Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/irEMFAfnN5DJcgPJSBaksXnfn40.roa
File: irEMFAfnN5DJcgPJSBaksXnfn40.roa (raw, json)
Hash identifier: mu6j7n0AQScT3JUlgc/R13L/QOuGVSxFOFUO28RzL9Q=
Subject key identifier: 8A:B1:0C:14:07:E7:37:90:C9:72:03:C9:48:16:A4:B1:79:DF:9F:8D
Certificate issuer: /CN=3cf615f06d23228c769a85faf0510393d064e0e0
Certificate serial: 019F85E745D7A7B2E333E65506C60A5BFBA3
Authority key identifier: 3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/irEMFAfnN5DJcgPJSBaksXnfn40.roa
Signing time: Tue 21 Jul 2026 18:19:14 +0000
ROA not before: Tue 21 Jul 2026 18:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213069
IP address blocks: 195.234.191.0/24 maxlen: 24
195.238.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:e7:45:d7:a7:b2:e3:33:e6:55:06:c6:0a:5b:fb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cf615f06d23228c769a85faf0510393d064e0e0
Validity
Not Before: Jul 21 18:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ab10c1407e73790c97203c94816a4b179df9f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6f:97:b0:ce:a7:83:e1:b3:19:b0:08:98:ba:
d3:e0:7f:51:8a:58:89:25:ff:2a:5f:66:18:4f:80:
9b:cb:4f:f4:34:82:58:70:aa:4e:b9:0e:dc:c8:1e:
e3:37:d8:60:d1:49:a0:03:07:dd:e2:6b:a2:05:4c:
1c:a9:0b:9d:94:e9:ce:21:70:78:e3:09:a6:69:b2:
5a:ad:61:b4:69:cf:79:f1:fa:d9:07:75:80:f8:99:
16:14:82:15:8a:53:11:27:60:b0:db:e7:35:af:53:
78:20:9b:0e:d8:ec:d9:0e:54:41:aa:10:c4:70:d9:
71:a0:46:14:76:bf:22:16:14:b1:e3:dd:e7:2a:a0:
6c:cd:7d:71:a8:fc:6e:1c:02:c4:7a:4c:3c:bb:1b:
bd:f0:29:3a:7c:24:89:35:10:6a:a7:5b:fa:10:8c:
48:36:24:10:9d:4e:73:f2:68:ae:1f:9f:2f:42:a2:
b1:0a:e7:e1:af:70:a6:0c:5c:7d:9e:d4:2e:5e:95:
93:3a:51:91:63:18:15:89:a0:00:62:30:ed:ed:e8:
77:01:81:b0:2f:8a:e6:2a:45:0e:8f:24:1e:83:6f:
4f:e1:cb:d7:8b:01:0d:03:b0:f7:5e:be:d3:a0:77:
04:8a:30:1f:72:8c:37:de:43:e7:e2:2e:9e:bd:81:
87:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B1:0C:14:07:E7:37:90:C9:72:03:C9:48:16:A4:B1:79:DF:9F:8D
X509v3 Authority Key Identifier:
keyid:3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/irEMFAfnN5DJcgPJSBaksXnfn40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.191.0/24
195.238.240.0/24
Signature Algorithm: sha256WithRSAEncryption
44:e0:7a:4c:f4:7c:0f:d6:d9:7a:28:1c:ee:ee:03:74:82:16:
25:e2:78:98:6c:ef:9a:22:9d:a4:75:eb:63:18:f7:42:4e:de:
ce:ce:b5:79:c7:2d:fb:ca:98:ce:8d:1e:22:f0:9a:04:80:e5:
a4:f6:66:0d:2f:08:6c:13:65:31:23:af:84:47:13:bb:db:e9:
fb:c1:85:6e:55:70:73:ac:95:a2:17:f6:90:0d:51:69:1e:62:
e1:6a:ac:9c:b5:72:75:b1:84:3e:ca:9d:be:88:64:ad:40:8d:
08:22:5f:2e:0e:d7:32:2e:79:d2:ed:af:d4:5c:cd:64:d6:26:
64:f2:cc:b9:0f:1d:b4:8d:be:6f:df:38:a0:41:5b:68:79:b5:
39:23:44:ab:54:11:d4:6e:b0:b4:62:e5:6e:8e:e0:ab:82:d2:
f2:dd:9c:3b:8b:f3:1f:d4:56:37:61:8f:4a:e7:9d:1d:5d:a6:
09:d1:b2:88:cb:4c:eb:c1:ce:19:93:cb:d8:29:02:8e:95:cf:
34:5b:03:3d:aa:39:17:0c:a2:e8:0b:5d:06:09:6f:e2:b9:18:
fa:e6:4c:92:c6:54:fe:a5:c7:33:74:f9:9d:cb:b7:c3:ad:e5:
4d:45:00:04:7c:08:99:c5:7e:f7:7f:b5:10:f6:6a:b3:8e:0e:
83:76:4a:30
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ+F50XXp7LjM+ZVBsYKW/ujMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZjYxNWYwNmQyMzIyOGM3NjlhODVmYWYwNTEwMzkzZDA2
NGUwZTAwHhcNMjYwNzIxMTgxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWIxMGMxNDA3ZTczNzkwYzk3MjAzYzk0ODE2YTRiMTc5ZGY5ZjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2W+XsM6ng+GzGbAImLrT4H9RiliJ
Jf8qX2YYT4Cby0/0NIJYcKpOuQ7cyB7jN9hg0UmgAwfd4muiBUwcqQudlOnOIXB4
4wmmabJarWG0ac958frZB3WA+JkWFIIVilMRJ2Cw2+c1r1N4IJsO2OzZDlRBqhDE
cNlxoEYUdr8iFhSx493nKqBszX1xqPxuHALEekw8uxu98Ck6fCSJNRBqp1v6EIxI
NiQQnU5z8miuH58vQqKxCufhr3CmDFx9ntQuXpWTOlGRYxgViaAAYjDt7eh3AYGw
L4rmKkUOjyQeg29P4cvXiwENA7D3Xr7ToHcEijAfcow33kPn4i6evYGHKQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIqxDBQH5zeQyXIDyUgWpLF535+NMB8GA1UdIwQY
MBaAFDz2FfBtIyKMdpqF+vBRA5PQZODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFBZVjhHMGpJb3gybW9YNjhGRURrOUJrNE9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUt
MThkMWE0MDZhYWVkLzEvaXJFTUZBZm5ONURKY2dQSlNCYWtzWG5mbjQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUtMThkMWE0MDZhYWVk
LzEvUFBZVjhHMGpJb3gybW9YNjhGRURrOUJrNE9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw+q/AwQA
w+7wMA0GCSqGSIb3DQEBCwUAA4IBAQBE4HpM9HwP1tl6KBzu7gN0ghYl4niYbO+a
Ip2kdetjGPdCTt7OzrV5xy37ypjOjR4i8JoEgOWk9mYNLwhsE2UxI6+ERxO72+n7
wYVuVXBzrJWiF/aQDVFpHmLhaqyctXJ1sYQ+yp2+iGStQI0IIl8uDtcyLnnS7a/U
XM1k1iZk8sy5Dx20jb5v3zigQVtoebU5I0SrVBHUbrC0YuVujuCrgtLy3Zw7i/Mf
1FY3YY9K550dXaYJ0bKIy0zrwc4Zk8vYKQKOlc80WwM9qjkXDKLoC10GCW/iuRj6
5kySxlT+pcczdPmdy7fDreVNRQAEfAiZxX73f7UQ9mqzjg6Ddkow
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:01 2026 by rpki-client