Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/p6q7nnD_OPKDsS9U1c5yxJhC8WA.roa
File: p6q7nnD_OPKDsS9U1c5yxJhC8WA.roa (raw, json)
Hash identifier: MuqlFHVz3Fg/JUr8nrRSdQXx7Lahqnmq31R7HkprFTg=
Subject key identifier: A7:AA:BB:9E:70:FF:38:F2:83:B1:2F:54:D5:CE:72:C4:98:42:F1:60
Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial: 019D4924421D7CC996E80DDB091F622B9D2F
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/p6q7nnD_OPKDsS9U1c5yxJhC8WA.roa
Signing time: Wed 01 Apr 2026 13:03:26 +0000
ROA not before: Wed 01 Apr 2026 13:03:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 91.212.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:49:24:42:1d:7c:c9:96:e8:0d:db:09:1f:62:2b:9d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Validity
Not Before: Apr 1 13:03:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7aabb9e70ff38f283b12f54d5ce72c49842f160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:3e:2d:9c:e1:cf:95:ae:97:31:b6:92:82:
88:4d:48:e9:7d:34:44:33:56:ec:96:68:4b:5a:20:
67:48:de:da:20:5f:59:d5:b3:94:87:fa:86:4a:87:
66:1b:5d:48:ec:c0:96:3e:21:41:5e:e4:fe:b4:8e:
28:29:a4:94:44:cd:9c:d4:8c:21:e0:f2:13:0e:fe:
84:ac:f9:9a:11:7e:1e:0c:6f:3c:1d:af:7e:e7:71:
0c:1a:84:49:5d:30:85:b7:6d:40:c0:db:1c:6e:54:
69:ad:94:83:20:c7:a7:fe:f2:eb:f8:a2:00:27:73:
d0:e6:06:05:c6:71:ff:5a:22:cf:71:8f:27:97:d6:
5f:2e:8a:d6:d0:4c:3a:54:99:dc:31:08:e0:7f:40:
2d:cc:0e:71:81:b9:cd:49:7d:50:14:3e:fe:6e:54:
6d:47:8c:8e:88:52:0b:12:95:c6:0f:aa:42:bd:68:
7a:d9:2c:f3:59:84:32:84:da:03:47:3a:0c:75:0d:
90:0c:5d:b0:0e:b6:b5:f3:0b:91:aa:46:e8:7d:80:
ad:af:a8:8c:4c:fe:3d:c4:e1:6d:05:58:cc:ac:1c:
ea:6b:85:ce:99:d0:a2:34:e0:3b:0f:3c:17:c5:6c:
b0:a0:56:14:8a:1d:60:c7:2e:22:47:48:a4:aa:b0:
80:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AA:BB:9E:70:FF:38:F2:83:B1:2F:54:D5:CE:72:C4:98:42:F1:60
X509v3 Authority Key Identifier:
keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/p6q7nnD_OPKDsS9U1c5yxJhC8WA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.125.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:5a:1d:89:df:9f:c7:93:58:20:25:a2:91:cb:6e:34:bf:74:
27:a4:71:23:27:51:e8:ff:2c:73:ab:90:66:e1:f4:dc:ce:6b:
34:25:31:10:92:6c:85:71:6e:04:a8:cd:8a:b7:61:2d:41:91:
48:c8:eb:ce:26:30:fd:c0:72:fa:34:f6:39:2c:3d:f6:28:5b:
f0:cb:41:73:56:ba:07:c8:94:3c:6c:65:0d:4e:5b:d9:b8:8e:
d7:37:64:ed:1c:57:47:ad:c7:a7:d7:31:3c:15:80:17:6d:7b:
53:53:f7:c2:f5:1a:1a:73:11:37:13:93:8a:ba:f0:fc:1b:dd:
5e:b5:b5:5a:ba:e7:75:6d:7f:c9:16:9d:8e:de:b6:46:48:52:
cc:48:f8:35:1d:70:88:ee:39:63:b8:76:d0:b2:7c:f3:8d:82:
ec:26:3f:59:1e:7f:2d:7b:ac:89:a1:3f:44:95:86:e6:a2:1b:
76:b4:80:f8:6e:6f:8e:0d:71:d6:57:37:3a:0b:80:e3:2d:a5:
96:90:f4:fd:20:87:6b:46:e4:d9:42:bc:31:bf:4e:5d:a0:64:
b9:36:9c:18:39:91:39:5d:d2:2b:34:46:8d:ae:be:6d:8f:86:
f7:fa:fd:71:13:8f:0a:fb:5e:74:eb:e9:9c:16:10:c2:ec:dc:
71:7f:de:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1JJEIdfMmW6A3bCR9iK50vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZGU5MWEwZmIxZjRkZDE3OTAwZDA2ZGI2ZTg4MzM2Zjc4
YjVjMDUwHhcNMjYwNDAxMTMwMzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2FhYmI5ZTcwZmYzOGYyODNiMTJmNTRkNWNlNzJjNDk4NDJmMTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx4+LZzhz5WulzG2koKITUjpfTRE
M1bslmhLWiBnSN7aIF9Z1bOUh/qGSodmG11I7MCWPiFBXuT+tI4oKaSURM2c1Iwh
4PITDv6ErPmaEX4eDG88Ha9+53EMGoRJXTCFt21AwNscblRprZSDIMen/vLr+KIA
J3PQ5gYFxnH/WiLPcY8nl9ZfLorW0Ew6VJncMQjgf0AtzA5xgbnNSX1QFD7+blRt
R4yOiFILEpXGD6pCvWh62SzzWYQyhNoDRzoMdQ2QDF2wDra18wuRqkbofYCtr6iM
TP49xOFtBVjMrBzqa4XOmdCiNOA7DzwXxWywoFYUih1gxy4iR0ikqrCAEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKequ55w/zjyg7EvVNXOcsSYQvFgMB8GA1UdIwQY
MBaAFN7ekaD7H03ReQDQbbbogzb3i1wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMt
MjFhNzAwYzcxMTlmLzEvcDZxN25uRF9PUEtEc1M5VTFjNXl4SmhDOFdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8yMzIxZDYtYmQ2Yy00YjJhLWFmODMtMjFhNzAwYzcxMTlm
LzEvM3Q2Um9Qc2ZUZEY1QU5CdHR1aUROdmVMWEFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9R9MA0G
CSqGSIb3DQEBCwUAA4IBAQB9Wh2J35/Hk1ggJaKRy240v3QnpHEjJ1Ho/yxzq5Bm
4fTczms0JTEQkmyFcW4EqM2Kt2EtQZFIyOvOJjD9wHL6NPY5LD32KFvwy0FzVroH
yJQ8bGUNTlvZuI7XN2TtHFdHrcen1zE8FYAXbXtTU/fC9RoacxE3E5OKuvD8G91e
tbVauud1bX/JFp2O3rZGSFLMSPg1HXCI7jljuHbQsnzzjYLsJj9ZHn8te6yJoT9E
lYbmoht2tID4bm+ODXHWVzc6C4DjLaWWkPT9IIdrRuTZQrwxv05doGS5NpwYOZE5
XdIrNEaNrr5tj4b3+v1xE48K+1506+mcFhDC7Nxxf95Y
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:41:44 2026 by rpki-client