Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/afKBlYSGIMBV_VMkuFvv4MisLCI.roa
File: afKBlYSGIMBV_VMkuFvv4MisLCI.roa (raw, json)
Hash identifier: s1e49FrGfKuZntD2cZ980PigitairMSPS2lGbyZKLV4=
Subject key identifier: 69:F2:81:95:84:86:20:C0:55:FD:53:24:B8:5B:EF:E0:C8:AC:2C:22
Certificate issuer: /CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Certificate serial: 019B783434FCF2B9442F343EF66232B56C93
Authority key identifier: 1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/afKBlYSGIMBV_VMkuFvv4MisLCI.roa
Signing time: Thu 01 Jan 2026 06:17:25 +0000
ROA not before: Thu 01 Jan 2026 06:17:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21208
IP address blocks: 91.228.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:34:fc:f2:b9:44:2f:34:3e:f6:62:32:b5:6c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Validity
Not Before: Jan 1 06:17:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f28195848620c055fd5324b85befe0c8ac2c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:21:ff:ea:67:a8:bc:d5:de:26:72:91:53:
28:84:1b:10:a1:8e:26:5c:be:41:c3:c5:df:3f:f9:
81:93:25:6d:a9:d3:e1:e6:57:7c:d4:c0:3b:d0:09:
55:4f:68:20:3f:13:9a:35:ef:52:96:32:ff:2d:6e:
0a:17:86:a6:c8:a3:31:ba:2a:19:9d:c1:de:50:e3:
c8:cb:80:18:bb:63:4b:71:0d:95:41:b9:05:2d:0e:
07:50:0e:f3:4b:03:49:0c:2d:e5:70:fb:71:21:52:
ca:9b:a4:fb:6a:14:c4:96:9b:c9:f6:18:dd:9a:87:
b5:a4:ca:c9:37:c7:34:9a:80:20:48:e7:58:12:d6:
38:02:21:6f:50:ea:05:54:c6:b2:50:56:23:9d:8b:
d1:0a:29:55:99:d2:89:a9:9c:59:7c:2e:07:fc:1d:
f6:33:42:a1:34:ed:43:f1:2f:6e:ab:f4:1d:a3:2d:
89:4c:4b:83:3d:d5:36:c9:90:8d:b1:7d:f0:b0:bb:
a2:de:31:56:d1:0b:1e:24:73:57:1e:06:6a:ce:ef:
9f:ec:1f:a8:cc:65:01:ab:d9:2c:72:f6:09:3a:f8:
68:f6:ec:36:c9:8d:cc:07:7a:d1:b2:cc:74:ca:7b:
a7:c4:69:c7:12:bb:61:69:c2:0c:e7:7d:96:dc:49:
49:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F2:81:95:84:86:20:C0:55:FD:53:24:B8:5B:EF:E0:C8:AC:2C:22
X509v3 Authority Key Identifier:
keyid:1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/afKBlYSGIMBV_VMkuFvv4MisLCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.188.0/24
Signature Algorithm: sha256WithRSAEncryption
03:33:f3:c0:51:bc:ac:39:eb:ef:cb:e6:42:bc:9e:c2:ba:b7:
e2:e3:fb:d7:c5:63:f0:7f:aa:9f:ec:62:68:fa:2c:48:86:cb:
52:58:ff:05:61:46:08:d8:2a:a5:a8:50:50:b7:3a:0d:e6:70:
ee:34:7b:c0:b9:a9:3a:45:09:d4:ea:f6:61:fd:ee:f8:72:5c:
da:7f:b3:89:79:89:8c:60:e7:cc:62:80:37:75:42:01:6e:26:
68:0e:89:5b:86:3a:28:0c:91:85:bb:91:00:e5:ae:b9:dc:ca:
75:00:68:63:ee:5a:21:04:ee:db:ea:17:50:9f:28:b5:ab:c8:
29:9e:44:47:f3:d0:fa:cb:1f:bf:4a:0b:5a:88:e0:57:f4:60:
e7:69:95:3e:8e:0c:d0:e1:34:e5:e6:12:9b:b1:25:b2:1c:f6:
e7:aa:3b:12:71:b8:f2:66:65:5f:af:51:5d:4a:5c:74:d2:62:
9c:d7:ca:97:d1:f3:f5:64:08:d6:f4:20:7d:85:cc:38:0b:5e:
2d:09:21:0a:9c:da:47:93:6a:12:7b:3d:30:86:18:4b:48:45:
5c:a9:0a:2e:43:a4:60:39:73:ad:24:69:09:40:b7:7f:8a:e9:
b0:0e:6c:a4:a3:35:d6:8f:43:52:50:8b:18:f4:f8:a5:e5:ab:
d9:52:67:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4NDT88rlELzQ+9mIytWyTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOTAwNGVhMDUzOGM3M2MyM2EzZDFkZmRjMTIxZjBlNjAw
YWNkZjUwHhcNMjYwMTAxMDYxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWYyODE5NTg0ODYyMGMwNTVmZDUzMjRiODViZWZlMGM4YWMyYzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDAh/+pnqLzV3iZykVMohBsQoY4m
XL5Bw8XfP/mBkyVtqdPh5ld81MA70AlVT2ggPxOaNe9SljL/LW4KF4amyKMxuioZ
ncHeUOPIy4AYu2NLcQ2VQbkFLQ4HUA7zSwNJDC3lcPtxIVLKm6T7ahTElpvJ9hjd
moe1pMrJN8c0moAgSOdYEtY4AiFvUOoFVMayUFYjnYvRCilVmdKJqZxZfC4H/B32
M0KhNO1D8S9uq/Qdoy2JTEuDPdU2yZCNsX3wsLui3jFW0QseJHNXHgZqzu+f7B+o
zGUBq9kscvYJOvho9uw2yY3MB3rRssx0ynunxGnHErthacIM532W3ElJhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGnygZWEhiDAVf1TJLhb7+DIrCwiMB8GA1UdIwQY
MBaAFB+QBOoFOMc8I6PR39wSHw5gCs31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDVBRTZnVTR4endqbzlIZjNCSWZEbUFLemZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yM2Q3YjctNWFlNi00NjMxLWIxNDIt
NDk2YWJlZTdjZTc5LzEvYWZLQmxZU0dJTUJWX1ZNa3VGdnY0TWlzTENJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yM2Q3YjctNWFlNi00NjMxLWIxNDItNDk2YWJlZTdjZTc5
LzEvSDVBRTZnVTR4endqbzlIZjNCSWZEbUFLemZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+S8MA0G
CSqGSIb3DQEBCwUAA4IBAQADM/PAUbysOevvy+ZCvJ7Curfi4/vXxWPwf6qf7GJo
+ixIhstSWP8FYUYI2CqlqFBQtzoN5nDuNHvAuak6RQnU6vZh/e74clzaf7OJeYmM
YOfMYoA3dUIBbiZoDolbhjooDJGFu5EA5a653Mp1AGhj7lohBO7b6hdQnyi1q8gp
nkRH89D6yx+/SgtaiOBX9GDnaZU+jgzQ4TTl5hKbsSWyHPbnqjsScbjyZmVfr1Fd
Slx00mKc18qX0fP1ZAjW9CB9hcw4C14tCSEKnNpHk2oSez0whhhLSEVcqQouQ6Rg
OXOtJGkJQLd/iumwDmykozXWj0NSUIsY9Pil5avZUmf0
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:01:56 2026 by rpki-client