Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/maqDCk5ech9njf2wRdErF2LguqA.roa
File: maqDCk5ech9njf2wRdErF2LguqA.roa (raw, json)
Hash identifier: Yp6aTeCGyXLJ/FumA2AwCHAE91dWUbhOkfi6Jw4CZBQ=
Subject key identifier: 99:AA:83:0A:4E:5E:72:1F:67:8D:FD:B0:45:D1:2B:17:62:E0:BA:A0
Certificate issuer: /CN=f589823ba14758007cde873af4bf47fd9c39737b
Certificate serial: 01A0C4FF17B42378A4D62B2C7CC53DBA247C
Authority key identifier: F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/maqDCk5ech9njf2wRdErF2LguqA.roa
Signing time: Mon 21 Sep 2026 17:24:07 +0000
ROA not before: Mon 21 Sep 2026 17:24:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6782
IP address blocks: 194.117.160.0/19 maxlen: 24
195.196.0.0/16 maxlen: 24
2a00:ff40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:ff:17:b4:23:78:a4:d6:2b:2c:7c:c5:3d:ba:24:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f589823ba14758007cde873af4bf47fd9c39737b
Validity
Not Before: Sep 21 17:24:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99aa830a4e5e721f678dfdb045d12b1762e0baa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:82:18:82:5b:0f:51:f8:83:2b:8c:63:ce:89:
87:38:93:26:6f:26:fc:3d:66:46:25:ad:46:55:f6:
dc:39:90:16:21:b5:f3:5a:df:98:37:3a:d5:86:2d:
3d:86:de:f7:37:ef:e0:28:5c:56:36:7d:83:f6:fb:
3f:f5:00:69:12:2b:65:fb:0d:b1:fa:20:53:69:5c:
7e:c0:a1:61:ee:89:55:5e:d0:62:3b:08:d3:4f:33:
bc:8c:d8:7b:f8:03:5e:ae:78:50:4d:69:f6:c9:a6:
64:93:ed:8e:a5:1b:17:06:83:52:95:fc:60:ef:54:
c1:1e:25:ac:28:cd:d1:f0:8c:6c:ba:96:51:98:97:
b8:c6:c4:dc:14:cb:8e:fd:28:a3:18:78:fc:ab:fb:
f9:a1:38:f3:b4:a6:74:b9:66:fd:3e:81:8b:e4:55:
45:81:af:57:68:d7:2e:b3:b3:c9:4d:69:2e:65:eb:
03:7f:7b:d5:d4:b7:57:0f:fb:22:c6:0f:c1:3c:ac:
6c:81:b7:d1:1e:92:71:d5:e9:0f:77:13:d1:75:5c:
d8:8d:9c:44:1b:65:65:82:fe:05:e8:2e:85:0f:a8:
66:7d:22:c1:30:4a:06:52:56:ad:a4:df:ba:92:a5:
6a:c3:69:a1:b1:ff:07:a7:dc:71:98:e0:ac:16:2d:
47:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AA:83:0A:4E:5E:72:1F:67:8D:FD:B0:45:D1:2B:17:62:E0:BA:A0
X509v3 Authority Key Identifier:
keyid:F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/maqDCk5ech9njf2wRdErF2LguqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.160.0/19
195.196.0.0/16
IPv6:
2a00:ff40::/32
Signature Algorithm: sha256WithRSAEncryption
1a:5c:ed:8c:f8:09:5e:d2:ff:5a:b8:ab:89:ac:6d:96:f0:b2:
55:fa:29:64:0f:28:f3:57:64:b4:74:6c:6d:1c:1b:b7:a0:8c:
3f:d0:de:59:fb:44:59:a4:69:09:84:7a:18:34:8f:80:71:8d:
8f:00:75:d6:a7:48:64:0f:49:84:2d:7e:a0:f2:dc:4f:9e:43:
fa:44:cc:0a:1c:1a:95:1c:11:01:27:a9:35:93:d3:d8:a4:07:
50:c2:85:6d:e7:28:44:4c:08:0f:33:4d:28:92:6c:2b:55:f2:
d4:c9:14:70:46:ed:03:0a:25:6b:2d:67:d3:f4:dd:1d:a6:9f:
3f:b0:ee:41:07:66:46:e0:2e:5c:0f:a7:08:90:cc:cd:14:08:
e3:8b:2e:03:cd:e4:7e:80:72:18:99:95:8c:95:57:c5:2c:b8:
0c:37:02:c6:4e:1a:95:d3:9d:50:19:fc:61:46:2a:18:c3:ee:
15:0f:c1:b5:2d:8a:af:ea:4d:58:89:7e:ce:53:0b:21:9e:8f:
30:ce:f1:9c:d0:bc:e6:98:39:70:16:e9:42:da:b4:9c:6e:8f:
fa:63:16:b9:c7:1f:48:d8:94:da:71:4d:b9:87:c3:ab:78:73:
7d:95:6d:3e:be:ca:e8:09:95:c5:e2:8d:0a:10:a1:54:18:6d:
86:1f:5f:2d
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAaDE/xe0I3ik1issfMU9uiR8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ODk4MjNiYTE0NzU4MDA3Y2RlODczYWY0YmY0N2ZkOWMz
OTczN2IwHhcNMjYwOTIxMTcyNDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWFhODMwYTRlNWU3MjFmNjc4ZGZkYjA0NWQxMmIxNzYyZTBiYWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYIYglsPUfiDK4xjzomHOJMmbyb8
PWZGJa1GVfbcOZAWIbXzWt+YNzrVhi09ht73N+/gKFxWNn2D9vs/9QBpEitl+w2x
+iBTaVx+wKFh7olVXtBiOwjTTzO8jNh7+ANernhQTWn2yaZkk+2OpRsXBoNSlfxg
71TBHiWsKM3R8IxsupZRmJe4xsTcFMuO/SijGHj8q/v5oTjztKZ0uWb9PoGL5FVF
ga9XaNcus7PJTWkuZesDf3vV1LdXD/sixg/BPKxsgbfRHpJx1ekPdxPRdVzYjZxE
G2Vlgv4F6C6FD6hmfSLBMEoGUlatpN+6kqVqw2mhsf8Hp9xxmOCsFi1HtQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFJmqgwpOXnIfZ439sEXRKxdi4LqgMB8GA1UdIwQY
MBaAFPWJgjuhR1gAfN6HOvS/R/2cOXN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVltQ082RkhXQUI4M29jNjlMOUhfWnc1YzNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hZTE3NWEtMWMwMC00MDkxLWEwNjEt
OWJhNGVjMzFjYjZiLzEvbWFxRENrNWVjaDluamYyd1JkRXJGMkxndXFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9hZTE3NWEtMWMwMC00MDkxLWEwNjEtOWJhNGVjMzFjYjZi
LzEvOVltQ082RkhXQUI4M29jNjlMOUhfWnc1YzNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwQFwnWgAwMA
w8QwDQQCAAIwBwMFACoA/0AwDQYJKoZIhvcNAQELBQADggEBABpc7Yz4CV7S/1q4
q4msbZbwslX6KWQPKPNXZLR0bG0cG7egjD/Q3ln7RFmkaQmEehg0j4BxjY8Addan
SGQPSYQtfqDy3E+eQ/pEzAocGpUcEQEnqTWT09ikB1DChW3nKERMCA8zTSiSbCtV
8tTJFHBG7QMKJWstZ9P03R2mnz+w7kEHZkbgLlwPpwiQzM0UCOOLLgPN5H6AchiZ
lYyVV8UsuAw3AsZOGpXTnVAZ/GFGKhjD7hUPwbUtiq/qTViJfs5TCyGejzDO8ZzQ
vOaYOXAW6ULatJxuj/pjFrnHH0jYlNpxTbmHw6t4c32VbT6+yugJlcXijQoQoVQY
bYYfXy0=
-----END CERTIFICATE-----
Generated at Sat Sep 26 23:50:00 2026 by rpki-client