Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/24oyFCZ82CeeIceGWeut2w2WwuM.roa
File: 24oyFCZ82CeeIceGWeut2w2WwuM.roa (raw, json)
Hash identifier: HrBB+WmjLXbJwhb8253Qsk+ZcaUjm9aaPB5tcu3NZh8=
Subject key identifier: DB:8A:32:14:26:7C:D8:27:9E:21:C7:86:59:EB:AD:DB:0D:96:C2:E3
Certificate issuer: /CN=15c6177d3ddc815df7e12205f8b682aaf4b71935
Certificate serial: 019F2368D159571487B4835C329CA84909A6
Authority key identifier: 15:C6:17:7D:3D:DC:81:5D:F7:E1:22:05:F8:B6:82:AA:F4:B7:19:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcYXfT3cgV334SIF-LaCqvS3GTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/24oyFCZ82CeeIceGWeut2w2WwuM.roa
Signing time: Thu 02 Jul 2026 15:18:19 +0000
ROA not before: Thu 02 Jul 2026 15:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198592
IP address blocks: 91.236.252.0/24 maxlen: 24
91.236.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/FcYXfT3cgV334SIF-LaCqvS3GTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/FcYXfT3cgV334SIF-LaCqvS3GTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcYXfT3cgV334SIF-LaCqvS3GTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d1:59:57:14:87:b4:83:5c:32:9c:a8:49:09:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15c6177d3ddc815df7e12205f8b682aaf4b71935
Validity
Not Before: Jul 2 15:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db8a3214267cd8279e21c78659ebaddb0d96c2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a0:76:b8:f3:91:0e:98:d8:86:7b:88:9b:a5:
cd:5d:b3:d4:52:93:24:d7:00:08:fb:61:b4:8c:f9:
bc:4a:27:6e:71:99:8e:10:61:d7:d7:14:18:8c:2b:
7b:d8:e0:d6:d7:8d:6a:92:03:80:8d:29:4f:98:11:
4b:b2:00:73:8f:a0:9a:a3:71:49:46:37:9e:ef:b8:
6f:c3:03:90:1a:bf:3f:f7:bd:d6:5f:8e:2f:f5:66:
35:e7:0e:63:f6:29:21:05:24:29:f5:02:da:53:2c:
22:93:a4:88:e0:9a:46:af:ee:81:f8:e2:f3:17:93:
0c:67:49:26:90:c1:78:26:62:07:07:42:8b:a1:38:
27:69:66:cc:b4:f4:ba:a4:b7:3d:ad:98:0a:08:03:
7b:11:5f:1e:82:7b:f6:97:c4:a4:d6:23:1f:50:f6:
ef:9c:b1:1e:8b:0f:ae:75:ee:ba:5d:1e:8e:05:f5:
f5:00:73:bd:56:19:25:70:19:23:83:ab:6f:e3:83:
fd:a7:9e:17:b0:87:09:b0:c0:47:f5:bd:f8:15:4d:
3f:f2:2f:42:9c:ac:63:34:c7:85:9b:b3:23:2e:29:
bd:e3:66:44:6e:9f:09:1f:7c:e3:dd:7e:23:07:2f:
f4:ca:ae:f1:90:b1:6d:db:be:a1:08:34:24:ca:ff:
7c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8A:32:14:26:7C:D8:27:9E:21:C7:86:59:EB:AD:DB:0D:96:C2:E3
X509v3 Authority Key Identifier:
keyid:15:C6:17:7D:3D:DC:81:5D:F7:E1:22:05:F8:B6:82:AA:F4:B7:19:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcYXfT3cgV334SIF-LaCqvS3GTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/24oyFCZ82CeeIceGWeut2w2WwuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/FcYXfT3cgV334SIF-LaCqvS3GTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.252.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:2f:8c:6a:b2:7d:8a:5a:41:3e:67:9b:ca:3b:a7:61:83:ea:
e9:f7:78:bb:ac:c3:9e:87:c4:b8:c6:de:ca:2a:be:df:3e:23:
d9:54:15:3a:64:9c:1b:bd:70:3d:a5:21:89:b0:e1:68:0e:ae:
51:d9:54:36:fa:fc:b1:b9:e5:1c:0f:8f:f5:35:19:8b:02:87:
e2:b1:f4:48:8a:7a:b0:3e:1f:9c:ab:35:f2:17:c2:fa:12:50:
0b:c8:7d:a2:44:14:29:28:5a:b7:4a:5f:46:88:3e:7c:55:c4:
d4:64:ed:83:71:18:da:ae:ed:0a:9b:fd:8f:69:bd:40:9c:2e:
a0:1c:0e:f5:45:d6:2e:00:4a:c7:0a:a1:6a:28:b3:eb:72:e3:
df:dc:f0:a5:72:0c:e8:6a:f6:07:2c:20:07:73:c0:d8:11:21:
3d:51:1e:29:59:5e:68:f1:7b:bd:23:56:64:a9:f7:7f:58:7b:
55:4c:13:a1:3f:40:ee:d5:ce:c3:b3:07:88:d4:e5:68:4a:4c:
f2:c6:04:c1:50:ff:7a:8e:b0:b4:61:8b:68:c4:43:5a:a9:38:
c3:35:67:a1:78:ac:dd:fc:44:ed:4c:c8:ab:f9:3c:51:42:79:
42:ec:55:05:73:ef:cf:1d:bf:96:90:35:d9:59:17:79:1d:93:
bb:36:12:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaNFZVxSHtINcMpyoSQmmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YzYxNzdkM2RkYzgxNWRmN2UxMjIwNWY4YjY4MmFhZjRi
NzE5MzUwHhcNMjYwNzAyMTUxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjhhMzIxNDI2N2NkODI3OWUyMWM3ODY1OWViYWRkYjBkOTZjMmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06B2uPORDpjYhnuIm6XNXbPUUpMk
1wAI+2G0jPm8SiducZmOEGHX1xQYjCt72ODW141qkgOAjSlPmBFLsgBzj6Cao3FJ
Rjee77hvwwOQGr8/973WX44v9WY15w5j9ikhBSQp9QLaUywik6SI4JpGr+6B+OLz
F5MMZ0kmkMF4JmIHB0KLoTgnaWbMtPS6pLc9rZgKCAN7EV8egnv2l8Sk1iMfUPbv
nLEeiw+ude66XR6OBfX1AHO9VhklcBkjg6tv44P9p54XsIcJsMBH9b34FU0/8i9C
nKxjNMeFm7MjLim942ZEbp8JH3zj3X4jBy/0yq7xkLFt276hCDQkyv98VQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNuKMhQmfNgnniHHhlnrrdsNlsLjMB8GA1UdIwQY
MBaAFBXGF3093IFd9+EiBfi2gqr0txk1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmNZWGZUM2NnVjMzNFNJRi1MYUNxdlMzR1RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9lM2Q4YjEtMTAxZi00MGU4LWJjZDMt
MTU1YWY5ZDgzMDM2LzEvMjRveUZDWjgyQ2VlSWNlR1dldXQydzJXd3VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9lM2Q4YjEtMTAxZi00MGU4LWJjZDMtMTU1YWY5ZDgzMDM2
LzEvRmNZWGZUM2NnVjMzNFNJRi1MYUNxdlMzR1RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+z8MA0G
CSqGSIb3DQEBCwUAA4IBAQAbL4xqsn2KWkE+Z5vKO6dhg+rp93i7rMOeh8S4xt7K
Kr7fPiPZVBU6ZJwbvXA9pSGJsOFoDq5R2VQ2+vyxueUcD4/1NRmLAofisfRIinqw
Ph+cqzXyF8L6ElALyH2iRBQpKFq3Sl9GiD58VcTUZO2DcRjaru0Km/2Pab1AnC6g
HA71RdYuAErHCqFqKLPrcuPf3PClcgzoavYHLCAHc8DYESE9UR4pWV5o8Xu9I1Zk
qfd/WHtVTBOhP0Du1c7DsweI1OVoSkzyxgTBUP96jrC0YYtoxENaqTjDNWeheKzd
/ETtTMir+TxRQnlC7FUFc+/PHb+WkDXZWRd5HZO7NhLH
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:24 2026 by rpki-client