Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/ahwJWMDOiYbBjC-dMcBFm-YzxIE.roa
File: ahwJWMDOiYbBjC-dMcBFm-YzxIE.roa (raw, json)
Hash identifier: JIus5+okp5b0RxpPylDp38lXYKbWSyMZRf8EJzgBKIc=
Subject key identifier: 6A:1C:09:58:C0:CE:89:86:C1:8C:2F:9D:31:C0:45:9B:E6:33:C4:81
Certificate issuer: /CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Certificate serial: 01A085E3170FA39134B643608C147CD1F741
Authority key identifier: D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/ahwJWMDOiYbBjC-dMcBFm-YzxIE.roa
Signing time: Wed 09 Sep 2026 11:17:27 +0000
ROA not before: Wed 09 Sep 2026 11:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12695
IP address blocks: 88.214.230.0/24 maxlen: 24
88.214.231.0/24 maxlen: 24
88.214.236.0/23 maxlen: 23
88.214.238.0/23 maxlen: 23
2a06:7e80:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 20:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:e3:17:0f:a3:91:34:b6:43:60:8c:14:7c:d1:f7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Validity
Not Before: Sep 9 11:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a1c0958c0ce8986c18c2f9d31c0459be633c481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:64:5e:fe:3c:31:d2:96:49:40:7f:c7:59:05:
fc:e2:e2:b6:50:97:0b:5e:75:12:02:5c:43:a8:6e:
f2:16:50:5e:f5:3d:77:76:a2:7f:a9:e4:8a:00:98:
fc:6a:f7:e3:61:bb:3a:84:d3:3b:ea:a9:2d:00:bd:
ac:c4:01:9e:73:2b:c1:83:34:88:97:af:d9:d8:af:
81:a7:0f:68:d7:2c:f6:04:8a:70:a0:48:07:5f:2c:
e6:9e:6a:00:18:99:2e:49:23:6f:e5:64:90:dd:47:
d8:cf:de:a8:94:6e:2e:24:3d:ea:e2:7b:96:07:98:
a3:b4:36:c3:ba:77:5c:bb:f9:cd:07:9e:8c:f8:52:
8a:a7:c6:e0:1e:2b:58:dd:9d:29:ce:98:81:eb:86:
6b:f7:dc:51:d9:8f:d5:3f:7c:d4:8d:9b:0b:22:f5:
e8:28:0e:1b:6a:9e:c9:83:75:0f:63:22:3e:de:c9:
b3:f7:6e:b5:6a:bc:94:14:03:83:09:dc:c9:ff:18:
72:57:2e:8e:aa:98:07:9f:ec:0a:42:ae:e9:aa:b3:
90:57:b5:be:cd:9f:43:3b:e9:4e:b9:34:9b:3f:c3:
b8:46:36:62:7b:43:c3:52:08:4a:91:34:46:73:93:
49:32:c1:37:59:45:cc:93:fc:49:87:5e:bc:2d:2a:
d0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1C:09:58:C0:CE:89:86:C1:8C:2F:9D:31:C0:45:9B:E6:33:C4:81
X509v3 Authority Key Identifier:
keyid:D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/ahwJWMDOiYbBjC-dMcBFm-YzxIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.230.0/23
88.214.236.0/22
IPv6:
2a06:7e80:4::/48
Signature Algorithm: sha256WithRSAEncryption
64:e2:5d:97:33:cc:19:75:98:78:b9:2a:9b:15:8e:53:09:4b:
dd:20:ae:94:6b:87:24:04:93:fa:0f:3f:fc:44:47:88:eb:32:
8a:b9:db:58:71:1e:e6:3f:5d:e2:e9:40:bc:52:5a:b3:42:56:
72:c5:2a:d7:0c:bb:f7:3b:3b:a8:8d:41:59:9c:2a:bd:e9:e2:
93:51:8e:50:6d:2e:a0:f4:00:53:87:60:74:32:6f:12:e1:1f:
aa:4a:76:43:15:6e:af:16:5a:75:c9:53:78:7a:0b:40:fd:54:
6f:21:df:68:8e:ce:b3:84:82:4b:2a:e9:3d:68:e0:f9:98:dc:
5f:45:fc:2a:e0:70:69:78:63:76:86:ac:bb:44:ba:a2:1a:86:
21:9c:52:53:c7:90:af:f5:01:fa:24:3c:20:a1:c1:30:18:93:
78:5b:d3:c9:db:10:e0:55:55:ac:4a:ba:e5:d7:63:7d:9b:a4:
2a:09:81:56:2b:cb:a6:04:89:09:84:e3:9e:f5:20:69:4b:3f:
e1:26:01:9b:75:c2:79:c2:5a:74:f1:5c:05:a4:cb:20:ee:c0:
f1:ae:97:8c:d8:97:13:25:a9:1d:08:14:3c:83:12:6a:23:6a:
79:a6:b6:1b:df:22:02:cd:4c:62:bf:f0:7c:30:60:97:b0:d3:
a2:24:11:98
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAaCF4xcPo5E0tkNgjBR80fdBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MTA4YTQ4NWRmYWYwNmE5MzFmNTQzYzA4NWEwMDljNmFl
YTJkOWMwHhcNMjYwOTA5MTExNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTFjMDk1OGMwY2U4OTg2YzE4YzJmOWQzMWMwNDU5YmU2MzNjNDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GRe/jwx0pZJQH/HWQX84uK2UJcL
XnUSAlxDqG7yFlBe9T13dqJ/qeSKAJj8avfjYbs6hNM76qktAL2sxAGecyvBgzSI
l6/Z2K+Bpw9o1yz2BIpwoEgHXyzmnmoAGJkuSSNv5WSQ3UfYz96olG4uJD3q4nuW
B5ijtDbDundcu/nNB56M+FKKp8bgHitY3Z0pzpiB64Zr99xR2Y/VP3zUjZsLIvXo
KA4bap7Jg3UPYyI+3smz9261aryUFAODCdzJ/xhyVy6OqpgHn+wKQq7pqrOQV7W+
zZ9DO+lOuTSbP8O4RjZie0PDUghKkTRGc5NJMsE3WUXMk/xJh168LSrQNwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFGocCVjAzomGwYwvnTHARZvmM8SBMB8GA1UdIwQY
MBaAFNYQikhd+vBqkx9UPAhaAJxq6i2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWhDS1NGMzY4R3FUSDFROENGb0FuR3JxTFp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83NTg4Y2EtNTY3Ny00Nzk1LThhODEt
YjZmOWRmNDU1MjQ5LzEvYWh3SldNRE9pWWJCakMtZE1jQkZtLVl6eElFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83NTg4Y2EtNTY3Ny00Nzk1LThhODEtYjZmOWRmNDU1MjQ5
LzEvMWhDS1NGMzY4R3FUSDFROENGb0FuR3JxTFp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBWNbmAwQC
WNbsMA8EAgACMAkDBwAqBn6AAAQwDQYJKoZIhvcNAQELBQADggEBAGTiXZczzBl1
mHi5KpsVjlMJS90grpRrhyQEk/oPP/xER4jrMoq521hxHuY/XeLpQLxSWrNCVnLF
KtcMu/c7O6iNQVmcKr3p4pNRjlBtLqD0AFOHYHQybxLhH6pKdkMVbq8WWnXJU3h6
C0D9VG8h32iOzrOEgksq6T1o4PmY3F9F/CrgcGl4Y3aGrLtEuqIahiGcUlPHkK/1
AfokPCChwTAYk3hb08nbEOBVVaxKuuXXY32bpCoJgVYry6YEiQmE4571IGlLP+Em
AZt1wnnCWnTxXAWkyyDuwPGul4zYlxMlqR0IFDyDEmojanmmthvfIgLNTGK/8Hww
YJew06IkEZg=
-----END CERTIFICATE-----
Generated at Mon Sep 28 06:58:08 2026 by rpki-client