Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/sobZNfIjDe2cd4xpnGMsxz02kHM.roa
File: sobZNfIjDe2cd4xpnGMsxz02kHM.roa (raw, json)
Hash identifier: SYHfOD2MolO9wPRbmh+BGKpcolf47Ts9z4O246ZjZYc=
Subject key identifier: B2:86:D9:35:F2:23:0D:ED:9C:77:8C:69:9C:63:2C:C7:3D:36:90:73
Certificate issuer: /CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Certificate serial: 019C5EB2A8C27B371E227C20760D6705CD56
Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/sobZNfIjDe2cd4xpnGMsxz02kHM.roa
Signing time: Sun 15 Feb 2026 00:28:12 +0000
ROA not before: Sun 15 Feb 2026 00:28:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43342
IP address blocks: 91.135.178.0/23 maxlen: 23
91.135.178.0/24 maxlen: 24
91.135.179.0/24 maxlen: 24
91.135.180.0/24 maxlen: 24
91.135.181.0/24 maxlen: 24
91.135.182.0/24 maxlen: 24
91.135.184.0/22 maxlen: 23
91.135.184.0/24 maxlen: 24
91.135.185.0/24 maxlen: 24
91.135.186.0/24 maxlen: 24
91.135.187.0/24 maxlen: 24
91.135.190.0/23 maxlen: 23
91.135.190.0/24 maxlen: 24
91.135.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5e:b2:a8:c2:7b:37:1e:22:7c:20:76:0d:67:05:cd:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Validity
Not Before: Feb 15 00:28:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b286d935f2230ded9c778c699c632cc73d369073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:73:dc:51:48:9a:9b:1e:a5:d9:4f:2f:b9:76:
2d:0f:dd:90:5b:9b:34:4a:29:ac:68:bb:4a:a9:fb:
59:2d:b9:a4:d4:ca:4a:2d:b8:18:4c:94:ef:3e:b3:
95:fa:3d:ec:cf:46:f2:73:61:9b:3c:e0:94:28:1d:
ad:56:35:2a:a2:a9:9e:13:a9:3f:97:e8:f4:62:3f:
ae:83:17:23:3f:4e:b4:e0:bb:4d:8d:dd:3e:e1:3f:
2b:fa:fe:7a:be:03:ab:5e:29:ed:33:40:57:df:7e:
ea:00:09:72:86:1a:71:4f:a1:42:98:d3:ca:64:c9:
d8:1f:a6:be:f9:89:3e:fb:df:e3:70:10:5c:e6:3a:
39:f7:e1:e3:95:b2:57:f4:71:61:f1:3c:17:e7:41:
e6:8b:e1:47:c2:85:67:c2:7c:8a:33:0b:02:63:4d:
e4:63:52:95:ea:50:76:d9:b6:2f:78:5b:79:e0:04:
aa:cb:5a:b7:b9:21:6f:06:8c:a1:eb:ca:22:af:1a:
55:6e:7d:d4:69:79:2d:f7:1f:2b:83:53:e7:46:65:
50:f7:57:e6:d4:c7:40:d3:f2:72:cf:a4:4d:45:5a:
d5:0b:a9:1b:c4:f4:33:4e:bd:67:17:cf:c8:51:88:
4a:0c:ed:c9:2b:31:10:7f:1d:a2:e5:7b:0c:df:6e:
fa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:86:D9:35:F2:23:0D:ED:9C:77:8C:69:9C:63:2C:C7:3D:36:90:73
X509v3 Authority Key Identifier:
keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/sobZNfIjDe2cd4xpnGMsxz02kHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.135.178.0-91.135.182.255
91.135.184.0/22
91.135.190.0/23
Signature Algorithm: sha256WithRSAEncryption
22:06:a8:c8:73:5f:f8:26:6b:54:41:34:37:ef:63:df:95:6d:
e1:66:38:b1:67:ef:0a:fe:62:55:ad:fe:83:51:8e:b0:52:c7:
9f:e9:71:5a:e9:49:60:be:6c:1c:f1:b4:ee:e4:e5:c0:12:9d:
7f:72:60:98:3d:68:bd:ed:ec:d7:44:b1:40:0f:f7:f8:e0:80:
82:a5:4a:0e:e6:ee:21:fe:64:fa:51:2b:c7:2a:8e:a7:4e:65:
05:30:9f:ea:47:5f:77:8a:6e:3a:a9:e5:3a:c4:f4:c3:88:60:
89:7c:b1:b3:d2:c2:18:08:76:a1:cb:df:d3:e7:5c:84:37:ac:
69:8b:99:4e:a1:fd:33:a0:4f:70:ca:2e:30:dc:06:1c:d3:14:
82:a2:ce:7b:9b:cb:99:e7:31:cc:2b:ac:9a:ea:5b:bd:22:91:
35:b6:0d:be:36:1c:5c:ee:fa:3d:a3:8b:03:11:7e:28:be:ac:
2b:fc:ab:28:ae:41:31:0e:16:da:d6:79:49:06:e9:7d:ab:5c:
bf:f0:08:1f:1a:bb:e9:e9:d8:e6:87:7c:ed:51:fb:40:95:0e:
1d:10:76:61:8b:39:94:1c:0f:8c:df:73:93:eb:42:5e:00:62:
57:f0:5e:73:aa:df:39:a8:16:42:83:a9:3e:cf:99:cb:f2:fa:
e3:96:91:77
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZxesqjCezceInwgdg1nBc1WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNzVkN2E4YmFjMDQ3N2Y1NTA5ZGZmMTFiOTE5NWNhNjBk
Zjg3ZGEwHhcNMjYwMjE1MDAyODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjg2ZDkzNWYyMjMwZGVkOWM3NzhjNjk5YzYzMmNjNzNkMzY5MDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7HPcUUiamx6l2U8vuXYtD92QW5s0
SimsaLtKqftZLbmk1MpKLbgYTJTvPrOV+j3sz0byc2GbPOCUKB2tVjUqoqmeE6k/
l+j0Yj+ugxcjP0604LtNjd0+4T8r+v56vgOrXintM0BX337qAAlyhhpxT6FCmNPK
ZMnYH6a++Yk++9/jcBBc5jo59+HjlbJX9HFh8TwX50Hmi+FHwoVnwnyKMwsCY03k
Y1KV6lB22bYveFt54ASqy1q3uSFvBoyh68oirxpVbn3UaXkt9x8rg1PnRmVQ91fm
1MdA0/Jyz6RNRVrVC6kbxPQzTr1nF8/IUYhKDO3JKzEQfx2i5XsM32765QIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFLKG2TXyIw3tnHeMaZxjLMc9NpBzMB8GA1UdIwQY
MBaAFNJ116i6wEd/VQnf8RuRlcpg34faMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG5YWHFMckFSMzlWQ2RfeEc1R1Z5bURmaDlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83YmViMDQtMzE3Yi00NDhhLTgyZWQt
NTY1YjE0NDcwMzdiLzEvc29iWk5mSWpEZTJjZDR4cG5HTXN4ejAya0hNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS83YmViMDQtMzE3Yi00NDhhLTgyZWQtNTY1YjE0NDcwMzdi
LzEvMG5YWHFMckFSMzlWQ2RfeEc1R1Z5bURmaDlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAFbh7ID
BABbh7YDBAJbh7gDBAFbh74wDQYJKoZIhvcNAQELBQADggEBACIGqMhzX/gma1RB
NDfvY9+VbeFmOLFn7wr+YlWt/oNRjrBSx5/pcVrpSWC+bBzxtO7k5cASnX9yYJg9
aL3t7NdEsUAP9/jggIKlSg7m7iH+ZPpRK8cqjqdOZQUwn+pHX3eKbjqp5TrE9MOI
YIl8sbPSwhgIdqHL39PnXIQ3rGmLmU6h/TOgT3DKLjDcBhzTFIKiznuby5nnMcwr
rJrqW70ikTW2Db42HFzu+j2jiwMRfii+rCv8qyiuQTEOFtrWeUkG6X2rXL/wCB8a
u+np2OaHfO1R+0CVDh0QdmGLOZQcD4zfc5PrQl4AYlfwXnOq3zmoFkKDqT7Pmcvy
+uOWkXc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:31:55 2026 by rpki-client