Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/O9IV0RKhFtt8K6HCeqLoJ_BtvRs.roa
File: O9IV0RKhFtt8K6HCeqLoJ_BtvRs.roa (raw, json)
Hash identifier: Ws/iiURmVab3uVGnOVSnKwKNuJfPQAcJDFZkcNjz5Ks=
Subject key identifier: 3B:D2:15:D1:12:A1:16:DB:7C:2B:A1:C2:7A:A2:E8:27:F0:6D:BD:1B
Certificate issuer: /CN=5d6b05b4dde6c3939972da13f62207f226de792a
Certificate serial: 019F23687561F173791E3828031B9A775E73
Authority key identifier: 5D:6B:05:B4:DD:E6:C3:93:99:72:DA:13:F6:22:07:F2:26:DE:79:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWsFtN3mw5OZctoT9iIH8ibeeSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/O9IV0RKhFtt8K6HCeqLoJ_BtvRs.roa
Signing time: Thu 02 Jul 2026 15:17:56 +0000
ROA not before: Thu 02 Jul 2026 15:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49072
IP address blocks: 77.246.210.0/24 maxlen: 24
91.240.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWsFtN3mw5OZctoT9iIH8ibeeSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:75:61:f1:73:79:1e:38:28:03:1b:9a:77:5e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6b05b4dde6c3939972da13f62207f226de792a
Validity
Not Before: Jul 2 15:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3bd215d112a116db7c2ba1c27aa2e827f06dbd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ea:fc:5e:5e:3f:35:2a:92:eb:6c:74:09:5e:
f6:00:d5:d1:0e:dc:e9:bc:fa:4f:d6:c9:ec:d3:eb:
97:64:71:3e:cd:c1:9f:84:b6:0f:d3:ec:8f:56:d6:
97:55:a2:1e:a8:e9:75:fc:01:28:b2:80:f3:0e:29:
c2:a8:75:5e:59:6d:33:dc:ab:62:68:b6:ce:80:2e:
ec:a5:45:88:de:3f:13:e3:08:36:ce:c9:49:0a:d5:
01:2f:32:57:c5:3e:7f:e9:b4:2c:3e:4f:4b:f2:91:
56:40:ac:02:cc:a1:a8:9e:5a:02:58:6f:bb:f1:37:
4e:52:44:3c:55:0c:f9:fa:9a:40:d6:38:84:19:16:
5a:4f:c5:3b:67:ee:82:9b:78:1f:22:32:34:63:aa:
13:a1:7d:d9:c5:48:29:a3:a5:4f:36:c6:a3:1b:1a:
3a:f0:3c:70:99:ed:0a:99:30:d1:4c:85:5f:81:de:
fd:1c:96:f1:41:9f:64:a4:89:04:52:0d:0a:8b:ea:
14:2c:05:f4:5f:cd:d1:24:f0:0c:54:7c:42:38:93:
35:f9:30:cb:37:24:5d:f7:48:41:05:1a:63:3b:5f:
98:45:56:2a:44:66:4b:ec:82:e4:6c:3c:b8:e1:3b:
cb:bb:5b:b8:0e:9d:8c:40:9b:b6:da:25:29:8d:71:
96:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D2:15:D1:12:A1:16:DB:7C:2B:A1:C2:7A:A2:E8:27:F0:6D:BD:1B
X509v3 Authority Key Identifier:
keyid:5D:6B:05:B4:DD:E6:C3:93:99:72:DA:13:F6:22:07:F2:26:DE:79:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWsFtN3mw5OZctoT9iIH8ibeeSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/O9IV0RKhFtt8K6HCeqLoJ_BtvRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.210.0/24
91.240.69.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:68:00:bb:af:58:d7:13:af:60:f5:e4:19:ba:09:ad:6d:fb:
8d:27:ca:2b:ff:1d:f2:de:1d:21:0c:5c:00:51:29:16:3c:31:
da:09:98:58:eb:4c:46:22:7f:2e:27:3a:6e:7e:22:79:6f:5c:
6c:11:a1:5e:33:30:8c:63:02:9d:74:6e:0d:31:54:fe:9a:3f:
4d:2d:cd:99:a9:f2:c5:26:03:28:73:fb:a6:ef:68:c5:23:5d:
0f:8b:ec:d0:01:28:15:02:8c:bd:a1:69:7f:f1:fc:d6:5b:dd:
24:08:0c:c5:7e:6a:48:b6:76:90:23:7f:ae:5b:b9:53:c6:b8:
90:c3:60:40:89:05:8b:0f:73:4a:7e:37:4d:59:fb:50:34:52:
59:f0:74:0b:54:87:4d:1f:57:88:d1:97:34:7e:31:cb:00:fe:
13:6c:a1:57:ea:5f:5c:5f:cc:29:6d:b9:43:f6:f5:c1:a1:50:
31:4d:82:70:be:b7:b9:bd:e2:4a:89:ac:6f:79:0c:71:90:d3:
dc:c9:07:bb:b6:78:fa:83:5b:35:9a:6c:e5:ee:4e:64:b7:3c:
b0:f4:d6:11:3d:14:51:20:69:36:fe:4f:df:20:2e:ee:8b:44:
5f:57:05:69:9f:48:c7:a6:d4:b6:3b:75:8b:4a:86:a4:be:93:
32:b2:f8:55
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8jaHVh8XN5HjgoAxuad15zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNmIwNWI0ZGRlNmMzOTM5OTcyZGExM2Y2MjIwN2YyMjZk
ZTc5MmEwHhcNMjYwNzAyMTUxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmQyMTVkMTEyYTExNmRiN2MyYmExYzI3YWEyZTgyN2YwNmRiZDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1er8Xl4/NSqS62x0CV72ANXRDtzp
vPpP1sns0+uXZHE+zcGfhLYP0+yPVtaXVaIeqOl1/AEosoDzDinCqHVeWW0z3Kti
aLbOgC7spUWI3j8T4wg2zslJCtUBLzJXxT5/6bQsPk9L8pFWQKwCzKGonloCWG+7
8TdOUkQ8VQz5+ppA1jiEGRZaT8U7Z+6Cm3gfIjI0Y6oToX3ZxUgpo6VPNsajGxo6
8Dxwme0KmTDRTIVfgd79HJbxQZ9kpIkEUg0Ki+oULAX0X83RJPAMVHxCOJM1+TDL
NyRd90hBBRpjO1+YRVYqRGZL7ILkbDy44TvLu1u4Dp2MQJu22iUpjXGWRQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDvSFdESoRbbfCuhwnqi6Cfwbb0bMB8GA1UdIwQY
MBaAFF1rBbTd5sOTmXLaE/YiB/Im3nkqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFdzRnROM213NU9aY3RvVDlpSUg4aWJlZVNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NTQ0NjUtZWRjZC00NjM2LTg1NWYt
YjlkY2NhYjZkZjJlLzEvTzlJVjBSS2hGdHQ4SzZIQ2VxTG9KX0J0dlJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85NTQ0NjUtZWRjZC00NjM2LTg1NWYtYjlkY2NhYjZkZjJl
LzEvWFdzRnROM213NU9aY3RvVDlpSUg4aWJlZVNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATfbSAwQA
W/BFMA0GCSqGSIb3DQEBCwUAA4IBAQClaAC7r1jXE69g9eQZugmtbfuNJ8or/x3y
3h0hDFwAUSkWPDHaCZhY60xGIn8uJzpufiJ5b1xsEaFeMzCMYwKddG4NMVT+mj9N
Lc2ZqfLFJgMoc/um72jFI10Pi+zQASgVAoy9oWl/8fzWW90kCAzFfmpItnaQI3+u
W7lTxriQw2BAiQWLD3NKfjdNWftQNFJZ8HQLVIdNH1eI0Zc0fjHLAP4TbKFX6l9c
X8wpbblD9vXBoVAxTYJwvre5veJKiaxveQxxkNPcyQe7tnj6g1s1mmzl7k5ktzyw
9NYRPRRRIGk2/k/fIC7ui0RfVwVpn0jHptS2O3WLSoakvpMysvhV
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:20:22 2026 by rpki-client