Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/D-pDOX5ZXtdIZnyN7bsDrJe1gOo.roa
File: D-pDOX5ZXtdIZnyN7bsDrJe1gOo.roa (raw, json)
Hash identifier: JQkmlm3wSiHNU9bdVvmkiiM/K5jDVTyxbR5FyQCgkBg=
Subject key identifier: 0F:EA:43:39:7E:59:5E:D7:48:66:7C:8D:ED:BB:03:AC:97:B5:80:EA
Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Certificate serial: 019B7EA6A092F6F7DAC5F59481CAD1BD0D4F
Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/D-pDOX5ZXtdIZnyN7bsDrJe1gOo.roa
Signing time: Fri 02 Jan 2026 12:20:07 +0000
ROA not before: Fri 02 Jan 2026 12:20:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201108
IP address blocks: 91.206.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:a0:92:f6:f7:da:c5:f5:94:81:ca:d1:bd:0d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Validity
Not Before: Jan 2 12:20:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fea43397e595ed748667c8dedbb03ac97b580ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:30:f9:3c:e5:fb:c2:68:9c:9f:3b:39:af:b8:
fb:e3:1e:0a:c2:2b:14:ab:38:d7:5c:71:17:3e:69:
68:2f:7a:9e:72:cd:21:2f:e8:17:fd:0e:05:6f:80:
8a:76:af:aa:4e:1d:4b:dd:73:7f:89:0c:43:8f:d4:
44:da:20:b9:9f:f1:09:38:6e:13:04:3c:d3:29:fa:
f8:3d:76:e7:ba:b3:82:4e:4f:52:3b:e4:64:1f:f9:
11:a7:d0:30:d5:fe:22:15:c5:ba:55:e5:c1:b0:a9:
3a:ef:b8:1a:1f:97:db:70:5f:51:81:16:a7:49:93:
69:b8:46:d5:8f:19:1f:e1:3d:cb:e2:a6:32:99:9c:
05:4e:2e:09:5f:e1:1d:55:9a:cc:6a:29:5f:63:3d:
61:5e:6a:a6:b5:c5:bd:09:9e:1b:f2:a4:0d:41:99:
cc:3a:80:1a:19:7b:1e:59:03:a4:62:de:a7:fc:3e:
b7:81:fa:0f:08:e3:90:c4:23:1c:f7:f2:36:d9:ea:
05:ea:d1:52:8f:71:bb:34:f9:08:54:be:d2:29:68:
9c:2b:2b:d1:25:55:52:71:35:78:28:e0:7c:b3:a6:
fe:d0:0c:55:35:c8:ad:34:21:99:1d:02:50:62:76:
90:0a:94:85:ff:fa:05:eb:1c:96:a1:d9:2d:2f:ff:
f4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EA:43:39:7E:59:5E:D7:48:66:7C:8D:ED:BB:03:AC:97:B5:80:EA
X509v3 Authority Key Identifier:
keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/D-pDOX5ZXtdIZnyN7bsDrJe1gOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.113.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:97:3b:9e:e6:b0:d0:ee:f6:28:7c:ae:ab:4a:5c:9b:5b:e6:
db:5f:04:d3:9d:fe:37:f3:e5:d4:94:56:b2:c1:08:a9:74:47:
38:28:31:50:fb:8c:87:90:4e:9a:d2:a7:15:28:04:f1:ed:82:
38:f7:a4:4e:d6:9d:72:bc:72:ce:57:7a:cc:8f:d0:eb:a8:4f:
85:bb:27:a5:db:96:be:64:79:cb:1f:d1:d4:85:67:f0:05:c0:
cc:fc:f1:23:19:e3:6d:b7:d9:91:6c:64:26:8d:9f:68:4f:b3:
10:cf:d7:57:57:17:ee:06:db:3a:d0:84:f8:d7:b2:cd:e1:dc:
58:d3:1a:55:10:3b:30:e1:cb:29:29:23:4c:47:39:4f:6e:60:
92:7f:a2:a7:b6:93:e1:36:2d:d4:81:13:4e:bb:d4:46:f2:88:
2b:05:26:bb:51:58:62:0c:cb:cf:ff:3f:f6:ec:23:63:43:1b:
1a:92:16:c2:02:d7:c6:10:89:2b:da:07:62:10:cc:e9:a1:73:
a2:0b:92:4a:c0:1e:11:09:a7:8c:7c:26:af:50:ab:a2:73:cb:
ad:da:de:59:ac:fd:5f:b3:f4:f7:80:a8:74:d4:f2:fe:4c:31:
7f:68:fc:cd:4a:38:76:a7:ad:b6:82:d3:7f:58:c8:19:bc:45:
f8:12:42:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+pqCS9vfaxfWUgcrRvQ1PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYzE2OGVjNTk3YTNhMzc3NDJjYjRkZWQ3ODM1NmYxNDU0
ZjJiYWQwHhcNMjYwMTAyMTIyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmVhNDMzOTdlNTk1ZWQ3NDg2NjdjOGRlZGJiMDNhYzk3YjU4MGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDD5POX7wmicnzs5r7j74x4KwisU
qzjXXHEXPmloL3qecs0hL+gX/Q4Fb4CKdq+qTh1L3XN/iQxDj9RE2iC5n/EJOG4T
BDzTKfr4PXbnurOCTk9SO+RkH/kRp9Aw1f4iFcW6VeXBsKk677gaH5fbcF9RgRan
SZNpuEbVjxkf4T3L4qYymZwFTi4JX+EdVZrMailfYz1hXmqmtcW9CZ4b8qQNQZnM
OoAaGXseWQOkYt6n/D63gfoPCOOQxCMc9/I22eoF6tFSj3G7NPkIVL7SKWicKyvR
JVVScTV4KOB8s6b+0AxVNcitNCGZHQJQYnaQCpSF//oF6xyWodktL//0IwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA/qQzl+WV7XSGZ8je27A6yXtYDqMB8GA1UdIwQY
MBaAFALBaOxZejo3dCy03teDVvFFTyutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMTE1Y2QtNjQ2Yi00OTFmLTllNDIt
NjFkNTc1MjQxYzFmLzEvRC1wRE9YNVpYdGRJWm55Tjdic0RySmUxZ09vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mMTE1Y2QtNjQ2Yi00OTFmLTllNDItNjFkNTc1MjQxYzFm
LzEvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW85xMA0G
CSqGSIb3DQEBCwUAA4IBAQBvlzue5rDQ7vYofK6rSlybW+bbXwTTnf438+XUlFay
wQipdEc4KDFQ+4yHkE6a0qcVKATx7YI496RO1p1yvHLOV3rMj9DrqE+Fuyel25a+
ZHnLH9HUhWfwBcDM/PEjGeNtt9mRbGQmjZ9oT7MQz9dXVxfuBts60IT417LN4dxY
0xpVEDsw4cspKSNMRzlPbmCSf6KntpPhNi3UgRNOu9RG8ogrBSa7UVhiDMvP/z/2
7CNjQxsakhbCAtfGEIkr2gdiEMzpoXOiC5JKwB4RCaeMfCavUKuic8ut2t5ZrP1f
s/T3gKh01PL+TDF/aPzNSjh2p622gtN/WMgZvEX4EkKQ
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:03:09 2026 by rpki-client