Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/_NzS-xSIOyd4mGl5H2JCh_RNpTs.roa
File: _NzS-xSIOyd4mGl5H2JCh_RNpTs.roa (raw, json)
Hash identifier: l9gi2DelSHeTCaITlWBdawh5Or6DXGtA4i/yA1dhYoM=
Subject key identifier: FC:DC:D2:FB:14:88:3B:27:78:98:69:79:1F:62:42:87:F4:4D:A5:3B
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019F7F9B083C3AA78A7C1906FA165351C11D
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/_NzS-xSIOyd4mGl5H2JCh_RNpTs.roa
Signing time: Mon 20 Jul 2026 12:58:14 +0000
ROA not before: Mon 20 Jul 2026 12:58:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 91.200.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:9b:08:3c:3a:a7:8a:7c:19:06:fa:16:53:51:c1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jul 20 12:58:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcdcd2fb14883b27789869791f624287f44da53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e1:69:8a:ca:38:40:5d:55:18:94:b0:b3:8c:
25:76:d8:83:80:b0:aa:d6:c7:b7:f5:49:16:bf:86:
02:e5:de:db:15:ec:d1:a4:cd:2a:61:3e:40:48:68:
45:e6:ca:db:27:42:18:6e:e4:32:f1:5b:1c:52:fc:
44:1c:f1:4e:0c:b3:78:21:94:0f:84:db:fa:5a:02:
af:fa:04:7c:1d:f9:6a:9b:19:e2:5b:ab:c1:81:57:
4f:46:4b:8a:1d:df:d0:42:5c:80:01:69:bb:77:5f:
d0:e4:66:41:4f:63:f3:06:2b:73:9b:41:52:8b:cf:
fc:fa:2d:30:fa:cd:19:16:fc:9a:16:26:ba:a4:d7:
6b:e3:19:58:b8:7b:17:99:af:ec:85:77:da:46:57:
f3:4d:f8:d9:dc:f0:a8:89:17:00:b6:bd:7b:c0:52:
00:b4:dd:b6:c0:74:be:25:61:e7:37:6b:5a:62:d6:
c9:1c:78:da:6e:ea:14:ee:a1:d7:4d:b1:87:f4:6f:
4f:71:a6:74:04:43:9a:73:77:c4:73:8a:fe:26:6c:
70:b0:b7:aa:c7:3e:a8:e7:71:c2:44:4f:f8:ab:f5:
69:79:e5:3e:c2:cf:4f:4f:f1:95:d1:ac:c9:55:c2:
4b:1b:cf:60:8f:43:39:f5:d7:43:eb:55:12:33:46:
b8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DC:D2:FB:14:88:3B:27:78:98:69:79:1F:62:42:87:F4:4D:A5:3B
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/_NzS-xSIOyd4mGl5H2JCh_RNpTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.222.0/24
Signature Algorithm: sha256WithRSAEncryption
28:85:d1:f5:8e:51:1e:9c:f5:c3:36:da:f9:fd:c7:2f:62:13:
3b:c8:c7:2b:07:52:b5:6a:28:76:7f:58:8c:9e:de:f6:01:c7:
8d:51:04:f4:b6:33:2f:ee:1c:8b:19:9b:ec:b4:fb:54:e7:b4:
9d:c3:09:84:ce:d3:87:5f:a9:29:c1:65:d7:7e:51:a7:23:f8:
86:22:83:19:36:31:dc:92:8b:ed:ed:b3:3f:e2:c4:73:83:43:
d2:87:e0:34:a8:b1:e7:3c:bb:e1:15:a4:f3:bd:2e:f5:7b:71:
96:9f:29:68:cf:c0:d7:0d:1f:af:f8:16:f6:60:14:a5:8f:bc:
dd:54:3a:e5:d2:d2:a3:dd:81:db:fc:47:3b:15:e5:4e:04:f7:
a5:53:47:02:bb:a6:61:b2:91:71:a3:d8:6c:d6:89:11:4c:59:
f1:64:04:95:74:4a:e0:0c:33:7b:16:07:97:26:a2:af:85:82:
15:6a:c3:e5:b2:40:88:b3:96:e1:45:f7:3c:a8:6d:04:8f:73:
44:4a:00:34:23:98:9c:37:a7:20:a4:5f:79:7e:f8:4a:d6:5f:
b1:ea:6b:fd:35:76:ea:d5:57:f6:5d:d8:42:0b:ad:fa:c5:23:
ea:5f:8c:cf:f7:d2:c9:b2:df:6d:c0:3a:06:cf:cd:88:bb:a5:
90:90:37:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9/mwg8OqeKfBkG+hZTUcEdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjYwNzIwMTI1ODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2RjZDJmYjE0ODgzYjI3Nzg5ODY5NzkxZjYyNDI4N2Y0NGRhNTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeFpiso4QF1VGJSws4wldtiDgLCq
1se39UkWv4YC5d7bFezRpM0qYT5ASGhF5srbJ0IYbuQy8VscUvxEHPFODLN4IZQP
hNv6WgKv+gR8HflqmxniW6vBgVdPRkuKHd/QQlyAAWm7d1/Q5GZBT2PzBitzm0FS
i8/8+i0w+s0ZFvyaFia6pNdr4xlYuHsXma/shXfaRlfzTfjZ3PCoiRcAtr17wFIA
tN22wHS+JWHnN2taYtbJHHjabuoU7qHXTbGH9G9PcaZ0BEOac3fEc4r+JmxwsLeq
xz6o53HCRE/4q/VpeeU+ws9PT/GV0azJVcJLG89gj0M59ddD61USM0a4GQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPzc0vsUiDsneJhpeR9iQof0TaU7MB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvX056Uy14U0lPeWQ0bUdsNUgySkNoX1JOcFRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8jeMA0G
CSqGSIb3DQEBCwUAA4IBAQAohdH1jlEenPXDNtr5/ccvYhM7yMcrB1K1aih2f1iM
nt72AceNUQT0tjMv7hyLGZvstPtU57SdwwmEztOHX6kpwWXXflGnI/iGIoMZNjHc
kovt7bM/4sRzg0PSh+A0qLHnPLvhFaTzvS71e3GWnyloz8DXDR+v+Bb2YBSlj7zd
VDrl0tKj3YHb/Ec7FeVOBPelU0cCu6ZhspFxo9hs1okRTFnxZASVdErgDDN7FgeX
JqKvhYIVasPlskCIs5bhRfc8qG0Ej3NESgA0I5icN6cgpF95fvhK1l+x6mv9NXbq
1Vf2XdhCC636xSPqX4zP99LJst9twDoGz82Iu6WQkDfv
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:33 2026 by rpki-client