Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/57HMaQpjooxld8kfUToFPpIZS8E.roa
File: 57HMaQpjooxld8kfUToFPpIZS8E.roa (raw, json)
Hash identifier: QetvDd/Kq64/KwzlgNTqKKATl2Q8brH/CAlMQr3SxOo=
Subject key identifier: E7:B1:CC:69:0A:63:A2:8C:65:77:C9:1F:51:3A:05:3E:92:19:4B:C1
Certificate issuer: /CN=a24357be1958796b12c42b4f4cac51b83de8fd2b
Certificate serial: 01A07B416D10DF38A2139244F63B00BE4C8A
Authority key identifier: A2:43:57:BE:19:58:79:6B:12:C4:2B:4F:4C:AC:51:B8:3D:E8:FD:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okNXvhlYeWsSxCtPTKxRuD3o_Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/57HMaQpjooxld8kfUToFPpIZS8E.roa
Signing time: Mon 07 Sep 2026 09:44:40 +0000
ROA not before: Mon 07 Sep 2026 09:44:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20292
IP address blocks: 176.113.115.0/24 maxlen: 24
2a06:6fc1::/32 maxlen: 32
2a06:6fc1:400::/38 maxlen: 38
2a06:6fc2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/okNXvhlYeWsSxCtPTKxRuD3o_Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:41:6d:10:df:38:a2:13:92:44:f6:3b:00:be:4c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24357be1958796b12c42b4f4cac51b83de8fd2b
Validity
Not Before: Sep 7 09:44:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7b1cc690a63a28c6577c91f513a053e92194bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:d2:6c:19:aa:25:83:83:9f:a8:cc:3e:a0:
43:29:c4:85:57:8c:d9:91:0b:6f:a7:37:80:21:d1:
93:50:a9:d6:96:f1:65:2c:45:75:7e:59:76:d3:1c:
d8:be:0a:9f:fe:a2:83:b5:48:76:dc:86:10:22:ba:
6f:79:39:74:26:95:a1:74:bb:25:d8:de:5a:32:c8:
d7:84:ed:6a:04:61:9e:f3:10:6e:52:3a:81:27:a1:
e4:5f:64:13:22:3d:e6:60:26:06:1d:f9:89:91:ef:
93:cc:78:00:ad:fb:6f:61:d2:e0:a2:c4:16:80:3d:
97:98:fd:9c:7b:88:ee:9b:eb:b7:fe:4d:a8:1b:a3:
1b:0a:80:92:4e:60:d9:63:c8:86:ce:30:c5:3a:7c:
83:df:52:ec:78:7a:55:48:ee:8b:ae:54:8b:17:be:
f2:b7:8e:5c:3a:68:64:36:eb:6e:28:cf:56:18:ea:
97:bc:6a:ba:08:8c:44:47:82:6e:fc:ff:fb:7a:2b:
49:9f:e7:2a:1a:b2:d4:8c:ee:70:19:b3:b0:78:77:
e0:cf:6d:ec:02:9d:74:ee:1c:f7:6c:32:ca:0f:ff:
f8:17:e2:be:a0:50:6d:1e:97:b7:2b:e7:f8:c7:c3:
37:a6:2d:8c:37:33:68:bf:39:53:84:f6:ff:67:2d:
c4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B1:CC:69:0A:63:A2:8C:65:77:C9:1F:51:3A:05:3E:92:19:4B:C1
X509v3 Authority Key Identifier:
keyid:A2:43:57:BE:19:58:79:6B:12:C4:2B:4F:4C:AC:51:B8:3D:E8:FD:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okNXvhlYeWsSxCtPTKxRuD3o_Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/57HMaQpjooxld8kfUToFPpIZS8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3738e7-c928-4141-9cec-3f3cc1e573fd/1/okNXvhlYeWsSxCtPTKxRuD3o_Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.115.0/24
IPv6:
2a06:6fc1::-2a06:6fc2:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b5:de:f4:0d:26:df:44:5d:3b:9a:d5:13:e0:36:33:60:b3:bd:
9e:72:67:71:42:b6:99:2f:78:00:06:64:25:fc:1e:6b:15:db:
fa:c2:4e:33:b9:c5:8e:97:2a:78:96:72:9e:88:30:10:e2:75:
e9:33:c9:ec:61:a1:cf:a4:d1:18:22:24:1f:de:7d:ce:b0:78:
e2:3c:3a:11:e0:f4:73:87:ac:f6:d2:0f:fb:56:3c:0b:20:ac:
aa:e0:fb:1c:a3:c6:52:27:01:0e:43:dd:64:7c:97:97:fc:84:
7c:3d:18:02:3f:a2:e8:36:85:14:c1:ca:7b:f8:1e:2e:a3:22:
fe:6b:d9:f0:c9:c3:1e:00:f4:74:52:76:52:39:8b:24:ba:42:
eb:e3:2e:97:ec:14:e1:a1:7a:fc:bd:42:a6:bf:15:c2:a7:35:
09:ec:98:9a:6d:16:3c:3a:78:d4:56:2e:95:03:b8:9e:69:55:
66:91:fa:b0:7b:18:3d:04:8e:ed:c0:83:59:43:d4:1d:41:ac:
54:a7:32:99:40:1a:aa:0c:51:56:d1:a7:60:07:83:13:85:51:
99:ac:e3:cd:0b:1c:3a:5b:62:2a:ba:b6:80:5f:e6:fe:2c:13:
a2:e2:cc:bd:99:33:09:14:3b:04:17:35:22:fe:62:5e:6e:ff:
b2:0b:70:9e
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaB7QW0Q3ziiE5JE9jsAvkyKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNDM1N2JlMTk1ODc5NmIxMmM0MmI0ZjRjYWM1MWI4M2Rl
OGZkMmIwHhcNMjYwOTA3MDk0NDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2IxY2M2OTBhNjNhMjhjNjU3N2M5MWY1MTNhMDUzZTkyMTk0YmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+fSbBmqJYODn6jMPqBDKcSFV4zZ
kQtvpzeAIdGTUKnWlvFlLEV1fll20xzYvgqf/qKDtUh23IYQIrpveTl0JpWhdLsl
2N5aMsjXhO1qBGGe8xBuUjqBJ6HkX2QTIj3mYCYGHfmJke+TzHgArftvYdLgosQW
gD2XmP2ce4jum+u3/k2oG6MbCoCSTmDZY8iGzjDFOnyD31LseHpVSO6LrlSLF77y
t45cOmhkNutuKM9WGOqXvGq6CIxER4Ju/P/7eitJn+cqGrLUjO5wGbOweHfgz23s
Ap107hz3bDLKD//4F+K+oFBtHpe3K+f4x8M3pi2MNzNovzlThPb/Zy3EGwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFOexzGkKY6KMZXfJH1E6BT6SGUvBMB8GA1UdIwQY
MBaAFKJDV74ZWHlrEsQrT0ysUbg96P0rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2tOWHZobFllV3NTeEN0UFRLeFJ1RDNvX1NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8zNzM4ZTctYzkyOC00MTQxLTljZWMt
M2YzY2MxZTU3M2ZkLzEvNTdITWFRcGpvb3hsZDhrZlVUb0ZQcElaUzhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8zNzM4ZTctYzkyOC00MTQxLTljZWMtM2YzY2MxZTU3M2Zk
LzEvb2tOWHZobFllV3NTeEN0UFRLeFJ1RDNvX1NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQAsHFzMBYE
AgACMBAwDgMFACoGb8EDBQAqBm/CMA0GCSqGSIb3DQEBCwUAA4IBAQC13vQNJt9E
XTua1RPgNjNgs72ecmdxQraZL3gABmQl/B5rFdv6wk4zucWOlyp4lnKeiDAQ4nXp
M8nsYaHPpNEYIiQf3n3OsHjiPDoR4PRzh6z20g/7VjwLIKyq4Psco8ZSJwEOQ91k
fJeX/IR8PRgCP6LoNoUUwcp7+B4uoyL+a9nwycMeAPR0UnZSOYskukLr4y6X7BTh
oXr8vUKmvxXCpzUJ7JiabRY8OnjUVi6VA7ieaVVmkfqwexg9BI7twINZQ9QdQaxU
pzKZQBqqDFFW0adgB4MThVGZrOPNCxw6W2IquraAX+b+LBOi4sy9mTMJFDsEFzUi
/mJebv+yC3Ce
-----END CERTIFICATE-----
Generated at Sat Sep 19 00:02:44 2026 by rpki-client