Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/f85ANWeKKEbi4pK19Z060OvY_XI.roa
File: f85ANWeKKEbi4pK19Z060OvY_XI.roa (raw, json)
Hash identifier: qV+HKaGs2anI4Q/Iy3DcGeZYfOs1cg3GI50On0iw4rQ=
Subject key identifier: 7F:CE:40:35:67:8A:28:46:E2:E2:92:B5:F5:9D:3A:D0:EB:D8:FD:72
Certificate issuer: /CN=f0198d5fbd2523e22db82f10c3da37a9435b6cbb
Certificate serial: 019F2368723486A3C5F89F29A5A6221B4637
Authority key identifier: F0:19:8D:5F:BD:25:23:E2:2D:B8:2F:10:C3:DA:37:A9:43:5B:6C:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BmNX70lI-ItuC8Qw9o3qUNbbLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/f85ANWeKKEbi4pK19Z060OvY_XI.roa
Signing time: Thu 02 Jul 2026 15:17:55 +0000
ROA not before: Thu 02 Jul 2026 15:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 91.203.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8BmNX70lI-ItuC8Qw9o3qUNbbLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:72:34:86:a3:c5:f8:9f:29:a5:a6:22:1b:46:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0198d5fbd2523e22db82f10c3da37a9435b6cbb
Validity
Not Before: Jul 2 15:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7fce4035678a2846e2e292b5f59d3ad0ebd8fd72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:02:6a:9d:ac:dd:d9:9e:63:47:60:e4:aa:59:
6e:44:ce:bb:7e:6c:6d:06:2e:d9:0c:e8:23:24:8d:
49:98:a0:75:b0:83:0c:75:f2:33:e6:4e:49:65:20:
31:fb:72:fd:6b:f4:0b:21:19:da:88:70:d0:74:8c:
33:27:49:9c:0a:d3:12:cf:0b:ae:04:ce:23:18:fa:
1b:fd:cf:f8:4b:d3:8e:7b:df:fe:bb:69:37:cf:e6:
15:92:25:45:78:fa:1c:e5:46:dc:cb:e2:0d:44:8c:
ea:42:49:a5:f6:0b:9d:88:a4:ba:e2:b9:23:ce:94:
bc:1d:86:e9:53:35:ba:f4:7f:6b:01:0d:f6:68:ce:
24:92:f7:47:32:52:ea:a3:cb:57:4a:66:cc:26:8b:
f9:70:b6:d4:01:5d:35:26:05:62:c3:7a:e1:c9:7a:
09:9e:d3:b1:36:fb:1a:b9:00:4b:9d:d4:58:b8:da:
06:cf:4e:bf:de:54:aa:fc:e4:91:0c:b4:25:9b:28:
78:2a:d6:10:3b:e6:3f:ac:ac:5b:0f:9c:dd:e0:f1:
72:ac:32:c6:0e:e5:d9:35:5a:5f:72:f2:e6:50:50:
f4:9f:23:29:00:12:f8:c9:d5:39:d1:32:5e:da:c8:
39:19:9f:94:77:1d:63:e6:04:bf:8e:5b:d0:a2:ae:
ed:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CE:40:35:67:8A:28:46:E2:E2:92:B5:F5:9D:3A:D0:EB:D8:FD:72
X509v3 Authority Key Identifier:
keyid:F0:19:8D:5F:BD:25:23:E2:2D:B8:2F:10:C3:DA:37:A9:43:5B:6C:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BmNX70lI-ItuC8Qw9o3qUNbbLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/f85ANWeKKEbi4pK19Z060OvY_XI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.230.0/24
Signature Algorithm: sha256WithRSAEncryption
06:01:ee:55:2e:cd:74:e2:0c:89:3c:cb:26:d5:00:ee:be:6e:
84:71:45:1e:98:cb:1f:65:c0:6b:f9:40:c5:bb:73:a9:e6:51:
76:32:dd:98:93:79:72:53:f5:ec:d2:43:a1:c5:41:d9:aa:ac:
16:13:41:ea:f0:d2:b2:f4:a2:db:26:c1:99:dd:66:43:a5:e7:
e4:6b:ca:10:c7:6d:92:fc:14:0e:8d:a7:fa:48:1a:90:66:56:
f5:3d:4a:a6:b4:a9:6a:48:33:16:91:0f:88:df:c4:7a:b7:3c:
88:74:91:7d:3f:9a:f0:d7:b8:b9:f3:cd:10:c5:93:38:57:93:
df:dc:fb:a7:a3:3f:29:89:d0:3e:da:2b:b7:2e:49:a7:cf:a5:
b6:a1:61:a9:47:63:54:c5:b0:1b:c1:1b:fc:a0:58:25:cf:49:
1f:40:1d:52:d5:b9:77:b7:ae:da:93:24:ed:43:8a:6d:0c:ca:
cd:39:97:84:75:83:8f:35:d3:c6:ed:24:42:63:76:1d:ba:8b:
2b:ba:71:70:65:f8:f5:55:0b:42:a7:99:5c:ec:de:3f:a4:a0:
c9:9c:ce:78:6a:32:4d:76:64:82:7b:9c:53:63:04:96:64:10:
8a:d8:32:57:03:84:43:21:09:90:cf:9f:31:6c:11:99:00:59:
8a:90:50:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaHI0hqPF+J8ppaYiG0Y3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMTk4ZDVmYmQyNTIzZTIyZGI4MmYxMGMzZGEzN2E5NDM1
YjZjYmIwHhcNMjYwNzAyMTUxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmNlNDAzNTY3OGEyODQ2ZTJlMjkyYjVmNTlkM2FkMGViZDhmZDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QJqnazd2Z5jR2DkqlluRM67fmxt
Bi7ZDOgjJI1JmKB1sIMMdfIz5k5JZSAx+3L9a/QLIRnaiHDQdIwzJ0mcCtMSzwuu
BM4jGPob/c/4S9OOe9/+u2k3z+YVkiVFePoc5Ubcy+INRIzqQkml9gudiKS64rkj
zpS8HYbpUzW69H9rAQ32aM4kkvdHMlLqo8tXSmbMJov5cLbUAV01JgViw3rhyXoJ
ntOxNvsauQBLndRYuNoGz06/3lSq/OSRDLQlmyh4KtYQO+Y/rKxbD5zd4PFyrDLG
DuXZNVpfcvLmUFD0nyMpABL4ydU50TJe2sg5GZ+Udx1j5gS/jlvQoq7tXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH/OQDVniihG4uKStfWdOtDr2P1yMB8GA1UdIwQY
MBaAFPAZjV+9JSPiLbgvEMPaN6lDW2y7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEJtTlg3MGxJLUl0dUM4UXc5bzNxVU5iYkxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81NmEwMDYtOTE5Zi00ODdjLTkzMTYt
MGJiNmE4M2Y5ZjQwLzEvZjg1QU5XZUtLRWJpNHBLMTlaMDYwT3ZZX1hJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81NmEwMDYtOTE5Zi00ODdjLTkzMTYtMGJiNmE4M2Y5ZjQw
LzEvOEJtTlg3MGxJLUl0dUM4UXc5bzNxVU5iYkxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8vmMA0G
CSqGSIb3DQEBCwUAA4IBAQAGAe5VLs104gyJPMsm1QDuvm6EcUUemMsfZcBr+UDF
u3Op5lF2Mt2Yk3lyU/Xs0kOhxUHZqqwWE0Hq8NKy9KLbJsGZ3WZDpefka8oQx22S
/BQOjaf6SBqQZlb1PUqmtKlqSDMWkQ+I38R6tzyIdJF9P5rw17i5880QxZM4V5Pf
3Punoz8pidA+2iu3Lkmnz6W2oWGpR2NUxbAbwRv8oFglz0kfQB1S1bl3t67akyTt
Q4ptDMrNOZeEdYOPNdPG7SRCY3YduosrunFwZfj1VQtCp5lc7N4/pKDJnM54ajJN
dmSCe5xTYwSWZBCK2DJXA4RDIQmQz58xbBGZAFmKkFAc
-----END CERTIFICATE-----
Generated at Tue Jul 21 04:53:12 2026 by rpki-client