Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/Duf4IwvgDCMXzmpK_bHxB8PVbhI.roa
File: Duf4IwvgDCMXzmpK_bHxB8PVbhI.roa (raw, json)
Hash identifier: pRzYtPrxHUpphqlfa9Qt6Kb6BBtXf+wNplcVS3AuIH4=
Subject key identifier: 0E:E7:F8:23:0B:E0:0C:23:17:CE:6A:4A:FD:B1:F1:07:C3:D5:6E:12
Certificate issuer: /CN=9cfccef8d2c16c20ae5b8da4314277fecaadd3d7
Certificate serial: 019F23687C6E4CCBE7DBBEB754ED904ED8A0
Authority key identifier: 9C:FC:CE:F8:D2:C1:6C:20:AE:5B:8D:A4:31:42:77:FE:CA:AD:D3:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPzO-NLBbCCuW42kMUJ3_sqt09c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/Duf4IwvgDCMXzmpK_bHxB8PVbhI.roa
Signing time: Thu 02 Jul 2026 15:17:57 +0000
ROA not before: Thu 02 Jul 2026 15:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39793
IP address blocks: 91.229.185.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/nPzO-NLBbCCuW42kMUJ3_sqt09c.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/nPzO-NLBbCCuW42kMUJ3_sqt09c.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPzO-NLBbCCuW42kMUJ3_sqt09c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7c:6e:4c:cb:e7:db:be:b7:54:ed:90:4e:d8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cfccef8d2c16c20ae5b8da4314277fecaadd3d7
Validity
Not Before: Jul 2 15:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ee7f8230be00c2317ce6a4afdb1f107c3d56e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ce:00:79:db:93:fd:91:8b:84:74:58:5d:3c:
f7:52:2a:91:a0:3c:27:d1:20:86:be:57:84:7c:f1:
76:24:32:af:65:8e:f0:fb:62:25:da:23:16:82:f7:
82:87:24:6a:26:45:aa:e5:63:77:d7:64:ad:48:e3:
d7:d7:b5:79:64:b5:ad:b2:be:ad:11:45:21:cd:40:
28:9d:2b:6c:32:1f:bf:e8:cf:c1:84:7e:e6:f7:3c:
b3:05:0f:24:f9:e9:ae:3c:45:de:a2:e5:05:31:7f:
39:36:ff:0b:1c:4b:04:6a:f8:54:6b:3d:e2:d3:7c:
13:09:0e:d1:45:71:5a:b9:89:90:c0:92:10:15:7c:
d2:7d:e4:c2:68:d1:b3:5e:f5:e1:bd:41:78:dc:a9:
cb:2e:e9:75:dc:22:38:6e:de:40:05:51:67:9c:ee:
27:b8:07:58:7d:b8:2a:4e:36:2c:b6:7b:47:c9:e0:
e5:e9:72:22:ae:0e:fa:14:07:12:d8:69:b3:6f:52:
95:2b:d3:f3:8f:15:b4:e7:92:e1:ee:97:3e:cf:b3:
ac:40:f2:5c:fd:1c:ac:b4:8f:d7:65:9d:e8:1e:6f:
ee:80:3d:c9:39:70:3b:68:da:c5:13:cf:ff:dd:e8:
3a:0f:6a:d3:77:80:22:40:d6:74:c1:43:78:15:9a:
a7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E7:F8:23:0B:E0:0C:23:17:CE:6A:4A:FD:B1:F1:07:C3:D5:6E:12
X509v3 Authority Key Identifier:
keyid:9C:FC:CE:F8:D2:C1:6C:20:AE:5B:8D:A4:31:42:77:FE:CA:AD:D3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPzO-NLBbCCuW42kMUJ3_sqt09c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/Duf4IwvgDCMXzmpK_bHxB8PVbhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/nPzO-NLBbCCuW42kMUJ3_sqt09c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.185.0/24
Signature Algorithm: sha256WithRSAEncryption
36:6f:da:db:79:3c:85:1c:e7:29:3b:b5:43:d3:63:dd:bd:47:
bc:be:cb:42:c9:e1:f6:62:d7:b9:ed:ff:7e:27:6f:9c:a3:95:
3b:43:e9:3e:de:dc:96:19:6b:ca:59:b8:a2:7a:57:ce:1d:3a:
a4:1c:60:53:c4:bc:eb:81:60:48:9b:94:be:a8:1e:55:4f:27:
79:d0:44:0c:d9:9d:58:9d:1a:80:31:a9:26:0b:9f:30:e1:c7:
76:df:0a:85:be:28:cf:14:e3:56:b6:78:e3:c6:b7:5f:c6:f4:
d5:1f:bd:e7:e4:c6:ab:71:63:49:c3:fc:0e:d2:28:e1:61:c7:
9b:5f:fd:04:44:1c:dd:e5:b2:63:b9:9f:56:d9:fb:97:14:87:
6e:7e:83:bc:e9:b5:80:93:d4:4a:b5:aa:cc:06:13:66:43:05:
93:26:2f:80:42:45:ee:a6:52:d6:04:f0:ff:e4:7f:24:05:42:
71:11:9a:bf:d4:03:f8:98:04:9f:96:f3:6b:a7:f2:4f:3f:72:
3a:b6:6f:7d:64:3d:1c:95:fd:e1:7c:21:15:a1:21:7c:4d:a3:
06:50:da:10:5c:a6:38:15:06:d3:ec:df:6a:d0:85:27:b2:91:
7d:cd:a0:39:dd:19:e3:8c:a4:4e:eb:35:b8:b7:bc:50:a9:ce:
d5:40:e1:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaHxuTMvn2763VO2QTtigMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZmNjZWY4ZDJjMTZjMjBhZTViOGRhNDMxNDI3N2ZlY2Fh
ZGQzZDcwHhcNMjYwNzAyMTUxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWU3ZjgyMzBiZTAwYzIzMTdjZTZhNGFmZGIxZjEwN2MzZDU2ZTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM4AeduT/ZGLhHRYXTz3UiqRoDwn
0SCGvleEfPF2JDKvZY7w+2Il2iMWgveChyRqJkWq5WN312StSOPX17V5ZLWtsr6t
EUUhzUAonStsMh+/6M/BhH7m9zyzBQ8k+emuPEXeouUFMX85Nv8LHEsEavhUaz3i
03wTCQ7RRXFauYmQwJIQFXzSfeTCaNGzXvXhvUF43KnLLul13CI4bt5ABVFnnO4n
uAdYfbgqTjYstntHyeDl6XIirg76FAcS2Gmzb1KVK9PzjxW055Lh7pc+z7OsQPJc
/RystI/XZZ3oHm/ugD3JOXA7aNrFE8//3eg6D2rTd4AiQNZ0wUN4FZqnhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA7n+CML4AwjF85qSv2x8QfD1W4SMB8GA1UdIwQY
MBaAFJz8zvjSwWwgrluNpDFCd/7KrdPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblB6Ty1OTEJiQ0N1VzQya01VSjNfc3F0MDljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mMDc2N2MtYjAxOS00NjNjLWEwYjEt
OGQ0YmZkMGFhY2U4LzEvRHVmNEl3dmdEQ01Yem1wS19iSHhCOFBWYmhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9mMDc2N2MtYjAxOS00NjNjLWEwYjEtOGQ0YmZkMGFhY2U4
LzEvblB6Ty1OTEJiQ0N1VzQya01VSjNfc3F0MDljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+W5MA0G
CSqGSIb3DQEBCwUAA4IBAQA2b9rbeTyFHOcpO7VD02PdvUe8vstCyeH2Yte57f9+
J2+co5U7Q+k+3tyWGWvKWbiielfOHTqkHGBTxLzrgWBIm5S+qB5VTyd50EQM2Z1Y
nRqAMakmC58w4cd23wqFvijPFONWtnjjxrdfxvTVH73n5MarcWNJw/wO0ijhYceb
X/0ERBzd5bJjuZ9W2fuXFIdufoO86bWAk9RKtarMBhNmQwWTJi+AQkXuplLWBPD/
5H8kBUJxEZq/1AP4mASflvNrp/JPP3I6tm99ZD0clf3hfCEVoSF8TaMGUNoQXKY4
FQbT7N9q0IUnspF9zaA53RnjjKRO6zW4t7xQqc7VQOE0
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:04:57 2026 by rpki-client