Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/_EgAJdqc4umf9Ri85OH53TogsN0.roa
File: _EgAJdqc4umf9Ri85OH53TogsN0.roa (raw, json)
Hash identifier: C3LQLz5NnIdv5NlWA9JnEnpJ6cciJJxTTGFaWWORjNk=
Subject key identifier: FC:48:00:25:DA:9C:E2:E9:9F:F5:18:BC:E4:E1:F9:DD:3A:20:B0:DD
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 01A066786214D9D4C9D5AA1444F068D35F7F
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/_EgAJdqc4umf9Ri85OH53TogsN0.roa
Signing time: Thu 03 Sep 2026 08:52:40 +0000
ROA not before: Thu 03 Sep 2026 08:52:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8881
IP address blocks: 88.135.96.0/23 maxlen: 24
88.135.98.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:78:62:14:d9:d4:c9:d5:aa:14:44:f0:68:d3:5f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Sep 3 08:52:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc480025da9ce2e99ff518bce4e1f9dd3a20b0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:af:e2:26:bc:81:f5:50:b1:d0:5a:3e:2c:
86:bc:e9:d4:67:f3:a4:ca:fe:5c:5c:11:60:e3:2d:
1f:9e:be:d7:c3:69:70:d9:68:42:4f:de:1a:40:6e:
16:2f:c8:9f:02:82:21:3b:28:33:00:02:78:45:31:
cf:34:d9:e9:23:6a:2c:fd:58:63:b0:1d:20:41:82:
31:f2:b5:1b:bf:71:d4:09:bd:3a:45:5d:f2:e0:23:
34:f7:2a:39:9e:fa:2e:d5:c0:80:04:0f:fe:c4:7e:
e4:14:25:a8:91:09:7c:8b:7a:0e:c9:7d:f8:f7:66:
83:0c:12:a5:ec:46:a9:ed:f6:d0:36:da:1f:3e:c2:
16:c8:55:e3:f2:05:35:44:d5:b8:23:be:93:6c:1c:
4c:e3:d4:38:6d:df:98:e9:ce:09:a5:f1:b3:94:e0:
ae:36:86:80:ae:b2:3b:66:4c:43:d3:d8:64:45:e4:
96:eb:14:3e:e3:c4:d9:d0:8d:e7:ad:0f:a8:94:ab:
4b:8f:f8:56:43:d3:c6:67:da:38:b4:58:2d:98:34:
d7:ca:84:2f:e4:e0:8e:06:9b:99:d7:7b:6c:18:a1:
9b:a6:9a:09:71:1b:06:11:79:13:66:9e:b8:3b:c4:
e4:3b:bb:7c:e1:87:b2:c9:09:0d:5c:9a:13:ab:17:
a6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:48:00:25:DA:9C:E2:E9:9F:F5:18:BC:E4:E1:F9:DD:3A:20:B0:DD
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/_EgAJdqc4umf9Ri85OH53TogsN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.96.0/22
Signature Algorithm: sha256WithRSAEncryption
94:d3:5d:5d:c4:83:0e:92:71:52:69:3e:e0:e9:22:5b:b6:db:
5e:ba:3c:fb:80:f6:2e:31:ad:51:a6:49:a3:d7:13:74:d9:6d:
f7:6c:79:5e:49:b2:05:30:6e:bd:cd:62:0e:42:d4:ed:33:de:
a7:af:e5:9b:94:d3:23:62:36:66:e6:cd:60:04:b9:eb:1a:be:
7c:3e:66:25:1b:0a:80:de:98:08:9a:9e:fa:75:b7:e8:8f:5e:
b7:53:53:ba:6a:ad:1f:7b:37:10:5a:e0:72:83:9c:b2:4f:7b:
90:26:47:30:e6:b8:fe:a9:a0:84:3e:42:47:bd:fc:d3:0d:93:
94:ae:83:aa:9b:5e:bc:a4:9e:d1:59:d3:59:f3:5d:27:d2:17:
65:59:67:78:87:6e:9b:73:5e:3f:dd:69:be:36:79:3f:4c:40:
81:99:b2:06:f7:34:56:ce:7c:51:47:e9:33:78:58:05:07:d1:
8d:98:4a:de:7a:25:ac:07:6c:64:bf:c3:9a:07:ef:71:2a:09:
b6:c6:f9:bc:e3:f6:76:80:06:e3:7b:9b:74:6a:55:dc:fe:ec:
60:15:22:9e:0f:03:21:21:67:9d:a2:d6:db:ef:de:00:b7:a2:
c6:58:ff:04:67:6a:a3:71:86:a7:bd:8a:13:eb:73:37:66:26:
0c:4a:0f:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBmeGIU2dTJ1aoURPBo019/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi
NWRlZTQwHhcNMjYwOTAzMDg1MjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzQ4MDAyNWRhOWNlMmU5OWZmNTE4YmNlNGUxZjlkZDNhMjBiMGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAOv4ia8gfVQsdBaPiyGvOnUZ/Ok
yv5cXBFg4y0fnr7Xw2lw2WhCT94aQG4WL8ifAoIhOygzAAJ4RTHPNNnpI2os/Vhj
sB0gQYIx8rUbv3HUCb06RV3y4CM09yo5nvou1cCABA/+xH7kFCWokQl8i3oOyX34
92aDDBKl7Eap7fbQNtofPsIWyFXj8gU1RNW4I76TbBxM49Q4bd+Y6c4JpfGzlOCu
NoaArrI7ZkxD09hkReSW6xQ+48TZ0I3nrQ+olKtLj/hWQ9PGZ9o4tFgtmDTXyoQv
5OCOBpuZ13tsGKGbppoJcRsGEXkTZp64O8TkO7t84YeyyQkNXJoTqxemuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPxIACXanOLpn/UYvOTh+d06ILDdMB8GA1UdIwQY
MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt
NTlmNTk4NGI2NGVhLzEvX0VnQUpkcWM0dW1mOVJpODVPSDUzVG9nc04wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh
LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWIdgMA0G
CSqGSIb3DQEBCwUAA4IBAQCU011dxIMOknFSaT7g6SJbttteujz7gPYuMa1Rpkmj
1xN02W33bHleSbIFMG69zWIOQtTtM96nr+WblNMjYjZm5s1gBLnrGr58PmYlGwqA
3pgImp76dbfoj163U1O6aq0fezcQWuByg5yyT3uQJkcw5rj+qaCEPkJHvfzTDZOU
roOqm168pJ7RWdNZ810n0hdlWWd4h26bc14/3Wm+Nnk/TECBmbIG9zRWznxRR+kz
eFgFB9GNmEreeiWsB2xkv8OaB+9xKgm2xvm84/Z2gAbje5t0alXc/uxgFSKeDwMh
IWedotbb794At6LGWP8EZ2qjcYanvYoT63M3ZiYMSg/U
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:55 2026 by rpki-client