Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/fZhsLc9WXdkHhK7mR8ERizE1kJQ.roa
File: fZhsLc9WXdkHhK7mR8ERizE1kJQ.roa (raw, json)
Hash identifier: NrJrX0EfF2/UhROqrCTS8hvTOUzCH9tbVAPmA+CILDc=
Subject key identifier: 7D:98:6C:2D:CF:56:5D:D9:07:84:AE:E6:47:C1:11:8B:31:35:90:94
Certificate issuer: /CN=a5d8ed5048082234b72a82b6136c9d20b036ee70
Certificate serial: 01A0E75220A0EE98EBFA5A88D093A119FF68
Authority key identifier: A5:D8:ED:50:48:08:22:34:B7:2A:82:B6:13:6C:9D:20:B0:36:EE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdjtUEgIIjS3KoK2E2ydILA27nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/fZhsLc9WXdkHhK7mR8ERizE1kJQ.roa
Signing time: Mon 28 Sep 2026 09:21:54 +0000
ROA not before: Mon 28 Sep 2026 09:21:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24812
IP address blocks: 91.225.4.0/22 maxlen: 22
91.225.4.0/23 maxlen: 23
91.225.6.0/23 maxlen: 23
178.159.208.0/20 maxlen: 24
178.159.208.0/24 maxlen: 24
178.159.209.0/24 maxlen: 24
178.159.210.0/24 maxlen: 24
178.159.211.0/24 maxlen: 24
178.159.212.0/24 maxlen: 24
178.159.213.0/24 maxlen: 24
178.159.214.0/24 maxlen: 24
178.159.215.0/24 maxlen: 24
178.159.216.0/24 maxlen: 24
178.159.217.0/24 maxlen: 24
178.159.218.0/24 maxlen: 24
178.159.219.0/24 maxlen: 24
178.159.220.0/24 maxlen: 24
178.159.221.0/24 maxlen: 24
178.159.222.0/24 maxlen: 24
178.159.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdjtUEgIIjS3KoK2E2ydILA27nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 03:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:52:20:a0:ee:98:eb:fa:5a:88:d0:93:a1:19:ff:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d8ed5048082234b72a82b6136c9d20b036ee70
Validity
Not Before: Sep 28 09:21:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d986c2dcf565dd90784aee647c1118b31359094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5e:d2:54:66:33:86:1f:86:c5:a7:ae:9e:17:
b3:b4:cc:dc:b4:43:70:c2:1c:96:4c:d5:5b:08:8e:
e0:5b:55:ad:45:05:78:d0:cb:a8:54:9d:67:da:d4:
f4:be:08:02:0a:43:b8:84:84:03:29:38:15:42:73:
76:04:fd:24:c6:ea:dc:cb:f5:2d:83:40:e9:65:86:
e6:7e:36:71:63:bc:93:93:6b:85:f4:9b:0c:24:5e:
30:e8:5d:07:ec:a0:6c:df:c3:e7:98:dc:7b:3a:25:
7d:54:a5:c7:99:e8:ae:63:d8:00:d3:d6:95:3f:a1:
1e:2a:86:40:be:f5:f4:7d:dd:d6:c6:fb:2c:62:be:
2c:40:a7:52:79:c6:54:45:73:72:3d:dd:0c:95:50:
76:01:09:7a:da:ef:7f:94:0e:20:d2:bc:7e:5e:67:
88:24:99:53:4b:df:ad:9f:83:4f:43:31:8a:d7:e0:
fe:eb:71:13:ff:7d:ff:38:28:11:f7:ac:dc:91:f4:
6d:ff:d9:8d:ed:9e:49:c9:11:43:13:af:d6:a6:39:
45:ab:ec:1e:7f:f1:9f:d6:3b:e6:e0:31:12:af:52:
d9:83:3a:55:15:e4:d4:f0:89:0b:b1:4c:26:9a:bf:
aa:92:24:82:a4:47:93:9d:e8:20:90:22:7a:8e:3f:
94:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:98:6C:2D:CF:56:5D:D9:07:84:AE:E6:47:C1:11:8B:31:35:90:94
X509v3 Authority Key Identifier:
keyid:A5:D8:ED:50:48:08:22:34:B7:2A:82:B6:13:6C:9D:20:B0:36:EE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdjtUEgIIjS3KoK2E2ydILA27nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/fZhsLc9WXdkHhK7mR8ERizE1kJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/pdjtUEgIIjS3KoK2E2ydILA27nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.4.0/22
178.159.208.0/20
Signature Algorithm: sha256WithRSAEncryption
65:7e:12:4f:f5:3d:97:bd:7c:fb:51:15:4c:b3:29:1d:74:8c:
06:df:7b:d5:d5:14:53:17:06:44:06:be:81:3d:6f:5c:bd:da:
0f:a7:4b:ef:06:0f:b6:49:87:77:80:d0:6f:ac:ed:16:4c:3b:
e7:37:4d:a1:ac:ff:47:f2:30:63:f8:e5:77:10:6b:ca:18:d3:
3a:cc:87:b0:ed:58:9e:01:f0:1b:14:35:e6:e3:e1:9e:59:8a:
5d:f4:d4:b1:c1:1a:96:93:21:f8:67:ac:0b:79:58:96:b1:30:
34:47:e7:9a:32:52:35:cb:b1:ea:26:60:1e:b2:96:54:38:e6:
d5:9f:aa:2e:3b:12:e4:78:56:c0:c4:8e:70:e6:9c:15:f3:83:
95:02:29:f7:b9:64:f2:21:e8:b5:49:a6:c1:b7:68:92:20:e4:
87:53:fa:99:f1:c6:72:c0:de:29:40:7e:51:36:b6:09:00:14:
ed:ac:40:3e:f3:57:32:56:13:a8:ce:2d:77:15:b2:16:16:7b:
d2:9d:dd:9b:44:24:bc:e7:2f:a4:9d:64:e2:b3:00:55:e6:5c:
99:1a:89:2d:c6:5d:55:68:1d:e7:e4:b3:7a:a3:d4:fc:85:6b:
2c:43:ed:c5:27:21:8f:e4:76:33:dd:6e:5c:0a:b1:47:a0:16:
39:29:6f:c4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaDnUiCg7pjr+lqI0JOhGf9oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZDhlZDUwNDgwODIyMzRiNzJhODJiNjEzNmM5ZDIwYjAz
NmVlNzAwHhcNMjYwOTI4MDkyMTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDk4NmMyZGNmNTY1ZGQ5MDc4NGFlZTY0N2MxMTE4YjMxMzU5MDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA017SVGYzhh+GxaeunheztMzctENw
whyWTNVbCI7gW1WtRQV40MuoVJ1n2tT0vggCCkO4hIQDKTgVQnN2BP0kxurcy/Ut
g0DpZYbmfjZxY7yTk2uF9JsMJF4w6F0H7KBs38PnmNx7OiV9VKXHmeiuY9gA09aV
P6EeKoZAvvX0fd3WxvssYr4sQKdSecZURXNyPd0MlVB2AQl62u9/lA4g0rx+XmeI
JJlTS9+tn4NPQzGK1+D+63ET/33/OCgR96zckfRt/9mN7Z5JyRFDE6/WpjlFq+we
f/Gf1jvm4DESr1LZgzpVFeTU8IkLsUwmmr+qkiSCpEeTneggkCJ6jj+UpQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH2YbC3PVl3ZB4Su5kfBEYsxNZCUMB8GA1UdIwQY
MBaAFKXY7VBICCI0tyqCthNsnSCwNu5wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGRqdFVFZ0lJalMzS29LMkUyeWRJTEEyN25BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC80ZjlmMjktYTAzZS00YzQ1LTgyY2Qt
MThmMzQzNDg4Mjg2LzEvZlpoc0xjOVdYZGtIaEs3bVI4RVJpekUxa0pRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC80ZjlmMjktYTAzZS00YzQ1LTgyY2QtMThmMzQzNDg4Mjg2
LzEvcGRqdFVFZ0lJalMzS29LMkUyeWRJTEEyN25BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW+EEAwQE
sp/QMA0GCSqGSIb3DQEBCwUAA4IBAQBlfhJP9T2XvXz7URVMsykddIwG33vV1RRT
FwZEBr6BPW9cvdoPp0vvBg+2SYd3gNBvrO0WTDvnN02hrP9H8jBj+OV3EGvKGNM6
zIew7VieAfAbFDXm4+GeWYpd9NSxwRqWkyH4Z6wLeViWsTA0R+eaMlI1y7HqJmAe
spZUOObVn6ouOxLkeFbAxI5w5pwV84OVAin3uWTyIei1SabBt2iSIOSHU/qZ8cZy
wN4pQH5RNrYJABTtrEA+81cyVhOozi13FbIWFnvSnd2bRCS85y+knWTiswBV5lyZ
Goktxl1VaB3n5LN6o9T8hWssQ+3FJyGP5HYz3W5cCrFHoBY5KW/E
-----END CERTIFICATE-----
Generated at Tue Sep 29 13:07:24 2026 by rpki-client