Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/bBOHRRkkkTWmeJdZ-1MsrhkPDoY.roa
File: bBOHRRkkkTWmeJdZ-1MsrhkPDoY.roa (raw, json)
Hash identifier: ORVCT7FJ02Pf6zwRRTxkzn72Y3WbAChmuKaE2k5xVLE=
Subject key identifier: 6C:13:87:45:19:24:91:35:A6:78:97:59:FB:53:2C:AE:19:0F:0E:86
Certificate issuer: /CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Certificate serial: 019F23690620DD0EC7A38607749142E4E305
Authority key identifier: F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/bBOHRRkkkTWmeJdZ-1MsrhkPDoY.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56971
IP address blocks: 91.108.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:06:20:dd:0e:c7:a3:86:07:74:91:42:e4:e3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c13874519249135a6789759fb532cae190f0e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fb:62:68:33:0a:b7:be:d2:3c:bf:e4:a8:40:
a5:09:80:ee:26:ef:db:ee:b8:da:9f:ef:2e:63:f7:
57:26:1a:8a:c5:91:ca:c3:24:3a:3b:fe:b9:c0:dd:
64:de:16:67:ff:2c:27:8c:9c:52:43:e3:b5:e8:e9:
8d:b6:9c:dc:2d:db:6f:b4:26:33:3c:0f:be:bc:2b:
0c:0e:52:b6:11:c3:eb:5e:17:07:ba:9a:3a:94:0a:
4d:cc:0d:30:fc:59:0b:1e:57:0d:d9:9b:c2:36:bc:
e0:27:ee:bf:2a:24:9e:0d:be:64:35:5f:fe:52:91:
c3:ca:3c:87:9e:bf:d8:16:32:5a:55:e0:a3:e3:52:
28:b0:e3:b6:ec:f9:99:ee:d9:28:59:23:ca:e8:61:
65:be:7c:e2:6d:23:27:73:49:99:f5:83:2d:73:38:
1d:0d:12:00:65:7a:64:f1:66:65:92:a3:79:fc:e0:
33:c0:b3:72:4c:38:5b:0a:4d:21:89:1f:50:57:84:
99:44:5d:46:84:d3:9f:fd:08:2c:60:b9:50:10:3b:
b1:73:61:5f:75:da:f1:e5:c5:a3:58:cf:f9:f2:24:
8a:94:c6:36:3b:41:10:bc:73:4c:c9:e2:16:84:3f:
b0:26:86:c4:31:a1:39:9d:c4:10:ec:60:1c:7d:79:
5e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:13:87:45:19:24:91:35:A6:78:97:59:FB:53:2C:AE:19:0F:0E:86
X509v3 Authority Key Identifier:
keyid:F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/bBOHRRkkkTWmeJdZ-1MsrhkPDoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.189.0/24
Signature Algorithm: sha256WithRSAEncryption
08:0f:32:d4:15:91:53:ae:c6:10:ec:7d:d7:05:0b:b9:8a:26:
ad:c0:6f:b3:2a:4c:e7:3f:53:4c:ba:9b:d7:e2:20:f6:48:51:
03:fe:3e:64:4b:b6:28:7f:82:b0:7c:af:3c:d7:67:96:f1:e3:
e0:c8:b5:5e:32:d8:b5:b6:b2:29:2c:be:4c:da:19:28:28:36:
ba:ed:27:39:15:f5:c5:8a:d2:13:55:08:90:0d:b0:8d:3c:4a:
f4:f1:c2:66:49:ff:e4:36:c4:ca:ef:b1:d1:9c:c1:54:dd:05:
1f:08:b7:e1:03:71:64:40:de:c5:cb:ac:85:8f:d7:de:d7:14:
89:87:a4:dd:45:0f:53:c8:65:af:11:f1:51:b7:6c:4d:ad:77:
3d:95:3e:2a:12:67:88:33:94:ca:af:11:f0:29:ee:08:c7:da:
ec:ce:0e:36:f4:2f:9b:c5:9d:ab:3a:b7:86:82:29:a1:31:39:
93:dc:73:df:ba:64:3d:d0:cc:81:1f:e4:8a:3a:d4:9b:2d:20:
52:df:e1:c2:73:d8:c8:8d:65:7d:2d:33:69:11:df:b0:a3:30:
2f:c2:53:89:7b:e1:ba:34:bd:74:58:42:3b:6e:44:3c:85:db:
ef:82:17:15:f6:e5:18:0c:d6:00:0b:72:f4:5b:fb:83:59:fe:
57:d3:c6:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaQYg3Q7Ho4YHdJFC5OMFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NGRlMzZjZTY1NDM3MjFmMjdhNjg5M2EzYjNhYjdmZmY5
ZTEyMjEwHhcNMjYwNzAyMTUxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzEzODc0NTE5MjQ5MTM1YTY3ODk3NTlmYjUzMmNhZTE5MGYwZTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiftiaDMKt77SPL/kqEClCYDuJu/b
7rjan+8uY/dXJhqKxZHKwyQ6O/65wN1k3hZn/ywnjJxSQ+O16OmNtpzcLdtvtCYz
PA++vCsMDlK2EcPrXhcHupo6lApNzA0w/FkLHlcN2ZvCNrzgJ+6/KiSeDb5kNV/+
UpHDyjyHnr/YFjJaVeCj41IosOO27PmZ7tkoWSPK6GFlvnzibSMnc0mZ9YMtczgd
DRIAZXpk8WZlkqN5/OAzwLNyTDhbCk0hiR9QV4SZRF1GhNOf/QgsYLlQEDuxc2Ff
ddrx5cWjWM/58iSKlMY2O0EQvHNMyeIWhD+wJobEMaE5ncQQ7GAcfXleAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGwTh0UZJJE1pniXWftTLK4ZDw6GMB8GA1UdIwQY
MBaAFPRN42zmVDch8npok6Ozq3//nhIhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUUzamJPWlVOeUh5ZW1pVG83T3JmXy1lRWlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMt
MjRkOGU3NDdjMzhmLzEvYkJPSFJSa2trVFdtZUpkWi0xTXNyaGtQRG9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMtMjRkOGU3NDdjMzhm
LzEvOUUzamJPWlVOeUh5ZW1pVG83T3JmXy1lRWlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2y9MA0G
CSqGSIb3DQEBCwUAA4IBAQAIDzLUFZFTrsYQ7H3XBQu5iiatwG+zKkznP1NMupvX
4iD2SFED/j5kS7Yof4KwfK8812eW8ePgyLVeMti1trIpLL5M2hkoKDa67Sc5FfXF
itITVQiQDbCNPEr08cJmSf/kNsTK77HRnMFU3QUfCLfhA3FkQN7Fy6yFj9fe1xSJ
h6TdRQ9TyGWvEfFRt2xNrXc9lT4qEmeIM5TKrxHwKe4Ix9rszg429C+bxZ2rOreG
gimhMTmT3HPfumQ90MyBH+SKOtSbLSBS3+HCc9jIjWV9LTNpEd+wozAvwlOJe+G6
NL10WEI7bkQ8hdvvghcV9uUYDNYAC3L0W/uDWf5X08Zx
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:45 2026 by rpki-client