Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/uI4k-ds_-VqK2Tyh56YH5n18sDk.roa
File: uI4k-ds_-VqK2Tyh56YH5n18sDk.roa (raw, json)
Hash identifier: Jxct2Z1k92mWyMrxwCRsENcmjHDLHsJ6xkZO4BM9/LY=
Subject key identifier: B8:8E:24:F9:DB:3F:F9:5A:8A:D9:3C:A1:E7:A6:07:E6:7D:7C:B0:39
Certificate issuer: /CN=bd73232047e9f9701d81f711bc73d5da7bfa1352
Certificate serial: 019F23691A8DD9D1F3B5BB9E845623326571
Authority key identifier: BD:73:23:20:47:E9:F9:70:1D:81:F7:11:BC:73:D5:DA:7B:FA:13:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXMjIEfp-XAdgfcRvHPV2nv6E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/uI4k-ds_-VqK2Tyh56YH5n18sDk.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52153
IP address blocks: 91.222.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXMjIEfp-XAdgfcRvHPV2nv6E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1a:8d:d9:d1:f3:b5:bb:9e:84:56:23:32:65:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd73232047e9f9701d81f711bc73d5da7bfa1352
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b88e24f9db3ff95a8ad93ca1e7a607e67d7cb039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:75:0f:19:3b:d1:db:8e:8c:62:1c:fe:87:d9:
43:fe:cf:a8:dc:8d:a2:be:8a:b8:71:aa:6c:57:6f:
15:0e:36:05:23:67:2c:55:01:84:91:d4:47:34:96:
32:a6:43:d0:58:73:e0:04:6c:50:03:d2:4e:36:6d:
d0:57:f5:24:df:67:10:2f:24:56:9f:d7:dd:36:70:
f3:3f:95:44:7a:b6:ab:2a:db:0c:67:26:3f:05:2e:
1d:fc:08:68:e9:5b:0e:82:8d:18:35:95:23:a4:67:
0b:7a:03:90:1c:6c:cd:7f:fc:b8:9d:fe:67:7a:50:
4b:3d:f1:d0:28:22:99:75:f8:87:ad:7d:61:ad:df:
b4:f8:ce:d6:d6:51:61:53:70:c8:e8:cd:88:e7:2f:
11:dd:52:b9:e1:68:97:a4:e4:20:ec:03:8d:c1:75:
1f:af:af:22:cf:6b:07:24:d8:b9:0c:95:93:f5:f3:
99:50:21:83:f7:01:5f:23:ee:02:3d:b2:52:9b:8f:
b3:b6:35:10:ad:a5:3d:d7:7c:fd:10:11:cd:03:96:
16:47:4f:b6:14:a1:2f:11:fc:4b:02:c4:74:e0:77:
17:52:b2:eb:d9:a7:04:d1:ed:66:82:fa:38:ec:78:
1c:84:a5:95:28:62:6d:c7:bf:fd:b2:33:fb:3c:06:
6e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8E:24:F9:DB:3F:F9:5A:8A:D9:3C:A1:E7:A6:07:E6:7D:7C:B0:39
X509v3 Authority Key Identifier:
keyid:BD:73:23:20:47:E9:F9:70:1D:81:F7:11:BC:73:D5:DA:7B:FA:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXMjIEfp-XAdgfcRvHPV2nv6E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/uI4k-ds_-VqK2Tyh56YH5n18sDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.192.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:69:18:78:a1:30:e3:04:95:a4:4b:6c:64:62:bf:cf:b7:5f:
43:06:ab:c9:4a:2b:f3:b2:72:d0:96:0d:07:a1:d4:cf:ed:06:
7d:ac:89:c4:0c:ef:98:35:7c:76:41:49:1c:99:44:b4:91:6f:
76:70:ea:16:33:3c:4e:66:61:b0:52:28:c0:f6:b6:a9:c5:af:
19:e9:79:3d:ba:30:16:1e:21:c9:3e:27:05:74:5c:82:51:c6:
0d:25:af:31:74:81:7a:a2:e9:04:ba:af:e9:1b:ab:28:22:41:
76:57:a3:b9:a1:83:41:7c:ba:d4:9b:4e:51:e6:07:be:cd:2d:
8e:a3:ca:ad:17:25:1b:cc:93:90:d0:83:33:6d:23:c3:39:c6:
35:ff:0d:d5:11:84:5d:ca:6d:f8:36:0c:96:d1:7f:b5:fb:4c:
a5:06:c5:f9:ab:19:89:3d:a0:d5:5a:38:4e:ef:47:bc:e5:56:
9e:6e:31:cc:f5:28:fb:06:e8:5f:06:e8:ee:21:54:e7:45:82:
5d:fb:77:a5:4b:27:c1:58:e3:9a:f1:a2:19:12:17:b8:33:29:
d7:4e:8e:9a:fe:63:e1:17:40:48:b6:0f:aa:90:52:ce:00:1f:
d2:c4:51:f3:70:73:15:61:ad:da:d6:ed:9e:d4:fc:c4:01:7d:
6f:25:e1:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaRqN2dHztbuehFYjMmVxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNzMyMzIwNDdlOWY5NzAxZDgxZjcxMWJjNzNkNWRhN2Jm
YTEzNTIwHhcNMjYwNzAyMTUxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODhlMjRmOWRiM2ZmOTVhOGFkOTNjYTFlN2E2MDdlNjdkN2NiMDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXUPGTvR246MYhz+h9lD/s+o3I2i
voq4capsV28VDjYFI2csVQGEkdRHNJYypkPQWHPgBGxQA9JONm3QV/Uk32cQLyRW
n9fdNnDzP5VEerarKtsMZyY/BS4d/Aho6VsOgo0YNZUjpGcLegOQHGzNf/y4nf5n
elBLPfHQKCKZdfiHrX1hrd+0+M7W1lFhU3DI6M2I5y8R3VK54WiXpOQg7AONwXUf
r68iz2sHJNi5DJWT9fOZUCGD9wFfI+4CPbJSm4+ztjUQraU913z9EBHNA5YWR0+2
FKEvEfxLAsR04HcXUrLr2acE0e1mgvo47HgchKWVKGJtx7/9sjP7PAZuKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLiOJPnbP/laitk8oeemB+Z9fLA5MB8GA1UdIwQY
MBaAFL1zIyBH6flwHYH3Ebxz1dp7+hNSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlhNaklFZnAtWEFkZ2ZjUnZIUFYybnY2RTFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zZjIzNTUtNjZmZi00MGI3LTk4ZDYt
ZDk1YTM4ZjBjMDZlLzEvdUk0ay1kc18tVnFLMlR5aDU2WUg1bjE4c0RrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zZjIzNTUtNjZmZi00MGI3LTk4ZDYtZDk1YTM4ZjBjMDZl
LzEvdlhNaklFZnAtWEFkZ2ZjUnZIUFYybnY2RTFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW97AMA0G
CSqGSIb3DQEBCwUAA4IBAQAfaRh4oTDjBJWkS2xkYr/Pt19DBqvJSivzsnLQlg0H
odTP7QZ9rInEDO+YNXx2QUkcmUS0kW92cOoWMzxOZmGwUijA9rapxa8Z6Xk9ujAW
HiHJPicFdFyCUcYNJa8xdIF6oukEuq/pG6soIkF2V6O5oYNBfLrUm05R5ge+zS2O
o8qtFyUbzJOQ0IMzbSPDOcY1/w3VEYRdym34NgyW0X+1+0ylBsX5qxmJPaDVWjhO
70e85VaebjHM9Sj7BuhfBujuIVTnRYJd+3elSyfBWOOa8aIZEhe4MynXTo6a/mPh
F0BItg+qkFLOAB/SxFHzcHMVYa3a1u2e1PzEAX1vJeF/
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:38:31 2026 by rpki-client