Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/uYVzId5kHuAZNJSNCwDKcMz7_xY.roa
File: uYVzId5kHuAZNJSNCwDKcMz7_xY.roa (raw, json)
Hash identifier: c9bVVqZsVrLii9K2d4d5uBshO4e4alJujzyjDVg0Pr4=
Subject key identifier: B9:85:73:21:DE:64:1E:E0:19:34:94:8D:0B:00:CA:70:CC:FB:FF:16
Certificate issuer: /CN=66210a21e4e46e992c87f6b388260b6fcc62efb7
Certificate serial: 019F2368772B2670C2ABCB42530F9E6EEF4F
Authority key identifier: 66:21:0A:21:E4:E4:6E:99:2C:87:F6:B3:88:26:0B:6F:CC:62:EF:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/uYVzId5kHuAZNJSNCwDKcMz7_xY.roa
Signing time: Thu 02 Jul 2026 15:17:56 +0000
ROA not before: Thu 02 Jul 2026 15:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 91.224.186.0/24 maxlen: 24
153.98.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:77:2b:26:70:c2:ab:cb:42:53:0f:9e:6e:ef:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66210a21e4e46e992c87f6b388260b6fcc62efb7
Validity
Not Before: Jul 2 15:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9857321de641ee01934948d0b00ca70ccfbff16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:41:c4:48:51:14:b1:80:42:66:c4:7e:1f:
72:f9:2c:0b:7c:f4:e7:11:72:16:9a:38:5a:68:1f:
26:1d:55:e6:4b:6c:82:6a:65:b9:2d:81:e2:ba:07:
c0:08:ff:a6:69:e8:bc:2f:b6:7b:74:85:1b:4d:cb:
32:ec:0b:3b:2c:83:23:ad:17:b6:d8:df:49:3d:20:
91:4f:07:c6:d8:a5:70:5e:ec:70:87:e3:6e:c8:69:
14:e3:b8:0c:d7:ca:cd:8d:c5:6a:7d:88:0e:7b:6f:
b3:28:cb:d6:a9:9f:6b:6a:55:19:fa:8e:62:a3:ee:
2c:c6:ee:a4:c2:9f:56:f5:c3:d6:4b:d2:bc:c3:6b:
72:14:7e:a0:37:2e:ba:91:f5:39:1f:08:2a:ac:92:
ca:3c:10:ff:fc:22:4c:84:42:8b:15:0e:0b:c0:c1:
ae:75:47:6c:a5:68:f9:b7:24:6f:36:45:3a:5e:08:
78:22:37:cd:33:38:f5:d2:4f:be:7f:d6:3d:97:68:
94:ac:1f:9d:0c:23:94:3f:de:9e:72:8b:f9:5b:5d:
33:ad:b4:88:bf:df:9d:94:3c:f6:97:3e:82:7b:5e:
e3:ed:7a:13:ac:0b:da:9a:6d:8c:7d:8e:76:68:4a:
2b:09:d7:de:b2:b8:6d:6d:35:fa:22:58:92:70:21:
84:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:85:73:21:DE:64:1E:E0:19:34:94:8D:0B:00:CA:70:CC:FB:FF:16
X509v3 Authority Key Identifier:
keyid:66:21:0A:21:E4:E4:6E:99:2C:87:F6:B3:88:26:0B:6F:CC:62:EF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/uYVzId5kHuAZNJSNCwDKcMz7_xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.186.0/24
153.98.30.0/24
Signature Algorithm: sha256WithRSAEncryption
28:57:a3:24:48:dd:b2:e2:5d:67:3f:96:cd:ce:68:ed:20:ae:
50:c0:cf:37:e1:6d:fc:02:2a:79:8c:dd:1f:d3:fd:a8:ee:34:
7e:5a:d8:15:f0:0e:52:bc:af:c7:3c:57:ee:c4:f5:23:b1:16:
81:f6:e4:9b:ad:ff:5b:c3:b4:03:97:35:bb:43:33:82:12:d3:
bf:45:c3:cf:e0:77:90:9a:b2:0f:95:75:8a:a3:09:ac:99:15:
3e:e1:0d:eb:ec:58:a5:f3:e8:f7:72:f0:f6:b9:fe:62:12:a6:
61:3e:c7:20:05:05:4d:95:31:b3:47:7f:ba:f9:f2:18:c7:ec:
c5:bd:58:95:2c:ae:86:8a:87:ea:fb:6e:7c:f0:9e:a2:5e:1f:
95:d2:bf:c1:41:7e:fa:fe:c1:39:99:61:7d:04:dd:02:d0:ca:
f4:e9:e0:63:b0:25:70:12:5b:9d:79:a5:07:5b:db:12:9d:de:
5c:98:90:e6:85:02:53:8a:fb:91:6a:b8:c8:fc:8d:1c:2c:ce:
09:3c:df:74:dc:cd:19:ed:dd:e5:5b:9d:81:ec:b2:5e:b0:1c:
a5:8d:a3:4f:24:a9:57:24:11:b3:bd:31:02:78:7c:66:65:fe:
dd:a5:79:1e:16:4f:80:93:c6:69:0a:e6:10:a0:8f:e8:55:66:
16:27:1d:8d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8jaHcrJnDCq8tCUw+ebu9PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MjEwYTIxZTRlNDZlOTkyYzg3ZjZiMzg4MjYwYjZmY2M2
MmVmYjcwHhcNMjYwNzAyMTUxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTg1NzMyMWRlNjQxZWUwMTkzNDk0OGQwYjAwY2E3MGNjZmJmZjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD5BxEhRFLGAQmbEfh9y+SwLfPTn
EXIWmjhaaB8mHVXmS2yCamW5LYHiugfACP+maei8L7Z7dIUbTcsy7As7LIMjrRe2
2N9JPSCRTwfG2KVwXuxwh+NuyGkU47gM18rNjcVqfYgOe2+zKMvWqZ9ralUZ+o5i
o+4sxu6kwp9W9cPWS9K8w2tyFH6gNy66kfU5HwgqrJLKPBD//CJMhEKLFQ4LwMGu
dUdspWj5tyRvNkU6Xgh4IjfNMzj10k++f9Y9l2iUrB+dDCOUP96ecov5W10zrbSI
v9+dlDz2lz6Ce17j7XoTrAvamm2MfY52aEorCdfesrhtbTX6IliScCGEnQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLmFcyHeZB7gGTSUjQsAynDM+/8WMB8GA1UdIwQY
MBaAFGYhCiHk5G6ZLIf2s4gmC2/MYu+3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmlFS0llVGticGtzaF9hemlDWUxiOHhpNzdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kYjg3NTItODRiMi00MzhhLTliYzEt
YzU0MDFmNmQ5MWQxLzEvdVlWeklkNWtIdUFaTkpTTkN3REtjTXo3X3hZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9kYjg3NTItODRiMi00MzhhLTliYzEtYzU0MDFmNmQ5MWQx
LzEvWmlFS0llVGticGtzaF9hemlDWUxiOHhpNzdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+C6AwQA
mWIeMA0GCSqGSIb3DQEBCwUAA4IBAQAoV6MkSN2y4l1nP5bNzmjtIK5QwM834W38
Aip5jN0f0/2o7jR+WtgV8A5SvK/HPFfuxPUjsRaB9uSbrf9bw7QDlzW7QzOCEtO/
RcPP4HeQmrIPlXWKowmsmRU+4Q3r7Fil8+j3cvD2uf5iEqZhPscgBQVNlTGzR3+6
+fIYx+zFvViVLK6Giofq+2588J6iXh+V0r/BQX76/sE5mWF9BN0C0Mr06eBjsCVw
EludeaUHW9sSnd5cmJDmhQJTivuRarjI/I0cLM4JPN903M0Z7d3lW52B7LJesByl
jaNPJKlXJBGzvTECeHxmZf7dpXkeFk+Ak8ZpCuYQoI/oVWYWJx2N
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:49 2026 by rpki-client