Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/c50lvA8Sv1SylXjp89qLN1R1K0Q.roa
File: c50lvA8Sv1SylXjp89qLN1R1K0Q.roa (raw, json)
Hash identifier: H5BoXSVjiAe/7XcTXvyS3Sc4Z7PHgmQ7yK1Eha9K6xk=
Subject key identifier: 73:9D:25:BC:0F:12:BF:54:B2:95:78:E9:F3:DA:8B:37:54:75:2B:44
Certificate issuer: /CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Certificate serial: 019B7B36A5AF7A696BF4E5EB1D5859ADAC24
Authority key identifier: C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/c50lvA8Sv1SylXjp89qLN1R1K0Q.roa
Signing time: Thu 01 Jan 2026 20:18:57 +0000
ROA not before: Thu 01 Jan 2026 20:18:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42970
IP address blocks: 91.213.25.0/24 maxlen: 24
185.140.196.0/22 maxlen: 22
193.200.182.0/24 maxlen: 24
2a07:1fc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:a5:af:7a:69:6b:f4:e5:eb:1d:58:59:ad:ac:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Validity
Not Before: Jan 1 20:18:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=739d25bc0f12bf54b29578e9f3da8b3754752b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bf:e3:0e:0b:d0:43:42:bc:ef:fa:e1:c6:05:
9d:95:83:d8:ad:51:75:5b:d9:64:dc:ff:2c:98:c8:
2c:e3:7a:6c:7c:79:ca:44:35:9b:6d:c4:12:5e:dd:
c0:ab:fb:4c:f8:4e:0a:64:ab:a6:e5:6c:9c:fa:98:
77:d4:ee:e8:39:5a:09:ce:82:26:3d:51:00:b4:ed:
37:55:74:0e:40:10:37:9c:ce:ba:f2:e9:9b:29:d2:
9b:c6:fe:3a:43:54:33:b7:33:92:be:3e:00:97:2b:
37:f6:34:80:55:68:f2:fe:eb:0c:f2:b7:e6:6e:f8:
be:d1:7e:5f:ac:a0:88:b9:c4:af:b7:72:fc:d2:5b:
5e:27:0c:6d:ce:1b:bc:b6:8c:f5:0f:83:23:f8:10:
40:1e:86:91:4e:fb:af:76:2b:04:2c:b7:3c:75:ce:
72:4c:1c:06:34:ca:f2:26:e9:fd:f2:34:b7:08:ac:
b3:dd:fd:3d:41:a1:5e:e9:54:46:9e:a0:34:52:c4:
b8:fe:d5:ba:f3:13:03:57:e8:42:64:97:f9:59:c3:
95:87:d6:dd:fc:df:87:eb:50:ec:41:99:eb:31:ea:
ef:20:35:d2:0c:46:ce:17:03:e4:6a:2e:66:7f:3c:
de:60:43:c8:7b:01:d1:e5:04:99:40:5f:e7:83:cc:
7d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9D:25:BC:0F:12:BF:54:B2:95:78:E9:F3:DA:8B:37:54:75:2B:44
X509v3 Authority Key Identifier:
keyid:C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/c50lvA8Sv1SylXjp89qLN1R1K0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.25.0/24
185.140.196.0/22
193.200.182.0/24
IPv6:
2a07:1fc0::/29
Signature Algorithm: sha256WithRSAEncryption
83:3b:40:6b:48:3a:42:ce:70:f8:79:f5:4a:c3:b6:24:2b:ec:
7e:f0:a3:6d:87:29:44:a0:78:36:c0:f5:ce:f4:6e:e1:f3:6b:
4b:95:30:9c:ea:93:82:3e:27:6b:1e:96:cd:0e:a2:01:51:16:
98:1f:56:bb:71:b0:23:43:22:c9:be:08:5f:c1:f5:4e:d3:f7:
ed:b1:45:10:ba:19:ff:1c:43:99:a8:dc:c3:6b:d6:ad:8b:5b:
12:ef:3a:4d:99:d4:c9:bf:e1:4c:41:2d:38:24:bf:52:e0:9e:
83:9f:4a:73:9d:85:15:ed:f8:a3:35:77:65:dc:2e:9a:3a:e3:
4e:4b:8e:12:72:6b:0a:b0:d3:e1:08:d9:29:01:00:7a:88:3a:
2f:ec:98:ac:81:c4:22:93:65:9f:b9:84:6e:a0:fc:96:bb:8a:
d3:a6:bc:9b:ff:63:f4:c6:e6:d4:a8:f2:90:06:92:04:f0:b3:
13:cf:84:1d:8b:ef:4c:ea:9b:95:3e:90:77:9e:0a:11:37:d9:
a8:01:35:0b:58:b7:6d:64:52:9c:ae:9e:72:ad:b0:7c:4f:37:
7c:c9:dd:63:90:79:0e:06:a4:46:76:2e:25:91:d8:7b:f9:2c:
22:89:5d:29:f7:d3:4c:ec:c4:19:43:02:4c:67:b7:02:db:ea:
9b:de:74:87
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZt7NqWvemlr9OXrHVhZrawkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NmEwZGIwODMwMzM4ZDJkMjk2MWU0YzhmZmIwYWI1YTAz
ZmZlNWYwHhcNMjYwMTAxMjAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzlkMjViYzBmMTJiZjU0YjI5NTc4ZTlmM2RhOGIzNzU0NzUyYjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL/jDgvQQ0K87/rhxgWdlYPYrVF1
W9lk3P8smMgs43psfHnKRDWbbcQSXt3Aq/tM+E4KZKum5Wyc+ph31O7oOVoJzoIm
PVEAtO03VXQOQBA3nM668umbKdKbxv46Q1QztzOSvj4Alys39jSAVWjy/usM8rfm
bvi+0X5frKCIucSvt3L80lteJwxtzhu8toz1D4Mj+BBAHoaRTvuvdisELLc8dc5y
TBwGNMryJun98jS3CKyz3f09QaFe6VRGnqA0UsS4/tW68xMDV+hCZJf5WcOVh9bd
/N+H61DsQZnrMervIDXSDEbOFwPkai5mfzzeYEPIewHR5QSZQF/ng8x9nQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFHOdJbwPEr9UspV46fPaizdUdStEMB8GA1UdIwQY
MBaAFMdqDbCDAzjS0pYeTI/7CrWgP/5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDJvTnNJTURPTkxTbGg1TWpfc0t0YUFfX2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mNzE4OWYtOWQzYi00ZmE5LWIyYzEt
NTIxN2RmMzY5MWFiLzEvYzUwbHZBOFN2MVN5bFhqcDg5cUxOMVIxSzBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mNzE4OWYtOWQzYi00ZmE5LWIyYzEtNTIxN2RmMzY5MWFi
LzEveDJvTnNJTURPTkxTbGg1TWpfc0t0YUFfX2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAW9UZAwQC
uYzEAwQAwci2MA0EAgACMAcDBQMqBx/AMA0GCSqGSIb3DQEBCwUAA4IBAQCDO0Br
SDpCznD4efVKw7YkK+x+8KNthylEoHg2wPXO9G7h82tLlTCc6pOCPidrHpbNDqIB
URaYH1a7cbAjQyLJvghfwfVO0/ftsUUQuhn/HEOZqNzDa9ati1sS7zpNmdTJv+FM
QS04JL9S4J6Dn0pznYUV7fijNXdl3C6aOuNOS44ScmsKsNPhCNkpAQB6iDov7Jis
gcQik2WfuYRuoPyWu4rTpryb/2P0xubUqPKQBpIE8LMTz4Qdi+9M6puVPpB3ngoR
N9moATULWLdtZFKcrp5yrbB8Tzd8yd1jkHkOBqRGdi4lkdh7+SwiiV0p99NM7MQZ
QwJMZ7cC2+qb3nSH
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:37:04 2026 by rpki-client