Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/CAmKPqSem3z9vddSt3shebaS7QE.roa
File: CAmKPqSem3z9vddSt3shebaS7QE.roa (raw, json)
Hash identifier: bZ7fWDOatCi+3bzhm3ZvwrQvRElty+Ug4m9V7FK9Syk=
Subject key identifier: 08:09:8A:3E:A4:9E:9B:7C:FD:BD:D7:52:B7:7B:21:79:B6:92:ED:01
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 01A14A2BEA66572FDAC757227A5FF8536A24
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/CAmKPqSem3z9vddSt3shebaS7QE.roa
Signing time: Sat 17 Oct 2026 14:02:34 +0000
ROA not before: Sat 17 Oct 2026 14:02:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218721
IP address blocks: 195.226.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:2b:ea:66:57:2f:da:c7:57:22:7a:5f:f8:53:6a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Oct 17 14:02:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08098a3ea49e9b7cfdbdd752b77b2179b692ed01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b6:b8:ac:f0:79:2f:75:c8:2a:e6:d4:f8:75:
24:76:ae:85:b0:fb:dc:07:26:da:63:45:da:0c:6e:
be:a8:6e:04:68:6d:54:f7:7d:ed:4a:8a:df:f2:ee:
8b:6a:c9:62:d2:0e:66:ed:da:ab:c8:0d:42:fe:8d:
8f:4b:62:a6:5d:88:88:13:2c:38:92:19:ec:4b:88:
90:89:f7:17:2a:bf:fc:73:09:b4:21:e2:2d:91:9a:
02:72:bc:25:da:00:dd:ce:15:5e:f0:b3:d7:44:54:
c0:05:51:c4:2e:ea:17:d2:27:14:57:61:40:4a:50:
a0:5a:24:4c:5d:92:7a:be:63:0a:90:8d:90:ec:0a:
44:86:bd:12:30:11:d8:4b:50:47:44:fe:72:f5:08:
f9:4f:0f:e2:0f:1f:68:e9:ec:f1:f7:c6:55:33:44:
95:11:01:b6:09:e7:e6:21:46:d8:cb:1e:31:cf:1e:
cb:5f:f8:7d:d8:6a:cf:65:0a:7f:9e:09:37:32:ad:
3e:2d:f7:ae:e7:fe:69:e8:d0:cd:3b:bb:e6:18:83:
40:9f:db:88:2f:c8:52:a8:af:01:ec:fb:7d:aa:3a:
0a:53:34:b4:b9:a3:d7:47:88:18:10:f1:a6:2c:dd:
4c:3e:7a:48:d4:95:47:42:2d:02:42:be:a7:79:77:
0b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:09:8A:3E:A4:9E:9B:7C:FD:BD:D7:52:B7:7B:21:79:B6:92:ED:01
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/CAmKPqSem3z9vddSt3shebaS7QE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.93.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:9a:3a:a1:d3:a0:05:8a:1a:ff:31:b1:c7:e7:97:c2:fa:9b:
ef:60:f0:7b:43:91:98:a9:60:1f:11:78:d5:2b:c3:b0:c7:9b:
c5:28:c0:2a:bd:4f:13:7e:ff:8c:6c:51:d5:9d:02:29:e2:a0:
3f:25:ea:be:9b:78:12:01:06:b3:ac:be:ed:64:3d:91:1c:e4:
4d:e0:fb:99:28:46:e5:57:af:38:1f:cf:5b:ed:1c:c2:cd:02:
72:1a:5c:45:5a:70:11:0b:22:1f:96:78:e2:03:07:bb:ab:c6:
a5:81:5a:84:b9:5a:d7:e5:f2:94:26:0a:d4:74:76:9e:32:3c:
ea:db:f7:df:3d:72:7d:c8:ef:9d:fe:78:21:76:99:c2:f9:93:
71:cf:74:10:5a:76:a1:7b:bb:6e:77:2b:e2:dc:cf:bd:f4:c5:
9c:7c:7c:e3:e0:ea:9b:0b:9f:4e:96:e2:1a:d8:b2:87:36:6f:
ce:93:cd:b4:21:86:af:a8:f9:eb:e3:27:8e:a1:23:a9:6c:1b:
67:29:df:c8:2b:16:79:f5:13:b0:27:0c:0c:f3:ce:29:69:63:
5f:f5:de:c5:33:3f:d8:bb:11:57:ee:15:b6:c6:79:05:77:4f:
b4:cb:96:8b:96:61:97:e2:9c:49:0b:11:d3:08:9d:c7:36:5b:
85:8e:92:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFKK+pmVy/ax1ciel/4U2okMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx
MGY5M2YwHhcNMjYxMDE3MTQwMjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODA5OGEzZWE0OWU5YjdjZmRiZGQ3NTJiNzdiMjE3OWI2OTJlZDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyba4rPB5L3XIKubU+HUkdq6FsPvc
BybaY0XaDG6+qG4EaG1U933tSorf8u6Lasli0g5m7dqryA1C/o2PS2KmXYiIEyw4
khnsS4iQifcXKr/8cwm0IeItkZoCcrwl2gDdzhVe8LPXRFTABVHELuoX0icUV2FA
SlCgWiRMXZJ6vmMKkI2Q7ApEhr0SMBHYS1BHRP5y9Qj5Tw/iDx9o6ezx98ZVM0SV
EQG2CefmIUbYyx4xzx7LX/h92GrPZQp/ngk3Mq0+Lfeu5/5p6NDNO7vmGINAn9uI
L8hSqK8B7Pt9qjoKUzS0uaPXR4gYEPGmLN1MPnpI1JVHQi0CQr6neXcLcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAgJij6knpt8/b3XUrd7IXm2ku0BMB8GA1UdIwQY
MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt
NDMwMTNiMjhkOWQ2LzEvQ0FtS1BxU2VtM3o5dmRkU3Qzc2hlYmFTN1FFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2
LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+JdMA0G
CSqGSIb3DQEBCwUAA4IBAQCamjqh06AFihr/MbHH55fC+pvvYPB7Q5GYqWAfEXjV
K8Owx5vFKMAqvU8Tfv+MbFHVnQIp4qA/Jeq+m3gSAQazrL7tZD2RHORN4PuZKEbl
V684H89b7RzCzQJyGlxFWnARCyIflnjiAwe7q8algVqEuVrX5fKUJgrUdHaeMjzq
2/ffPXJ9yO+d/nghdpnC+ZNxz3QQWnahe7tudyvi3M+99MWcfHzj4OqbC59OluIa
2LKHNm/Ok820IYavqPnr4yeOoSOpbBtnKd/IKxZ59ROwJwwM884paWNf9d7FMz/Y
uxFX7hW2xnkFd0+0y5aLlmGX4pxJCxHTCJ3HNluFjpLn
-----END CERTIFICATE-----
Generated at Sun Oct 25 20:01:40 2026 by rpki-client