Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/Jq-ed1QLe89-gO6ULPwLKZ71NmE.roa
File: Jq-ed1QLe89-gO6ULPwLKZ71NmE.roa (raw, json)
Hash identifier: 1NLRbyHK8osbUIIyQ+NGdNAbsIQXKp6uKjtiu7OYwC0=
Subject key identifier: 26:AF:9E:77:54:0B:7B:CF:7E:80:EE:94:2C:FC:0B:29:9E:F5:36:61
Certificate issuer: /CN=27dc31a9636e1c1e9a5f5190936276a679e1646a
Certificate serial: 019F236866BE37EB81227ED93DE71C3225AA
Authority key identifier: 27:DC:31:A9:63:6E:1C:1E:9A:5F:51:90:93:62:76:A6:79:E1:64:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/Jq-ed1QLe89-gO6ULPwLKZ71NmE.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197317
IP address blocks: 91.219.152.0/22 maxlen: 24
2a07:ae40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:66:be:37:eb:81:22:7e:d9:3d:e7:1c:32:25:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dc31a9636e1c1e9a5f5190936276a679e1646a
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26af9e77540b7bcf7e80ee942cfc0b299ef53661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:a6:52:7f:51:b5:03:e6:63:0d:9e:32:5b:
de:e4:19:64:18:e9:6c:0b:06:36:33:7f:d4:9b:c9:
fc:7d:9b:fc:70:48:e7:bc:74:bd:9f:45:12:92:99:
75:91:53:12:87:3f:21:fe:24:df:65:45:0f:26:ca:
54:1e:81:03:cb:96:ad:0e:87:01:d3:58:fc:ad:de:
e2:94:e0:fe:bb:05:2a:8f:c3:8f:16:93:b2:21:2b:
78:43:de:2b:b8:17:6e:f7:8f:9e:8e:c1:05:d6:85:
b0:e7:46:6e:18:1a:45:a8:12:17:85:ae:fa:ec:9b:
47:a7:3f:47:28:c8:23:46:26:81:cb:64:3e:76:1e:
b1:a1:b1:48:50:82:29:1c:3c:b2:0a:93:57:46:be:
75:4d:70:87:a8:f4:e6:74:7d:18:f4:d2:6a:af:58:
26:c8:9b:f7:0d:3d:0f:cc:57:da:d2:39:0e:56:7e:
e3:f1:ff:6e:f7:7f:d6:bf:09:79:76:38:23:0c:af:
89:d2:e1:c3:4d:d6:80:a8:b2:43:2b:d0:ec:df:83:
d3:9f:bd:6f:94:33:f3:f4:8e:44:58:46:38:6f:bd:
74:2f:37:5d:81:ba:dc:f2:3a:ae:93:c1:73:fd:ad:
62:d5:a9:af:8c:bf:c1:78:c7:2b:2e:e2:c6:fe:7e:
ca:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AF:9E:77:54:0B:7B:CF:7E:80:EE:94:2C:FC:0B:29:9E:F5:36:61
X509v3 Authority Key Identifier:
keyid:27:DC:31:A9:63:6E:1C:1E:9A:5F:51:90:93:62:76:A6:79:E1:64:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9wxqWNuHB6aX1GQk2J2pnnhZGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/Jq-ed1QLe89-gO6ULPwLKZ71NmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/J9wxqWNuHB6aX1GQk2J2pnnhZGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.152.0/22
IPv6:
2a07:ae40::/29
Signature Algorithm: sha256WithRSAEncryption
73:6e:85:b1:ab:3a:b1:54:7f:bf:83:87:8d:72:c7:9c:2d:72:
56:01:da:58:a9:36:32:35:0c:10:f9:84:3f:d0:cc:91:c5:ae:
3d:ea:4d:52:59:08:66:cc:a9:89:ec:0c:b4:3e:12:59:e2:85:
83:da:93:8a:ea:ad:79:09:be:72:19:00:19:b0:76:ed:85:5a:
07:55:7a:86:a8:cc:2e:8e:bc:82:bc:48:f3:c9:de:a5:0f:7c:
90:c5:fe:0a:20:c4:e3:5b:20:a9:bc:8b:4c:4e:5f:12:d6:d0:
f6:69:5b:af:e9:98:0f:37:b5:91:34:3e:80:f7:3a:fd:c3:db:
e9:fd:69:4e:9f:eb:1f:3d:47:69:c7:0d:12:86:d3:a3:cc:24:
01:37:1a:56:1c:14:84:55:36:27:49:c5:45:78:08:e8:2d:ce:
84:b2:0a:48:08:8b:29:77:c8:71:e8:7e:4c:58:79:8d:c1:53:
44:00:66:77:65:8b:a0:de:73:09:db:47:fd:8e:45:53:ab:38:
36:d4:73:40:40:33:dd:dc:d1:08:fd:43:65:ec:5f:b2:23:c4:
f4:de:d1:10:ea:5c:69:93:29:97:49:50:97:01:70:a2:67:f9:
e7:c5:aa:3b:42:f7:ce:49:2a:dc:98:cf:aa:3b:61:71:23:5a:
83:0e:85:20
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaGa+N+uBIn7ZPeccMiWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZGMzMWE5NjM2ZTFjMWU5YTVmNTE5MDkzNjI3NmE2Nzll
MTY0NmEwHhcNMjYwNzAyMTUxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmFmOWU3NzU0MGI3YmNmN2U4MGVlOTQyY2ZjMGIyOTllZjUzNjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7OmUn9RtQPmYw2eMlve5BlkGOls
CwY2M3/Um8n8fZv8cEjnvHS9n0USkpl1kVMShz8h/iTfZUUPJspUHoEDy5atDocB
01j8rd7ilOD+uwUqj8OPFpOyISt4Q94ruBdu94+ejsEF1oWw50ZuGBpFqBIXha76
7JtHpz9HKMgjRiaBy2Q+dh6xobFIUIIpHDyyCpNXRr51TXCHqPTmdH0Y9NJqr1gm
yJv3DT0PzFfa0jkOVn7j8f9u93/Wvwl5djgjDK+J0uHDTdaAqLJDK9Ds34PTn71v
lDPz9I5EWEY4b710Lzddgbrc8jquk8Fz/a1i1amvjL/BeMcrLuLG/n7KSwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCavnndUC3vPfoDulCz8Cyme9TZhMB8GA1UdIwQY
MBaAFCfcMaljbhweml9RkJNidqZ54WRqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjl3eHFXTnVIQjZhWDFHUWsySjJwbm5oWkdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xM2Y1ZjEtNDViNi00YmMxLWI1YTUt
NTIxZmE0MWRmYzk2LzEvSnEtZWQxUUxlODktZ082VUxQd0xLWjcxTm1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8xM2Y1ZjEtNDViNi00YmMxLWI1YTUtNTIxZmE0MWRmYzk2
LzEvSjl3eHFXTnVIQjZhWDFHUWsySjJwbm5oWkdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCW9uYMA0E
AgACMAcDBQMqB65AMA0GCSqGSIb3DQEBCwUAA4IBAQBzboWxqzqxVH+/g4eNcsec
LXJWAdpYqTYyNQwQ+YQ/0MyRxa496k1SWQhmzKmJ7Ay0PhJZ4oWD2pOK6q15Cb5y
GQAZsHbthVoHVXqGqMwujryCvEjzyd6lD3yQxf4KIMTjWyCpvItMTl8S1tD2aVuv
6ZgPN7WRND6A9zr9w9vp/WlOn+sfPUdpxw0ShtOjzCQBNxpWHBSEVTYnScVFeAjo
Lc6EsgpICIspd8hx6H5MWHmNwVNEAGZ3ZYug3nMJ20f9jkVTqzg21HNAQDPd3NEI
/UNl7F+yI8T03tEQ6lxpkymXSVCXAXCiZ/nnxao7QvfOSSrcmM+qO2FxI1qDDoUg
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:34:34 2026 by rpki-client