Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/gM-2NKzsRL5q1qBx4EqW33hVJ5w.roa
File: gM-2NKzsRL5q1qBx4EqW33hVJ5w.roa (raw, json)
Hash identifier: s9y3WddOKeg5V2uaL8tmFWIaSe1uuSfJdfFDI6pSOAM=
Subject key identifier: 80:CF:B6:34:AC:EC:44:BE:6A:D6:A0:71:E0:4A:96:DF:78:55:27:9C
Certificate issuer: /CN=69c466d582ec558e4beaaee650be5007709c589f
Certificate serial: 019F2368565435899ECFED55248C49BA622A
Authority key identifier: 69:C4:66:D5:82:EC:55:8E:4B:EA:AE:E6:50:BE:50:07:70:9C:58:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acRm1YLsVY5L6q7mUL5QB3CcWJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/gM-2NKzsRL5q1qBx4EqW33hVJ5w.roa
Signing time: Thu 02 Jul 2026 15:17:48 +0000
ROA not before: Thu 02 Jul 2026 15:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64445
IP address blocks: 91.193.55.0/24 maxlen: 24
2a12:e6c0::/32 maxlen: 64
2a12:e6c0:c50::/48 maxlen: 48
2a12:e6c0:1337::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/acRm1YLsVY5L6q7mUL5QB3CcWJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:56:54:35:89:9e:cf:ed:55:24:8c:49:ba:62:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c466d582ec558e4beaaee650be5007709c589f
Validity
Not Before: Jul 2 15:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80cfb634acec44be6ad6a071e04a96df7855279c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5a:55:a0:93:ee:63:1e:41:e1:84:a4:ee:3a:
2a:40:b9:ec:bc:da:17:06:d9:3f:92:7b:62:0c:c5:
5a:e4:2e:dd:b0:cc:eb:96:b0:a8:59:2c:fb:b9:f4:
cd:6d:ef:b8:e4:60:9f:21:db:e3:0b:0f:9e:ca:94:
97:fb:45:29:76:6b:ba:aa:ae:ca:7c:b3:6b:ac:9a:
b3:77:d1:f7:ee:c4:e1:f2:02:b3:41:a7:03:4c:20:
10:c5:69:10:1f:3f:03:d5:7c:c1:07:32:f4:d8:48:
f3:8e:b4:81:b2:c4:ae:b6:42:f8:61:8e:0d:47:df:
53:cf:06:9e:d6:c7:21:0f:b0:86:ed:17:80:7d:be:
a6:ae:e7:b0:4e:38:ca:7f:3c:fa:7b:77:14:04:a6:
6c:98:55:5d:75:67:2d:5a:21:45:fb:0e:7d:a7:62:
4f:69:0e:ea:59:3e:77:dd:0e:8a:47:f5:19:ae:b0:
1e:64:72:f6:f9:4b:dd:36:a4:55:6d:f5:15:4c:4c:
4c:93:1c:b0:05:7c:ba:0b:83:5c:1c:59:4b:20:e8:
62:e3:dd:c3:64:d9:af:fa:53:f3:81:25:d9:58:df:
e6:f0:47:04:29:10:00:0b:85:f2:cb:4a:aa:c3:a9:
f9:41:94:da:aa:31:89:2b:38:ae:1d:09:f6:97:34:
d1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CF:B6:34:AC:EC:44:BE:6A:D6:A0:71:E0:4A:96:DF:78:55:27:9C
X509v3 Authority Key Identifier:
keyid:69:C4:66:D5:82:EC:55:8E:4B:EA:AE:E6:50:BE:50:07:70:9C:58:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acRm1YLsVY5L6q7mUL5QB3CcWJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/gM-2NKzsRL5q1qBx4EqW33hVJ5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.55.0/24
IPv6:
2a12:e6c0::/32
Signature Algorithm: sha256WithRSAEncryption
8f:75:e3:a5:a2:35:f6:5a:22:be:41:9a:07:98:72:03:48:94:
f8:c2:b5:a4:8a:e7:01:f6:c0:13:bf:06:b2:ce:2f:50:95:01:
93:ad:60:a5:43:b7:1f:00:55:7d:8c:50:e3:0a:b3:33:b6:28:
89:48:45:e3:4c:75:42:42:4c:31:b6:d9:a8:8e:a1:fb:c5:92:
62:ed:34:60:f5:b7:ea:7e:b2:10:67:60:29:09:da:d4:dd:77:
d3:7d:24:d7:85:b2:2b:cf:d3:57:38:e1:49:b2:31:1d:1e:3b:
94:ef:c7:0a:73:ac:55:af:f1:fe:73:9e:0d:96:c3:5a:28:6b:
b8:16:05:44:e1:97:9a:8c:5e:68:33:75:c5:a8:df:0f:2f:12:
fa:27:d5:09:29:c0:c1:42:67:21:3b:ab:49:3b:b6:1e:29:eb:
b0:a6:27:44:1d:0d:9d:a6:67:5b:52:2f:b9:4b:0c:aa:01:16:
29:e6:7c:77:87:a0:0c:12:4d:9d:34:b3:95:9b:c8:77:38:83:
b7:fb:13:d6:14:b8:d1:63:d4:1e:b5:62:43:77:c8:63:05:e5:
cb:5a:8a:1b:8f:96:45:fb:9c:1b:3d:f1:19:cc:fd:e3:d0:45:
7c:68:f5:41:ba:ea:71:33:8f:d5:af:60:1f:c9:d4:29:3a:17:
16:f0:60:0f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaFZUNYmez+1VJIxJumIqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YzQ2NmQ1ODJlYzU1OGU0YmVhYWVlNjUwYmU1MDA3NzA5
YzU4OWYwHhcNMjYwNzAyMTUxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGNmYjYzNGFjZWM0NGJlNmFkNmEwNzFlMDRhOTZkZjc4NTUyNzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VpVoJPuYx5B4YSk7joqQLnsvNoX
Btk/kntiDMVa5C7dsMzrlrCoWSz7ufTNbe+45GCfIdvjCw+eypSX+0Updmu6qq7K
fLNrrJqzd9H37sTh8gKzQacDTCAQxWkQHz8D1XzBBzL02EjzjrSBssSutkL4YY4N
R99Tzwae1schD7CG7ReAfb6mruewTjjKfzz6e3cUBKZsmFVddWctWiFF+w59p2JP
aQ7qWT533Q6KR/UZrrAeZHL2+UvdNqRVbfUVTExMkxywBXy6C4NcHFlLIOhi493D
ZNmv+lPzgSXZWN/m8EcEKRAAC4Xyy0qqw6n5QZTaqjGJKziuHQn2lzTRQQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIDPtjSs7ES+atagceBKlt94VSecMB8GA1UdIwQY
MBaAFGnEZtWC7FWOS+qu5lC+UAdwnFifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWNSbTFZTHNWWTVMNnE3bVVMNVFCM0NjV0o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8yNjg4YjYtZGE3MC00YWJkLThmNTkt
MWE4MzFiNTk5YzE4LzEvZ00tMk5LenNSTDVxMXFCeDRFcVczM2hWSjV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8yNjg4YjYtZGE3MC00YWJkLThmNTktMWE4MzFiNTk5YzE4
LzEvYWNSbTFZTHNWWTVMNnE3bVVMNVFCM0NjV0o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW8E3MA0E
AgACMAcDBQAqEubAMA0GCSqGSIb3DQEBCwUAA4IBAQCPdeOlojX2WiK+QZoHmHID
SJT4wrWkiucB9sATvwayzi9QlQGTrWClQ7cfAFV9jFDjCrMztiiJSEXjTHVCQkwx
ttmojqH7xZJi7TRg9bfqfrIQZ2ApCdrU3XfTfSTXhbIrz9NXOOFJsjEdHjuU78cK
c6xVr/H+c54NlsNaKGu4FgVE4ZeajF5oM3XFqN8PLxL6J9UJKcDBQmchO6tJO7Ye
KeuwpidEHQ2dpmdbUi+5SwyqARYp5nx3h6AMEk2dNLOVm8h3OIO3+xPWFLjRY9Qe
tWJDd8hjBeXLWoobj5ZF+5wbPfEZzP3j0EV8aPVBuupxM4/Vr2AfydQpOhcW8GAP
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:40:38 2026 by rpki-client