Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/EK8_5y78AGqLmo0GGbxPtwvU6u4.roa
File: EK8_5y78AGqLmo0GGbxPtwvU6u4.roa (raw, json)
Hash identifier: DqcP+OCR4Q8YT44CeNIv9TZZJCGpzkYEM44m3rG+1XM=
Subject key identifier: 10:AF:3F:E7:2E:FC:00:6A:8B:9A:8D:06:19:BC:4F:B7:0B:D4:EA:EE
Certificate issuer: /CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Certificate serial: 01A0DC3CE8E8A77F3B6958E0A979DDA6F391
Authority key identifier: 39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/EK8_5y78AGqLmo0GGbxPtwvU6u4.roa
Signing time: Sat 26 Sep 2026 05:42:54 +0000
ROA not before: Sat 26 Sep 2026 05:42:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198754
IP address blocks: 193.0.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 08:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:3c:e8:e8:a7:7f:3b:69:58:e0:a9:79:dd:a6:f3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Validity
Not Before: Sep 26 05:42:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=10af3fe72efc006a8b9a8d0619bc4fb70bd4eaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:20:e4:7d:2b:88:84:63:9c:3d:8d:10:6f:
3b:dd:b9:a4:24:71:9c:9a:a7:89:30:08:4b:81:28:
0f:c7:e5:4d:97:0f:eb:5c:28:1e:4d:90:7c:ed:cf:
81:c9:a4:83:b0:ea:97:4a:35:e3:6e:2b:da:71:46:
e0:c8:45:75:5f:71:38:99:0f:3a:78:ef:15:f3:1c:
ef:01:18:54:96:bd:b6:0e:29:f9:18:09:26:60:aa:
3c:4c:b0:93:be:00:ec:4f:74:92:56:2b:97:a8:4d:
5d:f3:d6:b1:7b:29:99:2d:fe:77:7c:85:1b:fa:98:
8a:9a:21:e3:85:44:24:31:12:23:54:71:c6:4c:28:
05:92:fa:6a:0e:61:7a:6c:2d:f9:4a:36:a0:74:fe:
cd:79:81:f5:91:6c:a2:3a:65:b2:08:2d:d2:24:23:
f9:fe:d6:bd:bb:42:14:20:52:a1:5b:81:7b:5b:82:
b4:da:89:5c:bf:71:af:ae:d4:5a:ce:d8:8e:37:38:
1d:de:2c:15:bb:3e:3f:79:4d:cd:7c:f2:ea:04:49:
b9:d8:53:91:cf:7e:fb:be:29:d1:4d:30:23:30:db:
ba:8a:4e:a9:e0:68:5c:2e:0e:17:b9:3e:63:ea:32:
5c:a2:38:b0:4c:be:d4:eb:d5:2f:39:57:9b:a0:a5:
2c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AF:3F:E7:2E:FC:00:6A:8B:9A:8D:06:19:BC:4F:B7:0B:D4:EA:EE
X509v3 Authority Key Identifier:
keyid:39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/EK8_5y78AGqLmo0GGbxPtwvU6u4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.142.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:eb:6c:1d:0a:7a:7f:d0:b8:aa:10:9e:09:ad:68:f3:f6:74:
0c:2a:6e:a1:9c:95:48:b6:94:9a:27:5c:07:b0:e9:73:2d:97:
2b:d3:fc:42:8a:52:18:5d:02:90:3c:30:7b:7a:a5:04:60:54:
34:30:25:25:b6:67:e1:37:62:22:11:35:bd:0c:02:cd:55:60:
8d:55:de:14:68:37:9c:e3:93:ab:de:d9:8f:20:28:4f:4b:23:
16:6d:ed:84:72:08:a4:a9:5e:85:a3:5b:bd:ae:0d:59:72:17:
ed:3b:b6:76:a7:81:67:a2:f1:bc:47:35:af:f4:0e:98:e8:4d:
95:ca:13:93:e6:af:6f:fe:10:86:15:c4:2e:03:9c:11:4e:18:
84:30:81:8f:9e:56:ca:65:68:c8:31:46:03:67:16:b9:99:08:
96:31:84:62:5a:31:81:72:af:46:53:63:8c:65:85:a5:df:53:
e3:a3:cc:26:7d:56:3f:4a:7c:c2:fa:fa:e1:8f:ae:4f:fe:c2:
09:5f:bc:c3:a4:2f:04:39:d5:fd:f8:5e:cf:ee:6b:7c:ee:ea:
a2:0a:f9:86:88:ba:a2:32:f8:ad:72:78:80:08:78:c8:c1:39:
eb:5c:93:ae:f0:65:27:ac:4d:8f:67:af:e2:8c:20:0c:87:0a:
c1:fb:8c:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDcPOjop387aVjgqXndpvORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZGIwM2VmMjdjZGFjZTc3ODNhMGVhMzgzNGQ5NzBhZjM4
YWNiZTIwHhcNMjYwOTI2MDU0MjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGFmM2ZlNzJlZmMwMDZhOGI5YThkMDYxOWJjNGZiNzBiZDRlYWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi4g5H0riIRjnD2NEG873bmkJHGc
mqeJMAhLgSgPx+VNlw/rXCgeTZB87c+ByaSDsOqXSjXjbivacUbgyEV1X3E4mQ86
eO8V8xzvARhUlr22Din5GAkmYKo8TLCTvgDsT3SSViuXqE1d89axeymZLf53fIUb
+piKmiHjhUQkMRIjVHHGTCgFkvpqDmF6bC35SjagdP7NeYH1kWyiOmWyCC3SJCP5
/ta9u0IUIFKhW4F7W4K02olcv3GvrtRaztiONzgd3iwVuz4/eU3NfPLqBEm52FOR
z377vinRTTAjMNu6ik6p4GhcLg4XuT5j6jJcojiwTL7U69UvOVeboKUsnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBCvP+cu/ABqi5qNBhm8T7cL1OruMB8GA1UdIwQY
MBaAFDnbA+8nzazneDoOo4NNlwrzisviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2RzRDd5Zk5yT2Q0T2c2amcwMlhDdk9LeS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hNTRmOTAtYzhkOC00MmZhLWIwZGYt
OTUwZjA5MGU1MjJmLzEvRUs4XzV5NzhBR3FMbW8wR0dieFB0d3ZVNnU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hNTRmOTAtYzhkOC00MmZhLWIwZGYtOTUwZjA5MGU1MjJm
LzEvT2RzRDd5Zk5yT2Q0T2c2amcwMlhDdk9LeS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwQCOMA0G
CSqGSIb3DQEBCwUAA4IBAQDE62wdCnp/0LiqEJ4JrWjz9nQMKm6hnJVItpSaJ1wH
sOlzLZcr0/xCilIYXQKQPDB7eqUEYFQ0MCUltmfhN2IiETW9DALNVWCNVd4UaDec
45Or3tmPIChPSyMWbe2EcgikqV6Fo1u9rg1ZchftO7Z2p4FnovG8RzWv9A6Y6E2V
yhOT5q9v/hCGFcQuA5wRThiEMIGPnlbKZWjIMUYDZxa5mQiWMYRiWjGBcq9GU2OM
ZYWl31Pjo8wmfVY/SnzC+vrhj65P/sIJX7zDpC8EOdX9+F7P7mt87uqiCvmGiLqi
MvitcniACHjIwTnrXJOu8GUnrE2PZ6/ijCAMhwrB+4yK
-----END CERTIFICATE-----
Generated at Sat Oct 3 16:42:30 2026 by rpki-client