH6J6wtNGlrt2r+
9S8GTHfwGWJ5QjjgRlzhFzCSh8/gDZNBzqAK6Oi6HWmouPUNnaKz39GJe25QmEKT
vJP2mB+DgN384kq6fgChSXPfZh7O0lY+gGEoHKpw+UU2Ka8JWRSJjFueMv8v13/8
LbiFgr0MlUy4VRaw+xTZrDPg+vfVeDStxGiMLMlcy1QW
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:49:53 2026 by rpki-client