Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/d32KHDz4hQyuCuhNOb9K5kOq2qY.roa
File: d32KHDz4hQyuCuhNOb9K5kOq2qY.roa (raw, json)
Hash identifier: Sa1ntueDsGqjR2cwqIdDg9aoAqEdJGNyLoTHBEU6HPU=
Subject key identifier: 77:7D:8A:1C:3C:F8:85:0C:AE:0A:E8:4D:39:BF:4A:E6:43:AA:DA:A6
Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178
Certificate serial: 019D00DD812524DD427BAD8D57611C96C12B
Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/d32KHDz4hQyuCuhNOb9K5kOq2qY.roa
Signing time: Wed 18 Mar 2026 12:13:29 +0000
ROA not before: Wed 18 Mar 2026 12:13:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209690
IP address blocks: 91.132.246.0/24 maxlen: 24
91.132.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:dd:81:25:24:dd:42:7b:ad:8d:57:61:1c:96:c1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178
Validity
Not Before: Mar 18 12:13:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=777d8a1c3cf8850cae0ae84d39bf4ae643aadaa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:77:82:37:11:6a:6d:7c:6c:aa:06:95:a5:0e:
1a:83:e8:dd:3c:86:e9:d2:a3:a0:cf:b2:da:85:8f:
d2:e6:e4:54:29:4b:81:d1:30:e4:58:f9:1f:89:85:
46:e5:48:d4:af:a7:6d:37:b1:31:a1:78:f0:47:19:
cf:79:d6:6f:b9:3b:47:78:91:d6:ba:43:e6:c6:db:
76:81:0d:47:74:49:c7:e8:ff:51:a0:3d:e8:41:ed:
f5:3d:19:d1:bf:09:5d:68:84:00:c7:55:5b:8a:a7:
f9:e6:75:7f:dc:21:fb:7b:e1:6f:7d:bf:e8:6b:63:
f4:2e:19:c3:4b:fa:cc:73:dc:f5:5c:89:b4:fa:61:
ce:3a:14:e3:12:36:6d:da:80:79:d8:5e:a6:f5:a2:
3b:2e:78:48:2f:53:36:16:65:a3:ac:5b:25:96:1e:
66:56:33:26:4f:24:54:22:79:bf:48:d7:43:da:ec:
df:a2:c8:3d:7f:dc:6a:07:af:7b:f0:0a:cb:ce:87:
22:84:72:dc:3f:6a:da:68:e4:4b:cf:b4:a7:34:3f:
e1:21:2b:33:78:fd:29:a7:dd:c2:12:9e:af:88:f2:
c1:17:05:11:75:11:45:05:10:48:41:70:dd:56:6b:
a3:3e:b6:40:fb:85:a5:36:b1:a1:c1:cc:e8:75:4f:
da:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7D:8A:1C:3C:F8:85:0C:AE:0A:E8:4D:39:BF:4A:E6:43:AA:DA:A6
X509v3 Authority Key Identifier:
keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/d32KHDz4hQyuCuhNOb9K5kOq2qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.246.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:69:43:7d:3e:2c:fc:11:39:7f:01:10:fe:b2:14:78:75:6e:
26:d9:25:4f:ed:9a:a8:c9:47:2a:6e:1a:14:c1:3b:21:cb:ad:
77:65:71:10:c4:40:00:96:cb:90:82:3e:24:f9:81:b2:a3:30:
7f:7a:01:46:02:be:44:eb:41:71:16:0d:1a:53:65:1b:06:d0:
3c:52:c5:1d:8c:6a:20:02:8e:e5:da:68:24:ad:0a:b3:b4:ee:
bd:b8:54:fc:c1:7b:3a:78:8d:3c:09:1f:96:07:46:b2:da:d4:
bd:14:2b:72:40:e2:d2:6f:d4:a9:87:f2:5e:47:17:0e:da:40:
fc:69:32:6c:01:4b:36:f8:0d:63:16:87:47:e3:cb:2d:c0:c9:
44:d9:e7:30:61:e5:d8:6d:3d:7b:c7:de:e4:1a:4b:79:ed:84:
fd:bf:9e:da:38:9b:91:80:4a:19:fe:0e:a5:82:df:42:5b:59:
e4:84:4c:c6:8f:1f:a7:23:f3:3f:97:73:29:92:ac:91:4c:7d:
a5:35:3b:58:26:62:02:6f:38:36:9e:fd:73:bc:39:91:29:25:
fc:6e:47:83:f5:ef:f0:69:04:51:c2:08:a7:d3:c4:6e:e2:92:
5b:53:55:74:03:74:0d:a5:dd:ef:da:50:e7:c7:d9:42:1b:dd:
54:1e:80:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0A3YElJN1Ce62NV2EclsErMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMDU4NTM2MWQ1MWE3MmU3YmE2MzA4YzBjZWIxNjAyNDQ4
MzExNzgwHhcNMjYwMzE4MTIxMzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzdkOGExYzNjZjg4NTBjYWUwYWU4NGQzOWJmNGFlNjQzYWFkYWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXeCNxFqbXxsqgaVpQ4ag+jdPIbp
0qOgz7LahY/S5uRUKUuB0TDkWPkfiYVG5UjUr6dtN7ExoXjwRxnPedZvuTtHeJHW
ukPmxtt2gQ1HdEnH6P9RoD3oQe31PRnRvwldaIQAx1Vbiqf55nV/3CH7e+Fvfb/o
a2P0LhnDS/rMc9z1XIm0+mHOOhTjEjZt2oB52F6m9aI7LnhIL1M2FmWjrFsllh5m
VjMmTyRUInm/SNdD2uzfosg9f9xqB6978ArLzocihHLcP2raaORLz7SnND/hISsz
eP0pp93CEp6viPLBFwURdRFFBRBIQXDdVmujPrZA+4WlNrGhwczodU/aWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHd9ihw8+IUMrgroTTm/SuZDqtqmMB8GA1UdIwQY
MBaAFCAFhTYdUacue6YwjAzrFgJEgxF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kODdmOGUtNjcyMy00YjE2LTllNzEt
MzE3Nzk4NzViNGZhLzEvZDMyS0hEejRoUXl1Q3VoTk9iOUs1a09xMnFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9kODdmOGUtNjcyMy00YjE2LTllNzEtMzE3Nzk4NzViNGZh
LzEvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW4T2MA0G
CSqGSIb3DQEBCwUAA4IBAQA9aUN9Piz8ETl/ARD+shR4dW4m2SVP7ZqoyUcqbhoU
wTshy613ZXEQxEAAlsuQgj4k+YGyozB/egFGAr5E60FxFg0aU2UbBtA8UsUdjGog
Ao7l2mgkrQqztO69uFT8wXs6eI08CR+WB0ay2tS9FCtyQOLSb9Sph/JeRxcO2kD8
aTJsAUs2+A1jFodH48stwMlE2ecwYeXYbT17x97kGkt57YT9v57aOJuRgEoZ/g6l
gt9CW1nkhEzGjx+nI/M/l3MpkqyRTH2lNTtYJmICbzg2nv1zvDmRKSX8bkeD9e/w
aQRRwgin08Ru4pJbU1V0A3QNpd3v2lDnx9lCG91UHoCS
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:28:10 2026 by rpki-client