Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/JAxnFs2GIkjxS_4clYKu3zhr_9I.roa
File: JAxnFs2GIkjxS_4clYKu3zhr_9I.roa (raw, json)
Hash identifier: vQBrdhLTznptKumMW9F/udGw5r/yM5Rk5yVyQpu0W8g=
Subject key identifier: 24:0C:67:16:CD:86:22:48:F1:4B:FE:1C:95:82:AE:DF:38:6B:FF:D2
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 019DD4D2F813EA0C7D4BDCF4065A17A494F6
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/JAxnFs2GIkjxS_4clYKu3zhr_9I.roa
Signing time: Tue 28 Apr 2026 16:01:28 +0000
ROA not before: Tue 28 Apr 2026 16:01:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48810
IP address blocks: 91.238.37.0/24 maxlen: 24
193.105.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:d2:f8:13:ea:0c:7d:4b:dc:f4:06:5a:17:a4:94:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: Apr 28 16:01:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=240c6716cd862248f14bfe1c9582aedf386bffd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5d:a0:4c:63:7f:cb:e4:e2:c0:b1:d6:ef:0e:
17:3c:4f:46:a6:68:aa:14:63:64:99:7b:7a:dd:fa:
a6:2b:25:eb:cd:1f:f6:86:74:9d:17:5b:a0:cc:a6:
d6:a2:60:e5:d5:3f:55:86:5c:ae:55:a8:9d:61:3b:
69:1c:63:c3:e6:fe:b0:06:5a:c1:e4:72:14:18:45:
96:e2:cb:bd:1d:05:12:a7:33:b6:61:eb:89:ac:50:
6d:e2:ee:8d:65:a2:01:95:66:90:5d:22:4d:9b:07:
ae:a8:09:fc:01:bd:50:6f:c2:f6:01:b3:da:ab:47:
18:76:71:a8:48:c0:c8:17:3a:41:e4:bb:a5:47:82:
cf:c6:bd:54:f4:be:50:6b:fe:44:10:3e:95:fc:47:
d3:94:2b:3c:a1:94:5a:d7:49:ed:e1:62:65:3a:5d:
04:bf:b8:00:8b:4f:7e:a2:dc:3b:f0:19:e2:81:00:
ca:ee:a7:fb:bb:69:89:f9:21:92:c2:c4:ac:33:ef:
30:b7:36:58:97:b4:97:96:36:9d:26:fe:d0:e4:ea:
22:5f:6f:41:f8:28:79:7f:e5:56:41:04:7a:3b:2f:
7e:77:1a:d4:74:f6:77:7c:95:42:57:9a:e1:bc:08:
7f:b6:53:d7:9a:d2:04:a2:c9:fd:f8:f8:a9:4e:3a:
98:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0C:67:16:CD:86:22:48:F1:4B:FE:1C:95:82:AE:DF:38:6B:FF:D2
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/JAxnFs2GIkjxS_4clYKu3zhr_9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.37.0/24
193.105.91.0/24
Signature Algorithm: sha256WithRSAEncryption
57:62:02:b2:7c:81:45:9a:c8:dd:77:e2:3a:15:60:8e:7b:d2:
d2:0a:bc:bc:fd:98:ee:d1:18:5d:29:4b:5e:ef:a0:ab:e9:f1:
d7:e0:c0:d0:b1:d4:14:fe:68:20:17:68:03:8f:a0:b8:bf:6b:
50:ba:e3:59:02:bf:33:ab:af:3a:a8:b3:86:7d:37:70:31:ec:
e0:7a:42:f6:87:bf:0f:95:54:02:b5:fc:40:89:b1:6b:6e:f2:
93:b6:92:d0:a9:c7:17:14:5c:6a:00:76:96:0a:ef:8f:5b:63:
73:bb:03:ea:b0:45:e1:c3:f5:fd:e9:65:cd:22:9f:9d:1b:6d:
8e:33:22:94:6a:08:69:6e:3b:36:4d:4e:97:c4:ec:10:73:b0:
c4:7a:fb:de:30:2b:3f:7b:bc:a0:7c:60:c5:05:00:b0:ed:25:
ce:0e:89:df:0a:d2:00:0c:db:fb:6e:e1:00:84:c3:47:af:b4:
51:82:f7:2a:48:55:8d:a9:3b:bb:a9:a5:c3:21:1b:a3:ce:d2:
ab:48:6e:40:56:98:77:64:9d:d7:ea:42:a8:d4:ee:68:f4:f1:
c6:40:f6:66:b1:32:b4:a4:3b:d0:07:e6:81:c5:df:43:a7:88:
fe:f5:70:f4:64:c9:a4:09:b3:7d:f1:e2:3e:76:44:1b:4a:08:
2b:c7:62:1b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ3U0vgT6gx9S9z0BloXpJT2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNGRiNzYyMzI0MWQ3ZTY2NzhmYzI1NzUxZmE0ZTBiNjY2
NTE4NmIwHhcNMjYwNDI4MTYwMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDBjNjcxNmNkODYyMjQ4ZjE0YmZlMWM5NTgyYWVkZjM4NmJmZmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt12gTGN/y+TiwLHW7w4XPE9Gpmiq
FGNkmXt63fqmKyXrzR/2hnSdF1ugzKbWomDl1T9VhlyuVaidYTtpHGPD5v6wBlrB
5HIUGEWW4su9HQUSpzO2YeuJrFBt4u6NZaIBlWaQXSJNmweuqAn8Ab1Qb8L2AbPa
q0cYdnGoSMDIFzpB5LulR4LPxr1U9L5Qa/5EED6V/EfTlCs8oZRa10nt4WJlOl0E
v7gAi09+otw78BnigQDK7qf7u2mJ+SGSwsSsM+8wtzZYl7SXljadJv7Q5OoiX29B
+Ch5f+VWQQR6Oy9+dxrUdPZ3fJVCV5rhvAh/tlPXmtIEosn9+PipTjqYlwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCQMZxbNhiJI8Uv+HJWCrt84a//SMB8GA1UdIwQY
MBaAFMBNt2IyQdfmZ4/CV1H6TgtmZRhrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0UyM1lqSkIxLVpuajhKWFVmcE9DMlpsR0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82ZTg3NGUtNzNmZS00ZGJiLWI3NGMt
MDQyM2YyNjNmMmNiLzEvSkF4bkZzMkdJa2p4U180Y2xZS3UzemhyXzlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC82ZTg3NGUtNzNmZS00ZGJiLWI3NGMtMDQyM2YyNjNmMmNi
LzEvd0UyM1lqSkIxLVpuajhKWFVmcE9DMlpsR0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+4lAwQA
wWlbMA0GCSqGSIb3DQEBCwUAA4IBAQBXYgKyfIFFmsjdd+I6FWCOe9LSCry8/Zju
0RhdKUte76Cr6fHX4MDQsdQU/mggF2gDj6C4v2tQuuNZAr8zq686qLOGfTdwMezg
ekL2h78PlVQCtfxAibFrbvKTtpLQqccXFFxqAHaWCu+PW2NzuwPqsEXhw/X96WXN
Ip+dG22OMyKUaghpbjs2TU6XxOwQc7DEevveMCs/e7ygfGDFBQCw7SXODonfCtIA
DNv7buEAhMNHr7RRgvcqSFWNqTu7qaXDIRujztKrSG5AVph3ZJ3X6kKo1O5o9PHG
QPZmsTK0pDvQB+aBxd9Dp4j+9XD0ZMmkCbN98eI+dkQbSggrx2Ib
-----END CERTIFICATE-----
Generated at Wed May 13 13:31:39 2026 by rpki-client