Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/n7YCUIkQiP6xGD2YjYKBJYo3LBE.roa
File: n7YCUIkQiP6xGD2YjYKBJYo3LBE.roa (raw, json)
Hash identifier: Ml7vXdLpJ/QBfKHnABhDeyWhSNd7VWosEBwhTCaUu48=
Subject key identifier: 9F:B6:02:50:89:10:88:FE:B1:18:3D:98:8D:82:81:25:8A:37:2C:11
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019FF069288F3AF8AEF42A76EFCD8A5B1499
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/n7YCUIkQiP6xGD2YjYKBJYo3LBE.roa
Signing time: Tue 11 Aug 2026 10:40:51 +0000
ROA not before: Tue 11 Aug 2026 10:40:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201738
IP address blocks: 109.238.86.0/24 maxlen: 24
193.178.158.0/24 maxlen: 24
193.178.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:69:28:8f:3a:f8:ae:f4:2a:76:ef:cd:8a:5b:14:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Aug 11 10:40:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fb60250891088feb1183d988d8281258a372c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e4:ca:34:5f:60:b5:4e:f6:ef:2a:51:83:67:
44:31:fd:cc:bc:fe:c5:1b:a2:d3:f7:64:f4:72:4b:
1d:9e:a4:c1:91:a0:1a:9f:45:8b:21:d8:46:9e:bd:
f9:53:7b:86:b7:f8:e2:8b:3f:2a:22:ff:f4:45:2e:
5f:1f:0d:84:88:7e:62:66:ad:dc:8d:81:91:85:49:
b9:9b:d4:e9:50:ee:4b:48:65:a7:35:35:75:b5:c6:
fb:18:be:0c:58:ac:33:60:84:46:c8:d1:20:b1:cc:
b4:1a:35:f9:5e:03:0b:08:94:20:35:f2:65:f2:d0:
cc:9d:8c:cf:cd:24:85:3b:f4:cb:95:a3:33:b8:36:
48:20:84:3f:af:ec:ce:2c:33:1f:0d:c9:13:d8:3f:
e7:c9:03:43:40:49:e0:c4:1c:47:51:94:f7:bf:78:
67:17:2b:7e:f9:fc:1c:fd:dd:ab:5b:a6:ff:e1:c5:
01:1c:2c:aa:90:56:0d:db:c6:a0:26:68:27:4c:a5:
6f:67:d1:5f:94:bb:6f:f7:e7:38:4a:c4:67:88:35:
33:15:9c:8d:45:a1:a7:6b:81:d0:2c:fb:ca:a6:96:
29:ef:89:a2:37:90:0d:91:9e:d3:11:55:a1:0a:7d:
85:cb:40:99:a4:99:62:4f:db:0c:a3:cc:08:a8:4a:
42:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B6:02:50:89:10:88:FE:B1:18:3D:98:8D:82:81:25:8A:37:2C:11
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/n7YCUIkQiP6xGD2YjYKBJYo3LBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.238.86.0/24
193.178.158.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:5f:33:24:85:34:ae:5e:b2:ae:5d:67:88:18:7f:d5:c0:e7:
cd:82:a1:46:13:4a:08:23:ac:8d:40:9f:24:da:dd:c7:c3:eb:
5d:eb:08:ed:8c:02:b8:b3:aa:40:7b:32:40:c7:c4:40:db:78:
bc:31:04:5b:82:61:fe:cb:59:71:9e:c4:98:f4:70:8a:db:17:
24:0e:d9:bf:a7:45:08:71:b0:1d:4c:10:0e:a4:51:ee:ba:6d:
38:b4:a8:32:86:47:bc:52:13:b7:9a:f5:3d:cc:3d:3e:ec:b4:
b8:cb:d5:89:85:8b:6a:00:88:0d:64:14:61:93:32:2e:86:5e:
6a:0a:9d:e7:fe:6e:e3:15:ad:57:62:14:67:1c:07:bd:01:35:
0f:eb:a3:ea:2c:f9:36:39:1c:f8:29:7b:88:fa:0b:f7:a7:15:
0f:5e:37:6e:76:f5:8e:11:6c:90:7e:fa:ef:d4:9e:38:78:a5:
4e:04:49:19:bb:6d:6d:a2:00:d3:22:fb:38:df:ce:5b:2e:53:
44:21:ed:65:fa:f8:aa:02:7d:20:b5:84:2f:b9:8a:eb:78:77:
ec:53:d5:da:6b:ce:8d:58:0d:01:cd:de:3a:46:03:82:5d:e9:
ad:88:8c:e8:3e:1d:ac:73:af:e9:44:fb:c7:0c:13:07:16:cd:
e9:92:0d:8c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/waSiPOviu9Cp2782KWxSZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjYwODExMTA0MDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmI2MDI1MDg5MTA4OGZlYjExODNkOTg4ZDgyODEyNThhMzcyYzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguTKNF9gtU727ypRg2dEMf3MvP7F
G6LT92T0cksdnqTBkaAan0WLIdhGnr35U3uGt/jiiz8qIv/0RS5fHw2EiH5iZq3c
jYGRhUm5m9TpUO5LSGWnNTV1tcb7GL4MWKwzYIRGyNEgscy0GjX5XgMLCJQgNfJl
8tDMnYzPzSSFO/TLlaMzuDZIIIQ/r+zOLDMfDckT2D/nyQNDQEngxBxHUZT3v3hn
Fyt++fwc/d2rW6b/4cUBHCyqkFYN28agJmgnTKVvZ9FflLtv9+c4SsRniDUzFZyN
RaGna4HQLPvKppYp74miN5ANkZ7TEVWhCn2Fy0CZpJliT9sMo8wIqEpCUQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ+2AlCJEIj+sRg9mI2CgSWKNywRMB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvbjdZQ1VJa1FpUDZ4R0QyWWpZS0JKWW8zTEJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbe5WAwQB
wbKeMA0GCSqGSIb3DQEBCwUAA4IBAQCxXzMkhTSuXrKuXWeIGH/VwOfNgqFGE0oI
I6yNQJ8k2t3Hw+td6wjtjAK4s6pAezJAx8RA23i8MQRbgmH+y1lxnsSY9HCK2xck
Dtm/p0UIcbAdTBAOpFHuum04tKgyhke8UhO3mvU9zD0+7LS4y9WJhYtqAIgNZBRh
kzIuhl5qCp3n/m7jFa1XYhRnHAe9ATUP66PqLPk2ORz4KXuI+gv3pxUPXjdudvWO
EWyQfvrv1J44eKVOBEkZu21togDTIvs4385bLlNEIe1l+viqAn0gtYQvuYrreHfs
U9Xaa86NWA0Bzd46RgOCXemtiIzoPh2sc6/pRPvHDBMHFs3pkg2M
-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:10 2026 by rpki-client