Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/0bWhQWuajdVxt380g1tHt_dfDzA.roa
File: 0bWhQWuajdVxt380g1tHt_dfDzA.roa (raw, json)
Hash identifier: BNIIYhf4bu7N2Q9i17Tx4+jGFkmAZfsMMHPK83i6ScU=
Subject key identifier: D1:B5:A1:41:6B:9A:8D:D5:71:B7:7F:34:83:5B:47:B7:F7:5F:0F:30
Certificate issuer: /CN=0a685b715720c362f4ccbd750a6133d33ea9cd48
Certificate serial: 019F236885DEBC0C96C7BE5E3B00062AA365
Authority key identifier: 0A:68:5B:71:57:20:C3:62:F4:CC:BD:75:0A:61:33:D3:3E:A9:CD:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CmhbcVcgw2L0zL11CmEz0z6pzUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/0bWhQWuajdVxt380g1tHt_dfDzA.roa
Signing time: Thu 02 Jul 2026 15:18:00 +0000
ROA not before: Thu 02 Jul 2026 15:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58083
IP address blocks: 91.238.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CmhbcVcgw2L0zL11CmEz0z6pzUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:85:de:bc:0c:96:c7:be:5e:3b:00:06:2a:a3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a685b715720c362f4ccbd750a6133d33ea9cd48
Validity
Not Before: Jul 2 15:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1b5a1416b9a8dd571b77f34835b47b7f75f0f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:14:3f:07:81:a2:41:9b:66:8f:fc:5a:8f:
53:1e:59:44:3a:2f:f1:d6:56:fd:d6:39:02:03:ea:
2e:2b:e9:6e:8d:fe:a0:66:dd:34:c2:80:b8:84:c4:
a2:95:cb:a3:56:b8:33:b8:3d:19:28:90:45:41:36:
6f:fc:8c:55:65:64:a4:40:87:5e:63:cd:58:38:0b:
68:e3:14:92:b7:86:01:11:ef:89:53:37:78:38:6d:
31:b9:86:3c:d9:dd:60:b6:fc:07:c3:92:8f:0c:24:
2b:84:02:2c:aa:a1:89:c6:54:59:f3:9a:ea:c2:d6:
02:2d:22:8d:39:02:67:64:99:cb:ae:4a:28:ab:02:
54:aa:c5:ec:d4:e0:b4:f2:42:c1:3b:39:62:b3:0f:
05:bf:e8:04:30:e5:cb:3f:6d:4f:3e:75:41:6f:52:
cc:9f:cd:1a:e7:32:7d:4c:4c:67:2a:f8:64:79:79:
e3:31:01:20:48:86:00:d5:76:2e:0a:0c:e6:96:42:
67:43:9f:a4:2f:53:a1:43:e5:80:5c:47:89:70:26:
e0:07:e3:b3:8a:86:de:e1:71:de:ac:00:ce:db:94:
91:16:54:84:ea:20:6b:08:fe:76:36:c6:d5:e4:67:
2b:5b:18:74:44:1c:ad:1f:c4:8e:6d:b4:e8:e7:71:
0c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B5:A1:41:6B:9A:8D:D5:71:B7:7F:34:83:5B:47:B7:F7:5F:0F:30
X509v3 Authority Key Identifier:
keyid:0A:68:5B:71:57:20:C3:62:F4:CC:BD:75:0A:61:33:D3:3E:A9:CD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CmhbcVcgw2L0zL11CmEz0z6pzUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/0bWhQWuajdVxt380g1tHt_dfDzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.141.0/24
Signature Algorithm: sha256WithRSAEncryption
18:4b:40:3f:b7:93:8f:8b:55:e4:1e:d0:c8:20:40:63:92:fb:
15:21:f4:e7:98:fd:e2:1e:aa:66:9f:fe:fd:6b:8b:12:0b:71:
b4:8c:83:e4:06:e6:e2:43:d1:39:5b:d0:58:3c:32:41:c0:a5:
fd:f6:4c:a6:27:e5:d1:a7:0d:4c:43:99:93:a9:7d:17:97:a5:
3d:ee:63:ff:a4:ec:b6:68:16:10:20:10:0f:a3:07:23:c5:ff:
af:38:2e:fe:8b:f5:64:a4:3f:f7:c7:24:f9:d7:aa:7e:fd:75:
83:4a:df:75:ee:91:92:7d:10:96:db:c0:a7:4a:b2:50:fa:32:
cb:71:71:f2:c6:f4:9a:c8:88:5b:6d:43:21:90:cc:12:d0:a5:
4d:2b:14:ed:a3:66:ec:8c:2c:85:c0:4d:7a:19:a3:a1:93:00:
31:a2:f6:0e:f7:6a:77:12:80:84:83:58:88:97:e9:00:68:80:
00:ea:6a:c4:37:0a:20:44:97:90:c8:37:2b:8c:44:56:f4:0a:
33:49:c9:cd:3e:4b:68:eb:e3:00:18:75:90:d8:fe:dd:e3:89:
e2:c6:d4:74:19:09:f9:57:fe:7d:82:c2:a8:5d:38:32:68:ce:
f5:f1:d0:d6:c3:9c:f5:14:48:b6:d9:0d:49:37:84:9f:31:8f:
95:71:83:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaIXevAyWx75eOwAGKqNlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNjg1YjcxNTcyMGMzNjJmNGNjYmQ3NTBhNjEzM2QzM2Vh
OWNkNDgwHhcNMjYwNzAyMTUxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWI1YTE0MTZiOWE4ZGQ1NzFiNzdmMzQ4MzViNDdiN2Y3NWYwZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRMUPweBokGbZo/8Wo9THllEOi/x
1lb91jkCA+ouK+lujf6gZt00woC4hMSilcujVrgzuD0ZKJBFQTZv/IxVZWSkQIde
Y81YOAto4xSSt4YBEe+JUzd4OG0xuYY82d1gtvwHw5KPDCQrhAIsqqGJxlRZ85rq
wtYCLSKNOQJnZJnLrkooqwJUqsXs1OC08kLBOzlisw8Fv+gEMOXLP21PPnVBb1LM
n80a5zJ9TExnKvhkeXnjMQEgSIYA1XYuCgzmlkJnQ5+kL1OhQ+WAXEeJcCbgB+Oz
iobe4XHerADO25SRFlSE6iBrCP52NsbV5GcrWxh0RBytH8SObbTo53EM3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNG1oUFrmo3Vcbd/NINbR7f3Xw8wMB8GA1UdIwQY
MBaAFApoW3FXIMNi9My9dQphM9M+qc1IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ21oYmNWY2d3MkwwekwxMUNtRXowejZwelVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mMGMzMTctZTM5ZC00YmMxLWJmOGMt
ZmVlMTJiZmQzYmQxLzEvMGJXaFFXdWFqZFZ4dDM4MGcxdEh0X2RmRHpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mMGMzMTctZTM5ZC00YmMxLWJmOGMtZmVlMTJiZmQzYmQx
LzEvQ21oYmNWY2d3MkwwekwxMUNtRXowejZwelVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+6NMA0G
CSqGSIb3DQEBCwUAA4IBAQAYS0A/t5OPi1XkHtDIIEBjkvsVIfTnmP3iHqpmn/79
a4sSC3G0jIPkBubiQ9E5W9BYPDJBwKX99kymJ+XRpw1MQ5mTqX0Xl6U97mP/pOy2
aBYQIBAPowcjxf+vOC7+i/VkpD/3xyT516p+/XWDSt917pGSfRCW28CnSrJQ+jLL
cXHyxvSayIhbbUMhkMwS0KVNKxTto2bsjCyFwE16GaOhkwAxovYO92p3EoCEg1iI
l+kAaIAA6mrENwogRJeQyDcrjERW9AozScnNPkto6+MAGHWQ2P7d44nixtR0GQn5
V/59gsKoXTgyaM718dDWw5z1FEi22Q1JN4SfMY+VcYPB
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:03:01 2026 by rpki-client