Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/1cIJB5t4VNf5k_S4SZQEVA_Gel8.roa
File: 1cIJB5t4VNf5k_S4SZQEVA_Gel8.roa (raw, json)
Hash identifier: uFnVMc18EiMQKDqx5qFS6Wxo2QGlSjbuLUdYiKMeKAw=
Subject key identifier: D5:C2:09:07:9B:78:54:D7:F9:93:F4:B8:49:94:04:54:0F:C6:7A:5F
Certificate issuer: /CN=258941a337b8ca15fcae916fcb420c58df2e0b9c
Certificate serial: 019F8FBC100DA48A15ABC14AFF1161C960DC
Authority key identifier: 25:89:41:A3:37:B8:CA:15:FC:AE:91:6F:CB:42:0C:58:DF:2E:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/1cIJB5t4VNf5k_S4SZQEVA_Gel8.roa
Signing time: Thu 23 Jul 2026 16:08:14 +0000
ROA not before: Thu 23 Jul 2026 16:08:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216106
IP address blocks: 91.202.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:bc:10:0d:a4:8a:15:ab:c1:4a:ff:11:61:c9:60:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258941a337b8ca15fcae916fcb420c58df2e0b9c
Validity
Not Before: Jul 23 16:08:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5c209079b7854d7f993f4b8499404540fc67a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b5:62:d7:b0:28:bc:73:3a:f1:1f:42:a7:1b:
1f:ab:8b:c1:d0:b1:52:07:c5:9f:54:57:53:d7:cf:
12:fc:d0:98:c3:bf:7e:c3:52:92:37:9e:96:ba:1f:
92:a6:1a:1b:9a:b7:94:bc:84:3c:ac:af:2b:11:d1:
34:2d:f8:c4:39:9d:d8:2f:58:d9:7e:06:ca:19:7c:
5f:8f:9a:30:17:b2:a9:a6:2a:fc:32:65:ac:2d:a1:
2e:a0:b7:16:0b:60:7d:81:3d:91:e3:1e:5c:f7:b6:
74:66:8d:8c:ab:ae:47:30:cb:e9:a5:b5:ca:90:35:
45:7e:3a:29:9f:4b:a6:05:8d:07:39:ca:33:73:8e:
5f:30:47:5b:ea:41:27:55:ba:1f:6a:a5:12:cd:57:
1f:b5:ff:65:f3:31:99:ca:71:98:ca:26:8e:d4:27:
fb:c0:c5:6e:74:b5:76:29:af:cd:d3:74:16:b1:19:
be:a8:1f:29:54:6c:0e:fe:4b:30:22:6e:75:72:84:
16:52:fe:42:2e:56:d9:7b:20:65:9e:8d:e9:05:b5:
d0:15:38:b2:b5:21:71:2f:ff:f7:d7:22:e2:46:d0:
a0:f9:49:0a:02:36:79:c9:65:10:4e:3e:eb:4d:d9:
67:0a:71:48:8a:a9:e8:c9:a6:0c:19:57:ab:9f:7e:
8c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C2:09:07:9B:78:54:D7:F9:93:F4:B8:49:94:04:54:0F:C6:7A:5F
X509v3 Authority Key Identifier:
keyid:25:89:41:A3:37:B8:CA:15:FC:AE:91:6F:CB:42:0C:58:DF:2E:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYlBoze4yhX8rpFvy0IMWN8uC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/1cIJB5t4VNf5k_S4SZQEVA_Gel8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/04ef60-c79f-4854-a576-4775bb668b04/1/JYlBoze4yhX8rpFvy0IMWN8uC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.2.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:0d:7b:de:b6:70:95:93:16:64:ed:c5:f5:0d:ce:45:57:22:
be:b8:aa:e2:f8:bb:cd:f4:87:84:af:1f:a8:5a:b8:ef:52:7b:
16:db:94:34:99:f0:28:30:93:e6:05:9a:da:e0:b5:b9:ea:72:
e1:66:7f:a1:08:73:49:6f:52:48:f0:98:ea:4a:2e:0d:a4:25:
f0:ff:35:12:b7:12:d9:e9:0f:10:dd:a5:56:37:09:1d:97:26:
f1:ea:92:d2:79:fe:73:67:c8:74:7e:3c:35:64:d7:8f:85:cf:
64:8a:fc:5e:30:19:b9:59:27:64:7f:38:1f:75:fb:1c:e0:43:
70:e7:62:a1:f4:fe:50:a0:9a:67:cd:72:bc:74:fd:75:c7:45:
0e:ee:cd:e5:15:d9:7f:71:14:10:8e:a4:dc:fe:2b:ac:4d:e3:
9e:17:fe:06:13:0c:ca:fe:c8:31:28:eb:4c:4e:dd:e7:1b:be:
8f:cb:18:cd:36:a4:3b:e2:3a:98:a6:78:be:2b:42:1c:c8:28:
40:8d:5c:76:b4:f3:19:93:d8:b3:4c:49:f7:59:fa:c2:5e:8b:
8f:e5:fb:97:e6:64:93:3e:d0:4a:a4:4e:f6:19:09:c3:6c:73:
f3:5b:1d:7e:c7:f1:59:e3:d2:1f:da:b6:66:0c:e0:03:4c:a5:
b6:c1:ac:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+PvBANpIoVq8FK/xFhyWDcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ODk0MWEzMzdiOGNhMTVmY2FlOTE2ZmNiNDIwYzU4ZGYy
ZTBiOWMwHhcNMjYwNzIzMTYwODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWMyMDkwNzliNzg1NGQ3Zjk5M2Y0Yjg0OTk0MDQ1NDBmYzY3YTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrVi17AovHM68R9Cpxsfq4vB0LFS
B8WfVFdT188S/NCYw79+w1KSN56Wuh+SphobmreUvIQ8rK8rEdE0LfjEOZ3YL1jZ
fgbKGXxfj5owF7Kppir8MmWsLaEuoLcWC2B9gT2R4x5c97Z0Zo2Mq65HMMvppbXK
kDVFfjopn0umBY0HOcozc45fMEdb6kEnVbofaqUSzVcftf9l8zGZynGYyiaO1Cf7
wMVudLV2Ka/N03QWsRm+qB8pVGwO/kswIm51coQWUv5CLlbZeyBlno3pBbXQFTiy
tSFxL//31yLiRtCg+UkKAjZ5yWUQTj7rTdlnCnFIiqnoyaYMGVern36MlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNXCCQebeFTX+ZP0uEmUBFQPxnpfMB8GA1UdIwQY
MBaAFCWJQaM3uMoV/K6Rb8tCDFjfLgucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSllsQm96ZTR5aFg4cnBGdnkwSU1XTjh1QzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wNGVmNjAtYzc5Zi00ODU0LWE1NzYt
NDc3NWJiNjY4YjA0LzEvMWNJSkI1dDRWTmY1a19TNFNaUUVWQV9HZWw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wNGVmNjAtYzc5Zi00ODU0LWE1NzYtNDc3NWJiNjY4YjA0
LzEvSllsQm96ZTR5aFg4cnBGdnkwSU1XTjh1QzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8oCMA0G
CSqGSIb3DQEBCwUAA4IBAQCaDXvetnCVkxZk7cX1Dc5FVyK+uKri+LvN9IeErx+o
WrjvUnsW25Q0mfAoMJPmBZra4LW56nLhZn+hCHNJb1JI8JjqSi4NpCXw/zUStxLZ
6Q8Q3aVWNwkdlybx6pLSef5zZ8h0fjw1ZNePhc9kivxeMBm5WSdkfzgfdfsc4ENw
52Kh9P5QoJpnzXK8dP11x0UO7s3lFdl/cRQQjqTc/iusTeOeF/4GEwzK/sgxKOtM
Tt3nG76PyxjNNqQ74jqYpni+K0IcyChAjVx2tPMZk9izTEn3WfrCXouP5fuX5mST
PtBKpE72GQnDbHPzWx1+x/FZ49If2rZmDOADTKW2wazQ
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:45:19 2026 by rpki-client