Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/e1IhMKeMisuXEHcAjWQVgSjjfD0.roa
File: e1IhMKeMisuXEHcAjWQVgSjjfD0.roa (raw, json)
Hash identifier: oQ/Qfz2KLZdeJN7zojygq7vM4Um6kObVX4+hO49cwrc=
Subject key identifier: 7B:52:21:30:A7:8C:8A:CB:97:10:77:00:8D:64:15:81:28:E3:7C:3D
Certificate issuer: /CN=cf782d2872b9e7a10a91a27f307020da94844827
Certificate serial: 01A0B9AAB367966F0CB2993DDF468124E5F6
Authority key identifier: CF:78:2D:28:72:B9:E7:A1:0A:91:A2:7F:30:70:20:DA:94:84:48:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3gtKHK556EKkaJ_MHAg2pSESCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/e1IhMKeMisuXEHcAjWQVgSjjfD0.roa
Signing time: Sat 19 Sep 2026 12:36:07 +0000
ROA not before: Sat 19 Sep 2026 12:36:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209596
IP address blocks: 91.245.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3gtKHK556EKkaJ_MHAg2pSESCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:aa:b3:67:96:6f:0c:b2:99:3d:df:46:81:24:e5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf782d2872b9e7a10a91a27f307020da94844827
Validity
Not Before: Sep 19 12:36:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b522130a78c8acb971077008d64158128e37c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:ec:b5:fb:d4:d4:72:f4:8d:b9:3d:47:f3:
d8:b8:b7:45:90:16:e7:19:7e:05:9f:4c:4f:d6:3c:
90:16:a0:eb:24:d3:d7:2a:78:3a:53:25:3f:23:30:
b8:7a:cd:d3:f2:49:44:9b:98:f1:c1:83:69:25:d4:
24:7e:96:3f:a0:eb:53:96:d1:f0:fa:1f:6f:18:98:
d6:6b:f6:9e:dd:e5:11:0f:3c:c8:4a:16:aa:b7:80:
99:51:03:15:ad:22:18:ee:53:51:1f:92:6e:b0:b4:
8d:98:0a:1b:b8:e8:c3:52:cb:2c:58:57:37:19:61:
7c:80:b0:9e:4c:a8:f3:66:43:19:38:51:0e:2b:72:
34:9e:2b:89:0c:b3:12:3f:c5:ba:ef:ff:96:8d:d3:
ac:bf:88:e9:9c:dd:1d:fa:c5:97:61:27:ad:c8:e2:
89:91:7d:9f:5e:2f:97:22:90:6d:8c:9c:b0:12:af:
ea:2d:44:06:b2:12:ea:d1:53:f1:6e:b1:54:4c:6b:
a7:ce:5b:77:10:43:9a:9c:d3:5d:3f:87:86:5d:47:
48:5f:b9:d8:2c:3e:b3:89:57:9b:8c:6f:54:51:1c:
86:7a:27:dc:68:86:e8:5b:5c:f7:a7:40:53:97:18:
df:83:f2:4c:f1:2d:20:05:17:c5:70:09:3a:3a:60:
1a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:52:21:30:A7:8C:8A:CB:97:10:77:00:8D:64:15:81:28:E3:7C:3D
X509v3 Authority Key Identifier:
keyid:CF:78:2D:28:72:B9:E7:A1:0A:91:A2:7F:30:70:20:DA:94:84:48:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3gtKHK556EKkaJ_MHAg2pSESCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/e1IhMKeMisuXEHcAjWQVgSjjfD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f7e1f2-5df8-45a4-ae72-54f7453f1033/1/z3gtKHK556EKkaJ_MHAg2pSESCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.228.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:4f:7c:9a:be:f4:e7:34:d8:7c:c0:b6:b5:76:a0:84:3b:34:
3b:8c:64:9c:5a:b6:0d:2c:54:61:77:66:47:08:3f:fe:4c:07:
06:d0:0e:56:c7:ab:e5:d4:fd:d6:c5:dd:4f:40:b0:6b:fc:01:
a5:48:3c:5f:2c:d2:ec:f5:0c:ea:ca:aa:31:71:b3:7c:b4:fe:
4d:21:dd:7a:b8:e4:c8:6b:4b:d7:04:00:b6:aa:0a:35:de:dc:
22:f2:ae:30:b8:ed:5b:b7:98:6d:c1:43:ba:56:d6:88:77:e5:
90:d2:94:21:0f:bd:cb:db:97:d5:f6:5a:d3:ca:c3:7d:69:d9:
60:e7:86:ec:de:18:42:f6:35:60:47:94:c2:b1:3e:0d:83:7d:
9e:41:fd:e8:b9:4c:1c:81:ec:bc:9f:f0:38:b5:6e:ce:d0:e5:
1d:e5:b2:c4:3d:cf:50:e2:0c:b5:89:cd:30:3f:62:17:25:95:
74:ee:6d:a0:c1:36:a6:d6:90:3c:28:4e:15:73:97:6d:50:e3:
5f:3e:1b:48:3c:5e:20:e0:c1:fe:13:2d:d3:f9:ed:84:fa:73:
a2:7d:bd:47:15:d6:19:9e:64:41:9f:6d:42:74:d3:52:52:c1:
68:ef:9b:93:3a:90:51:f4:60:47:4f:bf:ff:15:56:49:b1:1c:
3c:73:70:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaC5qrNnlm8Mspk930aBJOX2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNzgyZDI4NzJiOWU3YTEwYTkxYTI3ZjMwNzAyMGRhOTQ4
NDQ4MjcwHhcNMjYwOTE5MTIzNjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjUyMjEzMGE3OGM4YWNiOTcxMDc3MDA4ZDY0MTU4MTI4ZTM3YzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6nstfvU1HL0jbk9R/PYuLdFkBbn
GX4Fn0xP1jyQFqDrJNPXKng6UyU/IzC4es3T8klEm5jxwYNpJdQkfpY/oOtTltHw
+h9vGJjWa/ae3eURDzzIShaqt4CZUQMVrSIY7lNRH5JusLSNmAobuOjDUsssWFc3
GWF8gLCeTKjzZkMZOFEOK3I0niuJDLMSP8W67/+WjdOsv4jpnN0d+sWXYSetyOKJ
kX2fXi+XIpBtjJywEq/qLUQGshLq0VPxbrFUTGunzlt3EEOanNNdP4eGXUdIX7nY
LD6ziVebjG9UURyGeifcaIboW1z3p0BTlxjfg/JM8S0gBRfFcAk6OmAaWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHtSITCnjIrLlxB3AI1kFYEo43w9MB8GA1UdIwQY
MBaAFM94LShyueehCpGifzBwINqUhEgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejNndEtISzU1NkVLa2FKX01IQWcycFNFU0NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mN2UxZjItNWRmOC00NWE0LWFlNzIt
NTRmNzQ1M2YxMDMzLzEvZTFJaE1LZU1pc3VYRUhjQWpXUVZnU2pqZkQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mN2UxZjItNWRmOC00NWE0LWFlNzItNTRmNzQ1M2YxMDMz
LzEvejNndEtISzU1NkVLa2FKX01IQWcycFNFU0NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW/XkMA0G
CSqGSIb3DQEBCwUAA4IBAQCNT3yavvTnNNh8wLa1dqCEOzQ7jGScWrYNLFRhd2ZH
CD/+TAcG0A5Wx6vl1P3Wxd1PQLBr/AGlSDxfLNLs9QzqyqoxcbN8tP5NId16uOTI
a0vXBAC2qgo13twi8q4wuO1bt5htwUO6VtaId+WQ0pQhD73L25fV9lrTysN9adlg
54bs3hhC9jVgR5TCsT4Ng32eQf3ouUwcgey8n/A4tW7O0OUd5bLEPc9Q4gy1ic0w
P2IXJZV07m2gwTam1pA8KE4Vc5dtUONfPhtIPF4g4MH+Ey3T+e2E+nOifb1HFdYZ
nmRBn21CdNNSUsFo75uTOpBR9GBHT7//FVZJsRw8c3C0
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:26:12 2026 by rpki-client