Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/1-uaXjZ6yrrtJqfNtsY2-IfoHC9A.roa
File: 1-uaXjZ6yrrtJqfNtsY2-IfoHC9A.roa (raw, json)
Hash identifier: ZnV7OIgyRpJomB9RH+WRj4jIbkVriTkEGmB17bdQUdY=
Subject key identifier: FA:E6:97:8D:9E:B2:AE:BB:49:A9:F3:6D:B1:8D:BE:21:FA:07:0B:D0
Certificate issuer: /CN=a91a4b0e8f2cabba6a256394725207ddf3e93434
Certificate serial: 019F236924633263DCB3D798921092F4F695
Authority key identifier: A9:1A:4B:0E:8F:2C:AB:BA:6A:25:63:94:72:52:07:DD:F3:E9:34:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qRpLDo8sq7pqJWOUclIH3fPpNDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/1-uaXjZ6yrrtJqfNtsY2-IfoHC9A.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48854
IP address blocks: 91.239.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qRpLDo8sq7pqJWOUclIH3fPpNDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:24:63:32:63:dc:b3:d7:98:92:10:92:f4:f6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a91a4b0e8f2cabba6a256394725207ddf3e93434
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fae6978d9eb2aebb49a9f36db18dbe21fa070bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:27:ec:45:41:cf:2b:46:84:1b:51:62:cc:
5a:2e:c7:59:f5:34:1b:69:ad:dd:9a:cf:d9:68:d9:
32:d3:2e:f8:6d:7c:16:0a:07:7a:12:66:f1:49:ef:
60:d3:c9:8c:4a:70:4b:2e:90:22:4e:0d:88:9d:3f:
d6:12:32:be:c2:45:49:00:63:8c:2a:b2:8c:ec:77:
6b:40:cc:53:df:7c:67:fa:15:a4:d6:9d:4a:eb:c3:
15:61:04:17:fa:fc:18:8f:74:93:c4:9f:ee:56:5d:
7c:be:0e:1f:67:56:50:69:1f:14:5a:b0:c0:62:ac:
53:d4:2e:4f:72:19:75:7b:33:34:ab:22:9c:d9:0a:
be:c5:47:69:9b:1d:7e:da:3c:20:23:91:3b:c3:ff:
6c:98:81:11:fb:20:c9:94:56:78:61:5d:65:82:d4:
e3:0a:37:0e:5b:cc:69:04:3b:bc:1a:e5:8e:1f:3e:
64:1c:47:75:50:25:35:94:6d:74:f5:38:d0:7a:51:
5a:61:8d:8b:38:05:bb:61:10:db:d2:f4:ee:30:65:
f2:3f:50:fc:5a:45:b0:55:cf:86:e3:2f:23:c1:f1:
f8:11:3a:41:33:e2:36:71:56:ee:40:05:48:20:ec:
8e:79:4d:5c:ce:e5:b9:f3:06:99:87:d6:98:a1:24:
ee:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E6:97:8D:9E:B2:AE:BB:49:A9:F3:6D:B1:8D:BE:21:FA:07:0B:D0
X509v3 Authority Key Identifier:
keyid:A9:1A:4B:0E:8F:2C:AB:BA:6A:25:63:94:72:52:07:DD:F3:E9:34:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qRpLDo8sq7pqJWOUclIH3fPpNDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/1-uaXjZ6yrrtJqfNtsY2-IfoHC9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.122.0/24
Signature Algorithm: sha256WithRSAEncryption
34:4d:de:0a:09:8c:f0:d4:30:96:c0:25:01:cd:6d:9b:05:9e:
e5:31:f4:c4:01:f6:58:a7:18:cc:16:66:b6:cd:63:8e:44:be:
1a:fe:55:44:d3:0e:22:4b:1a:36:66:58:45:3d:3d:81:2c:61:
c8:1c:35:a2:1f:da:69:db:94:18:dc:c6:8b:f2:3a:92:3b:2e:
6b:e8:72:5d:1e:70:67:a2:c3:12:4a:cd:99:42:3b:6b:ca:6f:
2a:65:63:37:15:28:8d:e5:e2:32:8d:00:5a:e5:86:0a:95:68:
ed:73:27:c2:64:1c:04:03:3c:ad:2b:81:de:99:f6:25:40:4b:
05:8b:6b:b7:1d:d7:82:46:82:99:5e:f2:d8:c6:ec:14:fe:ed:
b8:26:62:6b:aa:e4:8b:34:85:3c:53:7e:9a:1b:eb:3e:cd:87:
cf:ec:e6:58:b2:ed:5d:6d:76:d1:cc:92:f8:2a:cc:3b:74:90:
0c:4d:e5:37:06:13:ce:34:95:07:3a:17:fb:5d:3a:83:bf:b9:
97:2e:cd:63:77:d0:5e:8f:6e:b6:2f:2e:ba:42:a2:ff:3e:30:
60:68:6f:6e:bd:8c:7e:ec:6a:2d:f2:27:0a:8a:2f:5a:93:5a:
37:90:66:c9:91:85:e1:7d:d1:66:94:b3:07:73:8c:86:4d:21:
87:9f:2d:01
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ8jaSRjMmPcs9eYkhCS9PaVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MWE0YjBlOGYyY2FiYmE2YTI1NjM5NDcyNTIwN2RkZjNl
OTM0MzQwHhcNMjYwNzAyMTUxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWU2OTc4ZDllYjJhZWJiNDlhOWYzNmRiMThkYmUyMWZhMDcwYmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVkn7EVBzytGhBtRYsxaLsdZ9TQb
aa3dms/ZaNky0y74bXwWCgd6EmbxSe9g08mMSnBLLpAiTg2InT/WEjK+wkVJAGOM
KrKM7HdrQMxT33xn+hWk1p1K68MVYQQX+vwYj3STxJ/uVl18vg4fZ1ZQaR8UWrDA
YqxT1C5Pchl1ezM0qyKc2Qq+xUdpmx1+2jwgI5E7w/9smIER+yDJlFZ4YV1lgtTj
CjcOW8xpBDu8GuWOHz5kHEd1UCU1lG109TjQelFaYY2LOAW7YRDb0vTuMGXyP1D8
WkWwVc+G4y8jwfH4ETpBM+I2cVbuQAVIIOyOeU1czuW58waZh9aYoSTuRQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPrml42esq67SanzbbGNviH6BwvQMB8GA1UdIwQY
MBaAFKkaSw6PLKu6aiVjlHJSB93z6TQ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVJwTERvOHNxN3BxSldPVWNsSUgzZlBwTkRRLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kY2Y1NTktYWZiNC00NmI5LWIyZDUt
OTM3ZGNmZjUxZTJkLzEvMS11YVhqWjZ5cnJ0SnFmTnRzWTItSWZvSEM5QS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTQvZGNmNTU5LWFmYjQtNDZiOS1iMmQ1LTkzN2RjZmY1MWUy
ZC8xL3FScExEbzhzcTdwcUpXT1VjbElIM2ZQcE5EUS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvvejAN
BgkqhkiG9w0BAQsFAAOCAQEANE3eCgmM8NQwlsAlAc1tmwWe5TH0xAH2WKcYzBZm
ts1jjkS+Gv5VRNMOIksaNmZYRT09gSxhyBw1oh/aaduUGNzGi/I6kjsua+hyXR5w
Z6LDEkrNmUI7a8pvKmVjNxUojeXiMo0AWuWGCpVo7XMnwmQcBAM8rSuB3pn2JUBL
BYtrtx3XgkaCmV7y2MbsFP7tuCZia6rkizSFPFN+mhvrPs2Hz+zmWLLtXW120cyS
+CrMO3SQDE3lNwYTzjSVBzoX+106g7+5ly7NY3fQXo9uti8uukKi/z4wYGhvbr2M
fuxqLfInCoovWpNaN5BmyZGF4X3RZpSzB3OMhk0hh58tAQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:19:23 2026 by rpki-client