Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/bd3c3d-446b-4963-ad41-9ea867148995/1/9JrbCnd-NsOcw-TKlM21Fl6_fs4.roa
File: 9JrbCnd-NsOcw-TKlM21Fl6_fs4.roa (raw, json)
Hash identifier: b5Pzp39mEM5uAhhGEfJ5t7YZHdwAVfSLz6od7nWDOa4=
Subject key identifier: F4:9A:DB:0A:77:7E:36:C3:9C:C3:E4:CA:94:CD:B5:16:5E:BF:7E:CE
Certificate issuer: /CN=0388943ead2f48a7d5e9bf6e833f9beda7f1fa46
Certificate serial: 01A05D3113F02CBEBD3E70C5C05F4E973578
Authority key identifier: 03:88:94:3E:AD:2F:48:A7:D5:E9:BF:6E:83:3F:9B:ED:A7:F1:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4iUPq0vSKfV6b9ugz-b7afx-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bd3c3d-446b-4963-ad41-9ea867148995/1/9JrbCnd-NsOcw-TKlM21Fl6_fs4.roa
Signing time: Tue 01 Sep 2026 13:38:12 +0000
ROA not before: Tue 01 Sep 2026 13:38:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197747
IP address blocks: 91.226.22.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/bd3c3d-446b-4963-ad41-9ea867148995/1/A4iUPq0vSKfV6b9ugz-b7afx-kY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/bd3c3d-446b-4963-ad41-9ea867148995/1/A4iUPq0vSKfV6b9ugz-b7afx-kY.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4iUPq0vSKfV6b9ugz-b7afx-kY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:31:13:f0:2c:be:bd:3e:70:c5:c0:5f:4e:97:35:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0388943ead2f48a7d5e9bf6e833f9beda7f1fa46
Validity
Not Before: Sep 1 13:38:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f49adb0a777e36c39cc3e4ca94cdb5165ebf7ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cf:c1:09:ff:cc:7b:ef:7b:93:aa:51:e6:f5:
9d:29:6c:d7:a4:41:ca:0d:bc:d9:1b:07:34:81:f2:
0f:be:09:ce:57:3e:1e:c2:fc:3f:7c:76:0a:94:a6:
72:81:f9:ab:64:78:f2:92:c4:1c:27:08:de:18:ba:
ed:88:80:f9:f5:69:a4:a9:68:c0:21:82:5e:11:2f:
d1:3c:7d:e2:f4:37:d4:69:89:f0:61:c8:c1:66:13:
0f:43:24:7b:7c:89:ab:f1:c0:38:5f:c9:d4:b6:d6:
93:fd:bc:ac:b9:3f:d3:a5:c0:8a:8a:50:eb:94:9d:
cb:6c:e0:1f:1d:3f:41:d7:10:79:77:73:d2:97:90:
52:33:0b:db:11:8f:0a:00:9c:d6:6e:c4:48:c5:9a:
b7:1b:37:17:71:9a:34:92:e8:3b:26:c8:e7:c7:dd:
1d:78:7f:00:3e:8b:37:ef:56:20:00:27:55:81:be:
37:1b:13:4c:75:84:b9:e9:54:f3:ed:ac:c5:cf:02:
15:1e:ba:2b:12:e1:a2:71:fd:67:0e:69:68:79:f8:
16:f8:42:9a:7a:0a:f9:76:aa:86:65:0b:b9:7b:bb:
d7:f3:df:f3:b3:9d:99:0f:62:92:79:10:05:e0:d2:
30:0c:88:7a:ab:91:8c:f8:4c:bc:2a:23:0e:60:0d:
1b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9A:DB:0A:77:7E:36:C3:9C:C3:E4:CA:94:CD:B5:16:5E:BF:7E:CE
X509v3 Authority Key Identifier:
keyid:03:88:94:3E:AD:2F:48:A7:D5:E9:BF:6E:83:3F:9B:ED:A7:F1:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4iUPq0vSKfV6b9ugz-b7afx-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bd3c3d-446b-4963-ad41-9ea867148995/1/9JrbCnd-NsOcw-TKlM21Fl6_fs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bd3c3d-446b-4963-ad41-9ea867148995/1/A4iUPq0vSKfV6b9ugz-b7afx-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.22.0/23
Signature Algorithm: sha256WithRSAEncryption
13:d1:8c:75:b0:ad:68:96:1f:69:d2:70:a3:be:f7:b2:4a:e7:
50:76:2d:85:e5:2d:82:1e:4c:e7:79:c2:16:7b:b1:c5:1d:2f:
86:4e:8b:25:f9:77:54:23:ce:31:be:f7:89:18:08:4a:c8:86:
db:bb:96:06:a1:fc:b0:f7:97:a6:d9:4a:2d:a5:c1:5f:dd:25:
96:fa:ef:ca:33:34:d6:60:65:5d:09:14:c3:85:fc:82:8b:e9:
64:06:46:a6:d9:4b:98:d5:33:9c:5e:5f:3b:45:d5:12:b4:dd:
9e:9a:5d:15:7c:5c:c6:c3:5e:4f:d4:ef:39:12:f6:2f:6d:df:
07:f5:aa:2d:5f:23:5f:1d:a5:9b:44:22:99:27:04:64:03:83:
a8:27:c3:c7:f4:74:1d:55:b8:f6:98:01:ee:c9:42:fa:f4:49:
97:4b:53:45:68:df:e4:4a:08:2d:e9:31:7e:6c:90:e7:0c:08:
2c:31:2c:a5:7b:f3:d9:12:5e:d4:1b:ed:6d:92:ec:de:a0:18:
9a:6b:9e:de:f1:c0:1c:7a:58:cb:7f:d1:d0:5f:d8:6b:06:40:
27:23:61:16:ff:a8:6c:48:e2:a9:f1:db:ed:2f:17:c1:18:ed:
9f:8d:4b:5c:72:f0:fc:a0:9a:bb:b5:62:c7:ac:dc:ab:6b:d4:
d7:dd:50:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBdMRPwLL69PnDFwF9OlzV4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzODg5NDNlYWQyZjQ4YTdkNWU5YmY2ZTgzM2Y5YmVkYTdm
MWZhNDYwHhcNMjYwOTAxMTMzODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDlhZGIwYTc3N2UzNmMzOWNjM2U0Y2E5NGNkYjUxNjVlYmY3ZWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8/BCf/Me+97k6pR5vWdKWzXpEHK
DbzZGwc0gfIPvgnOVz4ewvw/fHYKlKZygfmrZHjyksQcJwjeGLrtiID59WmkqWjA
IYJeES/RPH3i9DfUaYnwYcjBZhMPQyR7fImr8cA4X8nUttaT/bysuT/TpcCKilDr
lJ3LbOAfHT9B1xB5d3PSl5BSMwvbEY8KAJzWbsRIxZq3GzcXcZo0kug7Jsjnx90d
eH8APos371YgACdVgb43GxNMdYS56VTz7azFzwIVHrorEuGicf1nDmloefgW+EKa
egr5dqqGZQu5e7vX89/zs52ZD2KSeRAF4NIwDIh6q5GM+Ey8KiMOYA0btQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPSa2wp3fjbDnMPkypTNtRZev37OMB8GA1UdIwQY
MBaAFAOIlD6tL0in1em/boM/m+2n8fpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTRpVVBxMHZTS2ZWNmI5dWd6LWI3YWZ4LWtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9iZDNjM2QtNDQ2Yi00OTYzLWFkNDEt
OWVhODY3MTQ4OTk1LzEvOUpyYkNuZC1Oc09jdy1US2xNMjFGbDZfZnM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9iZDNjM2QtNDQ2Yi00OTYzLWFkNDEtOWVhODY3MTQ4OTk1
LzEvQTRpVVBxMHZTS2ZWNmI5dWd6LWI3YWZ4LWtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+IWMA0G
CSqGSIb3DQEBCwUAA4IBAQAT0Yx1sK1olh9p0nCjvveySudQdi2F5S2CHkznecIW
e7HFHS+GTosl+XdUI84xvveJGAhKyIbbu5YGofyw95em2UotpcFf3SWW+u/KMzTW
YGVdCRTDhfyCi+lkBkam2UuY1TOcXl87RdUStN2eml0VfFzGw15P1O85EvYvbd8H
9aotXyNfHaWbRCKZJwRkA4OoJ8PH9HQdVbj2mAHuyUL69EmXS1NFaN/kSggt6TF+
bJDnDAgsMSyle/PZEl7UG+1tkuzeoBiaa57e8cAceljLf9HQX9hrBkAnI2EW/6hs
SOKp8dvtLxfBGO2fjUtccvD8oJq7tWLHrNyra9TX3VDF
-----END CERTIFICATE-----
Generated at Fri Sep 25 00:29:29 2026 by rpki-client