Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ORQAJS6Q5Jt_jAwh9WWu0sDYr2k.roa
File: ORQAJS6Q5Jt_jAwh9WWu0sDYr2k.roa (raw, json)
Hash identifier: 5rDPzl0Z4Rz08WqSG+JqqO1ImUCxDtxn9ewcE7FC19Y=
Subject key identifier: 39:14:00:25:2E:90:E4:9B:7F:8C:0C:21:F5:65:AE:D2:C0:D8:AF:69
Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial: 019E6984BD702890EDAB8DD81C8047A61651
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ORQAJS6Q5Jt_jAwh9WWu0sDYr2k.roa
Signing time: Wed 27 May 2026 12:59:27 +0000
ROA not before: Wed 27 May 2026 12:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4849
IP address blocks: 91.132.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:69:84:bd:70:28:90:ed:ab:8d:d8:1c:80:47:a6:16:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Validity
Not Before: May 27 12:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=391400252e90e49b7f8c0c21f565aed2c0d8af69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c1:53:0d:50:7e:08:1f:08:bf:0f:5c:6c:97:
55:9f:c3:cf:8a:2c:f5:92:f4:e3:79:bc:c0:49:b7:
2f:3b:10:a8:63:bf:96:6b:28:bb:28:28:12:f8:b7:
c1:d9:39:55:ea:de:63:d2:09:b6:a9:dc:6c:73:7d:
ca:14:4a:7e:1c:90:21:d1:f7:b2:b5:f1:6f:a9:ca:
f0:bb:96:e6:29:93:ce:4b:71:6c:b2:fe:60:b1:a2:
5a:1f:81:52:58:2d:b9:b2:45:14:ab:ed:85:23:52:
d3:4f:d7:e8:be:f7:bc:d9:b0:e2:f3:fb:65:94:8f:
47:dc:ea:d3:26:e6:7a:10:46:25:04:df:9e:e2:87:
d0:85:c0:13:98:d7:b0:57:de:6c:fa:86:ac:48:dd:
13:4d:18:da:d1:22:4e:92:03:ef:d9:c2:52:30:58:
64:bb:c8:7f:cb:1d:6c:b9:f0:d1:46:09:7c:de:11:
79:69:53:28:22:27:3b:9b:c5:36:5d:28:72:62:77:
f3:7a:0c:73:21:cd:08:7e:43:c1:c1:ad:21:7a:8f:
f2:37:04:72:99:0a:12:d9:e6:c5:62:ae:d9:d1:40:
7a:84:46:cb:40:fe:dc:23:cf:5e:1e:dd:82:06:40:
b9:ad:4a:6a:f4:50:1a:40:5b:2b:55:b1:bd:7b:e2:
6c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:14:00:25:2E:90:E4:9B:7F:8C:0C:21:F5:65:AE:D2:C0:D8:AF:69
X509v3 Authority Key Identifier:
keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ORQAJS6Q5Jt_jAwh9WWu0sDYr2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.62.0/24
Signature Algorithm: sha256WithRSAEncryption
35:2b:cc:e0:05:8e:a9:53:75:84:40:dd:e4:22:af:67:5d:04:
2b:56:78:bc:92:f3:42:47:44:90:3f:30:fd:e6:f3:ad:52:31:
d2:1f:2b:9c:95:e0:39:6d:09:c6:8a:58:8b:66:e6:33:5d:0c:
9c:db:40:02:5c:83:cd:dd:07:27:1e:bc:f5:84:03:c0:56:8a:
4a:87:5a:ab:f4:d0:dd:68:de:9e:58:fe:1c:8b:38:53:3a:1c:
e4:e6:ac:3e:bc:f2:d2:42:7e:8f:b1:e7:74:52:91:c1:29:1c:
d9:72:ed:c2:37:45:6e:f7:17:91:6f:f8:a6:82:ae:35:a3:20:
35:7a:8e:c8:29:48:c9:17:05:9c:d1:58:ee:f0:6b:4a:1b:98:
1a:74:59:af:08:10:36:28:06:ad:ea:cd:97:b9:51:96:a2:92:
63:17:96:49:24:1b:9b:c4:72:3c:4e:b5:2f:c7:4b:2d:51:3d:
31:fb:43:45:30:a5:d0:c1:70:ba:d0:37:fb:7e:ef:11:c6:3c:
7f:6d:fb:fb:01:83:59:23:aa:06:3d:12:7e:91:7d:7b:81:c7:
9b:4a:69:9f:d8:31:07:ff:9f:52:27:f8:4a:34:d8:b8:88:dc:
f6:c3:d5:ce:4d:96:78:6a:82:69:64:9c:09:a1:af:5f:8f:ae:
81:76:84:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5phL1wKJDtq43YHIBHphZRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MmQ0Y2VjNzgzMzA1OTIzZTM0OTdlZDg4NGYxYzQ0NWI0
ZTc4ZmIwHhcNMjYwNTI3MTI1OTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTE0MDAyNTJlOTBlNDliN2Y4YzBjMjFmNTY1YWVkMmMwZDhhZjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8FTDVB+CB8Ivw9cbJdVn8PPiiz1
kvTjebzASbcvOxCoY7+Wayi7KCgS+LfB2TlV6t5j0gm2qdxsc33KFEp+HJAh0fey
tfFvqcrwu5bmKZPOS3Fssv5gsaJaH4FSWC25skUUq+2FI1LTT9fovve82bDi8/tl
lI9H3OrTJuZ6EEYlBN+e4ofQhcATmNewV95s+oasSN0TTRja0SJOkgPv2cJSMFhk
u8h/yx1sufDRRgl83hF5aVMoIic7m8U2XShyYnfzegxzIc0IfkPBwa0heo/yNwRy
mQoS2ebFYq7Z0UB6hEbLQP7cI89eHt2CBkC5rUpq9FAaQFsrVbG9e+JsIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDkUACUukOSbf4wMIfVlrtLA2K9pMB8GA1UdIwQY
MBaAFLYtTOx4MwWSPjSX7YhPHERbTnj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGkxTTdIZ3pCWkktTkpmdGlFOGNSRnRPZVBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mMWIzZGEtYmViZi00NGIwLWFiMTIt
ZDMyZTI3ZmI3ZTU5LzEvT1JRQUpTNlE1SnRfakF3aDlXV3Uwc0RZcjJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mMWIzZGEtYmViZi00NGIwLWFiMTItZDMyZTI3ZmI3ZTU5
LzEvdGkxTTdIZ3pCWkktTkpmdGlFOGNSRnRPZVBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW4Q+MA0G
CSqGSIb3DQEBCwUAA4IBAQA1K8zgBY6pU3WEQN3kIq9nXQQrVni8kvNCR0SQPzD9
5vOtUjHSHyucleA5bQnGiliLZuYzXQyc20ACXIPN3QcnHrz1hAPAVopKh1qr9NDd
aN6eWP4cizhTOhzk5qw+vPLSQn6Psed0UpHBKRzZcu3CN0Vu9xeRb/imgq41oyA1
eo7IKUjJFwWc0Vju8GtKG5gadFmvCBA2KAat6s2XuVGWopJjF5ZJJBubxHI8TrUv
x0stUT0x+0NFMKXQwXC60Df7fu8Rxjx/bfv7AYNZI6oGPRJ+kX17gcebSmmf2DEH
/59SJ/hKNNi4iNz2w9XOTZZ4aoJpZJwJoa9fj66BdoSA
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:10:31 2026 by rpki-client