Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/ioRtNTdinpYrcVf_jzCS5BV23i0.roa
File: ioRtNTdinpYrcVf_jzCS5BV23i0.roa (raw, json)
Hash identifier: Ka+iUbIs4jDL+lzQs7AOTwqacQczetgn601hHQNpQS0=
Subject key identifier: 8A:84:6D:35:37:62:9E:96:2B:71:57:FF:8F:30:92:E4:15:76:DE:2D
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 019F4AFD538D07F4ED1A48F06B5046D33D34
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/ioRtNTdinpYrcVf_jzCS5BV23i0.roa
Signing time: Fri 10 Jul 2026 07:45:43 +0000
ROA not before: Fri 10 Jul 2026 07:45:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7488
IP address blocks: 91.193.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4a:fd:53:8d:07:f4:ed:1a:48:f0:6b:50:46:d3:3d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jul 10 07:45:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a846d3537629e962b7157ff8f3092e41576de2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1d:dc:97:d7:a9:73:94:50:33:31:23:90:d1:
9f:69:23:cb:71:f1:5e:e0:7e:53:11:90:13:fc:0c:
c6:be:fc:fc:b5:e6:ef:d9:e0:6c:78:8f:5b:a7:ed:
d6:bf:ab:ec:71:d0:4c:3d:98:4b:92:eb:29:cc:18:
94:2e:bc:5b:f1:cd:2f:5e:8d:91:63:49:66:3f:fa:
6a:52:08:e5:5c:29:c7:2c:da:d0:d0:91:f8:46:27:
80:7e:7f:6b:2c:b6:26:96:fb:3d:61:c9:4d:eb:fb:
e1:da:c0:57:a5:52:65:06:f3:c2:a9:a4:bd:67:18:
4b:91:ee:55:8d:24:ed:d3:41:3b:18:55:fe:97:97:
db:d2:67:c6:04:8c:81:68:b5:55:7d:88:c3:1d:c3:
1c:68:1a:3e:21:04:5e:8a:ac:9c:16:59:a9:76:d9:
5d:68:34:18:9b:e7:c6:81:c7:50:af:2a:eb:79:8b:
00:ba:be:81:8f:1c:43:7c:f1:e0:c5:09:32:2c:08:
bd:88:ba:73:12:df:c1:21:28:33:52:f7:78:43:00:
b8:94:9e:14:05:6a:64:f0:3d:7b:6c:6a:ad:73:ea:
3b:a7:50:23:4a:46:59:fe:ca:43:13:cf:d2:ab:65:
27:63:00:72:aa:65:b1:c5:84:91:39:bb:26:ca:9c:
1f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:84:6D:35:37:62:9E:96:2B:71:57:FF:8F:30:92:E4:15:76:DE:2D
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/ioRtNTdinpYrcVf_jzCS5BV23i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.233.0/24
Signature Algorithm: sha256WithRSAEncryption
68:7d:95:ac:c7:6f:b5:a3:e5:e4:7f:47:97:8c:1d:62:b9:ff:
9b:93:71:e1:1e:97:f2:b8:b9:07:c0:3a:f7:55:55:ba:69:69:
cb:bb:65:65:bf:9e:19:2d:b6:f3:e7:f3:be:ea:c2:7f:94:85:
7b:d5:25:fb:6c:ab:68:97:da:41:d3:64:79:09:2d:40:11:d0:
93:01:3d:58:33:a8:f3:1a:55:e9:42:58:0a:6e:bd:65:11:6d:
c3:16:91:f9:5d:50:fb:1f:41:ba:32:17:c7:cb:a2:6e:06:95:
6e:f3:ed:1d:d9:30:dc:ee:3a:a1:af:46:ba:2a:1a:8a:c7:4a:
d5:bc:e5:02:4f:12:70:c6:ed:5a:92:c0:66:f9:8f:e8:00:69:
62:90:44:81:5f:d5:33:70:62:71:38:a5:2d:8f:5b:dd:69:9b:
86:9e:5d:94:ff:ee:78:07:1b:2e:1c:4e:1a:dc:16:78:2d:31:
3f:40:fc:25:4c:83:5f:f7:63:98:eb:70:6d:18:73:5c:39:2e:
71:5b:3a:be:59:0f:ad:11:6c:da:fe:8b:f0:59:ef:00:c6:f5:
84:e0:86:dd:bf:f3:b4:6e:05:ef:23:eb:76:cf:0e:91:86:10:
54:c5:ce:fc:31:9d:c1:78:be:e0:7d:9b:3e:be:92:44:c8:a7:
ca:79:de:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9K/VONB/TtGkjwa1BG0z00MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy
NTdkYzQwHhcNMjYwNzEwMDc0NTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTg0NmQzNTM3NjI5ZTk2MmI3MTU3ZmY4ZjMwOTJlNDE1NzZkZTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB3cl9epc5RQMzEjkNGfaSPLcfFe
4H5TEZAT/AzGvvz8tebv2eBseI9bp+3Wv6vscdBMPZhLkuspzBiULrxb8c0vXo2R
Y0lmP/pqUgjlXCnHLNrQ0JH4RieAfn9rLLYmlvs9YclN6/vh2sBXpVJlBvPCqaS9
ZxhLke5VjSTt00E7GFX+l5fb0mfGBIyBaLVVfYjDHcMcaBo+IQReiqycFlmpdtld
aDQYm+fGgcdQryrreYsAur6BjxxDfPHgxQkyLAi9iLpzEt/BISgzUvd4QwC4lJ4U
BWpk8D17bGqtc+o7p1AjSkZZ/spDE8/Sq2UnYwByqmWxxYSRObsmypwfuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIqEbTU3Yp6WK3FX/48wkuQVdt4tMB8GA1UdIwQY
MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt
OTk5MGUyZDllYWZlLzEvaW9SdE5UZGlucFlyY1ZmX2p6Q1M1QlYyM2kwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl
LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8HpMA0G
CSqGSIb3DQEBCwUAA4IBAQBofZWsx2+1o+Xkf0eXjB1iuf+bk3HhHpfyuLkHwDr3
VVW6aWnLu2Vlv54ZLbbz5/O+6sJ/lIV71SX7bKtol9pB02R5CS1AEdCTAT1YM6jz
GlXpQlgKbr1lEW3DFpH5XVD7H0G6MhfHy6JuBpVu8+0d2TDc7jqhr0a6KhqKx0rV
vOUCTxJwxu1aksBm+Y/oAGlikESBX9UzcGJxOKUtj1vdaZuGnl2U/+54BxsuHE4a
3BZ4LTE/QPwlTINf92OY63BtGHNcOS5xWzq+WQ+tEWza/ovwWe8AxvWE4Ibdv/O0
bgXvI+t2zw6RhhBUxc78MZ3BeL7gfZs+vpJEyKfKed5W
-----END CERTIFICATE-----
Generated at Mon Jul 20 18:13:13 2026 by rpki-client