Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rW9d2jm-ltnfYKSiPsE7HRB1hZo.roa
File: rW9d2jm-ltnfYKSiPsE7HRB1hZo.roa (raw, json)
Hash identifier: 5EPYMX4bCFhTuhRxbCYeuyqQ6i8l79Kij3J+8QpNg1Q=
Subject key identifier: AD:6F:5D:DA:39:BE:96:D9:DF:60:A4:A2:3E:C1:3B:1D:10:75:85:9A
Certificate issuer: /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial: 019EC601C6349F07FBB05F4B965B7C319797
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rW9d2jm-ltnfYKSiPsE7HRB1hZo.roa
Signing time: Sun 14 Jun 2026 12:01:05 +0000
ROA not before: Sun 14 Jun 2026 12:01:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41881
IP address blocks: 89.221.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c6:01:c6:34:9f:07:fb:b0:5f:4b:96:5b:7c:31:97:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Validity
Not Before: Jun 14 12:01:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad6f5dda39be96d9df60a4a23ec13b1d1075859a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:1b:1f:88:9d:02:b8:94:a6:30:b6:08:88:
1b:d0:60:c0:77:62:c6:36:f4:67:ce:03:64:f5:b6:
e8:51:b3:b9:f8:70:c8:fe:c1:72:45:db:89:97:95:
f5:60:75:5d:75:ee:58:95:2a:8f:a9:87:52:80:ee:
dd:06:63:2d:d2:e3:be:89:36:4b:c7:3b:7a:8a:f6:
93:23:e5:71:d5:b5:b7:b9:60:c7:40:29:dc:a4:ab:
14:e0:cb:c0:d5:95:67:31:c4:0a:75:b7:e7:1f:e3:
4e:c4:73:b2:91:8a:19:13:df:0e:cc:26:0e:c5:73:
cb:d1:0a:cf:19:e8:8b:24:b6:f3:d4:71:84:27:d8:
dc:09:b7:14:ec:fb:75:14:f6:13:ed:5b:da:91:36:
65:a5:45:2d:7c:24:af:b0:6b:54:5b:fa:45:5c:80:
47:13:cc:11:85:22:9f:ca:f8:f5:07:e7:c5:6e:4e:
a6:65:17:8f:1b:a0:3f:c5:54:b4:0e:63:75:73:4b:
5d:58:1f:cf:7d:69:57:72:f0:17:cb:92:77:56:14:
75:58:01:87:64:88:1f:c4:d3:93:b2:bc:a8:0a:a9:
10:f1:12:01:4e:cd:9f:1c:c7:21:d1:12:ec:0d:7a:
92:7f:fe:8e:45:a6:a3:89:f9:f3:20:4b:51:95:8b:
3f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6F:5D:DA:39:BE:96:D9:DF:60:A4:A2:3E:C1:3B:1D:10:75:85:9A
X509v3 Authority Key Identifier:
keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rW9d2jm-ltnfYKSiPsE7HRB1hZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.221.95.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:b0:e9:1e:45:9a:8f:ec:57:e9:bf:85:06:96:90:cc:2c:cd:
2f:72:9c:e4:0f:d4:df:80:ba:7f:c0:c4:50:b8:8b:c0:54:68:
e8:b1:03:fe:4f:c9:15:a3:a3:2c:d4:1f:ef:12:d0:c2:65:d6:
46:1e:97:ce:94:23:87:53:f2:23:3c:94:ca:3a:9c:46:47:56:
dd:ce:fe:45:02:a9:27:7e:ed:8d:bd:e3:74:e4:34:6e:78:ee:
3d:eb:aa:20:32:e1:39:5e:a3:7f:ee:c0:85:0b:81:2f:cf:73:
51:eb:57:fc:c5:48:1f:e6:ac:18:f3:b0:6a:04:01:00:d4:bd:
19:d5:52:91:65:eb:f8:5e:d7:f2:5e:ee:89:14:59:c6:79:12:
da:c1:d0:bd:d1:06:db:78:e1:74:8f:41:3c:db:29:49:53:5f:
b3:bc:a7:b5:c0:d6:d2:9b:ee:f6:98:14:c0:32:9a:e9:be:e9:
e5:5b:52:94:9e:01:6c:1e:b6:54:b6:bf:eb:8a:a4:16:92:1b:
5b:15:09:42:e1:f3:b9:3e:f0:3e:1f:23:9e:32:01:d9:99:41:
f1:a2:70:79:e7:a2:b6:02:0d:c4:46:a3:cd:71:f7:89:6a:ca:
d0:00:87:6e:cf:af:e8:c0:3f:f6:dd:ba:7f:20:de:c6:8d:f1:
71:3b:0f:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7GAcY0nwf7sF9Lllt8MZeXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkOTY4MWYxNDRkYjE0MzBhYzMxNWM4MzA2ZTFjMTQ3MzBj
NWZlYzIwHhcNMjYwNjE0MTIwMTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDZmNWRkYTM5YmU5NmQ5ZGY2MGE0YTIzZWMxM2IxZDEwNzU4NTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXsbH4idAriUpjC2CIgb0GDAd2LG
NvRnzgNk9bboUbO5+HDI/sFyRduJl5X1YHVdde5YlSqPqYdSgO7dBmMt0uO+iTZL
xzt6ivaTI+Vx1bW3uWDHQCncpKsU4MvA1ZVnMcQKdbfnH+NOxHOykYoZE98OzCYO
xXPL0QrPGeiLJLbz1HGEJ9jcCbcU7Pt1FPYT7VvakTZlpUUtfCSvsGtUW/pFXIBH
E8wRhSKfyvj1B+fFbk6mZRePG6A/xVS0DmN1c0tdWB/PfWlXcvAXy5J3VhR1WAGH
ZIgfxNOTsryoCqkQ8RIBTs2fHMch0RLsDXqSf/6ORaajifnzIEtRlYs//wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK1vXdo5vpbZ32Ckoj7BOx0QdYWaMB8GA1UdIwQY
MBaAFK2WgfFE2xQwrDFcgwbhwUcwxf7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2Yt
YTNhMTNlM2E3ZDgwLzEvclc5ZDJqbS1sdG5mWUtTaVBzRTdIUkIxaFpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2YtYTNhMTNlM2E3ZDgw
LzEvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWd1fMA0G
CSqGSIb3DQEBCwUAA4IBAQBasOkeRZqP7Ffpv4UGlpDMLM0vcpzkD9TfgLp/wMRQ
uIvAVGjosQP+T8kVo6Ms1B/vEtDCZdZGHpfOlCOHU/IjPJTKOpxGR1bdzv5FAqkn
fu2NveN05DRueO4966ogMuE5XqN/7sCFC4Evz3NR61f8xUgf5qwY87BqBAEA1L0Z
1VKRZev4XtfyXu6JFFnGeRLawdC90QbbeOF0j0E82ylJU1+zvKe1wNbSm+72mBTA
MprpvunlW1KUngFsHrZUtr/riqQWkhtbFQlC4fO5PvA+HyOeMgHZmUHxonB556K2
Ag3ERqPNcfeJasrQAIduz6/owD/23bp/IN7GjfFxOw/A
-----END CERTIFICATE-----
Generated at Wed Jul 1 01:34:33 2026 by rpki-client