Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/1m9G2-vieK3ftJ-kJa3ZP6u1OfU.roa
File: 1m9G2-vieK3ftJ-kJa3ZP6u1OfU.roa (raw, json)
Hash identifier: ZQIEzKU7il8uiojRzD821jeTtt7kM4ak69J3b8ymtKI=
Subject key identifier: D6:6F:46:DB:EB:E2:78:AD:DF:B4:9F:A4:25:AD:D9:3F:AB:B5:39:F5
Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial: 019CB95C68FC2BF5C00FFAD65C6081B0E246
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/1m9G2-vieK3ftJ-kJa3ZP6u1OfU.roa
Signing time: Wed 04 Mar 2026 14:59:26 +0000
ROA not before: Wed 04 Mar 2026 14:59:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49983
IP address blocks: 91.212.196.0/24 maxlen: 24
109.71.96.0/21 maxlen: 21
185.19.168.0/22 maxlen: 22
2001:67c:268::/48 maxlen: 48
2a00:17e0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:5c:68:fc:2b:f5:c0:0f:fa:d6:5c:60:81:b0:e2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Validity
Not Before: Mar 4 14:59:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d66f46dbebe278addfb49fa425add93fabb539f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:45:21:7c:f1:fe:48:38:1e:4e:e7:43:4a:
7b:b0:a8:ce:e0:4b:d4:21:c9:ee:91:1f:18:70:db:
0b:cb:58:07:6e:3f:93:3b:f0:6b:54:ce:ff:ff:7a:
45:3a:54:b6:b4:05:e4:be:88:2e:71:75:b7:f0:6b:
e6:a2:30:4a:ae:d6:99:cd:46:bb:dc:b8:d2:05:01:
4e:20:b5:6e:d4:5c:a7:df:3b:10:4a:84:f5:93:04:
2a:36:00:6e:7d:e1:40:98:7f:2d:f1:d9:a1:2c:46:
ce:34:23:62:55:0c:ca:6e:a4:b1:79:a7:42:ec:ff:
8b:1a:44:8b:85:a6:b8:9b:b6:6b:a2:b9:ee:a5:5f:
8d:0f:0c:f1:42:2d:6a:4d:4b:a6:84:0f:f2:6e:c8:
bc:8b:01:6b:53:06:17:64:d4:e8:d6:44:87:54:4c:
33:61:a7:24:c8:c6:e1:b3:96:43:b0:b8:13:b6:4f:
f5:2b:b1:78:13:9d:ba:66:2a:e0:c3:4d:62:2d:b4:
d4:c1:46:20:8d:32:0b:09:7e:08:8e:6b:cc:48:88:
e4:33:01:f9:d0:ac:91:1c:36:5d:a1:9b:8e:13:79:
aa:e3:03:cf:dc:f7:75:6f:89:cf:ae:d1:d9:f1:52:
44:6e:1b:8d:71:7f:31:b0:e8:bc:7c:86:74:aa:8f:
d2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6F:46:DB:EB:E2:78:AD:DF:B4:9F:A4:25:AD:D9:3F:AB:B5:39:F5
X509v3 Authority Key Identifier:
keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/1m9G2-vieK3ftJ-kJa3ZP6u1OfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.196.0/24
109.71.96.0/21
185.19.168.0/22
IPv6:
2001:67c:268::/48
2a00:17e0::/29
Signature Algorithm: sha256WithRSAEncryption
69:5d:84:77:9f:fd:23:0a:f3:ca:45:a3:b2:96:db:de:4e:fa:
79:5f:8c:54:2c:ed:13:13:46:46:06:a3:42:4f:4a:f5:f8:6b:
57:73:ea:3b:e0:f1:4f:aa:c0:6d:46:a4:c9:56:1b:63:28:26:
da:8c:cd:1a:97:32:82:28:a0:40:ed:cf:c8:1b:b2:62:86:4f:
ff:5f:17:d4:8c:a9:6c:ee:78:8c:a0:15:30:bd:8e:55:31:da:
60:3e:76:87:c7:b6:ba:e9:1c:00:a4:ac:ec:80:3c:4d:72:29:
aa:e1:18:77:35:0c:d0:2e:66:42:90:f6:cc:dc:02:1d:96:ee:
34:a5:e2:7f:7d:a1:3e:f7:2b:5d:bc:05:ab:0a:d5:74:c3:df:
a4:ff:0e:80:32:10:83:26:80:b2:c9:b0:66:56:58:a2:55:8d:
03:e3:46:e3:ff:7c:51:60:21:4a:04:b2:0d:27:4b:67:9f:f4:
51:a4:1c:ab:f9:eb:36:34:38:eb:6c:05:fa:c5:8d:0e:81:da:
4c:5d:0a:45:d4:1d:84:0d:1e:4b:5e:3b:a3:e5:e6:6a:c3:0a:
0a:0c:58:82:6a:79:e1:71:f2:92:c9:c3:8b:96:2a:0d:62:af:
43:9f:3e:a0:ae:2c:5e:d8:56:ba:b7:8e:b5:03:41:41:b0:35:
72:18:0a:b4
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZy5XGj8K/XAD/rWXGCBsOJGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMWUzYzhkZTBhZGQ5ZGE5NWNmNDRkODlmNTBiZmRlN2Fl
MTlhNTcwHhcNMjYwMzA0MTQ1OTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjZmNDZkYmViZTI3OGFkZGZiNDlmYTQyNWFkZDkzZmFiYjUzOWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoolFIXzx/kg4Hk7nQ0p7sKjO4EvU
IcnukR8YcNsLy1gHbj+TO/BrVM7//3pFOlS2tAXkvogucXW38GvmojBKrtaZzUa7
3LjSBQFOILVu1Fyn3zsQSoT1kwQqNgBufeFAmH8t8dmhLEbONCNiVQzKbqSxeadC
7P+LGkSLhaa4m7ZrornupV+NDwzxQi1qTUumhA/ybsi8iwFrUwYXZNTo1kSHVEwz
YackyMbhs5ZDsLgTtk/1K7F4E526Zirgw01iLbTUwUYgjTILCX4IjmvMSIjkMwH5
0KyRHDZdoZuOE3mq4wPP3Pd1b4nPrtHZ8VJEbhuNcX8xsOi8fIZ0qo/ScQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFNZvRtvr4nit37SfpCWt2T+rtTn1MB8GA1UdIwQY
MBaAFJMePI3grdnalc9E2J9Qv9564ZpXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84NTJjZmQtZDU5Mi00YzJkLTk0Y2Yt
YjljYTc1NTVjMmM1LzEvMW05RzItdmllSzNmdEota0phM1pQNnUxT2ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi84NTJjZmQtZDU5Mi00YzJkLTk0Y2YtYjljYTc1NTVjMmM1
LzEva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAYBAIAATASAwQAW9TEAwQD
bUdgAwQCuROoMBYEAgACMBADBwAgAQZ8AmgDBQMqABfgMA0GCSqGSIb3DQEBCwUA
A4IBAQBpXYR3n/0jCvPKRaOyltveTvp5X4xULO0TE0ZGBqNCT0r1+GtXc+o74PFP
qsBtRqTJVhtjKCbajM0alzKCKKBA7c/IG7Jihk//XxfUjKls7niMoBUwvY5VMdpg
PnaHx7a66RwApKzsgDxNcimq4Rh3NQzQLmZCkPbM3AIdlu40peJ/faE+9ytdvAWr
CtV0w9+k/w6AMhCDJoCyybBmVliiVY0D40bj/3xRYCFKBLINJ0tnn/RRpByr+es2
NDjrbAX6xY0OgdpMXQpF1B2EDR5LXjuj5eZqwwoKDFiCannhcfKSycOLlioNYq9D
nz6grixe2Fa6t461A0FBsDVyGAq0
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:20:51 2026 by rpki-client