Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0d141a-0b0f-457d-84a8-a4da86ebe754/1/IrMQj7cF9CiqVm0U--Fy5SvKKvE.roa
File: IrMQj7cF9CiqVm0U--Fy5SvKKvE.roa (raw, json)
Hash identifier: 1ce0pD+evqFh35XoBomBWsmnhVvly1uAW9sCNipvSV8=
Subject key identifier: 22:B3:10:8F:B7:05:F4:28:AA:56:6D:14:FB:E1:72:E5:2B:CA:2A:F1
Certificate issuer: /CN=69f3e7c446dba0bfea585df4f51edd18cae777ff
Certificate serial: 019F4242875B956B8D95AEF08B3C1C6C56BA
Authority key identifier: 69:F3:E7:C4:46:DB:A0:BF:EA:58:5D:F4:F5:1E:DD:18:CA:E7:77:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afPnxEbboL_qWF309R7dGMrnd_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0d141a-0b0f-457d-84a8-a4da86ebe754/1/IrMQj7cF9CiqVm0U--Fy5SvKKvE.roa
Signing time: Wed 08 Jul 2026 15:04:44 +0000
ROA not before: Wed 08 Jul 2026 15:04:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58006
IP address blocks: 91.237.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0d141a-0b0f-457d-84a8-a4da86ebe754/1/afPnxEbboL_qWF309R7dGMrnd_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0d141a-0b0f-457d-84a8-a4da86ebe754/1/afPnxEbboL_qWF309R7dGMrnd_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/afPnxEbboL_qWF309R7dGMrnd_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:42:87:5b:95:6b:8d:95:ae:f0:8b:3c:1c:6c:56:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f3e7c446dba0bfea585df4f51edd18cae777ff
Validity
Not Before: Jul 8 15:04:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22b3108fb705f428aa566d14fbe172e52bca2af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8a:fe:2b:33:14:36:ec:95:13:62:46:fa:2d:
b3:91:13:58:f8:a4:4a:d8:6a:c3:43:df:e9:54:43:
4d:ea:54:d6:ac:c7:88:1c:2f:e3:73:83:80:74:2c:
58:52:e0:ed:0f:5d:3f:ac:ea:68:eb:43:04:e6:b8:
c2:86:83:68:97:c6:93:cc:26:7b:5c:29:70:17:6d:
3c:03:6b:c9:cd:89:75:ba:46:59:1d:1c:37:8a:97:
30:0b:5c:64:f5:4a:c6:4a:fd:90:8d:43:6c:dc:9e:
fa:18:f5:2a:44:88:85:f1:b6:84:7e:2a:6e:b0:f4:
ca:b7:fd:55:a3:5e:39:19:7b:31:79:3d:42:ec:1a:
d5:29:f5:a6:d1:49:23:95:31:6d:b2:c4:78:b6:78:
b7:fe:83:94:59:13:35:fb:06:54:cb:bd:19:2d:aa:
8f:31:a6:5f:48:26:0d:0d:aa:b2:1c:3b:3b:b4:cb:
66:38:dc:0c:5e:29:84:a9:9d:b9:01:6f:b7:10:c6:
b1:83:2d:21:66:53:2e:82:a3:80:82:27:2b:80:4c:
b2:ee:f2:12:64:bf:f8:da:51:d1:a5:a7:66:75:22:
8b:84:11:f2:81:53:3f:01:7d:92:9d:32:4a:0e:65:
2e:f7:7b:1b:d3:44:12:e0:08:9a:ae:36:dc:bf:8a:
8a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B3:10:8F:B7:05:F4:28:AA:56:6D:14:FB:E1:72:E5:2B:CA:2A:F1
X509v3 Authority Key Identifier:
keyid:69:F3:E7:C4:46:DB:A0:BF:EA:58:5D:F4:F5:1E:DD:18:CA:E7:77:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afPnxEbboL_qWF309R7dGMrnd_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0d141a-0b0f-457d-84a8-a4da86ebe754/1/IrMQj7cF9CiqVm0U--Fy5SvKKvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0d141a-0b0f-457d-84a8-a4da86ebe754/1/afPnxEbboL_qWF309R7dGMrnd_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.144.0/24
Signature Algorithm: sha256WithRSAEncryption
96:fb:80:36:90:6b:00:75:9d:bf:8a:bc:5b:47:fe:0d:27:9f:
ef:0c:54:3c:56:93:2f:c8:1e:7c:15:2f:34:ad:d6:d4:3b:9a:
01:cf:9e:82:d2:de:79:7e:a1:1a:ca:eb:61:36:b8:ef:43:2f:
51:c6:88:ba:06:4b:20:7e:b5:99:3a:0e:c3:ff:01:9b:f3:c1:
58:3a:cb:6d:aa:91:da:53:72:81:54:60:fa:c3:08:17:0f:21:
ce:cf:a0:db:e8:00:9b:74:35:ea:10:b4:da:86:5e:f1:b9:31:
2e:ad:64:ce:ee:f7:14:82:26:0a:72:4b:15:72:f6:bf:09:1b:
94:cb:bd:a8:6e:6a:bc:c5:af:6e:6b:3a:f1:37:5b:dd:57:88:
a3:81:0e:30:a4:6e:8f:ce:14:fd:bd:38:36:03:00:93:17:72:
52:28:bd:b7:9f:76:be:2c:58:fa:f9:92:1d:a2:c4:5e:b0:97:
ed:a5:cb:7e:c4:1f:48:0f:ed:29:ea:f6:8d:05:b5:89:53:6b:
ed:51:4f:2c:1d:83:5d:22:eb:6e:3a:86:ad:6b:6c:27:76:f9:
67:60:ee:b1:12:22:14:96:bd:58:99:c4:eb:6c:5b:46:22:d3:
92:3d:68:88:64:1b:b3:d2:18:12:f6:56:32:10:58:98:8a:c8:
03:fe:2f:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9CQodblWuNla7wizwcbFa6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZjNlN2M0NDZkYmEwYmZlYTU4NWRmNGY1MWVkZDE4Y2Fl
Nzc3ZmYwHhcNMjYwNzA4MTUwNDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmIzMTA4ZmI3MDVmNDI4YWE1NjZkMTRmYmUxNzJlNTJiY2EyYWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIr+KzMUNuyVE2JG+i2zkRNY+KRK
2GrDQ9/pVENN6lTWrMeIHC/jc4OAdCxYUuDtD10/rOpo60ME5rjChoNol8aTzCZ7
XClwF208A2vJzYl1ukZZHRw3ipcwC1xk9UrGSv2QjUNs3J76GPUqRIiF8baEfipu
sPTKt/1Vo145GXsxeT1C7BrVKfWm0UkjlTFtssR4tni3/oOUWRM1+wZUy70ZLaqP
MaZfSCYNDaqyHDs7tMtmONwMXimEqZ25AW+3EMaxgy0hZlMugqOAgicrgEyy7vIS
ZL/42lHRpadmdSKLhBHygVM/AX2SnTJKDmUu93sb00QS4Aiarjbcv4qKnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCKzEI+3BfQoqlZtFPvhcuUryirxMB8GA1UdIwQY
MBaAFGnz58RG26C/6lhd9PUe3RjK53f/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWZQbnhFYmJvTF9xV0YzMDlSN2RHTXJuZF84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wZDE0MWEtMGIwZi00NTdkLTg0YTgt
YTRkYTg2ZWJlNzU0LzEvSXJNUWo3Y0Y5Q2lxVm0wVS0tRnk1U3ZLS3ZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wZDE0MWEtMGIwZi00NTdkLTg0YTgtYTRkYTg2ZWJlNzU0
LzEvYWZQbnhFYmJvTF9xV0YzMDlSN2RHTXJuZF84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+2QMA0G
CSqGSIb3DQEBCwUAA4IBAQCW+4A2kGsAdZ2/irxbR/4NJ5/vDFQ8VpMvyB58FS80
rdbUO5oBz56C0t55fqEayuthNrjvQy9Rxoi6BksgfrWZOg7D/wGb88FYOsttqpHa
U3KBVGD6wwgXDyHOz6Db6ACbdDXqELTahl7xuTEurWTO7vcUgiYKcksVcva/CRuU
y72obmq8xa9uazrxN1vdV4ijgQ4wpG6PzhT9vTg2AwCTF3JSKL23n3a+LFj6+ZId
osResJftpct+xB9ID+0p6vaNBbWJU2vtUU8sHYNdIutuOoata2wndvlnYO6xEiIU
lr1YmcTrbFtGItOSPWiIZBuz0hgS9lYyEFiYisgD/i/w
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:26:29 2026 by rpki-client