Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/1-2Tgw9jcukLzrGeJ5zeOhSicWfY.roa
File: 1-2Tgw9jcukLzrGeJ5zeOhSicWfY.roa (raw, json)
Hash identifier: UUwIGhSiRgLvX6LmHIwyI6C7q1SZcl4Tew1+yDTh7js=
Subject key identifier: FB:64:E0:C3:D8:DC:BA:42:F3:AC:67:89:E7:37:8E:85:28:9C:59:F6
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 01A154AFF089BD06EDB4A32A42D5FE8AC9F0
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/1-2Tgw9jcukLzrGeJ5zeOhSicWfY.roa
Signing time: Mon 19 Oct 2026 15:02:58 +0000
ROA not before: Mon 19 Oct 2026 15:02:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199101
IP address blocks: 200.96.96.0/21 maxlen: 24
200.96.104.0/24 maxlen: 24
200.96.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:af:f0:89:bd:06:ed:b4:a3:2a:42:d5:fe:8a:c9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Oct 19 15:02:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb64e0c3d8dcba42f3ac6789e7378e85289c59f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:18:84:1d:9c:94:26:73:5c:a4:fb:9c:94:55:
18:eb:4b:93:ce:cb:d7:54:b7:f6:80:88:b2:70:a0:
5b:8b:02:87:06:b1:dd:24:60:b1:81:18:d8:58:b1:
5c:ed:c9:8f:cf:69:5f:66:68:c7:27:0f:9a:05:ef:
f9:09:5d:9e:6b:19:0b:74:76:f8:6e:47:15:23:f6:
43:e5:98:2d:06:78:3d:22:8e:ee:73:3a:28:19:d1:
91:55:02:c0:ca:b9:7d:0c:82:16:bd:70:89:1b:ec:
c1:c5:4d:ed:1a:7a:a2:78:36:f3:ea:14:99:36:05:
9f:a6:28:e7:85:ab:dd:94:7a:6d:41:47:c3:8b:29:
ea:c6:58:47:54:e1:33:cb:67:38:35:07:b3:22:c6:
44:17:28:af:e7:38:f0:5d:af:5c:2e:bb:33:d1:74:
f3:76:97:ec:c2:14:6d:e0:fc:06:e4:8f:03:7d:ec:
08:6a:27:ea:59:24:0c:2a:08:43:5c:d2:3a:f7:02:
17:df:d9:68:b0:3c:5e:50:e3:d5:57:af:5f:a4:8e:
1f:9a:ac:b7:77:a2:d5:c0:68:4c:7b:72:3b:5a:e2:
f2:a5:1b:e9:c1:ba:39:59:92:16:38:54:5c:b8:4b:
22:96:ba:b6:fc:15:f8:b5:83:29:e7:18:52:fe:17:
09:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:64:E0:C3:D8:DC:BA:42:F3:AC:67:89:E7:37:8E:85:28:9C:59:F6
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/1-2Tgw9jcukLzrGeJ5zeOhSicWfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.96.96.0-200.96.105.255
Signature Algorithm: sha256WithRSAEncryption
bb:cf:6a:14:ee:06:89:c2:51:b3:e4:d2:86:35:97:3d:df:2b:
14:c0:a9:6b:b4:80:c9:16:c3:10:dd:ec:a7:2f:ec:80:ca:b6:
fc:6f:fb:f0:d5:80:e5:57:0d:3e:74:f5:fa:05:bf:87:a9:02:
58:74:69:80:0d:47:fc:93:5e:b3:f2:83:dd:5b:bb:fd:c1:22:
46:26:80:ba:e4:97:ba:54:e5:28:e3:d7:7a:1b:05:fa:98:b4:
b3:7a:2b:d6:a5:bd:25:8a:e4:6f:12:03:9a:13:e5:6f:6d:2e:
d5:83:c4:fe:24:bd:41:a9:30:46:fe:95:8b:98:4b:6f:d8:fd:
5a:be:a0:e3:e2:e7:1a:87:e5:a4:d9:cf:93:9f:a2:44:c2:58:
a4:f8:51:99:e5:89:99:5e:42:8b:61:c5:cc:e8:d3:6d:12:62:
6d:a5:a1:01:6c:c2:56:af:bc:31:8e:25:b9:ad:ff:01:90:e6:
48:7f:64:01:cb:d9:cd:42:73:9d:10:66:e4:f6:57:3e:d1:bf:
dd:e0:cc:b1:8c:72:de:02:d6:17:08:20:63:af:b8:c5:a9:58:
12:e0:61:30:6a:62:27:94:96:7c:b0:e0:53:ae:7d:54:98:56:
30:f6:0d:d4:3b:af:90:e4:fa:b3:91:2f:b3:bd:30:6c:a1:9e:
ad:ae:d8:0d
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgISAaFUr/CJvQbttKMqQtX+isnwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0
MjVjYWQwHhcNMjYxMDE5MTUwMjU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjY0ZTBjM2Q4ZGNiYTQyZjNhYzY3ODllNzM3OGU4NTI4OWM1OWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBiEHZyUJnNcpPuclFUY60uTzsvX
VLf2gIiycKBbiwKHBrHdJGCxgRjYWLFc7cmPz2lfZmjHJw+aBe/5CV2eaxkLdHb4
bkcVI/ZD5ZgtBng9Io7uczooGdGRVQLAyrl9DIIWvXCJG+zBxU3tGnqieDbz6hSZ
NgWfpijnhavdlHptQUfDiynqxlhHVOEzy2c4NQezIsZEFyiv5zjwXa9cLrsz0XTz
dpfswhRt4PwG5I8DfewIaifqWSQMKghDXNI69wIX39losDxeUOPVV69fpI4fmqy3
d6LVwGhMe3I7WuLypRvpwbo5WZIWOFRcuEsilrq2/BX4tYMp5xhS/hcJJwIDAQAB
o4ICEjCCAg4wHQYDVR0OBBYEFPtk4MPY3LpC86xniec3joUonFn2MB8GA1UdIwQY
MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt
ZTg3MWIyMTc5MGRlLzEvMS0yVGd3OWpjdWtMenJHZUo1emVPaFNpY1dmWS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZGQvOWYwOWFhLWRkNWUtNGUwNi1iMjhlLWU4NzFiMjE3OTBk
ZS8xLzl6UWxja3l1Sno4cFl3WU55R1hHOExCQ1hLMC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQFyGBg
AwQByGBoMA0GCSqGSIb3DQEBCwUAA4IBAQC7z2oU7gaJwlGz5NKGNZc93ysUwKlr
tIDJFsMQ3eynL+yAyrb8b/vw1YDlVw0+dPX6Bb+HqQJYdGmADUf8k16z8oPdW7v9
wSJGJoC65Je6VOUo49d6GwX6mLSzeivWpb0liuRvEgOaE+VvbS7Vg8T+JL1BqTBG
/pWLmEtv2P1avqDj4ucah+Wk2c+Tn6JEwlik+FGZ5YmZXkKLYcXM6NNtEmJtpaEB
bMJWr7wxjiW5rf8BkOZIf2QBy9nNQnOdEGbk9lc+0b/d4MyxjHLeAtYXCCBjr7jF
qVgS4GEwamInlJZ8sOBTrn1UmFYw9g3UO6+Q5PqzkS+zvTBsoZ6trtgN
-----END CERTIFICATE-----
Generated at Sat Nov 14 23:25:30 2026 by rpki-client