Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/SE94JShsQzR65kABw5-b_PS3b3I.roa
File: SE94JShsQzR65kABw5-b_PS3b3I.roa (raw, json)
Hash identifier: 3lQHoIevfm4PXgR/Nz7osnPXvJmpUL9FbOOL9JsnV80=
Subject key identifier: 48:4F:78:25:28:6C:43:34:7A:E6:40:01:C3:9F:9B:FC:F4:B7:6F:72
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 01A0CF3FDA383013153A25EA23DC79B7C028
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/SE94JShsQzR65kABw5-b_PS3b3I.roa
Signing time: Wed 23 Sep 2026 17:11:03 +0000
ROA not before: Wed 23 Sep 2026 17:11:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 141.98.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:3f:da:38:30:13:15:3a:25:ea:23:dc:79:b7:c0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Sep 23 17:11:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=484f7825286c43347ae64001c39f9bfcf4b76f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:16:9c:d5:05:79:2a:04:af:51:a3:0f:9f:
86:51:60:70:5b:70:16:7e:cf:c5:ab:85:dd:60:58:
af:27:c8:19:44:79:37:f8:9b:39:c5:d4:d9:da:02:
9d:97:c7:48:24:0d:d4:cf:f0:35:f2:48:80:26:84:
6b:07:65:47:92:85:ef:3f:3e:41:7b:14:c2:f7:4a:
67:20:44:e0:da:23:d5:36:9f:63:15:70:56:cc:ca:
a3:52:e1:1a:e6:0a:98:e8:87:1c:e0:dc:ac:d7:3e:
7b:72:b8:6e:7d:34:cf:06:0b:f7:e1:11:1c:59:aa:
dd:3b:1e:f7:a8:28:48:2a:f2:8d:bb:0c:9d:4a:07:
e3:e4:ad:20:e6:7a:f8:6f:17:4a:0a:86:a1:e3:a9:
d3:28:88:1c:cf:60:76:67:1b:7e:7b:9c:ba:c5:44:
3c:f3:05:5e:bd:b1:ce:93:03:73:74:0f:e6:5d:89:
58:e2:20:ee:cb:01:71:26:21:84:81:9f:43:35:4c:
db:2f:b8:86:c6:d2:b0:1b:1d:73:cb:1c:d4:e9:1a:
86:18:ce:7c:89:4f:c6:5e:cf:22:d6:a7:29:62:1a:
34:c3:da:b9:0d:1b:c6:b6:b4:c9:03:9d:7f:79:ba:
ac:04:83:3f:7e:4c:b9:01:47:c4:bb:03:34:2b:29:
11:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4F:78:25:28:6C:43:34:7A:E6:40:01:C3:9F:9B:FC:F4:B7:6F:72
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/SE94JShsQzR65kABw5-b_PS3b3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.149.0/24
Signature Algorithm: sha256WithRSAEncryption
00:59:a0:95:b6:c5:c8:6f:6f:1a:20:c0:a9:5b:eb:b3:aa:e8:
26:0d:bb:c0:02:48:71:a2:73:13:a1:61:d9:a6:4a:90:fa:91:
a8:12:a4:b6:d4:6a:b9:0c:1f:0b:6f:d0:4b:5a:4d:14:e6:d7:
2f:b9:e9:77:96:ac:13:e7:63:2f:5f:58:4d:f1:0c:b7:4b:f2:
25:1c:24:d1:c9:46:d3:13:26:21:b8:74:25:36:ed:f5:00:52:
b2:3f:a1:3b:58:61:cf:51:27:db:8a:af:f0:89:f4:e3:b8:77:
a7:82:ce:db:65:ae:c1:c2:ed:db:be:9e:ea:c6:fa:24:ae:14:
2b:ef:e9:4e:d8:50:e8:83:00:91:ff:0c:76:7d:71:61:df:ff:
1e:4f:b6:e3:87:e2:60:d6:ad:1a:4f:84:ff:0e:02:bb:1d:63:
69:05:ba:d2:bb:cc:56:da:cc:1e:58:c8:f3:df:18:33:2e:22:
86:19:6f:6d:31:b0:6c:b1:bb:e5:bf:9a:7d:10:9d:dc:2f:36:
27:bd:0e:c6:a8:8e:b2:89:7c:34:c0:e5:5c:84:8a:26:cc:e3:
b0:25:87:1d:2d:78:41:28:03:67:61:d5:b8:5e:1d:87:6f:4d:
4e:79:57:d5:48:76:eb:cb:cc:c3:05:49:ae:0d:3b:32:7a:6c:
ab:7b:18:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDPP9o4MBMVOiXqI9x5t8AoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy
YzgxZDUwHhcNMjYwOTIzMTcxMTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODRmNzgyNTI4NmM0MzM0N2FlNjQwMDFjMzlmOWJmY2Y0Yjc2ZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBEWnNUFeSoEr1GjD5+GUWBwW3AW
fs/Fq4XdYFivJ8gZRHk3+Js5xdTZ2gKdl8dIJA3Uz/A18kiAJoRrB2VHkoXvPz5B
exTC90pnIETg2iPVNp9jFXBWzMqjUuEa5gqY6Icc4Nys1z57crhufTTPBgv34REc
WardOx73qChIKvKNuwydSgfj5K0g5nr4bxdKCoah46nTKIgcz2B2Zxt+e5y6xUQ8
8wVevbHOkwNzdA/mXYlY4iDuywFxJiGEgZ9DNUzbL7iGxtKwGx1zyxzU6RqGGM58
iU/GXs8i1qcpYho0w9q5DRvGtrTJA51/ebqsBIM/fky5AUfEuwM0KykRXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEhPeCUobEM0euZAAcOfm/z0t29yMB8GA1UdIwQY
MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt
OWZlYmY4YzNlMzNmLzEvU0U5NEpTaHNRelI2NWtBQnc1LWJfUFMzYjNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm
LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWKVMA0G
CSqGSIb3DQEBCwUAA4IBAQAAWaCVtsXIb28aIMCpW+uzqugmDbvAAkhxonMToWHZ
pkqQ+pGoEqS21Gq5DB8Lb9BLWk0U5tcvuel3lqwT52MvX1hN8Qy3S/IlHCTRyUbT
EyYhuHQlNu31AFKyP6E7WGHPUSfbiq/wifTjuHengs7bZa7Bwu3bvp7qxvokrhQr
7+lO2FDogwCR/wx2fXFh3/8eT7bjh+Jg1q0aT4T/DgK7HWNpBbrSu8xW2sweWMjz
3xgzLiKGGW9tMbBssbvlv5p9EJ3cLzYnvQ7GqI6yiXw0wOVchIomzOOwJYcdLXhB
KANnYdW4Xh2Hb01OeVfVSHbry8zDBUmuDTsyemyrexhH
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:28:16 2026 by rpki-client