Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/_tnY0906wHjzFjHNCJLnKZtEe0w.roa
File: _tnY0906wHjzFjHNCJLnKZtEe0w.roa (raw, json)
Hash identifier: 5Apr07COEZAT/ICQgss3FIiTDt+qU9p7QTb4qGNKhvc=
Subject key identifier: FE:D9:D8:D3:DD:3A:C0:78:F3:16:31:CD:08:92:E7:29:9B:44:7B:4C
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 01A0BD77E8C785669043759305BB8D849BCE
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/_tnY0906wHjzFjHNCJLnKZtEe0w.roa
Signing time: Sun 20 Sep 2026 06:19:07 +0000
ROA not before: Sun 20 Sep 2026 06:19:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1054
IP address blocks: 91.217.139.0/24 maxlen: 24
91.217.160.0/24 maxlen: 24
2a06:5040:2000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:77:e8:c7:85:66:90:43:75:93:05:bb:8d:84:9b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Sep 20 06:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fed9d8d3dd3ac078f31631cd0892e7299b447b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ff:c4:5c:df:73:7d:03:c4:94:2e:a6:d1:92:
56:78:7f:d1:ab:cc:46:b5:91:f7:1c:fa:fb:be:f8:
86:48:4a:4a:6c:7f:eb:dc:47:83:a4:18:ed:e3:7d:
05:38:6a:08:5a:34:ff:bd:ec:b0:91:ed:78:88:54:
50:fa:d2:c2:5b:66:b7:a0:39:84:d0:4e:2e:45:3c:
b5:1a:b3:7d:d0:be:18:44:de:93:48:24:14:cf:6c:
11:34:6e:51:62:48:3e:b0:d5:df:35:50:62:18:9a:
bb:a3:27:30:6a:27:43:b0:4c:ae:dc:ae:85:6f:6a:
6f:c3:9e:1a:8a:28:25:71:1a:9f:f5:5d:28:55:9d:
4d:af:1c:a6:55:b1:a7:98:d0:75:02:24:ca:fe:29:
2e:1b:31:8b:02:d3:bb:c9:77:e0:ec:76:96:9f:f5:
e4:9f:1b:9d:4c:d7:ca:04:bf:a3:6d:ac:2c:48:b8:
b3:79:17:4a:86:91:50:1a:67:cb:c9:0d:35:a2:66:
08:3b:f0:ad:22:4b:8e:a2:0a:39:48:38:6b:01:48:
a2:17:23:0a:fb:e0:20:b8:fd:81:fd:cd:3a:99:67:
b2:44:af:74:2a:cd:2d:8c:66:91:d6:c7:e7:f6:48:
59:e1:13:47:87:29:ff:94:40:63:67:b0:b5:db:e1:
e9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D9:D8:D3:DD:3A:C0:78:F3:16:31:CD:08:92:E7:29:9B:44:7B:4C
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/_tnY0906wHjzFjHNCJLnKZtEe0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.139.0/24
91.217.160.0/24
IPv6:
2a06:5040:2000::/36
Signature Algorithm: sha256WithRSAEncryption
25:c4:28:ae:f4:7f:3a:cc:d0:09:81:0e:44:99:67:b2:30:6a:
dc:bc:dc:e1:65:1b:b5:77:6f:bd:a6:33:2c:af:22:13:ff:b2:
fe:a2:9c:4b:7c:2e:7e:55:78:42:d3:66:50:d4:b1:34:48:be:
31:a4:ba:38:db:70:88:28:25:0f:08:03:ec:68:3b:00:72:d5:
6f:fd:2f:38:82:b8:ce:54:c8:44:66:41:41:55:a3:6f:8d:83:
c2:8e:3c:b5:12:97:8c:2f:70:8c:d0:2f:ea:72:47:53:36:9c:
3e:c3:7e:81:ee:13:96:d1:09:a9:41:af:1f:79:3c:fd:9e:25:
11:4d:d6:ac:7c:f9:9f:ce:ca:25:13:75:39:72:16:b8:21:d1:
61:4e:3b:81:a8:cc:35:8e:03:dd:80:51:69:35:ac:2d:8b:99:
25:e8:63:41:c3:00:b2:19:74:7a:3f:ba:08:2d:1f:ea:04:50:
7a:74:d4:bf:b5:67:57:80:ed:be:51:0c:68:62:16:63:64:6d:
07:71:0f:15:a2:66:dd:c6:fe:df:99:6a:0b:c3:46:ad:29:91:
a2:c2:00:df:7f:62:4c:e9:81:b3:eb:6f:20:59:d0:9a:ed:90:
8f:69:4b:77:9c:59:a0:e2:40:7e:db:cd:cf:af:c4:0c:d8:78:
16:45:27:80
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAaC9d+jHhWaQQ3WTBbuNhJvOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1
YTYyNDQwHhcNMjYwOTIwMDYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWQ5ZDhkM2RkM2FjMDc4ZjMxNjMxY2QwODkyZTcyOTliNDQ3YjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0v/EXN9zfQPElC6m0ZJWeH/Rq8xG
tZH3HPr7vviGSEpKbH/r3EeDpBjt430FOGoIWjT/veywke14iFRQ+tLCW2a3oDmE
0E4uRTy1GrN90L4YRN6TSCQUz2wRNG5RYkg+sNXfNVBiGJq7oycwaidDsEyu3K6F
b2pvw54aiiglcRqf9V0oVZ1NrxymVbGnmNB1AiTK/ikuGzGLAtO7yXfg7HaWn/Xk
nxudTNfKBL+jbawsSLizeRdKhpFQGmfLyQ01omYIO/CtIkuOogo5SDhrAUiiFyMK
++AguP2B/c06mWeyRK90Ks0tjGaR1sfn9khZ4RNHhyn/lEBjZ7C12+HpiwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFP7Z2NPdOsB48xYxzQiS5ymbRHtMMB8GA1UdIwQY
MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt
MDg1MmNiMzUzMjkzLzEvX3RuWTA5MDZ3SGp6RmpITkNKTG5LWnRFZTB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz
LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAW9mLAwQA
W9mgMA4EAgACMAgDBgQqBlBAIDANBgkqhkiG9w0BAQsFAAOCAQEAJcQorvR/OszQ
CYEORJlnsjBq3Lzc4WUbtXdvvaYzLK8iE/+y/qKcS3wuflV4QtNmUNSxNEi+MaS6
ONtwiCglDwgD7Gg7AHLVb/0vOIK4zlTIRGZBQVWjb42Dwo48tRKXjC9wjNAv6nJH
UzacPsN+ge4TltEJqUGvH3k8/Z4lEU3WrHz5n87KJRN1OXIWuCHRYU47gajMNY4D
3YBRaTWsLYuZJehjQcMAshl0ej+6CC0f6gRQenTUv7VnV4DtvlEMaGIWY2RtB3EP
FaJm3cb+35lqC8NGrSmRosIA339iTOmBs+tvIFnQmu2Qj2lLd5xZoOJAftvNz6/E
DNh4FkUngA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:27:55 2026 by rpki-client