Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/_rLpPddQQHnYtK6c1M2OfbveI78.roa
File: _rLpPddQQHnYtK6c1M2OfbveI78.roa (raw, json)
Hash identifier: cy/Yh9TRIkqxvWrNpFvB7cECUr1O0AAoYui7fpbBSbs=
Subject key identifier: FE:B2:E9:3D:D7:50:40:79:D8:B4:AE:9C:D4:CD:8E:7D:BB:DE:23:BF
Certificate issuer: /CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Certificate serial: 01A07BCAEFF5F7015C8026EEE795AD9BC97C
Authority key identifier: 20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/_rLpPddQQHnYtK6c1M2OfbveI78.roa
Signing time: Mon 07 Sep 2026 12:14:52 +0000
ROA not before: Mon 07 Sep 2026 12:14:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208673
IP address blocks: 91.234.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:ca:ef:f5:f7:01:5c:80:26:ee:e7:95:ad:9b:c9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Validity
Not Before: Sep 7 12:14:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=feb2e93dd7504079d8b4ae9cd4cd8e7dbbde23bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8b:71:3f:3b:0b:ad:a0:91:b3:09:5c:bc:51:
b3:34:27:70:1b:87:68:68:ed:2e:43:e8:41:8e:70:
8c:35:b6:82:f5:06:3a:21:36:84:c3:4a:84:67:91:
08:b8:34:17:43:15:5c:8a:1d:10:f1:96:8a:59:26:
f5:b5:f6:c1:07:54:b1:e7:38:78:fe:6b:b7:57:4d:
61:e1:5e:91:41:c3:2f:d1:cd:17:f7:2f:59:e0:2e:
44:f3:6f:7f:c4:fc:89:a7:a6:9d:d2:dc:dc:fd:16:
10:5d:2a:c5:ed:d0:dd:3e:4c:64:e8:cc:44:a2:6d:
49:c6:e6:20:13:2a:19:53:80:e1:46:11:c9:70:ed:
60:9a:43:0c:3d:bc:10:fd:69:f2:91:c8:d9:c9:f7:
66:92:65:ae:b1:ad:3c:5c:08:82:c2:f9:ab:a6:75:
e1:dd:51:57:b3:5c:12:c2:56:54:53:a4:9a:72:67:
1b:2f:16:b6:fb:dd:37:91:3b:67:1f:ac:f6:cf:be:
22:a3:c3:1c:39:c8:b6:12:aa:cd:41:d7:97:2b:72:
86:10:03:63:b1:ed:e1:5b:0d:ee:b2:8b:fe:aa:ab:
bf:01:4d:35:c8:ef:6a:a7:cf:4e:6f:ac:f6:03:a9:
0f:79:90:48:c6:6b:3c:97:7d:c9:28:50:5b:50:03:
8e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B2:E9:3D:D7:50:40:79:D8:B4:AE:9C:D4:CD:8E:7D:BB:DE:23:BF
X509v3 Authority Key Identifier:
keyid:20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/_rLpPddQQHnYtK6c1M2OfbveI78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.147.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:1e:d8:38:b2:c8:1a:dd:0a:fc:bc:c4:f8:a9:f3:5f:61:23:
88:cb:7a:31:6a:7e:29:21:bf:88:8f:e9:7e:20:cb:86:29:70:
3f:53:b3:8d:9e:44:4a:f9:c8:66:f8:4f:46:18:ed:9a:44:89:
91:d6:38:b8:72:8a:bc:a4:34:8c:1f:15:d7:58:81:50:89:79:
75:41:e6:05:af:3a:48:06:c3:2c:ac:6e:d8:e3:2a:e9:cc:3a:
7b:3e:e0:e5:66:1e:27:ad:ec:d6:a0:e4:70:c7:11:4a:97:69:
94:dc:1b:30:c7:48:a2:1b:67:1b:95:97:24:74:5f:96:a1:aa:
49:23:6e:ec:4a:62:b3:1c:09:ac:66:8d:f5:e2:a0:f0:f3:be:
ee:23:ce:00:b7:1e:0e:7b:47:eb:6e:04:2e:61:4c:9f:b7:a4:
67:0b:e7:dd:fd:94:90:3e:39:f3:94:ec:0b:3e:22:8f:48:4e:
9a:29:36:f8:99:2a:06:f2:05:17:2e:20:9c:1d:ff:f3:07:98:
c9:6c:e9:02:9b:e0:65:14:3e:45:33:60:f1:b6:7f:e3:43:1c:
45:1e:e7:a5:1b:01:17:1a:a8:e9:4a:56:28:f7:5c:80:b0:1b:
f0:e1:f4:2b:f8:fc:ef:b0:ae:af:09:1c:77:47:bf:05:8f:66:
25:5a:4d:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaB7yu/19wFcgCbu55Wtm8l8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZTIzZGQwNTg0OWNjODEzMjU1YWI4ZDFiODUzZmI5YzQ1
ZDg2OTQwHhcNMjYwOTA3MTIxNDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWIyZTkzZGQ3NTA0MDc5ZDhiNGFlOWNkNGNkOGU3ZGJiZGUyM2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ItxPzsLraCRswlcvFGzNCdwG4do
aO0uQ+hBjnCMNbaC9QY6ITaEw0qEZ5EIuDQXQxVcih0Q8ZaKWSb1tfbBB1Sx5zh4
/mu3V01h4V6RQcMv0c0X9y9Z4C5E829/xPyJp6ad0tzc/RYQXSrF7dDdPkxk6MxE
om1JxuYgEyoZU4DhRhHJcO1gmkMMPbwQ/WnykcjZyfdmkmWusa08XAiCwvmrpnXh
3VFXs1wSwlZUU6SacmcbLxa2+903kTtnH6z2z74io8McOci2EqrNQdeXK3KGEANj
se3hWw3usov+qqu/AU01yO9qp89Ob6z2A6kPeZBIxms8l33JKFBbUAOOxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP6y6T3XUEB52LSunNTNjn273iO/MB8GA1UdIwQY
MBaAFCDiPdBYScyBMlWrjRuFP7nEXYaUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU9JOTBGaEp6SUV5VmF1Tkc0VV91Y1JkaHBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9jMTY3MTctODU1ZC00MzkxLWI3OWYt
Yjg4OGEzMTI0NDU0LzEvX3JMcFBkZFFRSG5ZdEs2YzFNMk9mYnZlSTc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9jMTY3MTctODU1ZC00MzkxLWI3OWYtYjg4OGEzMTI0NDU0
LzEvSU9JOTBGaEp6SUV5VmF1Tkc0VV91Y1JkaHBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+qTMA0G
CSqGSIb3DQEBCwUAA4IBAQA8Htg4ssga3Qr8vMT4qfNfYSOIy3oxan4pIb+Ij+l+
IMuGKXA/U7ONnkRK+chm+E9GGO2aRImR1ji4coq8pDSMHxXXWIFQiXl1QeYFrzpI
BsMsrG7Y4yrpzDp7PuDlZh4nrezWoORwxxFKl2mU3Bswx0iiG2cblZckdF+WoapJ
I27sSmKzHAmsZo314qDw877uI84Atx4Oe0frbgQuYUyft6RnC+fd/ZSQPjnzlOwL
PiKPSE6aKTb4mSoG8gUXLiCcHf/zB5jJbOkCm+BlFD5FM2Dxtn/jQxxFHuelGwEX
GqjpSlYo91yAsBvw4fQr+PzvsK6vCRx3R78Fj2YlWk2w
-----END CERTIFICATE-----
Generated at Wed Sep 30 03:44:37 2026 by rpki-client