Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/9jtK5VCtwfIPO7PMzdUupyz2Ui8.roa
File: 9jtK5VCtwfIPO7PMzdUupyz2Ui8.roa (raw, json)
Hash identifier: OaFSGlvk+qGUsyiydLHzRVOaiJhX1qNhPHfb1bkwDvE=
Subject key identifier: F6:3B:4A:E5:50:AD:C1:F2:0F:3B:B3:CC:CD:D5:2E:A7:2C:F6:52:2F
Certificate issuer: /CN=3cf615f06d23228c769a85faf0510393d064e0e0
Certificate serial: 019F8A652CE6E1DEF3DE93E3EF458D87DCD5
Authority key identifier: 3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/9jtK5VCtwfIPO7PMzdUupyz2Ui8.roa
Signing time: Wed 22 Jul 2026 15:15:14 +0000
ROA not before: Wed 22 Jul 2026 15:15:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47376
IP address blocks: 91.222.196.0/24 maxlen: 24
91.222.197.0/24 maxlen: 24
103.215.220.0/24 maxlen: 24
103.215.223.0/24 maxlen: 24
195.28.11.0/24 maxlen: 24
195.238.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:65:2c:e6:e1:de:f3:de:93:e3:ef:45:8d:87:dc:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cf615f06d23228c769a85faf0510393d064e0e0
Validity
Not Before: Jul 22 15:15:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f63b4ae550adc1f20f3bb3cccdd52ea72cf6522f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:62:18:ee:d7:2b:fc:f0:ef:aa:09:8e:5c:29:
ba:ff:3b:30:5a:b0:93:d3:fc:3e:8c:27:e8:f6:14:
29:89:2a:4a:d9:ca:00:95:07:7b:11:e6:4f:8d:66:
b3:ce:9a:f9:97:3a:84:8f:5f:a9:b0:da:bf:99:39:
b0:b9:6b:37:8b:e9:51:d6:e8:87:e4:54:54:7c:24:
3c:07:04:a9:31:e3:42:e9:26:a6:48:10:f5:f6:67:
d2:33:bc:bb:12:cf:47:3a:5c:de:bd:b6:94:ac:fe:
39:54:ec:85:01:ae:99:6c:6e:93:b5:4e:c8:eb:14:
d6:dc:88:db:5d:6f:14:d0:d1:5b:0b:db:b2:c6:ae:
3a:fd:2c:84:8e:a8:6f:6b:c4:90:22:41:f5:c0:d3:
ee:14:01:d5:29:3c:5c:5f:e3:f8:86:47:01:ab:55:
fd:b2:5f:ec:8e:f6:fc:83:3d:d4:24:e9:91:90:96:
81:7b:75:6c:a3:74:9a:f8:cc:61:b5:27:5a:de:7d:
bc:69:20:54:7b:7f:d0:83:de:a6:2d:7a:09:ec:f9:
8d:64:88:12:04:f4:be:ac:b9:be:84:62:f8:e2:5d:
25:e6:d6:eb:3b:04:6c:62:43:b0:56:84:06:47:35:
f1:15:ea:ff:66:ac:bc:36:17:da:16:ae:e5:e1:6e:
63:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3B:4A:E5:50:AD:C1:F2:0F:3B:B3:CC:CD:D5:2E:A7:2C:F6:52:2F
X509v3 Authority Key Identifier:
keyid:3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/9jtK5VCtwfIPO7PMzdUupyz2Ui8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.196.0/23
103.215.220.0/24
103.215.223.0/24
195.28.11.0/24
195.238.231.0/24
Signature Algorithm: sha256WithRSAEncryption
83:dd:8d:75:b9:e1:97:a1:0f:18:8f:6f:7f:11:80:9f:3a:da:
a9:cb:af:27:b5:f6:e4:61:28:98:a7:d7:56:a3:11:a7:1f:5d:
ba:ab:14:ca:e0:5d:ad:66:48:49:0d:0a:03:d7:37:b5:d3:78:
51:c4:21:85:75:74:c8:64:17:23:c7:ff:03:e2:f8:2c:41:c0:
de:fa:02:99:d3:22:cf:5a:f6:5e:ec:7b:06:8f:7e:b8:d2:f6:
57:0e:84:2d:29:8d:5b:b9:d8:88:67:e0:a0:dd:f7:36:22:99:
68:56:3c:1c:45:a7:af:ec:ab:1d:67:e0:2a:6e:5b:e6:4f:4e:
03:d7:24:91:18:94:57:00:f8:1d:df:e8:31:13:14:dc:72:4e:
a9:06:e1:d4:9b:62:d8:3f:2c:85:c1:bf:c2:aa:ca:0c:75:f9:
58:1d:a4:ae:64:8e:9a:b3:72:8d:52:ae:44:97:fb:2d:78:d4:
27:a9:2f:3a:a3:b5:a6:f0:f8:fc:ae:87:58:de:ef:e0:68:8b:
d2:2c:ae:65:71:6a:af:04:ca:73:0e:2d:dc:32:54:e2:b6:83:
9d:b1:0f:31:5a:65:03:c0:27:51:ef:26:43:6f:b0:ea:e5:94:
39:41:11:9b:0f:62:a8:fa:f3:d0:5d:2f:61:09:34:37:63:0c:
c4:a6:a2:70
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ+KZSzm4d7z3pPj70WNh9zVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZjYxNWYwNmQyMzIyOGM3NjlhODVmYWYwNTEwMzkzZDA2
NGUwZTAwHhcNMjYwNzIyMTUxNTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjNiNGFlNTUwYWRjMWYyMGYzYmIzY2NjZGQ1MmVhNzJjZjY1MjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GIY7tcr/PDvqgmOXCm6/zswWrCT
0/w+jCfo9hQpiSpK2coAlQd7EeZPjWazzpr5lzqEj1+psNq/mTmwuWs3i+lR1uiH
5FRUfCQ8BwSpMeNC6SamSBD19mfSM7y7Es9HOlzevbaUrP45VOyFAa6ZbG6TtU7I
6xTW3IjbXW8U0NFbC9uyxq46/SyEjqhva8SQIkH1wNPuFAHVKTxcX+P4hkcBq1X9
sl/sjvb8gz3UJOmRkJaBe3Vso3Sa+MxhtSda3n28aSBUe3/Qg96mLXoJ7PmNZIgS
BPS+rLm+hGL44l0l5tbrOwRsYkOwVoQGRzXxFer/Zqy8NhfaFq7l4W5jowIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFPY7SuVQrcHyDzuzzM3VLqcs9lIvMB8GA1UdIwQY
MBaAFDz2FfBtIyKMdpqF+vBRA5PQZODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFBZVjhHMGpJb3gybW9YNjhGRURrOUJrNE9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUt
MThkMWE0MDZhYWVkLzEvOWp0SzVWQ3R3ZklQTzdQTXpkVXVweXoyVWk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUtMThkMWE0MDZhYWVk
LzEvUFBZVjhHMGpJb3gybW9YNjhGRURrOUJrNE9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBW97EAwQA
Z9fcAwQAZ9ffAwQAwxwLAwQAw+7nMA0GCSqGSIb3DQEBCwUAA4IBAQCD3Y11ueGX
oQ8Yj29/EYCfOtqpy68ntfbkYSiYp9dWoxGnH126qxTK4F2tZkhJDQoD1ze103hR
xCGFdXTIZBcjx/8D4vgsQcDe+gKZ0yLPWvZe7HsGj3640vZXDoQtKY1budiIZ+Cg
3fc2IploVjwcRaev7KsdZ+AqblvmT04D1ySRGJRXAPgd3+gxExTcck6pBuHUm2LY
PyyFwb/CqsoMdflYHaSuZI6as3KNUq5El/steNQnqS86o7Wm8Pj8rodY3u/gaIvS
LK5lcWqvBMpzDi3cMlTitoOdsQ8xWmUDwCdR7yZDb7Dq5ZQ5QRGbD2Ko+vPQXS9h
CTQ3YwzEpqJw
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:48 2026 by rpki-client