Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/5e7832-9d1d-413b-a109-3d59a99189a8/1/7aRjIzKVgauNWSon7RF4ecHHkYg.roa
File: 7aRjIzKVgauNWSon7RF4ecHHkYg.roa (raw, json)
Hash identifier: WTxtj/NehA+KRPYkjlagyqYnErUMawBY6gLMk6AdSMw=
Subject key identifier: ED:A4:63:23:32:95:81:AB:8D:59:2A:27:ED:11:78:79:C1:C7:91:88
Certificate issuer: /CN=f47d89d51806cb9be3d50c33ba8cddb32656cf2a
Certificate serial: 01A06C9C5766B0D2B5801EB9ECB48F813BC5
Authority key identifier: F4:7D:89:D5:18:06:CB:9B:E3:D5:0C:33:BA:8C:DD:B3:26:56:CF:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H2J1RgGy5vj1QwzuozdsyZWzyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/5e7832-9d1d-413b-a109-3d59a99189a8/1/7aRjIzKVgauNWSon7RF4ecHHkYg.roa
Signing time: Fri 04 Sep 2026 13:29:40 +0000
ROA not before: Fri 04 Sep 2026 13:29:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13092
IP address blocks: 91.187.128.0/19 maxlen: 21
91.187.128.0/20 maxlen: 21
91.187.144.0/20 maxlen: 21
185.181.68.0/22 maxlen: 22
2001:4170::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/5e7832-9d1d-413b-a109-3d59a99189a8/1/9H2J1RgGy5vj1QwzuozdsyZWzyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/5e7832-9d1d-413b-a109-3d59a99189a8/1/9H2J1RgGy5vj1QwzuozdsyZWzyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9H2J1RgGy5vj1QwzuozdsyZWzyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:9c:57:66:b0:d2:b5:80:1e:b9:ec:b4:8f:81:3b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47d89d51806cb9be3d50c33ba8cddb32656cf2a
Validity
Not Before: Sep 4 13:29:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eda46323329581ab8d592a27ed117879c1c79188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:47:a5:7c:95:57:31:56:41:c8:70:7e:a8:e6:
eb:69:34:95:9f:d5:21:3e:4c:47:ca:f8:1f:20:9a:
e0:d9:94:d8:e3:bf:b0:51:91:aa:69:9b:d6:c2:e8:
9d:af:84:36:c4:c6:9e:72:ec:d3:13:a8:8c:8d:f6:
5b:fa:c8:db:47:86:1f:0c:b4:9b:37:13:e5:bc:f2:
9f:bf:ca:20:c4:76:5a:2a:93:2b:4f:c9:29:f9:db:
cb:b2:e6:09:4d:05:75:ae:fe:a9:7a:68:5b:83:17:
2f:39:53:a6:33:5b:8a:71:df:18:04:38:5e:c1:e5:
85:77:32:c5:cd:3e:22:f9:42:6d:d5:9a:2f:8e:b7:
a6:54:bc:a6:b8:59:80:b3:29:8d:bb:39:8f:f8:18:
e6:4a:8d:73:ce:af:55:1c:33:48:91:84:3c:bf:af:
d1:4c:d0:8c:41:6e:2d:b7:5a:04:d1:a4:4c:e2:5f:
c3:5f:a5:a8:f5:d3:e2:86:46:4b:56:4c:06:63:49:
a6:96:4e:c9:c7:90:cb:2c:93:95:62:18:58:48:4c:
4f:f0:18:6c:4c:87:91:63:98:a6:21:db:e7:e7:d5:
a0:b1:85:e3:c9:58:5d:b6:29:d5:f7:a2:73:c6:5c:
c0:53:71:c7:c8:29:ee:21:c6:4b:72:ab:8b:7d:75:
b8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A4:63:23:32:95:81:AB:8D:59:2A:27:ED:11:78:79:C1:C7:91:88
X509v3 Authority Key Identifier:
keyid:F4:7D:89:D5:18:06:CB:9B:E3:D5:0C:33:BA:8C:DD:B3:26:56:CF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H2J1RgGy5vj1QwzuozdsyZWzyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5e7832-9d1d-413b-a109-3d59a99189a8/1/7aRjIzKVgauNWSon7RF4ecHHkYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5e7832-9d1d-413b-a109-3d59a99189a8/1/9H2J1RgGy5vj1QwzuozdsyZWzyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.187.128.0/19
185.181.68.0/22
IPv6:
2001:4170::/32
Signature Algorithm: sha256WithRSAEncryption
91:91:97:17:9f:b9:5b:b0:f9:bd:53:22:9f:9f:c9:00:7c:23:
f6:68:5b:9a:6b:d0:f2:01:37:36:f3:a4:45:0a:5e:31:04:80:
f5:51:01:c8:73:46:a1:d8:d9:b8:23:b8:cf:4c:75:29:e1:28:
2d:ae:d9:69:e0:ad:15:ae:fd:53:ea:7f:20:82:83:07:f6:9d:
27:56:d0:b2:79:2a:b7:62:75:02:fc:29:09:f6:47:00:9e:77:
a0:2d:f8:db:05:8f:94:bf:ce:36:68:c7:31:50:5c:14:c6:c7:
94:25:b0:3b:42:b3:d0:06:d5:60:9e:24:bb:29:91:ce:8e:93:
c9:81:f4:6f:44:6d:de:d6:f8:02:33:bf:11:9f:94:5d:13:fb:
3f:4c:21:8e:bf:5c:5c:64:95:b2:af:a4:79:2b:61:3e:69:3f:
4a:68:30:7a:c6:f2:87:54:93:44:95:0d:40:7e:6e:66:f9:eb:
1f:f4:f0:23:b7:5b:19:36:21:05:a8:76:ac:8e:5d:85:00:96:
66:fe:cc:3e:6d:75:ec:57:c6:0f:1a:b0:13:39:89:e9:f2:45:
9f:5a:c2:85:8a:40:eb:8d:b9:4d:d8:bc:57:a3:d4:eb:8d:d0:
8b:6e:cd:4a:05:77:d4:6f:ff:0e:fb:4c:3f:f4:00:6d:e1:82:
55:22:e0:dc
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAaBsnFdmsNK1gB657LSPgTvFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0N2Q4OWQ1MTgwNmNiOWJlM2Q1MGMzM2JhOGNkZGIzMjY1
NmNmMmEwHhcNMjYwOTA0MTMyOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGE0NjMyMzMyOTU4MWFiOGQ1OTJhMjdlZDExNzg3OWMxYzc5MTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkelfJVXMVZByHB+qObraTSVn9Uh
PkxHyvgfIJrg2ZTY47+wUZGqaZvWwuidr4Q2xMaecuzTE6iMjfZb+sjbR4YfDLSb
NxPlvPKfv8ogxHZaKpMrT8kp+dvLsuYJTQV1rv6pemhbgxcvOVOmM1uKcd8YBDhe
weWFdzLFzT4i+UJt1ZovjremVLymuFmAsymNuzmP+BjmSo1zzq9VHDNIkYQ8v6/R
TNCMQW4tt1oE0aRM4l/DX6Wo9dPihkZLVkwGY0mmlk7Jx5DLLJOVYhhYSExP8Bhs
TIeRY5imIdvn59WgsYXjyVhdtinV96JzxlzAU3HHyCnuIcZLcquLfXW4eQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFO2kYyMylYGrjVkqJ+0ReHnBx5GIMB8GA1UdIwQY
MBaAFPR9idUYBsub49UMM7qM3bMmVs8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUgySjFSZ0d5NXZqMVF3enVvemRzeVpXenlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni81ZTc4MzItOWQxZC00MTNiLWExMDkt
M2Q1OWE5OTE4OWE4LzEvN2FSakl6S1ZnYXVOV1NvbjdSRjRlY0hIa1lnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni81ZTc4MzItOWQxZC00MTNiLWExMDktM2Q1OWE5OTE4OWE4
LzEvOUgySjFSZ0d5NXZqMVF3enVvemRzeVpXenlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFW7uAAwQC
ubVEMA0EAgACMAcDBQAgAUFwMA0GCSqGSIb3DQEBCwUAA4IBAQCRkZcXn7lbsPm9
UyKfn8kAfCP2aFuaa9DyATc286RFCl4xBID1UQHIc0ah2Nm4I7jPTHUp4Sgtrtlp
4K0Vrv1T6n8ggoMH9p0nVtCyeSq3YnUC/CkJ9kcAnnegLfjbBY+Uv842aMcxUFwU
xseUJbA7QrPQBtVgniS7KZHOjpPJgfRvRG3e1vgCM78Rn5RdE/s/TCGOv1xcZJWy
r6R5K2E+aT9KaDB6xvKHVJNElQ1Afm5m+esf9PAjt1sZNiEFqHasjl2FAJZm/sw+
bXXsV8YPGrATOYnp8kWfWsKFikDrjblN2LxXo9TrjdCLbs1KBXfUb/8O+0w/9ABt
4YJVIuDc
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:28:34 2026 by rpki-client