Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/8c6ac2-213c-4ebe-b734-f7ba8aa73142/1/PR4cjb7TwCF3nvoaUAKE6vLnzmo.roa
File: PR4cjb7TwCF3nvoaUAKE6vLnzmo.roa (raw, json)
Hash identifier: onmK2uhZ6VucoMgY3R+P36xwuJrneHeLV1QrP56N3nI=
Subject key identifier: 3D:1E:1C:8D:BE:D3:C0:21:77:9E:FA:1A:50:02:84:EA:F2:E7:CE:6A
Certificate issuer: /CN=49660a42aba4ad1301bdc9d9997f0392abd3d537
Certificate serial: 01A0F774FEF1DA5CE8C914389594636F2EEF
Authority key identifier: 49:66:0A:42:AB:A4:AD:13:01:BD:C9:D9:99:7F:03:92:AB:D3:D5:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SWYKQqukrRMBvcnZmX8DkqvT1Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c6ac2-213c-4ebe-b734-f7ba8aa73142/1/PR4cjb7TwCF3nvoaUAKE6vLnzmo.roa
Signing time: Thu 01 Oct 2026 12:33:54 +0000
ROA not before: Thu 01 Oct 2026 12:33:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6848
IP address blocks: 193.149.246.0/24 maxlen: 24
193.149.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c6ac2-213c-4ebe-b734-f7ba8aa73142/1/SWYKQqukrRMBvcnZmX8DkqvT1Tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8c6ac2-213c-4ebe-b734-f7ba8aa73142/1/SWYKQqukrRMBvcnZmX8DkqvT1Tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SWYKQqukrRMBvcnZmX8DkqvT1Tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:74:fe:f1:da:5c:e8:c9:14:38:95:94:63:6f:2e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49660a42aba4ad1301bdc9d9997f0392abd3d537
Validity
Not Before: Oct 1 12:33:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d1e1c8dbed3c021779efa1a500284eaf2e7ce6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7f:ee:ec:40:53:93:c7:6a:92:7e:c2:46:60:
3e:e7:dc:b5:06:ea:45:42:e0:cb:77:db:c4:b5:52:
7d:23:4c:ec:78:bf:a5:22:c4:0e:40:53:2e:fd:88:
7a:e6:e5:cd:10:75:64:e0:d7:e1:5f:ab:9b:19:89:
fd:1b:b7:b5:09:aa:bf:9e:9c:08:d0:af:60:83:04:
42:7e:3e:04:08:d6:e0:41:de:f0:83:12:71:4a:99:
c7:6b:2f:42:83:92:68:ca:db:63:e5:c0:c4:22:0d:
0c:eb:e4:40:77:79:03:fc:f1:9f:03:cf:26:14:7d:
5d:26:f2:00:49:e9:46:29:95:ee:6f:cd:fc:51:b3:
89:48:78:d6:89:3e:73:6c:99:b6:28:49:0a:56:b5:
ce:7f:13:4d:77:a9:9c:3c:c6:e5:f1:4f:fa:19:0f:
cd:bb:51:e9:1f:b4:d3:5a:0d:f4:ca:bd:a4:b8:02:
3a:e1:bf:c9:ed:91:d8:23:6e:6d:75:51:b9:13:e6:
4b:67:d9:03:80:db:c9:b1:2c:61:f9:38:3b:e3:fd:
83:49:a2:b8:27:19:5a:27:9c:2f:8e:d5:a5:a9:42:
4d:59:b4:70:81:b4:61:53:b4:86:6c:f4:0f:9d:e5:
ed:61:6d:a2:16:60:c1:87:b1:45:e4:58:b4:1a:68:
d9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1E:1C:8D:BE:D3:C0:21:77:9E:FA:1A:50:02:84:EA:F2:E7:CE:6A
X509v3 Authority Key Identifier:
keyid:49:66:0A:42:AB:A4:AD:13:01:BD:C9:D9:99:7F:03:92:AB:D3:D5:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SWYKQqukrRMBvcnZmX8DkqvT1Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c6ac2-213c-4ebe-b734-f7ba8aa73142/1/PR4cjb7TwCF3nvoaUAKE6vLnzmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c6ac2-213c-4ebe-b734-f7ba8aa73142/1/SWYKQqukrRMBvcnZmX8DkqvT1Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.149.246.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:65:48:6c:99:1d:62:f2:0d:93:37:1b:1c:56:ea:16:80:ae:
0f:d3:a2:a4:6b:9d:3a:c9:43:48:9a:d8:ca:3a:aa:69:c0:30:
41:38:9a:6c:63:4d:a4:14:9b:38:e8:9b:6d:c0:f3:c0:54:5d:
71:b4:58:b5:0f:8d:33:c8:33:5f:19:f4:fc:59:7f:9b:3c:dd:
41:61:37:c7:6d:2b:73:27:c9:b3:f1:91:ab:7f:bf:37:eb:21:
dd:db:95:b4:ff:c3:9e:4d:58:83:88:0a:2f:71:62:c0:d2:63:
0d:49:3b:89:33:6f:70:d2:66:9f:2a:88:9a:ea:74:fa:85:60:
a7:34:b6:b4:92:89:0d:85:99:e2:28:18:18:75:63:bf:f9:62:
b1:02:fe:08:1c:2c:b6:7f:15:bf:3d:7a:2a:ca:68:05:3b:44:
61:0b:01:5c:8d:f0:b9:f1:f4:28:77:ed:28:b7:a3:1c:49:c9:
7e:ce:3f:46:45:a1:85:e5:0f:59:2a:d7:57:36:f4:61:f6:ed:
71:83:0f:23:4c:ac:67:62:41:58:c2:e9:67:36:71:d3:ec:20:
77:34:eb:ec:5c:4c:0c:d6:f0:67:4e:23:9d:2a:0f:3a:23:91:
55:75:9d:0c:c9:b7:72:a9:41:35:85:72:2e:58:44:32:42:b4:
67:1e:21:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaD3dP7x2lzoyRQ4lZRjby7vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NjYwYTQyYWJhNGFkMTMwMWJkYzlkOTk5N2YwMzkyYWJk
M2Q1MzcwHhcNMjYxMDAxMTIzMzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDFlMWM4ZGJlZDNjMDIxNzc5ZWZhMWE1MDAyODRlYWYyZTdjZTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3/u7EBTk8dqkn7CRmA+59y1BupF
QuDLd9vEtVJ9I0zseL+lIsQOQFMu/Yh65uXNEHVk4NfhX6ubGYn9G7e1Caq/npwI
0K9ggwRCfj4ECNbgQd7wgxJxSpnHay9Cg5Joyttj5cDEIg0M6+RAd3kD/PGfA88m
FH1dJvIASelGKZXub838UbOJSHjWiT5zbJm2KEkKVrXOfxNNd6mcPMbl8U/6GQ/N
u1HpH7TTWg30yr2kuAI64b/J7ZHYI25tdVG5E+ZLZ9kDgNvJsSxh+Tg74/2DSaK4
JxlaJ5wvjtWlqUJNWbRwgbRhU7SGbPQPneXtYW2iFmDBh7FF5Fi0GmjZOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD0eHI2+08Ahd576GlAChOry585qMB8GA1UdIwQY
MBaAFElmCkKrpK0TAb3J2Zl/A5Kr09U3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1dZS1FxdWtyUk1CdmNuWm1YOERrcXZUMVRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84YzZhYzItMjEzYy00ZWJlLWI3MzQt
ZjdiYThhYTczMTQyLzEvUFI0Y2piN1R3Q0YzbnZvYVVBS0U2dkxuem1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84YzZhYzItMjEzYy00ZWJlLWI3MzQtZjdiYThhYTczMTQy
LzEvU1dZS1FxdWtyUk1CdmNuWm1YOERrcXZUMVRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwZX2MA0G
CSqGSIb3DQEBCwUAA4IBAQC4ZUhsmR1i8g2TNxscVuoWgK4P06Kka506yUNImtjK
OqppwDBBOJpsY02kFJs46JttwPPAVF1xtFi1D40zyDNfGfT8WX+bPN1BYTfHbStz
J8mz8ZGrf7836yHd25W0/8OeTViDiAovcWLA0mMNSTuJM29w0mafKoia6nT6hWCn
NLa0kokNhZniKBgYdWO/+WKxAv4IHCy2fxW/PXoqymgFO0RhCwFcjfC58fQod+0o
t6McScl+zj9GRaGF5Q9ZKtdXNvRh9u1xgw8jTKxnYkFYwulnNnHT7CB3NOvsXEwM
1vBnTiOdKg86I5FVdZ0MybdyqUE1hXIuWEQyQrRnHiHn
-----END CERTIFICATE-----
Generated at Sat Oct 10 19:07:44 2026 by rpki-client