Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/SxYA2eAXAKr0cnVWY1NxUEONOjw.roa
File: SxYA2eAXAKr0cnVWY1NxUEONOjw.roa (raw, json)
Hash identifier: 9j2DjDHd4IAamTX3oXd9lojSys88uaOmCY+n/WqYeOw=
Subject key identifier: 4B:16:00:D9:E0:17:00:AA:F4:72:75:56:63:53:71:50:43:8D:3A:3C
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A087AEA9F7E8B8F664EADDF2DA89FF6DE6
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/SxYA2eAXAKr0cnVWY1NxUEONOjw.roa
Signing time: Wed 09 Sep 2026 19:39:25 +0000
ROA not before: Wed 09 Sep 2026 19:39:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202615
IP address blocks: 91.200.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:ae:a9:f7:e8:b8:f6:64:ea:dd:f2:da:89:ff:6d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 9 19:39:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b1600d9e01700aaf472755663537150438d3a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1f:c9:22:5a:24:37:5a:82:ef:21:9e:ed:69:
63:35:3b:08:bf:0c:71:6e:f3:30:88:f6:54:6e:05:
0f:21:1c:76:10:47:29:b8:7f:52:4b:f8:84:52:1e:
66:e2:f7:fd:5d:d8:99:3c:e4:f4:3b:dd:50:73:2c:
d6:65:b2:df:d6:25:fe:4d:f7:a5:d7:c5:e7:06:32:
e8:21:a5:5d:5c:55:e6:81:90:ee:8f:18:62:ce:59:
ec:f8:94:91:8c:5a:bb:32:f2:5a:90:7e:e0:f1:41:
38:26:a5:8d:48:07:56:9b:02:af:2f:2d:9d:a1:00:
18:55:b0:36:3f:d4:f3:12:c6:33:5f:74:ba:79:89:
4a:de:d5:b1:b9:6d:d1:4c:c8:8e:bc:8a:8e:45:bc:
75:27:9d:8f:6d:14:9b:87:fa:a5:bb:38:26:b5:91:
f6:3c:ff:56:6e:d5:b6:28:25:47:3e:23:96:51:c4:
40:31:bc:91:0b:5b:16:32:e5:fc:ee:7d:b6:70:f0:
e6:33:25:27:72:90:4e:a3:e5:e1:5a:19:8b:99:d8:
45:5b:49:10:43:08:75:82:70:49:d2:0c:e9:f4:10:
22:61:d5:79:3b:b4:3e:3d:28:61:b9:24:f7:2b:2b:
63:4b:b3:8c:89:a4:c3:6f:80:0b:cc:3a:82:09:4e:
3a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:16:00:D9:E0:17:00:AA:F4:72:75:56:63:53:71:50:43:8D:3A:3C
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/SxYA2eAXAKr0cnVWY1NxUEONOjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.221.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:bb:16:78:21:40:ca:99:9b:1a:91:a8:97:7e:31:9a:38:04:
ff:e5:d3:61:1f:f1:ee:25:2a:bf:78:03:33:b8:72:2e:18:93:
b9:b0:ed:66:c9:22:ec:e1:ed:ea:a1:16:21:41:48:5b:4b:52:
12:58:8b:67:b3:49:fc:5c:82:ab:4b:e2:a3:f4:f3:21:34:ee:
6f:95:d7:f3:a3:de:b1:ac:76:5e:68:8d:14:9f:8e:21:20:96:
27:9a:28:6a:83:bd:67:47:17:d9:05:70:e8:01:77:96:2d:59:
d6:66:7b:a7:93:17:7b:73:9a:a2:d7:53:1d:07:b4:e5:91:22:
39:c1:51:88:d7:a0:9b:38:23:64:76:45:bd:74:c7:61:11:4e:
bc:dd:7c:86:0b:dc:c9:19:65:5d:fa:b8:8a:e4:e5:8c:b0:68:
c5:69:11:1a:53:24:24:79:52:ce:94:67:ef:95:41:ea:fb:bc:
13:cc:89:98:35:b6:ff:e9:80:b8:ba:3b:2e:70:0c:5d:5d:45:
33:39:da:cc:a0:ff:21:90:08:60:87:55:59:72:52:68:c8:bd:
1f:fa:27:e8:4a:e7:ad:13:bb:62:91:98:85:39:14:fd:11:c9:
23:28:eb:cd:01:ac:48:da:0b:0d:26:9e:1e:4a:10:af:b1:f0:
10:45:74:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCHrqn36Lj2ZOrd8tqJ/23mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjYwOTA5MTkzOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjE2MDBkOWUwMTcwMGFhZjQ3Mjc1NTY2MzUzNzE1MDQzOGQzYTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjx/JIlokN1qC7yGe7WljNTsIvwxx
bvMwiPZUbgUPIRx2EEcpuH9SS/iEUh5m4vf9XdiZPOT0O91QcyzWZbLf1iX+Tfel
18XnBjLoIaVdXFXmgZDujxhizlns+JSRjFq7MvJakH7g8UE4JqWNSAdWmwKvLy2d
oQAYVbA2P9TzEsYzX3S6eYlK3tWxuW3RTMiOvIqORbx1J52PbRSbh/qluzgmtZH2
PP9WbtW2KCVHPiOWUcRAMbyRC1sWMuX87n22cPDmMyUncpBOo+XhWhmLmdhFW0kQ
Qwh1gnBJ0gzp9BAiYdV5O7Q+PShhuST3KytjS7OMiaTDb4ALzDqCCU46UwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEsWANngFwCq9HJ1VmNTcVBDjTo8MB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvU3hZQTJlQVhBS3IwY25WV1kxTnhVRU9OT2p3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8jdMA0G
CSqGSIb3DQEBCwUAA4IBAQA+uxZ4IUDKmZsakaiXfjGaOAT/5dNhH/HuJSq/eAMz
uHIuGJO5sO1mySLs4e3qoRYhQUhbS1ISWItns0n8XIKrS+Kj9PMhNO5vldfzo96x
rHZeaI0Un44hIJYnmihqg71nRxfZBXDoAXeWLVnWZnunkxd7c5qi11MdB7TlkSI5
wVGI16CbOCNkdkW9dMdhEU683XyGC9zJGWVd+riK5OWMsGjFaREaUyQkeVLOlGfv
lUHq+7wTzImYNbb/6YC4ujsucAxdXUUzOdrMoP8hkAhgh1VZclJoyL0f+ifoSuet
E7tikZiFORT9EckjKOvNAaxI2gsNJp4eShCvsfAQRXQp
-----END CERTIFICATE-----
Generated at Mon Sep 28 06:20:24 2026 by rpki-client