Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/1pjPcIc-TbBpzHBksxHHS9pR-WI.roa
File: 1pjPcIc-TbBpzHBksxHHS9pR-WI.roa (raw, json)
Hash identifier: pwCZ2fRhs0nJ31upDzz2pN2CJgfwb4g1H8mQoqHdQdQ=
Subject key identifier: D6:98:CF:70:87:3E:4D:B0:69:CC:70:64:B3:11:C7:4B:DA:51:F9:62
Certificate issuer: /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Certificate serial: 019FA2B8199BD7DD8FAD14CA0F9028D0A4F8
Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/1pjPcIc-TbBpzHBksxHHS9pR-WI.roa
Signing time: Mon 27 Jul 2026 08:36:41 +0000
ROA not before: Mon 27 Jul 2026 08:36:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 91.123.0.0/24 maxlen: 24
91.123.1.0/24 maxlen: 24
91.123.2.0/24 maxlen: 24
91.123.3.0/24 maxlen: 24
91.123.4.0/24 maxlen: 24
91.123.5.0/24 maxlen: 24
91.123.6.0/24 maxlen: 24
91.123.7.0/24 maxlen: 24
91.123.8.0/24 maxlen: 24
91.123.9.0/24 maxlen: 24
91.123.10.0/24 maxlen: 24
91.123.11.0/24 maxlen: 24
91.123.12.0/24 maxlen: 24
91.123.13.0/24 maxlen: 24
91.123.14.0/24 maxlen: 24
91.123.15.0/24 maxlen: 24
190.106.160.0/24 maxlen: 24
190.106.161.0/24 maxlen: 24
190.106.162.0/24 maxlen: 24
190.106.163.0/24 maxlen: 24
190.106.165.0/24 maxlen: 24
190.106.166.0/24 maxlen: 24
190.106.168.0/24 maxlen: 24
190.106.169.0/24 maxlen: 24
190.106.170.0/24 maxlen: 24
190.106.171.0/24 maxlen: 24
190.106.172.0/24 maxlen: 24
190.106.173.0/24 maxlen: 24
190.106.175.0/24 maxlen: 24
190.106.176.0/24 maxlen: 24
190.106.177.0/24 maxlen: 24
190.106.178.0/24 maxlen: 24
190.106.179.0/24 maxlen: 24
190.106.180.0/24 maxlen: 24
190.106.181.0/24 maxlen: 24
190.106.182.0/24 maxlen: 24
190.106.183.0/24 maxlen: 24
190.106.184.0/24 maxlen: 24
190.106.185.0/24 maxlen: 24
190.106.186.0/24 maxlen: 24
190.106.187.0/24 maxlen: 24
190.106.188.0/24 maxlen: 24
190.106.189.0/24 maxlen: 24
190.106.190.0/24 maxlen: 24
190.106.191.0/24 maxlen: 24
206.195.128.0/24 maxlen: 24
206.195.129.0/24 maxlen: 24
206.195.130.0/24 maxlen: 24
206.195.131.0/24 maxlen: 24
206.195.132.0/24 maxlen: 24
206.195.133.0/24 maxlen: 24
206.195.134.0/24 maxlen: 24
206.195.135.0/24 maxlen: 24
206.195.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:b8:19:9b:d7:dd:8f:ad:14:ca:0f:90:28:d0:a4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Validity
Not Before: Jul 27 08:36:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d698cf70873e4db069cc7064b311c74bda51f962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7b:cd:d3:f5:ee:18:b5:1c:5c:29:03:19:e8:
75:2f:6b:b7:8c:b7:16:3c:29:59:b0:cc:a6:0a:3d:
4a:e9:0f:8c:53:bc:b2:c7:98:38:3b:70:1b:0c:eb:
ab:ff:3d:3c:3d:45:67:e6:a5:04:f3:bf:25:e2:86:
7d:a0:22:5f:5c:7a:fe:8e:87:3d:47:7c:29:da:42:
64:28:54:1c:af:25:04:82:d5:92:f7:2f:1f:9d:b6:
ed:34:d0:33:e6:de:28:70:37:6b:da:cc:1e:d2:af:
e6:24:e2:9f:ee:7e:8d:4a:b2:a6:a5:1f:24:b5:7f:
75:22:87:91:e9:5d:9d:f4:69:d5:ea:77:cc:dc:21:
0b:f5:82:81:af:61:a8:46:12:59:5f:43:2f:4b:bd:
cb:fe:3c:2a:fe:ac:d6:2c:91:13:4a:c3:b3:a5:8c:
c8:41:a1:e0:42:9d:fd:52:cb:d6:d2:3f:8d:32:54:
b4:df:4a:49:22:b1:20:9f:6e:a0:60:e6:b9:47:97:
f8:f2:72:53:e8:37:ec:49:48:09:db:29:47:34:93:
c7:2a:ac:40:0e:9b:af:24:bb:ed:ce:c1:b8:46:16:
49:cc:68:6d:3f:02:cf:2e:94:7f:d0:b6:85:b1:ae:
5e:a7:94:30:cb:00:5a:fa:8f:43:e4:65:c4:db:50:
9b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:98:CF:70:87:3E:4D:B0:69:CC:70:64:B3:11:C7:4B:DA:51:F9:62
X509v3 Authority Key Identifier:
keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/1pjPcIc-TbBpzHBksxHHS9pR-WI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.123.0.0/20
190.106.160.0/22
190.106.165.0-190.106.166.255
190.106.168.0-190.106.173.255
190.106.175.0-190.106.191.255
206.195.128.0-206.195.136.255
Signature Algorithm: sha256WithRSAEncryption
87:83:b0:fe:77:a4:98:ec:c3:98:db:6b:8b:07:70:2d:68:0e:
5a:ef:c7:90:17:57:c6:46:90:85:5e:79:b5:e7:18:41:c6:52:
38:fb:0c:fe:5c:20:59:ed:cf:16:a0:6e:37:27:52:70:d9:fe:
71:1a:fb:b6:28:bf:f7:44:9f:e8:6b:92:7d:4d:04:a4:76:1f:
06:68:2b:0a:00:40:c6:58:74:86:93:93:bb:b9:45:db:01:7f:
a0:1f:08:12:eb:35:1d:67:c0:96:eb:f4:cc:59:67:13:dc:78:
49:10:ba:14:c4:bd:5c:82:20:f4:20:e2:53:98:78:c0:0b:4c:
24:b7:d3:f4:4e:29:22:e6:36:2c:c6:56:68:6f:76:51:39:33:
74:d5:14:cc:9e:01:6c:d9:57:51:e0:ba:7f:73:39:e2:ec:e4:
dc:ec:90:6f:35:1e:a9:20:b9:b9:e4:88:cc:8e:0e:38:63:d2:
bd:19:12:65:1d:c3:e0:a4:31:84:3a:0d:cc:8f:88:17:82:61:
40:91:42:8e:de:3b:08:98:1a:6c:be:3c:b2:58:48:68:af:7a:
32:f8:ab:e3:08:5f:44:b3:ae:0d:30:a5:d7:0f:77:0d:0c:63:
82:49:b9:e7:9e:cf:d6:64:e3:54:a8:ef:0b:2f:0d:8a:44:11:
72:1c:4e:5c
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAZ+iuBmb192PrRTKD5Ao0KT4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZjUxYmJkZjAxMDg4ZDM0YzZiYWFlZWY4NmJkYTI1YTlm
MDIxOTYwHhcNMjYwNzI3MDgzNjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjk4Y2Y3MDg3M2U0ZGIwNjljYzcwNjRiMzExYzc0YmRhNTFmOTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XvN0/XuGLUcXCkDGeh1L2u3jLcW
PClZsMymCj1K6Q+MU7yyx5g4O3AbDOur/z08PUVn5qUE878l4oZ9oCJfXHr+joc9
R3wp2kJkKFQcryUEgtWS9y8fnbbtNNAz5t4ocDdr2swe0q/mJOKf7n6NSrKmpR8k
tX91IoeR6V2d9GnV6nfM3CEL9YKBr2GoRhJZX0MvS73L/jwq/qzWLJETSsOzpYzI
QaHgQp39UsvW0j+NMlS030pJIrEgn26gYOa5R5f48nJT6DfsSUgJ2ylHNJPHKqxA
DpuvJLvtzsG4RhZJzGhtPwLPLpR/0LaFsa5ep5QwywBa+o9D5GXE21CbBwIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFNaYz3CHPk2wacxwZLMRx0vaUfliMB8GA1UdIwQY
MBaAFCT1G73wEIjTTGuq7vhr2iWp8CGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlBVYnZmQVFpTk5NYTZydS1HdmFKYW53SVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lOGViZDYtNTYxZC00MmFmLWJiMzYt
NTIwMWEyM2Q3YTQ5LzEvMXBqUGNJYy1UYkJwekhCa3N4SEhTOXBSLVdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9lOGViZDYtNTYxZC00MmFmLWJiMzYtNTIwMWEyM2Q3YTQ5
LzEvSlBVYnZmQVFpTk5NYTZydS1HdmFKYW53SVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQEW3sAAwQC
vmqgMAwDBAC+aqUDBAC+aqYwDAMEA75qqAMEAb5qrDAMAwQAvmqvAwQGvmqAMAwD
BAfOw4ADBADOw4gwDQYJKoZIhvcNAQELBQADggEBAIeDsP53pJjsw5jba4sHcC1o
Dlrvx5AXV8ZGkIVeebXnGEHGUjj7DP5cIFntzxagbjcnUnDZ/nEa+7Yov/dEn+hr
kn1NBKR2HwZoKwoAQMZYdIaTk7u5RdsBf6AfCBLrNR1nwJbr9MxZZxPceEkQuhTE
vVyCIPQg4lOYeMALTCS30/ROKSLmNizGVmhvdlE5M3TVFMyeAWzZV1Hgun9zOeLs
5NzskG81HqkgubnkiMyODjhj0r0ZEmUdw+CkMYQ6DcyPiBeCYUCRQo7eOwiYGmy+
PLJYSGivejL4q+MIX0Szrg0wpdcPdw0MY4JJueeez9Zk41So7wsvDYpEEXIcTlw=
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:22:42 2026 by rpki-client