Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/Dsjm5lEJ-mNO_tD0Cpd2DuOIRbQ.roa
File: Dsjm5lEJ-mNO_tD0Cpd2DuOIRbQ.roa (raw, json)
Hash identifier: Bmyti0ynns0DSd3t3OVqpc7WopgOOQGAXnl/+74Jywk=
Subject key identifier: 0E:C8:E6:E6:51:09:FA:63:4E:FE:D0:F4:0A:97:76:0E:E3:88:45:B4
Certificate issuer: /CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
Certificate serial: 019DE2DAE3B19EEFEE095022D0A6480AD841
Authority key identifier: C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/Dsjm5lEJ-mNO_tD0Cpd2DuOIRbQ.roa
Signing time: Fri 01 May 2026 09:24:49 +0000
ROA not before: Fri 01 May 2026 09:24:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 91.198.151.0/24 maxlen: 24
91.236.83.0/24 maxlen: 24
131.150.144.0/20 maxlen: 20
194.0.250.0/24 maxlen: 24
194.30.188.0/24 maxlen: 24
217.102.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e2:da:e3:b1:9e:ef:ee:09:50:22:d0:a6:48:0a:d8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
Validity
Not Before: May 1 09:24:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ec8e6e65109fa634efed0f40a97760ee38845b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ce:97:e8:44:ec:03:2a:ec:09:68:7f:3a:93:
e9:ae:14:d3:fc:e0:05:a7:3e:a9:87:93:cd:00:de:
d9:3d:18:df:3b:03:13:85:40:57:ef:f4:3f:58:cc:
52:93:7f:a9:82:25:0a:f5:b7:f7:4d:73:80:d4:5c:
a8:3c:30:d7:3c:da:3b:b5:6a:21:b6:3c:5d:ef:68:
76:88:f8:b4:d7:28:37:e2:cd:e0:2c:e1:fe:06:a7:
37:59:3c:78:1d:41:76:8b:7b:7b:7c:7f:b7:4a:87:
28:e1:24:1a:2a:39:ac:5c:81:43:dc:b6:bd:6c:1b:
c3:2c:d3:b7:e0:69:db:c8:fb:97:8e:36:1d:a4:22:
dd:2e:3f:79:2f:cb:4d:0e:e6:e9:f8:4a:b3:a1:1f:
fd:e5:98:26:6d:11:e6:eb:da:e5:6b:09:40:e0:3f:
7b:35:f1:e1:6b:f7:16:91:01:28:e9:6e:19:01:b9:
38:d5:c5:53:2f:93:8a:a7:0d:0b:f2:ba:c6:40:a3:
6f:84:cb:d1:20:34:77:12:e9:13:ea:11:20:ce:38:
4e:0c:a3:0c:09:0f:0f:26:5f:df:f3:be:f8:db:07:
29:f5:d6:e5:c2:d3:7d:35:70:70:95:e6:a4:58:57:
b3:f9:60:8b:e6:64:f6:0c:b7:67:ac:1c:ee:10:06:
c4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C8:E6:E6:51:09:FA:63:4E:FE:D0:F4:0A:97:76:0E:E3:88:45:B4
X509v3 Authority Key Identifier:
keyid:C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/Dsjm5lEJ-mNO_tD0Cpd2DuOIRbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.151.0/24
91.236.83.0/24
131.150.144.0/20
194.0.250.0/24
194.30.188.0/24
217.102.232.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:49:e4:cc:80:aa:43:aa:91:92:ee:55:0d:0c:97:96:d6:df:
3e:0e:e7:75:a0:de:8b:87:e2:39:e8:ee:45:df:91:53:fd:ab:
23:89:f4:c1:8b:fa:22:54:d1:39:9f:2f:ad:53:f3:0c:81:2c:
f3:38:f3:bd:7c:01:dd:d6:7b:2a:53:7e:c8:7f:4c:b1:48:ea:
fe:d4:83:7a:f2:28:35:51:72:5f:02:ca:af:f5:42:b8:ca:99:
74:47:0d:67:6e:bb:e1:f5:e9:b1:b2:32:90:36:fc:a0:d3:fe:
fc:cd:7f:a0:40:77:ca:97:b2:22:06:a2:64:79:83:af:2c:6b:
b0:ac:82:a9:04:a1:23:a9:88:ec:c6:4c:19:2f:c8:5f:e5:a9:
e3:b0:90:88:cc:f8:36:07:5b:ce:dd:9a:92:bf:02:b4:34:ef:
31:78:d8:93:54:81:3b:74:92:df:08:07:97:95:cb:80:f4:99:
71:40:db:75:c7:a9:bc:9b:8f:f5:fa:03:67:72:23:ca:65:52:
f1:e5:2f:87:b1:ba:d1:76:48:36:b2:8c:79:89:dc:d7:07:8a:
49:08:79:3d:dc:b9:c2:dd:9e:db:94:0e:41:40:05:0f:9c:2c:
02:97:73:1e:6a:b1:8b:6f:83:ad:40:45:b9:cd:09:34:05:35:
0a:7a:78:81
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ3i2uOxnu/uCVAi0KZICthBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxOWY3NWIyNTkzY2EyYjFiMGE1ZmQwYzU0MDE1ZGUzMDZj
NDdlZTYwHhcNMjYwNTAxMDkyNDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWM4ZTZlNjUxMDlmYTYzNGVmZWQwZjQwYTk3NzYwZWUzODg0NWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx86X6ETsAyrsCWh/OpPprhTT/OAF
pz6ph5PNAN7ZPRjfOwMThUBX7/Q/WMxSk3+pgiUK9bf3TXOA1FyoPDDXPNo7tWoh
tjxd72h2iPi01yg34s3gLOH+Bqc3WTx4HUF2i3t7fH+3Soco4SQaKjmsXIFD3La9
bBvDLNO34GnbyPuXjjYdpCLdLj95L8tNDubp+EqzoR/95ZgmbRHm69rlawlA4D97
NfHha/cWkQEo6W4ZAbk41cVTL5OKpw0L8rrGQKNvhMvRIDR3EukT6hEgzjhODKMM
CQ8PJl/f87742wcp9dblwtN9NXBwleakWFez+WCL5mT2DLdnrBzuEAbEOQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFA7I5uZRCfpjTv7Q9AqXdg7jiEW0MB8GA1UdIwQY
MBaAFMGfdbJZPKKxsKX9DFQBXeMGxH7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1o5MXNsazhvckd3cGYwTVZBRmQ0d2JFZnVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zN2E4ZDItMzQ2Ni00NjE2LWJjMWMt
MDEyNDBiY2ZkYjQyLzEvRHNqbTVsRUotbU5PX3REMENwZDJEdU9JUmJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zN2E4ZDItMzQ2Ni00NjE2LWJjMWMtMDEyNDBiY2ZkYjQy
LzEvd1o5MXNsazhvckd3cGYwTVZBRmQ0d2JFZnVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAW8aXAwQA
W+xTAwQEg5aQAwQAwgD6AwQAwh68AwQD2WboMA0GCSqGSIb3DQEBCwUAA4IBAQB6
SeTMgKpDqpGS7lUNDJeW1t8+Dud1oN6Lh+I56O5F35FT/asjifTBi/oiVNE5ny+t
U/MMgSzzOPO9fAHd1nsqU37If0yxSOr+1IN68ig1UXJfAsqv9UK4ypl0Rw1nbrvh
9emxsjKQNvyg0/78zX+gQHfKl7IiBqJkeYOvLGuwrIKpBKEjqYjsxkwZL8hf5anj
sJCIzPg2B1vO3ZqSvwK0NO8xeNiTVIE7dJLfCAeXlcuA9JlxQNt1x6m8m4/1+gNn
ciPKZVLx5S+HsbrRdkg2sox5idzXB4pJCHk93LnC3Z7blA5BQAUPnCwCl3MearGL
b4OtQEW5zQk0BTUKeniB
-----END CERTIFICATE-----
Generated at Tue May 12 21:38:48 2026 by rpki-client