Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_13GXTFT24Pzv9UnRd81gGGGwNY.roa
File: _13GXTFT24Pzv9UnRd81gGGGwNY.roa (raw, json)
Hash identifier: TxJw1zLP+n42NiaPnMJVkEuNIQ1vLU7IZHky0ad2Zbo=
Subject key identifier: FF:5D:C6:5D:31:53:DB:83:F3:BF:D5:27:45:DF:35:80:61:86:C0:D6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019DDCE4C10B4A6180B3DF6DF10448BC777D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_13GXTFT24Pzv9UnRd81gGGGwNY.roa
Signing time: Thu 30 Apr 2026 05:37:52 +0000
ROA not before: Thu 30 Apr 2026 05:37:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198189
IP address blocks: 45.91.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:e4:c1:0b:4a:61:80:b3:df:6d:f1:04:48:bc:77:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 30 05:37:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff5dc65d3153db83f3bfd52745df35806186c0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:31:f9:30:6a:c4:0e:00:62:61:95:50:60:1d:
f2:36:51:f8:8d:5d:80:cb:ad:04:e4:30:d3:39:dd:
7c:9f:92:44:d3:a4:a2:d1:e2:ae:86:95:21:54:4b:
f3:d0:30:d0:b8:64:f4:20:cf:9c:bd:52:c8:a5:83:
73:bd:6b:29:58:aa:58:04:2a:59:1e:6d:97:7d:8a:
f3:2e:d8:e0:4b:2f:42:1c:fb:69:8e:6d:0b:05:90:
97:0a:4c:ff:51:d8:8f:a7:f4:d1:8e:0f:7d:4c:39:
cf:bc:85:82:00:aa:5f:de:5d:5f:29:7b:6c:cb:1e:
57:4c:39:6e:22:97:63:9d:c8:cf:c7:c3:da:16:cb:
cf:98:59:2e:d4:8c:54:0d:89:23:cb:76:c1:dc:18:
e3:f3:2c:00:7b:ed:91:a3:02:df:cb:e6:d3:b1:cc:
31:23:e1:1b:33:78:14:9d:e4:47:7e:00:74:a7:cc:
fb:ff:62:19:a1:89:95:11:f6:2d:ad:87:aa:28:34:
e2:7a:50:ac:c6:b6:1e:e3:2b:86:e6:f1:9a:64:23:
95:79:aa:12:be:ac:91:2b:e0:24:d5:a2:f8:d7:42:
d7:5d:04:f7:2f:f6:b8:85:fd:6b:e9:03:46:7b:a5:
71:81:9a:59:49:7a:5a:e7:87:72:46:cf:e7:7c:6f:
a3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5D:C6:5D:31:53:DB:83:F3:BF:D5:27:45:DF:35:80:61:86:C0:D6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_13GXTFT24Pzv9UnRd81gGGGwNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.194.0/24
Signature Algorithm: sha256WithRSAEncryption
12:88:e4:ea:8a:52:6f:d5:88:cd:36:27:fc:1f:f5:79:86:5c:
3e:0c:b7:86:de:e8:a4:ad:5c:bb:d9:f1:6e:24:d3:40:3a:1d:
30:3d:ad:52:30:7b:12:10:00:7d:ef:86:70:b6:50:92:09:03:
83:34:16:70:f1:1f:ff:8a:8e:11:11:fd:88:a2:0d:e3:cc:05:
d3:6a:e7:25:cb:d3:b8:78:35:de:a1:f1:aa:6f:cf:cb:a5:0c:
ec:28:d4:14:06:2e:e8:12:ce:fa:92:27:dc:18:41:f4:01:73:
86:76:96:5a:50:9a:b6:67:21:58:02:4f:69:ca:49:0d:6f:21:
dc:a4:e7:d1:90:43:a8:bf:82:0b:27:e3:99:36:2d:e5:df:4a:
8f:83:93:f6:a5:9f:b4:47:92:a5:dd:96:6a:88:15:c4:fa:33:
53:2c:01:b3:9b:67:a5:cc:88:b3:f1:25:bc:70:de:ad:29:33:
89:14:8c:0a:6c:02:ec:bd:3f:c7:76:ed:d8:86:a2:59:6e:f8:
50:7d:d7:70:7f:36:89:91:0b:f7:58:db:36:b3:55:2c:84:10:
c4:e4:6e:5e:98:9c:ac:4a:28:07:c8:af:4f:07:b3:e5:a7:03:
26:0a:58:04:bc:c7:56:bd:a3:94:dc:6f:70:90:48:76:c0:06:
a4:0d:d5:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3c5MELSmGAs99t8QRIvHd9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwNDMwMDUzNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjVkYzY1ZDMxNTNkYjgzZjNiZmQ1Mjc0NWRmMzU4MDYxODZjMGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjH5MGrEDgBiYZVQYB3yNlH4jV2A
y60E5DDTOd18n5JE06Si0eKuhpUhVEvz0DDQuGT0IM+cvVLIpYNzvWspWKpYBCpZ
Hm2XfYrzLtjgSy9CHPtpjm0LBZCXCkz/UdiPp/TRjg99TDnPvIWCAKpf3l1fKXts
yx5XTDluIpdjncjPx8PaFsvPmFku1IxUDYkjy3bB3Bjj8ywAe+2RowLfy+bTscwx
I+EbM3gUneRHfgB0p8z7/2IZoYmVEfYtrYeqKDTielCsxrYe4yuG5vGaZCOVeaoS
vqyRK+Ak1aL410LXXQT3L/a4hf1r6QNGe6VxgZpZSXpa54dyRs/nfG+jgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP9dxl0xU9uD87/VJ0XfNYBhhsDWMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvXzEzR1hURlQyNFB6djlVblJkODFnR0dHd05ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVvCMA0G
CSqGSIb3DQEBCwUAA4IBAQASiOTqilJv1YjNNif8H/V5hlw+DLeG3uikrVy72fFu
JNNAOh0wPa1SMHsSEAB974ZwtlCSCQODNBZw8R//io4REf2Iog3jzAXTaucly9O4
eDXeofGqb8/LpQzsKNQUBi7oEs76kifcGEH0AXOGdpZaUJq2ZyFYAk9pykkNbyHc
pOfRkEOov4ILJ+OZNi3l30qPg5P2pZ+0R5Kl3ZZqiBXE+jNTLAGzm2elzIiz8SW8
cN6tKTOJFIwKbALsvT/Hdu3YhqJZbvhQfddwfzaJkQv3WNs2s1UshBDE5G5emJys
SigHyK9PB7PlpwMmClgEvMdWvaOU3G9wkEh2wAakDdXn
-----END CERTIFICATE-----
Generated at Thu Apr 30 17:19:35 2026 by rpki-client