Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/sWs3EHxESIvJa0Uh3G8COcvMiyA.roa
File: sWs3EHxESIvJa0Uh3G8COcvMiyA.roa (raw, json)
Hash identifier: jR2j9qJQTpd8bBFK20/jOkeYMvAG4fwS19YofWlScGI=
Subject key identifier: B1:6B:37:10:7C:44:48:8B:C9:6B:45:21:DC:6F:02:39:CB:CC:8B:20
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 01A0D3CC4486CD354A118F28BD4A792ED568
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/sWs3EHxESIvJa0Uh3G8COcvMiyA.roa
Signing time: Thu 24 Sep 2026 14:22:54 +0000
ROA not before: Thu 24 Sep 2026 14:22:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15830
IP address blocks: 91.213.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:cc:44:86:cd:35:4a:11:8f:28:bd:4a:79:2e:d5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Sep 24 14:22:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b16b37107c44488bc96b4521dc6f0239cbcc8b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:38:a4:0b:99:36:e3:74:c8:22:6d:8c:1f:f3:
e3:eb:74:ea:12:9a:82:7e:18:00:7e:66:a6:9c:74:
b2:ea:79:d0:4d:3b:b4:96:05:77:1e:c3:da:d9:aa:
7a:cb:c4:73:a5:ce:c1:9b:50:2b:e4:3a:69:57:31:
26:c5:dd:bf:95:8a:6d:2f:fd:4c:be:d9:62:33:66:
7a:f0:ad:39:c7:95:fc:50:57:7f:27:e9:95:21:81:
e2:7a:af:4b:85:36:db:c7:e3:43:e8:82:24:ae:b9:
d2:eb:67:8d:ef:e4:6f:6f:a3:a4:38:16:cc:ff:23:
ca:75:b2:13:14:34:ed:77:94:80:6d:f8:f6:56:d5:
af:89:61:fa:3e:62:54:fa:03:d3:70:d8:98:b2:4c:
4c:55:ba:9f:54:10:59:b2:b2:19:7e:1c:b9:3a:32:
8b:8b:dc:7e:0c:e3:58:82:6e:ca:91:f1:87:68:69:
67:d9:46:67:2b:dd:cc:ec:93:53:1c:ef:85:c8:df:
3a:29:6a:60:a0:21:81:92:7d:92:37:77:5f:b5:11:
03:1a:48:ca:e3:8d:57:c1:16:8d:44:4a:1d:19:e0:
a8:9f:9b:20:11:03:93:d8:44:6a:b8:95:cd:28:50:
2e:71:50:e7:61:3b:be:71:e0:40:8f:46:c7:55:4b:
e1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6B:37:10:7C:44:48:8B:C9:6B:45:21:DC:6F:02:39:CB:CC:8B:20
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/sWs3EHxESIvJa0Uh3G8COcvMiyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.140.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ae:80:dd:3e:6b:16:32:19:4d:7b:b8:7e:f1:68:f5:02:8a:
98:a0:1e:be:3f:a2:b6:83:3b:46:45:8b:15:75:95:96:12:7c:
b4:3e:82:57:f4:5d:ea:67:f7:84:12:ba:48:e5:c3:d3:22:ce:
d1:43:5d:34:52:01:e5:b7:53:b4:39:09:f2:41:7b:49:32:d9:
ee:b5:4f:21:83:5a:63:1c:10:f7:cd:aa:42:8e:cb:d5:3a:6e:
0d:14:fa:d7:e5:aa:da:d6:ff:8d:63:9b:95:77:35:24:20:43:
bf:67:bb:5d:18:c4:20:56:97:3c:58:e5:64:b4:a1:cb:11:37:
52:23:e5:1a:32:48:6a:18:0f:00:66:25:73:42:bd:56:db:b6:
06:01:29:2c:8e:cd:d6:41:dd:49:ef:40:bf:18:85:b2:dd:e3:
d1:d1:73:a9:36:2f:a0:ae:0f:c4:d3:e7:a1:8b:da:87:09:ab:
f4:14:38:31:73:f6:c0:df:c8:8f:99:a0:4f:da:da:91:97:63:
81:c9:e8:3f:ca:eb:25:f9:aa:33:cc:a9:29:76:32:c6:87:ed:
f6:94:a5:b6:95:56:ec:26:9c:19:e6:cd:7a:1a:6e:af:68:0e:
45:fe:ef:c7:ff:e8:83:de:ff:8c:89:9d:8b:91:bb:8c:4e:0b:
81:77:4f:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDTzESGzTVKEY8ovUp5LtVoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx
MGY5M2YwHhcNMjYwOTI0MTQyMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTZiMzcxMDdjNDQ0ODhiYzk2YjQ1MjFkYzZmMDIzOWNiY2M4YjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTikC5k243TIIm2MH/Pj63TqEpqC
fhgAfmamnHSy6nnQTTu0lgV3HsPa2ap6y8Rzpc7Bm1Ar5DppVzEmxd2/lYptL/1M
vtliM2Z68K05x5X8UFd/J+mVIYHieq9LhTbbx+ND6IIkrrnS62eN7+Rvb6OkOBbM
/yPKdbITFDTtd5SAbfj2VtWviWH6PmJU+gPTcNiYskxMVbqfVBBZsrIZfhy5OjKL
i9x+DONYgm7KkfGHaGln2UZnK93M7JNTHO+FyN86KWpgoCGBkn2SN3dftREDGkjK
441XwRaNREodGeCon5sgEQOT2ERquJXNKFAucVDnYTu+ceBAj0bHVUvhUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLFrNxB8REiLyWtFIdxvAjnLzIsgMB8GA1UdIwQY
MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt
NDMwMTNiMjhkOWQ2LzEvc1dzM0VIeEVTSXZKYTBVaDNHOENPY3ZNaXlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2
LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9WMMA0G
CSqGSIb3DQEBCwUAA4IBAQByroDdPmsWMhlNe7h+8Wj1AoqYoB6+P6K2gztGRYsV
dZWWEny0PoJX9F3qZ/eEErpI5cPTIs7RQ100UgHlt1O0OQnyQXtJMtnutU8hg1pj
HBD3zapCjsvVOm4NFPrX5ara1v+NY5uVdzUkIEO/Z7tdGMQgVpc8WOVktKHLETdS
I+UaMkhqGA8AZiVzQr1W27YGASksjs3WQd1J70C/GIWy3ePR0XOpNi+grg/E0+eh
i9qHCav0FDgxc/bA38iPmaBP2tqRl2OByeg/yusl+aozzKkpdjLGh+32lKW2lVbs
JpwZ5s16Gm6vaA5F/u/H/+iD3v+MiZ2LkbuMTguBd09c
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:24:59 2026 by rpki-client