Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/1L45PsyuvIYIg2ZJpaZ1kexqtD8.roa
File: 1L45PsyuvIYIg2ZJpaZ1kexqtD8.roa (raw, json)
Hash identifier: gzQs+2Sri4/i+ZuiKLzc6oYRR4Wmc7We38Tn2yPF6nU=
Subject key identifier: D4:BE:39:3E:CC:AE:BC:86:08:83:66:49:A5:A6:75:91:EC:6A:B4:3F
Certificate issuer: /CN=64262c8337e218bed316b70cc092dd0befe8195b
Certificate serial: 019F23688402546BDCF392639129ADB7AC93
Authority key identifier: 64:26:2C:83:37:E2:18:BE:D3:16:B7:0C:C0:92:DD:0B:EF:E8:19:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/1L45PsyuvIYIg2ZJpaZ1kexqtD8.roa
Signing time: Thu 02 Jul 2026 15:17:59 +0000
ROA not before: Thu 02 Jul 2026 15:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197709
IP address blocks: 91.242.231.0/24 maxlen: 24
185.238.60.0/24 maxlen: 24
192.162.144.0/22 maxlen: 22
193.227.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:84:02:54:6b:dc:f3:92:63:91:29:ad:b7:ac:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64262c8337e218bed316b70cc092dd0befe8195b
Validity
Not Before: Jul 2 15:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4be393eccaebc8608836649a5a67591ec6ab43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:17:fc:f1:bc:0e:b7:91:d5:91:03:12:e7:a7:
ee:5f:fb:0c:3a:85:7f:ff:23:07:5a:2a:a8:59:3e:
67:67:c8:7a:21:17:ea:82:95:75:d4:17:ba:5c:aa:
e3:a6:aa:aa:fb:bd:39:58:2d:76:de:cd:71:01:6e:
34:25:8e:a2:2e:b6:53:db:18:7e:55:01:3e:62:7d:
38:27:f4:de:cf:22:26:56:db:47:ee:53:4d:25:cd:
92:6c:1c:73:5d:d8:c2:dc:d6:4d:0f:a4:ba:e5:8c:
6d:83:9a:8a:fa:6f:a1:31:89:58:f8:71:f1:0b:d9:
01:a3:da:5f:90:e9:84:36:01:14:94:e7:02:6a:c3:
e3:12:b2:dc:92:f9:f9:36:ac:b8:9b:55:f5:0b:97:
da:1b:ac:ad:52:4e:8b:23:c1:84:0f:00:e7:cb:d2:
30:53:90:1a:46:57:61:b2:de:a3:3a:aa:d8:f3:74:
c9:b3:bb:bb:ad:c0:3c:4e:fe:ad:d1:3e:a6:4c:87:
e7:ac:db:e3:79:eb:44:dd:b8:33:96:b4:75:5e:dc:
59:27:06:6d:4f:96:78:33:68:44:5a:a9:57:22:fc:
28:82:bb:fd:1f:d1:94:dd:18:e7:38:ab:2e:bc:fc:
be:08:56:d9:28:74:91:2b:3c:72:8d:3b:34:b9:15:
f2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BE:39:3E:CC:AE:BC:86:08:83:66:49:A5:A6:75:91:EC:6A:B4:3F
X509v3 Authority Key Identifier:
keyid:64:26:2C:83:37:E2:18:BE:D3:16:B7:0C:C0:92:DD:0B:EF:E8:19:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/1L45PsyuvIYIg2ZJpaZ1kexqtD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.231.0/24
185.238.60.0/24
192.162.144.0/22
193.227.112.0/24
Signature Algorithm: sha256WithRSAEncryption
83:1b:66:6b:6d:08:6f:7f:c6:78:b2:57:4b:1b:83:2e:ea:b2:
a5:29:88:bc:7b:26:c1:be:90:30:52:19:6f:d2:40:3e:91:71:
31:66:b4:fa:49:4c:de:7c:c5:b4:27:38:63:1f:5d:54:55:da:
a5:0f:4e:81:8b:0b:bb:be:7c:f7:df:39:eb:62:fa:26:7c:78:
cf:1b:9a:5f:75:66:7f:d4:bd:6b:a7:b3:7a:59:39:a1:da:27:
c3:55:a2:84:0b:e3:42:78:63:14:f1:49:8f:34:46:85:1d:c1:
2e:e4:e1:bc:7f:d4:4f:13:a2:73:3c:57:d1:2f:22:ea:ae:cc:
16:8e:ef:f3:f2:c9:00:66:7a:5d:21:ef:e2:32:92:c7:da:d0:
6a:4e:a8:2a:c4:2e:27:9b:ca:9c:70:b7:26:b6:95:c8:64:57:
c0:6c:40:2a:22:48:ea:17:21:2a:cd:59:93:45:dc:31:83:bf:
a5:16:47:fe:99:01:51:63:84:96:93:4f:ee:42:bb:66:56:d6:
75:f7:f4:cf:5f:5a:40:9e:45:67:f5:6c:f8:74:a2:2d:bf:ab:
bf:47:c7:38:88:ed:f7:87:f2:c2:3d:43:4a:ab:7b:e2:e7:4e:
76:92:ed:ba:17:0d:71:53:e0:0e:1a:4f:88:6e:0d:19:18:bb:
75:87:28:d4
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ8jaIQCVGvc85JjkSmtt6yTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MjYyYzgzMzdlMjE4YmVkMzE2YjcwY2MwOTJkZDBiZWZl
ODE5NWIwHhcNMjYwNzAyMTUxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGJlMzkzZWNjYWViYzg2MDg4MzY2NDlhNWE2NzU5MWVjNmFiNDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRf88bwOt5HVkQMS56fuX/sMOoV/
/yMHWiqoWT5nZ8h6IRfqgpV11Be6XKrjpqqq+705WC123s1xAW40JY6iLrZT2xh+
VQE+Yn04J/TezyImVttH7lNNJc2SbBxzXdjC3NZND6S65Yxtg5qK+m+hMYlY+HHx
C9kBo9pfkOmENgEUlOcCasPjErLckvn5Nqy4m1X1C5faG6ytUk6LI8GEDwDny9Iw
U5AaRldhst6jOqrY83TJs7u7rcA8Tv6t0T6mTIfnrNvjeetE3bgzlrR1XtxZJwZt
T5Z4M2hEWqlXIvwogrv9H9GU3RjnOKsuvPy+CFbZKHSRKzxyjTs0uRXyhQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFNS+OT7MrryGCINmSaWmdZHsarQ/MB8GA1UdIwQY
MBaAFGQmLIM34hi+0xa3DMCS3Qvv6BlbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkNZc2d6ZmlHTDdURnJjTXdKTGRDLV9vR1ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lMTAwYjUtNmYwYS00ZmU5LWJlZmIt
YzRhY2I4OTY5YzQ5LzEvMUw0NVBzeXV2SVlJZzJaSnBhWjFrZXhxdEQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9lMTAwYjUtNmYwYS00ZmU5LWJlZmItYzRhY2I4OTY5YzQ5
LzEvWkNZc2d6ZmlHTDdURnJjTXdKTGRDLV9vR1ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW/LnAwQA
ue48AwQCwKKQAwQAweNwMA0GCSqGSIb3DQEBCwUAA4IBAQCDG2ZrbQhvf8Z4sldL
G4Mu6rKlKYi8eybBvpAwUhlv0kA+kXExZrT6SUzefMW0JzhjH11UVdqlD06Biwu7
vnz33znrYvomfHjPG5pfdWZ/1L1rp7N6WTmh2ifDVaKEC+NCeGMU8UmPNEaFHcEu
5OG8f9RPE6JzPFfRLyLqrswWju/z8skAZnpdIe/iMpLH2tBqTqgqxC4nm8qccLcm
tpXIZFfAbEAqIkjqFyEqzVmTRdwxg7+lFkf+mQFRY4SWk0/uQrtmVtZ19/TPX1pA
nkVn9Wz4dKItv6u/R8c4iO33h/LCPUNKq3vi5052ku26Fw1xU+AOGk+Ibg0ZGLt1
hyjU
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:36 2026 by rpki-client