Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/ESleWbcySUnTxTcWeNigzmbbsuY.roa
File: ESleWbcySUnTxTcWeNigzmbbsuY.roa (raw, json)
Hash identifier: QTUEU0Zs7X8PSlH1r4bAKO3r4cdd8SMgkPqxuyZUVSM=
Subject key identifier: 11:29:5E:59:B7:32:49:49:D3:C5:37:16:78:D8:A0:CE:66:DB:B2:E6
Certificate issuer: /CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Certificate serial: 01A0A5733FC41D2A8DFBD99E32EAFB4ACEE6
Authority key identifier: F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/ESleWbcySUnTxTcWeNigzmbbsuY.roa
Signing time: Tue 15 Sep 2026 14:23:08 +0000
ROA not before: Tue 15 Sep 2026 14:23:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 91.244.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:73:3f:c4:1d:2a:8d:fb:d9:9e:32:ea:fb:4a:ce:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Validity
Not Before: Sep 15 14:23:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11295e59b7324949d3c5371678d8a0ce66dbb2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:be:ef:34:4e:d0:04:c2:86:a0:f1:73:62:5d:
bb:60:41:aa:cc:08:4c:04:3e:4b:09:16:42:f4:c6:
1a:a7:64:70:fb:b7:d8:43:10:f7:b9:b5:cb:79:bf:
de:9e:29:9e:97:19:2a:cb:84:46:d5:89:e2:81:45:
47:ff:ac:ee:79:c8:6f:ad:14:58:bc:04:bb:a1:a2:
ef:f1:62:d3:ed:79:e2:43:ec:8a:78:17:ce:f3:0f:
fd:a5:78:ad:02:67:d6:42:9f:04:d4:9f:5a:f9:5c:
55:77:fa:46:32:c4:b4:dc:43:8f:4e:81:46:03:c6:
a4:f6:98:d8:7e:b3:45:13:1f:ee:a8:3a:e4:44:30:
d3:c0:75:55:30:da:ed:78:b8:a7:ba:df:20:ca:87:
47:1b:97:05:70:c2:15:d0:2c:22:f4:58:93:b2:50:
5b:d2:74:b8:21:05:60:c5:30:99:7a:df:75:48:7a:
ae:c8:45:88:e8:61:c7:fb:05:47:d6:c0:c1:5f:62:
fe:1b:89:e1:3a:00:82:27:24:6c:bd:67:63:ba:67:
a0:9f:15:85:92:dd:72:5d:fa:2c:9e:eb:13:91:50:
c5:45:22:b0:9b:e0:b9:6b:5c:88:35:09:e4:87:73:
59:f8:89:04:cf:a5:95:4a:58:bd:be:90:7e:fd:58:
62:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:29:5E:59:B7:32:49:49:D3:C5:37:16:78:D8:A0:CE:66:DB:B2:E6
X509v3 Authority Key Identifier:
keyid:F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/ESleWbcySUnTxTcWeNigzmbbsuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.131.0/24
Signature Algorithm: sha256WithRSAEncryption
01:c7:07:fb:3d:f6:97:9e:0b:81:98:f6:e4:0a:29:80:0d:f5:
91:e7:b5:67:d5:eb:78:27:f5:78:c8:57:b3:75:4b:47:5a:9b:
35:e5:71:59:64:b8:cb:20:5f:25:43:26:40:1f:c6:77:c4:4b:
60:64:94:10:ce:80:b0:41:e9:fe:9a:9a:34:f8:8f:df:ab:53:
70:29:f0:b3:ed:5a:dd:72:10:5b:2a:e2:1c:d1:f2:24:c5:95:
74:6b:ab:07:95:b0:44:57:6a:ec:fa:d0:0d:46:38:65:59:18:
54:e4:bb:c6:0a:06:c5:40:ea:ed:1a:2b:e6:88:b6:b0:37:9f:
57:5f:24:60:c9:68:d0:39:08:a0:76:75:da:75:01:21:35:a7:
2a:f9:e4:e3:a8:55:9f:b8:9b:a0:5a:01:ef:94:57:d0:d7:52:
d2:1e:56:b8:2e:c0:9e:97:08:61:a0:3a:37:eb:ee:8a:6b:d4:
fb:cb:11:bc:b7:b1:ce:ff:5f:f4:f5:7c:ed:78:37:96:95:58:
16:d8:bf:a8:52:79:a6:ae:71:65:2d:66:31:c6:22:cb:bc:b8:
48:7b:83:f4:a4:0f:d9:9c:32:8a:17:c1:27:d7:8d:17:38:e1:
50:ce:d7:47:f8:a2:77:03:6b:62:bb:79:b3:5b:4a:b8:0d:45:
1a:b8:91:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaClcz/EHSqN+9meMur7Ss7mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZGEzMTU4ZWIxYmM2YTBhOTAyN2NmNTllNjAzNjg3ZDZk
M2U5NzQwHhcNMjYwOTE1MTQyMzA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTI5NWU1OWI3MzI0OTQ5ZDNjNTM3MTY3OGQ4YTBjZTY2ZGJiMmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz77vNE7QBMKGoPFzYl27YEGqzAhM
BD5LCRZC9MYap2Rw+7fYQxD3ubXLeb/enimelxkqy4RG1YnigUVH/6zuechvrRRY
vAS7oaLv8WLT7XniQ+yKeBfO8w/9pXitAmfWQp8E1J9a+VxVd/pGMsS03EOPToFG
A8ak9pjYfrNFEx/uqDrkRDDTwHVVMNrteLinut8gyodHG5cFcMIV0Cwi9FiTslBb
0nS4IQVgxTCZet91SHquyEWI6GHH+wVH1sDBX2L+G4nhOgCCJyRsvWdjumegnxWF
kt1yXfosnusTkVDFRSKwm+C5a1yINQnkh3NZ+IkEz6WVSli9vpB+/VhiiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBEpXlm3MklJ08U3FnjYoM5m27LmMB8GA1UdIwQY
MBaAFPHaMVjrG8agqQJ89Z5gNofW0+l0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRveFdPc2J4cUNwQW56MW5tQTJoOWJUNlhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iODg0N2EtYjBmNS00YWZmLTk5ZGMt
YTllOThiNzNiNTU2LzEvRVNsZVdiY3lTVW5UeFRjV2VOaWd6bWJic3VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iODg0N2EtYjBmNS00YWZmLTk5ZGMtYTllOThiNzNiNTU2
LzEvOGRveFdPc2J4cUNwQW56MW5tQTJoOWJUNlhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/SDMA0G
CSqGSIb3DQEBCwUAA4IBAQABxwf7PfaXnguBmPbkCimADfWR57Vn1et4J/V4yFez
dUtHWps15XFZZLjLIF8lQyZAH8Z3xEtgZJQQzoCwQen+mpo0+I/fq1NwKfCz7Vrd
chBbKuIc0fIkxZV0a6sHlbBEV2rs+tANRjhlWRhU5LvGCgbFQOrtGivmiLawN59X
XyRgyWjQOQigdnXadQEhNacq+eTjqFWfuJugWgHvlFfQ11LSHla4LsCelwhhoDo3
6+6Ka9T7yxG8t7HO/1/09XzteDeWlVgW2L+oUnmmrnFlLWYxxiLLvLhIe4P0pA/Z
nDKKF8En140XOOFQztdH+KJ3A2tiu3mzW0q4DUUauJEy
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:53:14 2026 by rpki-client