Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/ksOPh_2fTunNVDQ0M7oZsMXzMTc.roa
File: ksOPh_2fTunNVDQ0M7oZsMXzMTc.roa (raw, json)
Hash identifier: sTuOVD56/9SfiXVEt5t0X+gpGj1raLEEP3xJmICtW0g=
Subject key identifier: 92:C3:8F:87:FD:9F:4E:E9:CD:54:34:34:33:BA:19:B0:C5:F3:31:37
Certificate issuer: /CN=f589823ba14758007cde873af4bf47fd9c39737b
Certificate serial: 01A0C4FE2DD987569A53E9A376AF04F2C803
Authority key identifier: F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/ksOPh_2fTunNVDQ0M7oZsMXzMTc.roa
Signing time: Mon 21 Sep 2026 17:23:07 +0000
ROA not before: Mon 21 Sep 2026 17:23:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3301
IP address blocks: 194.117.171.0/24 maxlen: 24
194.117.185.0/24 maxlen: 24
194.117.186.0/23 maxlen: 23
194.117.188.0/24 maxlen: 24
195.196.4.0/22 maxlen: 22
195.196.8.0/24 maxlen: 24
195.196.10.0/24 maxlen: 24
195.196.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:fe:2d:d9:87:56:9a:53:e9:a3:76:af:04:f2:c8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f589823ba14758007cde873af4bf47fd9c39737b
Validity
Not Before: Sep 21 17:23:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92c38f87fd9f4ee9cd54343433ba19b0c5f33137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a3:82:92:38:2a:7f:3e:d3:7c:40:f4:4a:a6:
aa:95:12:ca:2c:2b:44:e3:55:07:60:c9:59:c3:04:
09:1f:8d:cd:58:64:0e:2d:f0:a4:d0:e8:ff:6b:11:
80:cf:ed:42:c9:8d:43:1b:24:14:60:58:63:fe:19:
56:63:8b:54:02:bc:75:f5:87:7a:37:9f:11:7f:a9:
0a:21:32:85:f4:99:e9:14:ba:fe:47:fc:63:db:67:
f9:41:b0:3c:19:94:fc:55:42:1a:16:5d:96:09:fa:
c3:45:25:47:6a:a2:17:2f:13:d1:75:d1:e7:83:c7:
55:63:e9:a3:49:f0:e8:e4:c8:92:af:54:94:a2:a2:
b0:54:2b:e6:f9:94:45:f8:41:d9:fc:b2:ec:d4:67:
9f:8e:b7:8d:ff:7b:2f:39:a6:d3:90:9f:b8:0c:a6:
a1:6c:25:68:71:cb:52:58:22:48:54:8c:26:71:01:
3b:2e:ca:5a:e8:09:58:0c:02:d9:da:b5:98:08:8b:
30:66:ac:82:6a:4d:ae:2c:a9:91:82:3c:48:d7:2c:
d2:42:bf:ea:cf:2a:07:ce:aa:6e:4d:35:cb:81:27:
e8:33:a1:4c:5b:10:2d:cc:17:ad:be:f0:07:8a:ee:
d9:ef:92:f0:cc:e8:b9:dc:a5:de:c6:ec:79:2e:fc:
39:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C3:8F:87:FD:9F:4E:E9:CD:54:34:34:33:BA:19:B0:C5:F3:31:37
X509v3 Authority Key Identifier:
keyid:F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/ksOPh_2fTunNVDQ0M7oZsMXzMTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.171.0/24
194.117.185.0-194.117.188.255
195.196.4.0-195.196.8.255
195.196.10.0/24
195.196.97.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:cd:fb:20:93:f7:6f:eb:33:42:92:63:08:bb:dd:27:10:d6:
aa:c3:b6:30:0a:fc:87:77:d8:14:b1:44:39:77:96:1c:06:ee:
e8:29:75:e5:2b:f6:97:06:f7:ca:a5:61:23:f0:16:94:3a:9b:
65:7a:a9:39:f1:13:ee:69:52:0d:80:e9:64:49:4a:5d:a5:ff:
01:5e:44:05:f2:24:a0:f4:5f:f7:2b:8a:04:db:8a:37:db:60:
d9:42:33:60:7b:9c:06:51:7d:60:db:f4:8e:a4:69:fe:96:c6:
b1:5a:e3:64:78:12:f1:a3:59:cd:07:e0:13:d9:ad:4d:8a:d7:
86:e2:c2:e5:44:86:c5:d6:6c:9a:02:63:c0:0e:18:04:72:a3:
75:b5:61:a4:ae:07:e3:37:c2:26:d4:8f:9b:1c:9b:20:26:78:
0c:4c:05:ae:72:43:74:fa:9e:61:6f:56:8d:4c:d1:f6:21:4c:
2b:2e:cd:5d:f1:fd:fa:8b:1a:74:3c:ec:d3:91:65:3f:30:1e:
d2:11:a2:21:c6:4a:93:8f:e3:61:25:70:d2:d9:cd:1d:1b:b7:
04:ab:16:30:fc:18:e0:cb:f7:6d:a8:3b:96:38:12:3b:1e:5f:
cd:49:60:a1:d6:23:e2:4a:e0:ed:3a:6a:d0:47:c6:75:60:a8:
52:33:a7:e0
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAaDE/i3Zh1aaU+mjdq8E8sgDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ODk4MjNiYTE0NzU4MDA3Y2RlODczYWY0YmY0N2ZkOWMz
OTczN2IwHhcNMjYwOTIxMTcyMzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmMzOGY4N2ZkOWY0ZWU5Y2Q1NDM0MzQzM2JhMTliMGM1ZjMzMTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqOCkjgqfz7TfED0SqaqlRLKLCtE
41UHYMlZwwQJH43NWGQOLfCk0Oj/axGAz+1CyY1DGyQUYFhj/hlWY4tUArx19Yd6
N58Rf6kKITKF9JnpFLr+R/xj22f5QbA8GZT8VUIaFl2WCfrDRSVHaqIXLxPRddHn
g8dVY+mjSfDo5MiSr1SUoqKwVCvm+ZRF+EHZ/LLs1GefjreN/3svOabTkJ+4DKah
bCVocctSWCJIVIwmcQE7Lspa6AlYDALZ2rWYCIswZqyCak2uLKmRgjxI1yzSQr/q
zyoHzqpuTTXLgSfoM6FMWxAtzBetvvAHiu7Z75LwzOi53KXexux5Lvw53QIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFJLDj4f9n07pzVQ0NDO6GbDF8zE3MB8GA1UdIwQY
MBaAFPWJgjuhR1gAfN6HOvS/R/2cOXN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVltQ082RkhXQUI4M29jNjlMOUhfWnc1YzNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hZTE3NWEtMWMwMC00MDkxLWEwNjEt
OWJhNGVjMzFjYjZiLzEva3NPUGhfMmZUdW5OVkRRME03b1pzTVh6TVRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9hZTE3NWEtMWMwMC00MDkxLWEwNjEtOWJhNGVjMzFjYjZi
LzEvOVltQ082RkhXQUI4M29jNjlMOUhfWnc1YzNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQAwnWrMAwD
BADCdbkDBADCdbwwDAMEAsPEBAMEAMPECAMEAMPECgMEAMPEYTANBgkqhkiG9w0B
AQsFAAOCAQEATs37IJP3b+szQpJjCLvdJxDWqsO2MAr8h3fYFLFEOXeWHAbu6Cl1
5Sv2lwb3yqVhI/AWlDqbZXqpOfET7mlSDYDpZElKXaX/AV5EBfIkoPRf9yuKBNuK
N9tg2UIzYHucBlF9YNv0jqRp/pbGsVrjZHgS8aNZzQfgE9mtTYrXhuLC5USGxdZs
mgJjwA4YBHKjdbVhpK4H4zfCJtSPmxybICZ4DEwFrnJDdPqeYW9WjUzR9iFMKy7N
XfH9+osadDzs05FlPzAe0hGiIcZKk4/jYSVw0tnNHRu3BKsWMPwY4Mv3bag7ljgS
Ox5fzUlgodYj4krg7Tpq0EfGdWCoUjOn4A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:18:16 2026 by rpki-client