Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/wJ9Qk8tBAILIT2MzqFz67oY-ihg.roa
File: wJ9Qk8tBAILIT2MzqFz67oY-ihg.roa (raw, json)
Hash identifier: cE8692Fre2vK3h5ac8/c3SU5xGg2cihxJaN+/QF2FJY=
Subject key identifier: C0:9F:50:93:CB:41:00:82:C8:4F:63:33:A8:5C:FA:EE:86:3E:8A:18
Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial: 019D00EA5367C18837C3460CE01C5BC9805B
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/wJ9Qk8tBAILIT2MzqFz67oY-ihg.roa
Signing time: Wed 18 Mar 2026 12:27:29 +0000
ROA not before: Wed 18 Mar 2026 12:27:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 85.203.40.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:ea:53:67:c1:88:37:c3:46:0c:e0:1c:5b:c9:80:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Validity
Not Before: Mar 18 12:27:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c09f5093cb410082c84f6333a85cfaee863e8a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ba:b1:71:ca:48:b8:13:5e:83:d8:9a:ef:58:
b7:32:69:72:32:70:d3:ee:6a:0d:70:34:bd:21:fb:
9d:c9:c3:db:8a:6b:52:94:2d:f3:ac:a3:a0:9d:46:
98:0d:58:d2:3c:02:cf:64:c2:91:b0:d5:b8:5a:27:
7f:58:b8:6b:df:b9:51:16:46:87:ce:3c:70:08:1f:
7e:fb:6e:94:1e:16:38:c7:dd:91:d0:52:7d:6b:53:
95:83:b8:5d:e9:62:da:0d:c9:a8:53:52:a7:73:29:
8d:87:e4:f9:57:41:d3:b7:6a:57:88:5d:70:b5:fd:
49:d9:c2:fe:19:75:5e:45:f8:dc:f8:3a:33:f3:d8:
22:bc:0b:7b:09:5e:9b:a9:ea:63:80:d2:96:da:1b:
e1:c2:78:dd:1e:2c:11:7a:d8:da:c9:5d:dd:80:10:
36:e9:5c:b8:2f:40:b4:12:b7:d4:82:0e:01:1a:cf:
eb:30:77:73:d3:a5:a5:cf:98:01:da:b6:92:91:70:
ce:ab:9b:b7:6d:4c:db:f3:a6:79:78:fc:74:aa:53:
4b:ca:61:12:ac:b4:97:94:9b:2a:25:20:4f:23:bb:
c8:c3:87:ff:9d:95:b3:71:cb:cb:31:e4:0d:b0:48:
31:99:1e:23:ce:19:ce:77:ec:24:cc:7b:c7:89:a7:
4b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9F:50:93:CB:41:00:82:C8:4F:63:33:A8:5C:FA:EE:86:3E:8A:18
X509v3 Authority Key Identifier:
keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/wJ9Qk8tBAILIT2MzqFz67oY-ihg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.40.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:a9:82:56:e9:c9:46:95:2e:bc:65:78:31:fa:14:6c:e0:63:
e4:21:14:3e:98:cb:8a:df:ad:d8:3f:0c:4f:a7:30:fc:9a:e1:
92:1e:ac:ab:cf:a2:4a:fb:b0:3d:80:d7:5d:e5:21:ac:27:fa:
7e:4a:d1:63:f8:ce:2b:86:83:94:1c:90:28:cf:27:05:52:6e:
67:80:64:a5:36:a1:c4:9c:98:e6:91:1b:9b:2c:15:57:1c:ac:
fd:d3:16:50:09:f8:ea:20:86:53:8d:c8:e8:42:c6:ea:4b:b0:
fe:96:6d:d0:6b:ef:87:e3:40:21:71:d7:a9:a8:ed:1c:86:f7:
e6:b7:38:20:2e:f7:55:d5:fc:dc:1b:07:48:d0:15:dd:77:90:
d4:89:0c:38:e1:49:0a:bd:31:a7:3d:c3:2a:09:3b:3d:ee:9f:
86:71:58:2a:94:8e:01:2e:b0:85:12:c9:36:52:c0:68:d3:c7:
cb:93:9e:76:e8:bf:57:58:7a:e6:68:37:68:c8:5b:cb:64:7a:
17:37:b8:fd:2c:b6:fe:c4:f8:9d:1a:90:a2:16:b2:a6:f0:13:
9a:ff:c7:fb:b5:35:32:b6:fa:79:11:6d:8b:a0:8e:d0:8a:55:
bb:ec:07:d4:37:0c:8f:7a:87:ae:c2:bb:67:11:aa:07:0f:03:
63:2c:02:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0A6lNnwYg3w0YM4BxbyYBbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmJkNzZhNWNhYzI4M2VjZTBhMGY4ZWFiMmM5NzAyMTQw
MWZiODkwHhcNMjYwMzE4MTIyNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDlmNTA5M2NiNDEwMDgyYzg0ZjYzMzNhODVjZmFlZTg2M2U4YTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLqxccpIuBNeg9ia71i3MmlyMnDT
7moNcDS9IfudycPbimtSlC3zrKOgnUaYDVjSPALPZMKRsNW4Wid/WLhr37lRFkaH
zjxwCB9++26UHhY4x92R0FJ9a1OVg7hd6WLaDcmoU1KncymNh+T5V0HTt2pXiF1w
tf1J2cL+GXVeRfjc+Doz89givAt7CV6bqepjgNKW2hvhwnjdHiwRetjayV3dgBA2
6Vy4L0C0ErfUgg4BGs/rMHdz06Wlz5gB2raSkXDOq5u3bUzb86Z5ePx0qlNLymES
rLSXlJsqJSBPI7vIw4f/nZWzccvLMeQNsEgxmR4jzhnOd+wkzHvHiadLEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMCfUJPLQQCCyE9jM6hc+u6GPooYMB8GA1UdIwQY
MBaAFJYr12pcrCg+zgoPjqsslwIUAfuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMt
NmFiMTExNTVmNmZiLzEvd0o5UWs4dEJBSUxJVDJNenFGejY3b1ktaWhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMtNmFiMTExNTVmNmZi
LzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVcsoMA0G
CSqGSIb3DQEBCwUAA4IBAQCsqYJW6clGlS68ZXgx+hRs4GPkIRQ+mMuK363YPwxP
pzD8muGSHqyrz6JK+7A9gNdd5SGsJ/p+StFj+M4rhoOUHJAozycFUm5ngGSlNqHE
nJjmkRubLBVXHKz90xZQCfjqIIZTjcjoQsbqS7D+lm3Qa++H40AhcdepqO0chvfm
tzggLvdV1fzcGwdI0BXdd5DUiQw44UkKvTGnPcMqCTs97p+GcVgqlI4BLrCFEsk2
UsBo08fLk5526L9XWHrmaDdoyFvLZHoXN7j9LLb+xPidGpCiFrKm8BOa/8f7tTUy
tvp5EW2LoI7QilW77AfUNwyPeoeuwrtnEaoHDwNjLAIT
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:48:54 2026 by rpki-client