Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/d532ca-0c15-4641-9fa5-5080d1b946fb/1/pE-Dh8alv5vN2ET0F-GtZ2bFSSg.roa
File: pE-Dh8alv5vN2ET0F-GtZ2bFSSg.roa (raw, json)
Hash identifier: AwQf+/zNLpDriXjSh7WcAWIIEv/q4fP/dqqhXPd5R8U=
Subject key identifier: A4:4F:83:87:C6:A5:BF:9B:CD:D8:44:F4:17:E1:AD:67:66:C5:49:28
Certificate issuer: /CN=ba708166cef03755af686681f7931f8d57ba8ec8
Certificate serial: 01A0450DD4DED1E217B627D8F6258F3DEFCA
Authority key identifier: BA:70:81:66:CE:F0:37:55:AF:68:66:81:F7:93:1F:8D:57:BA:8E:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unCBZs7wN1WvaGaB95MfjVe6jsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d532ca-0c15-4641-9fa5-5080d1b946fb/1/pE-Dh8alv5vN2ET0F-GtZ2bFSSg.roa
Signing time: Thu 27 Aug 2026 21:08:49 +0000
ROA not before: Thu 27 Aug 2026 21:08:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219280
IP address blocks: 195.140.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d532ca-0c15-4641-9fa5-5080d1b946fb/1/unCBZs7wN1WvaGaB95MfjVe6jsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d532ca-0c15-4641-9fa5-5080d1b946fb/1/unCBZs7wN1WvaGaB95MfjVe6jsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/unCBZs7wN1WvaGaB95MfjVe6jsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:45:0d:d4:de:d1:e2:17:b6:27:d8:f6:25:8f:3d:ef:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba708166cef03755af686681f7931f8d57ba8ec8
Validity
Not Before: Aug 27 21:08:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a44f8387c6a5bf9bcdd844f417e1ad6766c54928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2f:07:89:75:1e:b3:76:5b:25:41:2e:3b:0d:
ef:7f:7d:1c:49:8f:1e:ac:a1:0f:e6:3b:41:b7:8b:
fd:a7:d1:e5:9d:3b:59:cb:75:58:a5:df:ff:05:e9:
3e:08:a8:00:8c:59:3e:e1:62:97:b5:61:93:a8:00:
29:62:87:46:0a:2e:2a:76:d5:44:ab:cd:f8:53:28:
83:ec:e5:b3:93:17:0e:ba:57:8e:47:51:99:94:80:
41:36:ef:e8:8e:68:7f:2c:ca:09:fe:4a:f1:4a:93:
29:6a:eb:76:56:75:4f:eb:78:7a:10:02:10:38:2e:
91:3c:be:fc:bc:7c:c5:88:fe:9b:8b:4d:86:21:92:
f4:24:67:30:93:94:90:76:2d:a7:cf:e2:57:de:10:
4c:10:01:92:57:54:18:e1:54:cc:7e:14:7c:91:d2:
72:51:69:a3:8f:c8:e0:62:77:40:a4:ce:d3:02:00:
71:30:10:3d:e3:33:c0:02:5d:70:c9:7b:46:1c:8c:
35:fd:d5:e3:2c:35:31:23:12:34:6e:d8:06:3f:5f:
e2:e8:f3:ae:49:5f:a4:ae:de:aa:97:14:25:39:1b:
74:3e:32:f7:a9:84:02:21:21:47:b6:89:a4:02:8f:
78:75:ef:0c:01:3a:05:c1:ae:00:16:40:4e:20:08:
bc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4F:83:87:C6:A5:BF:9B:CD:D8:44:F4:17:E1:AD:67:66:C5:49:28
X509v3 Authority Key Identifier:
keyid:BA:70:81:66:CE:F0:37:55:AF:68:66:81:F7:93:1F:8D:57:BA:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unCBZs7wN1WvaGaB95MfjVe6jsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d532ca-0c15-4641-9fa5-5080d1b946fb/1/pE-Dh8alv5vN2ET0F-GtZ2bFSSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d532ca-0c15-4641-9fa5-5080d1b946fb/1/unCBZs7wN1WvaGaB95MfjVe6jsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.140.190.0/24
Signature Algorithm: sha256WithRSAEncryption
20:c4:6c:5c:79:0e:c7:0b:60:fd:f4:da:03:0d:be:37:21:b6:
6f:b5:99:99:7c:82:5d:d7:ed:02:fa:db:78:05:d9:14:67:ef:
e6:f7:3b:af:ac:00:8a:12:57:4c:b9:bf:26:ab:8c:75:a3:84:
63:d7:18:b4:9f:2e:d5:c3:2a:3d:07:23:7b:ce:82:d4:ec:13:
15:53:46:cb:aa:ef:d6:5b:53:b1:5b:74:55:16:a1:09:53:0b:
8c:74:24:ce:9a:70:97:7b:2d:dc:33:a8:12:8d:95:e1:55:fb:
4e:ec:53:c3:cb:6a:10:94:ac:44:45:51:fb:15:31:5e:88:ed:
ea:76:3a:37:c9:70:74:00:2b:24:0a:ce:76:18:de:be:ec:ad:
8a:f2:ef:cc:a7:3c:9f:10:a6:9c:b8:7a:fd:35:ab:96:89:33:
58:27:24:85:11:12:dd:18:ce:86:cd:5d:81:d9:dd:a2:e6:65:
71:62:60:4c:e1:5f:0c:65:13:e9:02:7a:17:f4:04:23:47:1d:
f1:3d:86:cb:eb:0b:bc:4e:bc:3e:a4:b5:6f:58:d6:78:10:1d:
4b:d2:a8:32:f1:f6:66:c2:67:57:74:04:0b:8a:1f:71:c0:ec:
a3:4b:23:9d:fe:80:b1:42:c6:3d:97:a8:f6:2e:29:51:c7:7a:
9c:38:a8:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBFDdTe0eIXtifY9iWPPe/KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNzA4MTY2Y2VmMDM3NTVhZjY4NjY4MWY3OTMxZjhkNTdi
YThlYzgwHhcNMjYwODI3MjEwODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDRmODM4N2M2YTViZjliY2RkODQ0ZjQxN2UxYWQ2NzY2YzU0OTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5y8HiXUes3ZbJUEuOw3vf30cSY8e
rKEP5jtBt4v9p9HlnTtZy3VYpd//Bek+CKgAjFk+4WKXtWGTqAApYodGCi4qdtVE
q834UyiD7OWzkxcOuleOR1GZlIBBNu/ojmh/LMoJ/krxSpMpaut2VnVP63h6EAIQ
OC6RPL78vHzFiP6bi02GIZL0JGcwk5SQdi2nz+JX3hBMEAGSV1QY4VTMfhR8kdJy
UWmjj8jgYndApM7TAgBxMBA94zPAAl1wyXtGHIw1/dXjLDUxIxI0btgGP1/i6POu
SV+krt6qlxQlORt0PjL3qYQCISFHtomkAo94de8MAToFwa4AFkBOIAi8kQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKRPg4fGpb+bzdhE9BfhrWdmxUkoMB8GA1UdIwQY
MBaAFLpwgWbO8DdVr2hmgfeTH41Xuo7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW5DQlpzN3dOMVd2YUdhQjk1TWZqVmU2anNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kNTMyY2EtMGMxNS00NjQxLTlmYTUt
NTA4MGQxYjk0NmZiLzEvcEUtRGg4YWx2NXZOMkVUMEYtR3RaMmJGU1NnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9kNTMyY2EtMGMxNS00NjQxLTlmYTUtNTA4MGQxYjk0NmZi
LzEvdW5DQlpzN3dOMVd2YUdhQjk1TWZqVmU2anNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4y+MA0G
CSqGSIb3DQEBCwUAA4IBAQAgxGxceQ7HC2D99NoDDb43IbZvtZmZfIJd1+0C+tt4
BdkUZ+/m9zuvrACKEldMub8mq4x1o4Rj1xi0ny7Vwyo9ByN7zoLU7BMVU0bLqu/W
W1OxW3RVFqEJUwuMdCTOmnCXey3cM6gSjZXhVftO7FPDy2oQlKxERVH7FTFeiO3q
djo3yXB0ACskCs52GN6+7K2K8u/MpzyfEKacuHr9NauWiTNYJySFERLdGM6GzV2B
2d2i5mVxYmBM4V8MZRPpAnoX9AQjRx3xPYbL6wu8Trw+pLVvWNZ4EB1L0qgy8fZm
wmdXdAQLih9xwOyjSyOd/oCxQsY9l6j2LilRx3qcOKju
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:25:09 2026 by rpki-client