Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/Rpy7QWovYwdZQAvT1XL6SDhlWtw.roa
File: Rpy7QWovYwdZQAvT1XL6SDhlWtw.roa (raw, json)
Hash identifier: Z7pDSRPHr8DmCaGGeQ16hWhefhTjEYXfJeW0Mr0f2Qs=
Subject key identifier: 46:9C:BB:41:6A:2F:63:07:59:40:0B:D3:D5:72:FA:48:38:65:5A:DC
Certificate issuer: /CN=2d5036357fbc3ca30866ade063262ad0d440b660
Certificate serial: 019DF2C99041B881B22F4F3EA1CE448BD92F
Authority key identifier: 2D:50:36:35:7F:BC:3C:A3:08:66:AD:E0:63:26:2A:D0:D4:40:B6:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVA2NX-8PKMIZq3gYyYq0NRAtmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/Rpy7QWovYwdZQAvT1XL6SDhlWtw.roa
Signing time: Mon 04 May 2026 11:39:49 +0000
ROA not before: Mon 04 May 2026 11:39:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52072
IP address blocks: 91.221.216.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVA2NX-8PKMIZq3gYyYq0NRAtmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f2:c9:90:41:b8:81:b2:2f:4f:3e:a1:ce:44:8b:d9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d5036357fbc3ca30866ade063262ad0d440b660
Validity
Not Before: May 4 11:39:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=469cbb416a2f630759400bd3d572fa4838655adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:87:b9:5b:3b:e8:1f:a5:ff:da:92:62:10:83:
ff:0e:44:bf:44:da:4d:4a:11:53:f5:b7:a2:c3:7e:
58:4d:7c:ce:7a:08:3c:7a:50:7d:ca:ee:aa:5d:0c:
df:fe:7f:54:51:af:b3:ea:ca:03:30:28:ee:eb:25:
7a:1d:0e:cb:66:0d:4b:c9:42:64:23:a6:51:55:34:
e2:0b:fa:60:84:0a:cc:94:d9:27:df:fd:42:a1:8c:
fc:18:36:86:b0:f0:22:4c:3d:7d:70:db:22:2d:33:
2d:87:7c:27:90:d6:ad:5b:6f:f6:1a:91:76:61:1a:
ff:59:90:2d:f1:fc:70:75:72:56:f3:94:4b:59:67:
4f:2c:d6:b1:27:81:3c:ad:2a:99:c8:b6:9d:87:23:
8c:91:78:9b:29:42:8f:b8:b4:b1:72:27:07:1a:15:
bf:ee:38:89:02:33:06:e4:09:08:0e:b6:61:1c:34:
db:0a:4e:2c:91:90:c1:43:c8:72:21:ad:7f:55:2b:
40:fe:e1:04:a0:ae:16:2e:3d:49:15:89:a9:ac:c8:
d8:e2:a3:95:06:02:c8:88:98:c3:e2:bc:09:db:2d:
d9:20:24:14:a7:21:20:1c:22:e0:8c:77:34:ce:db:
a3:ce:f5:b5:3d:8a:23:36:a0:3b:85:04:2d:0f:59:
03:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9C:BB:41:6A:2F:63:07:59:40:0B:D3:D5:72:FA:48:38:65:5A:DC
X509v3 Authority Key Identifier:
keyid:2D:50:36:35:7F:BC:3C:A3:08:66:AD:E0:63:26:2A:D0:D4:40:B6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVA2NX-8PKMIZq3gYyYq0NRAtmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/Rpy7QWovYwdZQAvT1XL6SDhlWtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd7bb9-6339-4504-b6c3-470f6d23236f/1/LVA2NX-8PKMIZq3gYyYq0NRAtmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.216.0/23
Signature Algorithm: sha256WithRSAEncryption
52:a9:2c:59:71:66:f4:77:cc:80:30:d4:78:a9:68:63:92:7d:
d6:c5:01:27:b5:a8:f0:b4:e0:4e:bd:7f:d1:ba:f2:45:e3:84:
5e:da:94:f6:cc:a3:1a:19:47:db:b0:91:58:12:0d:79:46:7d:
dd:e5:76:9f:4f:30:6b:bb:eb:16:c3:e8:c3:aa:56:74:75:59:
f2:f5:6a:09:f6:4d:6e:47:98:31:7c:2b:ad:85:4b:8a:69:b0:
59:1b:c6:82:5b:74:81:09:48:59:18:e7:74:98:e9:7c:40:cb:
f3:5e:8f:cf:b0:8c:f1:a1:fe:19:b1:69:d1:97:6c:21:7c:96:
09:7c:ae:c0:b7:48:2e:f1:c2:e8:c5:13:f8:f5:5e:c7:7d:7b:
33:6a:c5:54:aa:0b:29:b1:cb:b9:f7:b4:61:09:83:18:7c:f2:
8b:73:88:e6:52:ad:35:1b:ea:28:ef:e0:15:72:6e:d9:e7:87:
4f:df:dd:11:28:73:00:a3:d6:fc:48:03:ac:81:e0:4d:ea:37:
33:ba:ec:f0:00:cb:bb:7a:66:40:fb:fb:f0:45:8b:7a:4c:4c:
07:73:a7:a2:ab:61:16:ab:25:6c:0b:07:4f:4d:f7:45:99:30:
2c:7c:96:47:e1:f8:e0:e2:e6:8a:43:e0:cf:09:78:7b:5f:2f:
66:94:75:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3yyZBBuIGyL08+oc5Ei9kvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNTAzNjM1N2ZiYzNjYTMwODY2YWRlMDYzMjYyYWQwZDQ0
MGI2NjAwHhcNMjYwNTA0MTEzOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjljYmI0MTZhMmY2MzA3NTk0MDBiZDNkNTcyZmE0ODM4NjU1YWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIe5WzvoH6X/2pJiEIP/DkS/RNpN
ShFT9beiw35YTXzOegg8elB9yu6qXQzf/n9UUa+z6soDMCju6yV6HQ7LZg1LyUJk
I6ZRVTTiC/pghArMlNkn3/1CoYz8GDaGsPAiTD19cNsiLTMth3wnkNatW2/2GpF2
YRr/WZAt8fxwdXJW85RLWWdPLNaxJ4E8rSqZyLadhyOMkXibKUKPuLSxcicHGhW/
7jiJAjMG5AkIDrZhHDTbCk4skZDBQ8hyIa1/VStA/uEEoK4WLj1JFYmprMjY4qOV
BgLIiJjD4rwJ2y3ZICQUpyEgHCLgjHc0ztujzvW1PYojNqA7hQQtD1kDtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEacu0FqL2MHWUAL09Vy+kg4ZVrcMB8GA1UdIwQY
MBaAFC1QNjV/vDyjCGat4GMmKtDUQLZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFZBMk5YLThQS01JWnEzZ1l5WXEwTlJBdG1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9iZDdiYjktNjMzOS00NTA0LWI2YzMt
NDcwZjZkMjMyMzZmLzEvUnB5N1FXb3ZZd2RaUUF2VDFYTDZTRGhsV3R3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9iZDdiYjktNjMzOS00NTA0LWI2YzMtNDcwZjZkMjMyMzZm
LzEvTFZBMk5YLThQS01JWnEzZ1l5WXEwTlJBdG1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW93YMA0G
CSqGSIb3DQEBCwUAA4IBAQBSqSxZcWb0d8yAMNR4qWhjkn3WxQEntajwtOBOvX/R
uvJF44Re2pT2zKMaGUfbsJFYEg15Rn3d5XafTzBru+sWw+jDqlZ0dVny9WoJ9k1u
R5gxfCuthUuKabBZG8aCW3SBCUhZGOd0mOl8QMvzXo/PsIzxof4ZsWnRl2whfJYJ
fK7At0gu8cLoxRP49V7HfXszasVUqgspscu597RhCYMYfPKLc4jmUq01G+oo7+AV
cm7Z54dP390RKHMAo9b8SAOsgeBN6jczuuzwAMu7emZA+/vwRYt6TEwHc6eiq2EW
qyVsCwdPTfdFmTAsfJZH4fjg4uaKQ+DPCXh7Xy9mlHUZ
-----END CERTIFICATE-----
Generated at Tue May 12 21:38:15 2026 by rpki-client