Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/rrzmrim7bHJDiCrYhA8mru04a40.roa
File: rrzmrim7bHJDiCrYhA8mru04a40.roa (raw, json)
Hash identifier: ofVbPhI7aV97rdzoC5yVpmL3qOizHqUQvemgYAVNMho=
Subject key identifier: AE:BC:E6:AE:29:BB:6C:72:43:88:2A:D8:84:0F:26:AE:ED:38:6B:8D
Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial: 01A085AD131F9AB712829D886D8EBEFDD1EE
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/rrzmrim7bHJDiCrYhA8mru04a40.roa
Signing time: Wed 09 Sep 2026 10:18:27 +0000
ROA not before: Wed 09 Sep 2026 10:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206613
IP address blocks: 90.182.6.0/24 maxlen: 24
194.228.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:ad:13:1f:9a:b7:12:82:9d:88:6d:8e:be:fd:d1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Validity
Not Before: Sep 9 10:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aebce6ae29bb6c7243882ad8840f26aeed386b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:90:b1:6e:94:74:e2:6d:9f:4b:c9:a5:32:18:
53:0c:9a:71:7b:61:60:62:c5:8b:17:e6:19:fa:a5:
ce:f4:e4:85:1b:5e:55:ab:e7:eb:4d:94:a8:4e:c8:
d6:1c:fe:8a:84:04:12:9d:57:69:be:ed:53:aa:1c:
5a:e6:65:b6:58:f7:c7:9e:48:71:55:0f:c7:d5:8f:
c9:b5:d0:ca:69:eb:f6:e9:39:94:aa:cb:7e:ba:c9:
07:fe:0d:4b:fc:1b:45:b8:a5:16:39:39:ac:14:19:
e2:9b:e1:53:29:89:ea:5b:50:f9:ea:da:9f:5a:f3:
99:49:ba:15:0e:42:2d:56:44:73:7d:0f:4b:ce:7f:
c7:7e:6d:67:79:42:de:cf:14:e7:a0:ba:38:b9:75:
5d:dc:85:9f:c7:8d:b5:38:ec:f3:75:17:88:88:e6:
e0:dd:73:23:8a:44:3f:ae:72:1a:53:8c:7e:42:d3:
ff:35:75:a5:5e:d5:e2:99:4f:57:f1:e5:a7:62:10:
56:e5:b4:16:52:23:8f:9d:e7:9a:8e:49:10:b1:c4:
de:78:ad:f9:bf:d6:77:71:9b:04:7c:22:00:35:56:
bf:bb:89:d1:e5:98:a5:db:6d:6b:2f:e2:4b:e9:ea:
fb:d1:68:e1:9d:77:da:a9:5d:2c:6b:ee:79:69:51:
96:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BC:E6:AE:29:BB:6C:72:43:88:2A:D8:84:0F:26:AE:ED:38:6B:8D
X509v3 Authority Key Identifier:
keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/rrzmrim7bHJDiCrYhA8mru04a40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.182.6.0/24
194.228.95.0/24
Signature Algorithm: sha256WithRSAEncryption
49:24:30:a7:e4:98:8c:09:a0:33:81:fe:2e:01:f5:d4:3d:3c:
ac:3f:3f:98:05:61:a9:b2:ac:73:4f:21:73:fb:c9:17:e2:07:
75:b3:e8:e6:b2:db:f2:88:6b:cb:f2:9c:e0:a0:86:40:09:4b:
56:5d:92:eb:b2:4d:30:f0:f4:2a:07:73:d4:9d:51:1b:94:fe:
30:28:f3:83:c0:90:09:b9:42:4b:e9:9d:34:43:1d:ad:36:67:
25:66:81:3c:f2:91:cd:f0:a7:08:e1:d7:8c:ed:17:5b:66:23:
fc:64:4d:24:f0:a4:44:6a:4b:1f:8c:56:bc:cf:e8:e1:7d:b0:
d1:cb:91:b5:71:6e:35:82:bd:75:48:c9:86:cd:cb:6a:f1:f2:
9a:ed:c9:08:16:af:59:3e:f1:d9:19:97:ca:d8:3d:ec:73:32:
47:9c:2f:60:02:e5:a7:45:c9:b5:67:3c:cb:75:44:f9:c3:9f:
92:4b:29:51:36:42:fc:1d:21:c2:23:44:08:8c:d0:60:7f:22:
bc:91:12:8e:ba:c2:aa:b6:ca:2b:df:74:19:df:9f:2a:96:8a:
e1:b7:14:b6:cb:3b:ee:c9:4e:e0:fb:31:95:86:fd:f4:53:21:
a4:be:0d:85:07:30:5d:89:4d:32:5c:20:22:58:ef:c9:f0:c8:
6d:d3:d0:2b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCFrRMfmrcSgp2IbY6+/dHuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZDZjNmU4YmNlZDQwYmQwMzJkMTc3MThjMWIxZTM5YWU4
NDFhZTgwHhcNMjYwOTA5MTAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWJjZTZhZTI5YmI2YzcyNDM4ODJhZDg4NDBmMjZhZWVkMzg2YjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpCxbpR04m2fS8mlMhhTDJpxe2Fg
YsWLF+YZ+qXO9OSFG15Vq+frTZSoTsjWHP6KhAQSnVdpvu1Tqhxa5mW2WPfHnkhx
VQ/H1Y/JtdDKaev26TmUqst+uskH/g1L/BtFuKUWOTmsFBnim+FTKYnqW1D56tqf
WvOZSboVDkItVkRzfQ9Lzn/Hfm1neULezxTnoLo4uXVd3IWfx421OOzzdReIiObg
3XMjikQ/rnIaU4x+QtP/NXWlXtXimU9X8eWnYhBW5bQWUiOPneeajkkQscTeeK35
v9Z3cZsEfCIANVa/u4nR5Zil221rL+JL6er70WjhnXfaqV0sa+55aVGWWwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK685q4pu2xyQ4gq2IQPJq7tOGuNMB8GA1UdIwQY
MBaAFOXWxui87UC9Ay0XcYwbHjmuhBroMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQt
YmQyNDliNjI1Nzk3LzEvcnJ6bXJpbTdiSEpEaUNyWWhBOG1ydTA0YTQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQtYmQyNDliNjI1Nzk3
LzEvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWrYGAwQA
wuRfMA0GCSqGSIb3DQEBCwUAA4IBAQBJJDCn5JiMCaAzgf4uAfXUPTysPz+YBWGp
sqxzTyFz+8kX4gd1s+jmstvyiGvL8pzgoIZACUtWXZLrsk0w8PQqB3PUnVEblP4w
KPODwJAJuUJL6Z00Qx2tNmclZoE88pHN8KcI4deM7RdbZiP8ZE0k8KREaksfjFa8
z+jhfbDRy5G1cW41gr11SMmGzctq8fKa7ckIFq9ZPvHZGZfK2D3sczJHnC9gAuWn
Rcm1ZzzLdUT5w5+SSylRNkL8HSHCI0QIjNBgfyK8kRKOusKqtsor33QZ358qlorh
txS2yzvuyU7g+zGVhv30UyGkvg2FBzBdiU0yXCAiWO/J8Mht09Ar
-----END CERTIFICATE-----
Generated at Sat Sep 26 08:46:23 2026 by rpki-client