Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/2eU00Nf2u118OUoh74WBl9apg8o.roa
File: 2eU00Nf2u118OUoh74WBl9apg8o.roa (raw, json)
Hash identifier: DO/KLuLEa1Pd1dwqSwrJA/xoUj9u/oxCfWB4M618KeI=
Subject key identifier: D9:E5:34:D0:D7:F6:BB:5D:7C:39:4A:21:EF:85:81:97:D6:A9:83:CA
Certificate issuer: /CN=6baf725e719244041964a09370e17fbefbbbaaf6
Certificate serial: 019B7F83FC4A2EE3360ECEBBEA8F61C3D67C
Authority key identifier: 6B:AF:72:5E:71:92:44:04:19:64:A0:93:70:E1:7F:BE:FB:BB:AA:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/2eU00Nf2u118OUoh74WBl9apg8o.roa
Signing time: Fri 02 Jan 2026 16:21:54 +0000
ROA not before: Fri 02 Jan 2026 16:21:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47766
IP address blocks: 91.208.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:fc:4a:2e:e3:36:0e:ce:bb:ea:8f:61:c3:d6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6baf725e719244041964a09370e17fbefbbbaaf6
Validity
Not Before: Jan 2 16:21:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9e534d0d7f6bb5d7c394a21ef858197d6a983ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cc:e2:df:3f:4f:9c:3c:b8:12:84:dc:51:ea:
5e:d6:fb:db:c1:ed:2f:e2:0b:99:71:66:36:a9:be:
94:c3:02:74:06:2a:9b:e4:e4:ad:4a:ed:e0:00:ff:
88:c6:9b:f1:dd:de:02:6e:6d:04:f8:5e:e0:3f:71:
ce:25:35:a0:7c:54:d0:6c:9f:32:82:16:6e:76:2e:
fa:17:72:69:25:b2:40:87:9e:b0:e2:a6:79:af:73:
17:2b:eb:2e:47:f1:5f:bc:37:cf:3f:b9:e4:6e:66:
7e:3e:03:c5:07:df:32:8c:75:ed:7c:f6:1e:24:49:
8b:b9:bf:31:58:a7:19:81:93:82:bd:69:5a:1d:d7:
53:bc:08:1d:70:8e:f6:b6:79:e7:f1:53:69:de:79:
a7:be:85:c4:e2:05:be:38:60:97:d6:95:da:a1:4b:
bf:1e:6c:f7:51:fc:27:fa:53:b2:76:e8:cf:97:4f:
0a:a5:f8:38:4a:75:52:89:62:21:9b:23:bd:7d:e6:
33:72:11:1e:78:e9:f2:26:c5:c5:57:23:cd:07:fc:
b7:83:06:fd:bd:ef:7e:23:e9:5c:1c:30:32:38:aa:
70:f0:98:41:ab:b7:32:a5:32:a9:13:17:a6:ca:c5:
5a:77:45:5a:45:a0:2c:f2:a6:b2:8e:03:c5:79:82:
d5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E5:34:D0:D7:F6:BB:5D:7C:39:4A:21:EF:85:81:97:D6:A9:83:CA
X509v3 Authority Key Identifier:
keyid:6B:AF:72:5E:71:92:44:04:19:64:A0:93:70:E1:7F:BE:FB:BB:AA:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/2eU00Nf2u118OUoh74WBl9apg8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.139.0/24
Signature Algorithm: sha256WithRSAEncryption
65:f7:8a:7b:38:5a:dd:4f:f4:39:ad:f7:e9:29:3b:ae:0b:ed:
4a:70:79:65:4d:52:c5:7d:5f:4f:cb:2b:a2:31:44:79:ed:91:
13:74:51:b5:34:6d:b9:b4:c1:8c:60:aa:04:f4:f3:57:1f:0b:
ec:e5:3d:7e:e6:68:cd:9a:a1:24:0f:3b:31:2a:c5:3e:4a:90:
e5:7a:f8:3c:9f:41:f7:95:bc:e0:7f:d0:cf:08:fd:20:c7:d2:
00:30:6e:6f:09:6e:51:cb:07:22:91:3f:7b:40:c8:6e:f3:ce:
cd:36:69:c6:ba:27:a1:98:a3:84:1a:b8:e5:97:e3:20:a3:46:
e4:7d:15:16:36:4a:48:70:56:2e:88:5a:b6:3a:5c:95:02:c9:
51:29:a3:e2:b9:d0:60:d2:bd:d4:62:94:11:32:b7:c7:75:b3:
af:28:14:54:08:00:f7:15:03:0a:08:f2:83:70:ae:34:24:b1:
e5:9b:06:c3:b2:31:90:6f:81:ee:a0:2e:fa:a7:21:3d:82:f3:
e5:65:c4:36:ef:63:25:54:e4:60:ca:4f:07:ba:6d:df:82:5f:
f3:4f:0b:79:e1:d4:23:da:a9:12:95:e0:9c:cb:f0:03:8b:d8:
b8:32:f5:8a:de:9d:e6:b3:03:85:29:78:bb:04:94:59:fc:a5:
cb:e7:ba:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/g/xKLuM2Ds676o9hw9Z8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYWY3MjVlNzE5MjQ0MDQxOTY0YTA5MzcwZTE3ZmJlZmJi
YmFhZjYwHhcNMjYwMTAyMTYyMTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWU1MzRkMGQ3ZjZiYjVkN2MzOTRhMjFlZjg1ODE5N2Q2YTk4M2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApczi3z9PnDy4EoTcUepe1vvbwe0v
4guZcWY2qb6UwwJ0Biqb5OStSu3gAP+Ixpvx3d4Cbm0E+F7gP3HOJTWgfFTQbJ8y
ghZudi76F3JpJbJAh56w4qZ5r3MXK+suR/FfvDfPP7nkbmZ+PgPFB98yjHXtfPYe
JEmLub8xWKcZgZOCvWlaHddTvAgdcI72tnnn8VNp3nmnvoXE4gW+OGCX1pXaoUu/
Hmz3Ufwn+lOydujPl08Kpfg4SnVSiWIhmyO9feYzchEeeOnyJsXFVyPNB/y3gwb9
ve9+I+lcHDAyOKpw8JhBq7cypTKpExemysVad0VaRaAs8qayjgPFeYLVqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNnlNNDX9rtdfDlKIe+FgZfWqYPKMB8GA1UdIwQY
MBaAFGuvcl5xkkQEGWSgk3Dhf777u6r2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTY5eVhuR1NSQVFaWktDVGNPRl92dnU3cXZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC85MWNiY2UtYWM5Yy00ZWVjLWI4NjEt
MjZjM2ZkYzVlNzE3LzEvMmVVMDBOZjJ1MTE4T1VvaDc0V0JsOWFwZzhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC85MWNiY2UtYWM5Yy00ZWVjLWI4NjEtMjZjM2ZkYzVlNzE3
LzEvYTY5eVhuR1NSQVFaWktDVGNPRl92dnU3cXZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9CLMA0G
CSqGSIb3DQEBCwUAA4IBAQBl94p7OFrdT/Q5rffpKTuuC+1KcHllTVLFfV9Pyyui
MUR57ZETdFG1NG25tMGMYKoE9PNXHwvs5T1+5mjNmqEkDzsxKsU+SpDlevg8n0H3
lbzgf9DPCP0gx9IAMG5vCW5RywcikT97QMhu887NNmnGuiehmKOEGrjll+Mgo0bk
fRUWNkpIcFYuiFq2OlyVAslRKaPiudBg0r3UYpQRMrfHdbOvKBRUCAD3FQMKCPKD
cK40JLHlmwbDsjGQb4HuoC76pyE9gvPlZcQ272MlVORgyk8Hum3fgl/zTwt54dQj
2qkSleCcy/ADi9i4MvWK3p3mswOFKXi7BJRZ/KXL57r+
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:39:03 2026 by rpki-client