Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/IMaEng905vgNxLDkn9IsOY9mFyc.roa
File: IMaEng905vgNxLDkn9IsOY9mFyc.roa (raw, json)
Hash identifier: mYk3vXxG6dBQHZKFd1yVAjlw60b6VkmFRkzeBi0s0eM=
Subject key identifier: 20:C6:84:9E:0F:74:E6:F8:0D:C4:B0:E4:9F:D2:2C:39:8F:66:17:27
Certificate issuer: /CN=cf782d2872b9e7a10a91a27f307020da94844827
Certificate serial: 01A1DE3B095BD4134F1F3DB63AE1FE1B3B51
Authority key identifier: CF:78:2D:28:72:B9:E7:A1:0A:91:A2:7F:30:70:20:DA:94:84:48:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3gtKHK556EKkaJ_MHAg2pSESCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/IMaEng905vgNxLDkn9IsOY9mFyc.roa
Signing time: Sun 15 Nov 2026 08:02:53 +0000
ROA not before: Sun 15 Nov 2026 08:02:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209596
IP address blocks: 91.245.228.0/22 maxlen: 24
2a0d:c640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3gtKHK556EKkaJ_MHAg2pSESCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:3b:09:5b:d4:13:4f:1f:3d:b6:3a:e1:fe:1b:3b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf782d2872b9e7a10a91a27f307020da94844827
Validity
Not Before: Nov 15 08:02:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20c6849e0f74e6f80dc4b0e49fd22c398f661727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:41:21:da:0d:b1:13:9d:0e:aa:8e:86:27:dd:
2b:6e:e4:df:89:d9:d9:01:71:91:97:9b:2a:44:e2:
aa:d1:b8:ac:91:2e:12:e2:a9:6c:a6:e9:91:09:4c:
27:63:1c:3e:fc:ae:42:49:70:f0:cb:3c:83:b5:fb:
2d:eb:cb:ce:6c:64:06:23:a2:80:82:f2:4b:0f:cc:
a4:ad:af:3a:1e:db:b6:e5:93:d6:8a:3c:79:be:ed:
de:82:23:1b:3e:eb:f3:aa:67:8e:8b:6f:94:ab:f0:
44:fa:c0:fe:30:e7:4c:f7:02:c0:53:0d:11:3d:cb:
75:73:af:c1:f2:41:14:a2:5b:23:af:f9:7f:9b:1d:
2e:35:ee:78:dd:b3:52:f1:c6:20:05:7a:18:3c:6e:
56:b9:14:93:7c:a5:e3:e4:b1:63:2f:88:41:dd:ea:
b4:1d:d3:07:29:f4:99:65:69:c4:5a:1f:cd:e7:36:
98:d5:84:35:d1:02:59:3e:74:1c:05:d3:82:0c:7b:
01:c6:7a:b6:12:9e:6e:66:cd:ba:3e:d7:c9:bb:02:
a8:89:d9:e5:5e:7f:5c:8f:ff:ae:b5:45:a9:6c:69:
ca:18:d0:52:f4:52:3f:c4:4e:ce:2a:84:e2:e9:ad:
9d:cc:78:16:8a:f8:e8:6b:4f:b8:26:b3:60:98:d3:
21:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C6:84:9E:0F:74:E6:F8:0D:C4:B0:E4:9F:D2:2C:39:8F:66:17:27
X509v3 Authority Key Identifier:
keyid:CF:78:2D:28:72:B9:E7:A1:0A:91:A2:7F:30:70:20:DA:94:84:48:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3gtKHK556EKkaJ_MHAg2pSESCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/IMaEng905vgNxLDkn9IsOY9mFyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.228.0/22
IPv6:
2a0d:c640::/29
Signature Algorithm: sha256WithRSAEncryption
bf:c9:f7:f6:64:c8:6b:be:62:33:f6:0a:1a:0e:40:12:0c:80:
97:a0:5e:61:08:be:f2:13:76:14:47:72:88:0e:7d:47:f9:db:
6d:74:e0:f4:a9:d9:b1:70:ab:57:8e:42:07:cf:7c:b7:67:ea:
ea:3d:3f:7a:f1:be:ad:91:c8:08:1c:2d:16:ce:9c:3a:aa:28:
ad:b5:2c:96:cc:bb:b1:4e:03:de:d3:aa:ec:f3:35:27:7b:4a:
cc:49:55:b9:3e:00:3f:8a:06:b8:11:f7:b3:16:ee:7d:3a:fb:
8d:35:39:9d:84:07:9a:d4:a2:34:5e:57:a5:04:10:37:b9:86:
4d:13:d3:a2:b4:e6:23:31:d7:13:27:f5:27:76:64:7d:07:5f:
a3:ea:2e:e8:a3:06:9a:bc:7a:36:0c:ce:9a:c7:2a:70:3c:89:
b0:3a:db:a5:56:53:57:5f:4f:09:12:8e:ac:22:b9:c5:e8:b1:
f9:40:c1:04:80:51:4e:f0:b3:13:e5:32:d3:ea:3d:c9:4e:5d:
3e:ae:46:21:4c:f9:52:76:ba:21:7b:c6:ea:34:76:67:61:e8:
ea:80:6a:5e:f0:1e:f9:45:79:18:de:4a:8a:75:ca:1e:74:dc:
cf:0a:e5:25:64:f2:d6:aa:6d:06:c4:21:17:73:25:42:8b:55:
f0:40:11:92
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaHeOwlb1BNPHz22OuH+GztRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNzgyZDI4NzJiOWU3YTEwYTkxYTI3ZjMwNzAyMGRhOTQ4
NDQ4MjcwHhcNMjYxMTE1MDgwMjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGM2ODQ5ZTBmNzRlNmY4MGRjNGIwZTQ5ZmQyMmMzOThmNjYxNzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0Eh2g2xE50Oqo6GJ90rbuTfidnZ
AXGRl5sqROKq0biskS4S4qlspumRCUwnYxw+/K5CSXDwyzyDtfst68vObGQGI6KA
gvJLD8ykra86Htu25ZPWijx5vu3egiMbPuvzqmeOi2+Uq/BE+sD+MOdM9wLAUw0R
Pct1c6/B8kEUolsjr/l/mx0uNe543bNS8cYgBXoYPG5WuRSTfKXj5LFjL4hB3eq0
HdMHKfSZZWnEWh/N5zaY1YQ10QJZPnQcBdOCDHsBxnq2Ep5uZs26PtfJuwKoidnl
Xn9cj/+utUWpbGnKGNBS9FI/xE7OKoTi6a2dzHgWivjoa0+4JrNgmNMhTwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCDGhJ4PdOb4DcSw5J/SLDmPZhcnMB8GA1UdIwQY
MBaAFM94LShyueehCpGifzBwINqUhEgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejNndEtISzU1NkVLa2FKX01IQWcycFNFU0NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mN2UxZjItNWRmOC00NWE0LWFlNzIt
NTRmNzQ1M2YxMDMzLzEvSU1hRW5nOTA1dmdOeExEa245SXNPWTltRnljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mN2UxZjItNWRmOC00NWE0LWFlNzItNTRmNzQ1M2YxMDMz
LzEvejNndEtISzU1NkVLa2FKX01IQWcycFNFU0NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCW/XkMA0E
AgACMAcDBQMqDcZAMA0GCSqGSIb3DQEBCwUAA4IBAQC/yff2ZMhrvmIz9goaDkAS
DICXoF5hCL7yE3YUR3KIDn1H+dttdOD0qdmxcKtXjkIHz3y3Z+rqPT968b6tkcgI
HC0Wzpw6qiittSyWzLuxTgPe06rs8zUne0rMSVW5PgA/iga4EfezFu59OvuNNTmd
hAea1KI0XlelBBA3uYZNE9OitOYjMdcTJ/UndmR9B1+j6i7oowaavHo2DM6axypw
PImwOtulVlNXX08JEo6sIrnF6LH5QMEEgFFO8LMT5TLT6j3JTl0+rkYhTPlSdroh
e8bqNHZnYejqgGpe8B75RXkY3kqKdcoedNzPCuUlZPLWqm0GxCEXcyVCi1XwQBGS
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:59:10 2026 by rpki-client