Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/nkTurxzRwWG3JBRFRuSg4cqlERA.roa
File: nkTurxzRwWG3JBRFRuSg4cqlERA.roa (raw, json)
Hash identifier: IdP8M0+iJ8T5mkltOuC1Z8AWKXU9ULTOI59bHhqX46E=
Subject key identifier: 9E:44:EE:AF:1C:D1:C1:61:B7:24:14:45:46:E4:A0:E1:CA:A5:11:10
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 01A0D2AE581C5B6333B3BD5037B497CEF51D
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/nkTurxzRwWG3JBRFRuSg4cqlERA.roa
Signing time: Thu 24 Sep 2026 09:10:36 +0000
ROA not before: Thu 24 Sep 2026 09:10:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25133
IP address blocks: 91.216.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:ae:58:1c:5b:63:33:b3:bd:50:37:b4:97:ce:f5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: Sep 24 09:10:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e44eeaf1cd1c161b724144546e4a0e1caa51110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:96:9b:f3:81:b4:80:39:f4:d0:f7:cc:20:5e:
93:c9:1a:d9:32:73:f7:80:b7:0a:f9:cf:c6:08:ae:
4a:62:ff:9e:8e:28:44:a3:e1:0d:d8:c8:2e:95:90:
2e:5b:79:ea:b6:16:89:75:35:e3:51:df:26:4b:2b:
3e:1e:43:b9:95:4a:6a:c6:59:4f:8f:30:93:be:ff:
1c:0c:72:e5:1f:6c:19:2b:da:ac:fe:18:9a:66:e4:
7e:5b:76:34:af:a3:ff:9d:6f:c0:6b:81:9e:da:b4:
3c:03:00:4d:23:08:fd:52:fb:d0:0f:5b:58:4a:03:
28:37:53:86:0c:3b:b0:c1:7b:98:cb:8c:f0:dc:6c:
37:70:93:b7:09:a1:e5:50:4d:4c:93:74:fb:b4:f4:
fb:11:f6:18:0e:5b:86:1a:7f:4f:24:60:52:6d:a0:
df:e3:f7:81:1e:da:f0:7a:b4:96:72:c1:6a:99:0b:
94:c4:6b:9f:42:83:77:29:bf:56:12:91:26:de:a4:
ac:21:21:f9:40:61:b5:07:2a:69:12:a1:62:9d:65:
b6:a3:7d:d0:e3:a3:9d:d4:80:8b:4a:3a:a3:fe:07:
b4:45:a5:5e:97:c5:07:c3:a2:f6:a6:50:30:e5:19:
21:1a:84:34:b3:da:11:c1:8c:61:ce:19:b6:3b:15:
2a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:44:EE:AF:1C:D1:C1:61:B7:24:14:45:46:E4:A0:E1:CA:A5:11:10
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/nkTurxzRwWG3JBRFRuSg4cqlERA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.106.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:40:3c:f4:d7:4d:89:41:1f:7a:92:0b:75:60:5c:56:d6:dd:
c5:34:9d:26:b0:18:df:5f:9b:30:92:3d:df:67:4c:6d:78:13:
f4:48:e3:d4:a8:e9:9d:33:75:e1:2f:5d:1c:31:54:24:20:5e:
a0:af:5e:31:c7:7b:cf:a6:7c:45:77:69:34:0f:5a:58:6f:9c:
2a:eb:6e:37:d4:d9:ae:20:ad:12:fb:a0:41:5e:1d:6b:81:79:
f6:67:02:3a:03:1c:74:bd:03:72:39:61:68:a1:50:5c:7d:d5:
ce:ac:b6:98:67:77:e7:17:7f:aa:9c:68:c2:8c:89:c8:4b:6d:
46:66:9d:7f:1b:f1:7c:2e:19:fd:78:9e:3c:e5:01:f5:92:7d:
8f:b9:b1:85:c7:57:77:11:8b:39:9c:f3:bd:7b:d6:14:13:6d:
47:3e:61:ab:e8:bd:37:cb:53:0e:15:99:fc:29:90:b9:38:5b:
04:aa:09:51:75:3c:a4:84:37:65:d8:4d:e0:7a:fb:39:f8:e8:
84:4e:ff:c4:a2:2a:58:22:24:c2:d8:f6:62:8d:9c:7b:57:ec:
3f:12:39:79:dc:d9:c6:29:3d:09:9c:f9:ef:f5:96:c9:16:fe:
db:00:9c:00:29:94:bb:ea:7f:15:e2:98:68:53:48:0c:b0:fd:
f7:88:95:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDSrlgcW2Mzs71QN7SXzvUdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZmNmYzM0NWEwNjQ2YTdjZjIyNTkwNTQ3N2UyMTgzNTc0
ODg2ZTAwHhcNMjYwOTI0MDkxMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTQ0ZWVhZjFjZDFjMTYxYjcyNDE0NDU0NmU0YTBlMWNhYTUxMTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopab84G0gDn00PfMIF6TyRrZMnP3
gLcK+c/GCK5KYv+ejihEo+EN2MgulZAuW3nqthaJdTXjUd8mSys+HkO5lUpqxllP
jzCTvv8cDHLlH2wZK9qs/hiaZuR+W3Y0r6P/nW/Aa4Ge2rQ8AwBNIwj9UvvQD1tY
SgMoN1OGDDuwwXuYy4zw3Gw3cJO3CaHlUE1Mk3T7tPT7EfYYDluGGn9PJGBSbaDf
4/eBHtrwerSWcsFqmQuUxGufQoN3Kb9WEpEm3qSsISH5QGG1ByppEqFinWW2o33Q
46Od1ICLSjqj/ge0RaVel8UHw6L2plAw5RkhGoQ0s9oRwYxhzhm2OxUqTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ5E7q8c0cFhtyQURUbkoOHKpREQMB8GA1UdIwQY
MBaAFA/8/DRaBkanzyJZBUd+IYNXSIbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9hZjI4MmItZjU5Ny00MDdhLWJlZjUt
MTMyZjk5Y2ZhYTUzLzEvbmtUdXJ4elJ3V0czSkJSRlJ1U2c0Y3FsRVJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9hZjI4MmItZjU5Ny00MDdhLWJlZjUtMTMyZjk5Y2ZhYTUz
LzEvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9hqMA0G
CSqGSIb3DQEBCwUAA4IBAQDWQDz0102JQR96kgt1YFxW1t3FNJ0msBjfX5swkj3f
Z0xteBP0SOPUqOmdM3XhL10cMVQkIF6gr14xx3vPpnxFd2k0D1pYb5wq62431Nmu
IK0S+6BBXh1rgXn2ZwI6Axx0vQNyOWFooVBcfdXOrLaYZ3fnF3+qnGjCjInIS21G
Zp1/G/F8Lhn9eJ485QH1kn2PubGFx1d3EYs5nPO9e9YUE21HPmGr6L03y1MOFZn8
KZC5OFsEqglRdTykhDdl2E3gevs5+OiETv/EoipYIiTC2PZijZx7V+w/Ejl53NnG
KT0JnPnv9ZbJFv7bAJwAKZS76n8V4phoU0gMsP33iJUX
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:18:48 2026 by rpki-client