Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/Fawcb1IxJquAZPtTlzDk_vwHeCI.roa
File: Fawcb1IxJquAZPtTlzDk_vwHeCI.roa (raw, json)
Hash identifier: JjJGt8YKzbSL8z5ea5gzym8KwdJyWNdyFergh2v/TU0=
Subject key identifier: 15:AC:1C:6F:52:31:26:AB:80:64:FB:53:97:30:E4:FE:FC:07:78:22
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019D0A38715E17BBCB23010F34C4D612E58C
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/Fawcb1IxJquAZPtTlzDk_vwHeCI.roa
Signing time: Fri 20 Mar 2026 07:49:24 +0000
ROA not before: Fri 20 Mar 2026 07:49:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 91.190.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:38:71:5e:17:bb:cb:23:01:0f:34:c4:d6:12:e5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Mar 20 07:49:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15ac1c6f523126ab8064fb539730e4fefc077822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a8:cf:1a:bd:22:53:1c:6b:e9:2a:dd:0b:f3:
7e:dc:34:ab:18:c0:ec:cb:7c:19:9f:cc:8b:58:da:
32:a2:96:c2:0c:f7:31:47:40:69:4a:46:4f:38:dc:
e0:68:ad:90:64:da:80:08:3d:77:0d:61:19:fc:82:
23:54:ef:d1:5f:6e:f7:25:eb:f0:7a:4f:d0:1e:09:
5c:c3:65:f2:a0:5b:95:37:c6:3e:2f:cc:2e:f8:d4:
01:29:19:2b:c7:48:9e:b6:99:5d:d4:97:35:83:08:
16:11:9e:93:79:74:7a:68:cc:60:1b:24:78:1c:65:
6b:85:c8:fc:68:ec:57:e5:6a:c0:0a:aa:a3:5e:b9:
0e:d5:5d:45:55:f6:e0:66:ba:a6:9b:9e:f9:e2:89:
7d:1d:f2:e3:25:78:35:4d:20:fe:69:ad:2f:1c:e1:
d0:ee:39:52:c7:b4:b5:ef:89:e3:b6:a6:37:a0:22:
ca:f6:2c:64:e0:93:5f:18:e1:f4:1d:99:bb:5a:bc:
21:51:30:4e:4b:d4:98:e4:74:ed:7e:b6:1a:ee:2b:
bf:a9:bf:d7:10:89:9c:61:10:d6:34:64:27:63:3c:
09:b9:cc:e5:72:f0:e4:86:d2:02:80:7a:e0:8d:93:
71:29:71:db:08:22:44:78:60:8f:33:9e:41:4c:38:
f5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AC:1C:6F:52:31:26:AB:80:64:FB:53:97:30:E4:FE:FC:07:78:22
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/Fawcb1IxJquAZPtTlzDk_vwHeCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.184.0/24
Signature Algorithm: sha256WithRSAEncryption
47:4d:f0:9e:66:35:f1:d2:b3:bc:5f:21:bc:63:a6:3b:c2:4e:
2b:2b:1b:1d:9d:be:1e:f0:ca:87:48:19:5c:fd:cd:65:b2:a7:
8b:93:13:92:36:73:33:4a:86:c0:41:6a:9e:e3:ac:f2:50:a5:
84:c2:bd:a0:20:ad:b1:59:3b:14:51:86:62:98:96:31:49:f6:
93:a3:4a:a2:15:d2:79:a2:06:16:f4:eb:91:5f:4e:42:20:55:
16:1b:a0:d2:cc:e1:9c:aa:b3:ef:da:5d:65:4f:9d:d5:b9:eb:
78:ca:5b:88:d1:17:23:a4:ea:19:f1:1d:1d:54:7a:ac:cd:ad:
84:83:d1:82:87:c1:bc:4a:3e:7d:c4:5d:2d:95:82:05:f1:ef:
96:70:71:66:4f:da:90:19:77:a4:43:3c:93:bd:6a:62:da:94:
36:a0:a4:7e:3c:ab:b6:5b:ea:98:67:d4:45:4a:d5:d8:28:d8:
14:54:4e:41:5e:eb:94:a1:70:03:1a:d2:bc:67:c5:ed:ea:eb:
40:f8:cd:6d:e1:1a:2b:ee:cf:d5:fb:a0:2b:4f:8d:3a:8e:65:
87:b5:80:74:df:25:13:43:2c:7e:50:9d:7d:86:a6:7b:f8:9b:
d0:65:d7:f5:58:56:2f:01:e2:77:11:43:b8:1f:1e:51:4e:d6:
b2:c4:94:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0KOHFeF7vLIwEPNMTWEuWMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw
YzZmYzMwHhcNMjYwMzIwMDc0OTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWFjMWM2ZjUyMzEyNmFiODA2NGZiNTM5NzMwZTRmZWZjMDc3ODIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtajPGr0iUxxr6SrdC/N+3DSrGMDs
y3wZn8yLWNoyopbCDPcxR0BpSkZPONzgaK2QZNqACD13DWEZ/IIjVO/RX273Jevw
ek/QHglcw2XyoFuVN8Y+L8wu+NQBKRkrx0ietpld1Jc1gwgWEZ6TeXR6aMxgGyR4
HGVrhcj8aOxX5WrACqqjXrkO1V1FVfbgZrqmm5754ol9HfLjJXg1TSD+aa0vHOHQ
7jlSx7S174njtqY3oCLK9ixk4JNfGOH0HZm7WrwhUTBOS9SY5HTtfrYa7iu/qb/X
EImcYRDWNGQnYzwJuczlcvDkhtICgHrgjZNxKXHbCCJEeGCPM55BTDj1aQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBWsHG9SMSargGT7U5cw5P78B3giMB8GA1UdIwQY
MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt
ZjFjMzNhYTJmZDUwLzEvRmF3Y2IxSXhKcXVBWlB0VGx6RGtfdndIZUNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw
LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW764MA0G
CSqGSIb3DQEBCwUAA4IBAQBHTfCeZjXx0rO8XyG8Y6Y7wk4rKxsdnb4e8MqHSBlc
/c1lsqeLkxOSNnMzSobAQWqe46zyUKWEwr2gIK2xWTsUUYZimJYxSfaTo0qiFdJ5
ogYW9OuRX05CIFUWG6DSzOGcqrPv2l1lT53Vuet4yluI0RcjpOoZ8R0dVHqsza2E
g9GCh8G8Sj59xF0tlYIF8e+WcHFmT9qQGXekQzyTvWpi2pQ2oKR+PKu2W+qYZ9RF
StXYKNgUVE5BXuuUoXADGtK8Z8Xt6utA+M1t4Ror7s/V+6ArT406jmWHtYB03yUT
Qyx+UJ19hqZ7+JvQZdf1WFYvAeJ3EUO4Hx5RTtayxJRg
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:14:15 2026 by rpki-client