Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/TuXsasZ-4b8nW75mHIofbfVtahQ.roa
File: TuXsasZ-4b8nW75mHIofbfVtahQ.roa (raw, json)
Hash identifier: WQY2WQVSqHmWvAPhxSmdnowvY1X9klQmLQ7FkZqoEzE=
Subject key identifier: 4E:E5:EC:6A:C6:7E:E1:BF:27:5B:BE:66:1C:8A:1F:6D:F5:6D:6A:14
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 019F74BAE93D426123D808A85AD16C4B3D7E
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/TuXsasZ-4b8nW75mHIofbfVtahQ.roa
Signing time: Sat 18 Jul 2026 10:17:14 +0000
ROA not before: Sat 18 Jul 2026 10:17:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.221.116.0/24 maxlen: 24
91.221.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:74:ba:e9:3d:42:61:23:d8:08:a8:5a:d1:6c:4b:3d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jul 18 10:17:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ee5ec6ac67ee1bf275bbe661c8a1f6df56d6a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:14:55:21:d7:a2:1d:d2:79:59:87:92:30:0d:
53:ed:90:53:00:af:29:7d:fa:04:1b:76:71:dd:b3:
f2:c8:82:cd:2d:19:27:8b:d9:0a:f0:d2:3f:56:6b:
a8:32:09:1e:d5:7b:c3:b6:c8:3d:27:ce:37:4b:29:
b6:70:6f:e1:77:b7:6d:13:70:b9:af:a6:bf:01:47:
89:05:71:b6:49:e2:66:ca:9a:b9:71:f2:27:fe:53:
59:cc:70:55:7b:95:56:d6:b0:ee:04:81:c0:a0:a5:
6a:2d:df:ad:2f:57:8c:30:60:02:77:4d:97:23:bb:
54:6f:e9:ac:d5:ab:95:53:31:5f:98:0c:d3:cc:a3:
c6:74:95:37:e9:03:e5:dd:d6:a7:63:07:12:e7:91:
0f:08:34:9e:32:e2:7f:67:62:00:a3:b0:6c:0c:90:
25:c9:b7:44:6e:1f:21:77:da:d0:06:06:ba:40:cb:
4b:84:2d:af:db:53:69:a5:0a:76:28:df:4d:bf:c8:
4a:f2:12:35:e7:b2:bb:46:9d:f8:8f:23:8e:cd:4d:
4d:c8:df:5d:40:0a:dc:71:9a:a6:81:b7:45:6b:ea:
29:39:7e:25:0a:cb:cf:a1:6c:55:96:24:0c:b7:68:
26:b3:60:e2:f5:ef:f6:84:fd:02:dd:e9:b8:05:f6:
2d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E5:EC:6A:C6:7E:E1:BF:27:5B:BE:66:1C:8A:1F:6D:F5:6D:6A:14
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/TuXsasZ-4b8nW75mHIofbfVtahQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.116.0/23
Signature Algorithm: sha256WithRSAEncryption
68:d5:0c:f3:d0:bc:a0:5c:e5:11:60:17:ed:09:63:c8:3d:d9:
53:54:af:f9:8b:28:14:d3:af:88:a8:3d:07:bb:5f:7b:c8:a0:
9d:61:0a:2e:f4:b1:f7:27:33:b4:ec:e7:8b:01:2c:67:e5:3d:
5e:da:c7:e6:2e:60:5e:08:8d:59:22:8d:bd:d3:a7:25:83:dc:
46:b0:36:01:a3:38:0b:92:fb:7a:af:09:51:7a:d7:a7:85:34:
28:59:6e:6a:dc:90:9a:61:db:22:54:f7:f0:fa:b2:5c:52:40:
02:a8:e0:94:9d:f2:43:6e:32:98:eb:37:89:b6:32:64:71:51:
7e:6a:d9:cf:c0:43:05:0f:bf:d6:6a:2c:73:4c:1b:2a:c7:e0:
d9:5a:6d:5a:c1:f8:76:a4:22:23:3a:e1:d6:bf:f7:cd:b6:b2:
ec:7d:6c:77:9b:0b:1d:a9:78:7d:b7:6f:07:4e:f0:15:18:ef:
02:d7:3f:db:a4:59:29:d2:79:ae:f6:22:db:89:3c:4f:1e:43:
ef:7b:1c:46:72:bf:dc:4e:f7:cc:84:23:11:cc:4c:fd:97:cf:
46:2c:6f:df:a4:4a:34:38:dd:01:b1:24:a2:e7:69:85:3b:ae:
18:f6:bc:45:27:c9:b7:d8:ae:4a:02:22:56:98:dc:9e:2a:38:
2b:a3:51:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ90uuk9QmEj2AioWtFsSz1+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl
MmExY2EwHhcNMjYwNzE4MTAxNzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWU1ZWM2YWM2N2VlMWJmMjc1YmJlNjYxYzhhMWY2ZGY1NmQ2YTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhRVIdeiHdJ5WYeSMA1T7ZBTAK8p
ffoEG3Zx3bPyyILNLRkni9kK8NI/VmuoMgke1XvDtsg9J843Sym2cG/hd7dtE3C5
r6a/AUeJBXG2SeJmypq5cfIn/lNZzHBVe5VW1rDuBIHAoKVqLd+tL1eMMGACd02X
I7tUb+ms1auVUzFfmAzTzKPGdJU36QPl3danYwcS55EPCDSeMuJ/Z2IAo7BsDJAl
ybdEbh8hd9rQBga6QMtLhC2v21NppQp2KN9Nv8hK8hI157K7Rp34jyOOzU1NyN9d
QArccZqmgbdFa+opOX4lCsvPoWxVliQMt2gms2Di9e/2hP0C3em4BfYtcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE7l7GrGfuG/J1u+ZhyKH231bWoUMB8GA1UdIwQY
MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt
YTZjYTQ1NGRiMmQ3LzEvVHVYc2FzWi00YjhuVzc1bUhJb2ZiZlZ0YWhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3
LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW910MA0G
CSqGSIb3DQEBCwUAA4IBAQBo1Qzz0LygXOURYBftCWPIPdlTVK/5iygU06+IqD0H
u197yKCdYQou9LH3JzO07OeLASxn5T1e2sfmLmBeCI1ZIo2906clg9xGsDYBozgL
kvt6rwlRetenhTQoWW5q3JCaYdsiVPfw+rJcUkACqOCUnfJDbjKY6zeJtjJkcVF+
atnPwEMFD7/WaixzTBsqx+DZWm1awfh2pCIjOuHWv/fNtrLsfWx3mwsdqXh9t28H
TvAVGO8C1z/bpFkp0nmu9iLbiTxPHkPvexxGcr/cTvfMhCMRzEz9l89GLG/fpEo0
ON0BsSSi52mFO64Y9rxFJ8m32K5KAiJWmNyeKjgro1Eu
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:41 2026 by rpki-client