Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/uLXkPJJGCQggfPVEvwg4j2jXSfc.roa
File: uLXkPJJGCQggfPVEvwg4j2jXSfc.roa (raw, json)
Hash identifier: QyMAcsM16I5ZIrDa81UR8j8msdGLV+toeP7AIBOmd5A=
Subject key identifier: B8:B5:E4:3C:92:46:09:08:20:7C:F5:44:BF:08:38:8F:68:D7:49:F7
Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial: 01A0E981BFA982FEF6A9046BE4242342812D
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/uLXkPJJGCQggfPVEvwg4j2jXSfc.roa
Signing time: Mon 28 Sep 2026 19:33:09 +0000
ROA not before: Mon 28 Sep 2026 19:33:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202244
IP address blocks: 91.200.136.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:81:bf:a9:82:fe:f6:a9:04:6b:e4:24:23:42:81:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Validity
Not Before: Sep 28 19:33:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8b5e43c92460908207cf544bf08388f68d749f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f7:f6:62:e8:0b:6b:19:5f:68:e9:b5:1e:ad:
b9:3e:12:e3:a0:72:23:28:73:9d:5d:ba:a9:7f:ee:
cf:47:a8:b2:9f:06:27:31:c7:28:89:af:84:4d:d7:
9e:89:e2:d9:f9:7c:0b:f8:cb:9e:d7:f4:b4:4f:36:
2a:a8:cf:63:60:cd:d3:de:ac:32:37:ca:a1:7a:30:
eb:3b:25:88:bc:fc:34:f0:a9:e7:bd:c8:13:29:ca:
97:77:56:72:64:4a:fa:98:e1:c5:7d:49:d1:76:74:
83:97:d4:e8:2e:4e:af:13:07:85:c3:7d:df:92:2b:
65:ec:7b:b0:3b:d0:77:c5:be:70:c0:04:39:08:7b:
fd:de:12:f7:b6:91:5d:b4:2c:99:06:45:8a:5f:f5:
ee:24:a8:df:6f:58:4e:71:ea:54:e9:3e:fc:f4:25:
a2:c6:88:a8:59:7f:26:4a:a1:a3:8d:ce:bf:12:0c:
92:04:2d:ce:c2:58:41:e9:19:b9:56:f5:14:ca:b0:
29:b8:42:de:b7:f1:42:2e:1a:cb:5a:6e:0c:c1:59:
f5:91:ef:f7:ab:25:59:b7:86:d0:3c:11:ee:94:75:
fc:06:a1:8e:46:ea:04:ba:ae:7e:91:a6:62:01:04:
a7:26:8f:a8:ab:65:47:66:f5:3b:2b:21:bf:41:c1:
94:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B5:E4:3C:92:46:09:08:20:7C:F5:44:BF:08:38:8F:68:D7:49:F7
X509v3 Authority Key Identifier:
keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/uLXkPJJGCQggfPVEvwg4j2jXSfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.136.0/23
Signature Algorithm: sha256WithRSAEncryption
22:38:9a:5c:e2:d6:8d:ff:14:26:59:2b:88:41:3d:68:2a:66:
08:09:d5:8a:a8:35:5f:86:14:91:90:e6:92:4a:99:f9:43:03:
5e:c7:7b:c4:14:86:df:34:8a:ba:1e:08:42:18:f3:f4:1c:2c:
a6:9f:90:3f:21:48:45:02:b9:a9:ef:2e:70:15:1d:41:5f:78:
49:d3:85:3c:59:6c:42:62:c0:c0:be:e7:9f:36:86:6f:66:9c:
56:8a:0c:0a:17:1b:10:08:6b:9d:52:a3:ea:77:e1:63:1d:d9:
3a:f2:e9:ba:8c:e8:ba:a5:ba:33:42:40:55:2b:aa:4a:ba:d7:
db:f9:59:93:d3:cc:af:c6:ca:78:91:d2:63:48:00:26:68:4b:
dc:96:35:bd:c1:83:0b:0a:95:84:10:4d:25:a1:1b:5e:d4:47:
8a:20:d0:40:6e:c5:ee:8a:c9:fc:d0:0f:3b:90:90:fe:2f:7b:
4b:07:68:2b:90:3f:b3:b3:f7:3e:f8:ae:ea:f7:c4:84:a7:49:
f1:7b:ff:2d:73:db:c1:0f:a0:ac:66:66:1e:3e:3c:70:a6:07:
bb:eb:14:4a:40:d9:b7:c7:9f:0f:94:8a:56:23:f4:64:26:a3:
c7:6b:50:2c:de:c7:46:e9:97:7b:13:b3:f6:20:a9:61:e2:9e:
6b:38:4c:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDpgb+pgv72qQRr5CQjQoEtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MWNiNTFjYmE2OGViN2VmOTg2N2E3NWQxN2FiMjgwMTgx
OTZhYTEwHhcNMjYwOTI4MTkzMzA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGI1ZTQzYzkyNDYwOTA4MjA3Y2Y1NDRiZjA4Mzg4ZjY4ZDc0OWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvf2YugLaxlfaOm1Hq25PhLjoHIj
KHOdXbqpf+7PR6iynwYnMccoia+ETdeeieLZ+XwL+Mue1/S0TzYqqM9jYM3T3qwy
N8qhejDrOyWIvPw08KnnvcgTKcqXd1ZyZEr6mOHFfUnRdnSDl9ToLk6vEweFw33f
kitl7HuwO9B3xb5wwAQ5CHv93hL3tpFdtCyZBkWKX/XuJKjfb1hOcepU6T789CWi
xoioWX8mSqGjjc6/EgySBC3OwlhB6Rm5VvUUyrApuELet/FCLhrLWm4MwVn1ke/3
qyVZt4bQPBHulHX8BqGORuoEuq5+kaZiAQSnJo+oq2VHZvU7KyG/QcGUGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLi15DySRgkIIHz1RL8IOI9o10n3MB8GA1UdIwQY
MBaAFFcctRy6aOt++YZ6ddF6soAYGWqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3Yzkt
ZGQ4NjI3NzRhMDkyLzEvdUxYa1BKSkdDUWdnZlBWRXZ3ZzRqMmpYU2ZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3YzktZGQ4NjI3NzRhMDky
LzEvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8iIMA0G
CSqGSIb3DQEBCwUAA4IBAQAiOJpc4taN/xQmWSuIQT1oKmYICdWKqDVfhhSRkOaS
Spn5QwNex3vEFIbfNIq6HghCGPP0HCymn5A/IUhFArmp7y5wFR1BX3hJ04U8WWxC
YsDAvuefNoZvZpxWigwKFxsQCGudUqPqd+FjHdk68um6jOi6pbozQkBVK6pKutfb
+VmT08yvxsp4kdJjSAAmaEvcljW9wYMLCpWEEE0loRte1EeKINBAbsXuisn80A87
kJD+L3tLB2grkD+zs/c++K7q98SEp0nxe/8tc9vBD6CsZmYePjxwpge76xRKQNm3
x58PlIpWI/RkJqPHa1As3sdG6Zd7E7P2IKlh4p5rOExt
-----END CERTIFICATE-----
Generated at Sat Oct 3 19:37:13 2026 by rpki-client