Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/orK-A0_2K62XTvpt81DFhiz1aqs.roa
File: orK-A0_2K62XTvpt81DFhiz1aqs.roa (raw, json)
Hash identifier: Zlbl7xdJUlWvgbERZOg8o7I/JAqmkoXbUDm2AqYETO8=
Subject key identifier: A2:B2:BE:03:4F:F6:2B:AD:97:4E:FA:6D:F3:50:C5:86:2C:F5:6A:AB
Certificate issuer: /CN=69c466d582ec558e4beaaee650be5007709c589f
Certificate serial: 01A116019BB7A82F97F2A3CF679D92956B5E
Authority key identifier: 69:C4:66:D5:82:EC:55:8E:4B:EA:AE:E6:50:BE:50:07:70:9C:58:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acRm1YLsVY5L6q7mUL5QB3CcWJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/orK-A0_2K62XTvpt81DFhiz1aqs.roa
Signing time: Wed 07 Oct 2026 10:56:06 +0000
ROA not before: Wed 07 Oct 2026 10:56:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64445
IP address blocks: 91.193.55.0/24 maxlen: 24
2a12:e6c0::/32 maxlen: 64
2a12:e6c0:c50::/48 maxlen: 48
2a12:e6c0:1337::/48 maxlen: 48
2a12:e6c6::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/acRm1YLsVY5L6q7mUL5QB3CcWJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:01:9b:b7:a8:2f:97:f2:a3:cf:67:9d:92:95:6b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c466d582ec558e4beaaee650be5007709c589f
Validity
Not Before: Oct 7 10:56:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2b2be034ff62bad974efa6df350c5862cf56aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cb:03:bc:60:34:cd:b5:9b:af:bf:fb:5a:1e:
92:7a:39:74:42:73:b5:36:f5:de:51:28:32:23:f6:
35:5d:40:04:e5:72:64:28:70:e4:4b:79:41:90:f0:
9c:3a:e3:e4:ea:90:7c:a9:ef:ff:82:60:75:4d:68:
3a:dd:e0:84:35:a2:0b:91:76:3f:9b:a0:9b:8a:4d:
0d:ed:2c:0b:23:23:ea:8a:9e:22:59:2c:1a:9a:0b:
df:99:94:34:94:04:1b:de:56:ce:c5:96:32:ca:ad:
d7:12:96:61:e5:82:69:00:bd:06:d7:56:e3:cd:60:
21:b5:e2:ae:9c:7a:22:b7:eb:d8:17:32:e7:5e:57:
2e:93:ba:a1:24:1a:2b:56:d3:2c:00:80:b6:48:07:
c8:f9:3b:74:a2:cb:28:94:01:4f:27:22:29:f4:a4:
85:35:dc:e6:89:0d:0b:d0:46:1f:49:9e:51:78:6e:
7d:c6:ef:0f:7d:5b:45:df:b7:d4:86:a4:98:c8:9a:
69:b1:f8:9a:cd:ba:ef:37:d1:00:38:e2:96:a2:85:
28:78:b0:92:bc:63:0d:6b:ee:fd:73:72:5b:f3:4a:
3f:ff:b5:97:fe:88:4a:0a:ff:2e:17:f2:60:8b:95:
d4:9d:62:01:5b:51:b9:5f:e7:8c:9d:a6:4a:d2:61:
5b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B2:BE:03:4F:F6:2B:AD:97:4E:FA:6D:F3:50:C5:86:2C:F5:6A:AB
X509v3 Authority Key Identifier:
keyid:69:C4:66:D5:82:EC:55:8E:4B:EA:AE:E6:50:BE:50:07:70:9C:58:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acRm1YLsVY5L6q7mUL5QB3CcWJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/orK-A0_2K62XTvpt81DFhiz1aqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/acRm1YLsVY5L6q7mUL5QB3CcWJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.55.0/24
IPv6:
2a12:e6c0::/32
2a12:e6c6::/32
Signature Algorithm: sha256WithRSAEncryption
23:ea:ad:f0:a9:fb:c1:a8:d8:f1:0a:e1:52:df:18:ec:db:b7:
0e:12:2f:a5:2f:b2:84:e5:e6:39:13:2f:22:30:f7:50:b1:63:
f6:05:5a:2f:d1:52:df:1b:e8:88:83:8f:b2:61:b3:cd:c7:2f:
40:a7:f2:b3:b4:99:0c:c3:fb:59:cf:4b:19:2d:93:30:82:f6:
f8:c3:7a:e6:3b:73:b4:78:dd:1d:2c:f2:99:74:d6:c1:5c:8d:
5e:05:db:4f:2d:4c:1c:7c:80:78:e6:52:7e:3e:2f:68:f6:dc:
ad:7a:1b:72:ce:53:ba:9f:43:79:ef:12:83:14:8f:5c:7c:85:
e9:dd:4e:42:7a:5d:0b:e3:3a:d0:41:72:1e:7f:e7:3e:80:36:
f3:c6:1b:95:5a:78:eb:90:0b:7e:ec:be:e1:24:f2:5b:42:02:
a8:6a:d8:d7:ce:07:0c:56:b7:99:a6:33:05:5c:f8:db:20:00:
8a:80:74:9a:64:8d:c7:41:34:5e:37:d0:48:36:02:8c:c0:28:
30:66:99:84:8a:e3:22:e5:50:96:c8:38:77:15:74:18:78:c8:
5e:5f:8a:0b:c4:16:f2:5c:3e:92:5d:53:a1:39:53:41:03:d4:
02:f5:83:3b:bc:23:42:b8:7a:2f:2f:38:fd:15:d8:10:6d:61:
2f:2d:2a:52
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAaEWAZu3qC+X8qPPZ52SlWteMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YzQ2NmQ1ODJlYzU1OGU0YmVhYWVlNjUwYmU1MDA3NzA5
YzU4OWYwHhcNMjYxMDA3MTA1NjA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmIyYmUwMzRmZjYyYmFkOTc0ZWZhNmRmMzUwYzU4NjJjZjU2YWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MsDvGA0zbWbr7/7Wh6Sejl0QnO1
NvXeUSgyI/Y1XUAE5XJkKHDkS3lBkPCcOuPk6pB8qe//gmB1TWg63eCENaILkXY/
m6Cbik0N7SwLIyPqip4iWSwamgvfmZQ0lAQb3lbOxZYyyq3XEpZh5YJpAL0G11bj
zWAhteKunHoit+vYFzLnXlcuk7qhJBorVtMsAIC2SAfI+Tt0ossolAFPJyIp9KSF
NdzmiQ0L0EYfSZ5ReG59xu8PfVtF37fUhqSYyJppsfiazbrvN9EAOOKWooUoeLCS
vGMNa+79c3Jb80o//7WX/ohKCv8uF/Jgi5XUnWIBW1G5X+eMnaZK0mFbmQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFKKyvgNP9iutl076bfNQxYYs9WqrMB8GA1UdIwQY
MBaAFGnEZtWC7FWOS+qu5lC+UAdwnFifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWNSbTFZTHNWWTVMNnE3bVVMNVFCM0NjV0o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8yNjg4YjYtZGE3MC00YWJkLThmNTkt
MWE4MzFiNTk5YzE4LzEvb3JLLUEwXzJLNjJYVHZwdDgxREZoaXoxYXFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8yNjg4YjYtZGE3MC00YWJkLThmNTktMWE4MzFiNTk5YzE4
LzEvYWNSbTFZTHNWWTVMNnE3bVVMNVFCM0NjV0o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQAW8E3MBQE
AgACMA4DBQAqEubAAwUAKhLmxjANBgkqhkiG9w0BAQsFAAOCAQEAI+qt8Kn7wajY
8QrhUt8Y7Nu3DhIvpS+yhOXmORMvIjD3ULFj9gVaL9FS3xvoiIOPsmGzzccvQKfy
s7SZDMP7Wc9LGS2TMIL2+MN65jtztHjdHSzymXTWwVyNXgXbTy1MHHyAeOZSfj4v
aPbcrXobcs5Tup9Dee8SgxSPXHyF6d1OQnpdC+M60EFyHn/nPoA288YblVp465AL
fuy+4STyW0ICqGrY184HDFa3maYzBVz42yAAioB0mmSNx0E0XjfQSDYCjMAoMGaZ
hIrjIuVQlsg4dxV0GHjIXl+KC8QW8lw+kl1ToTlTQQPUAvWDO7wjQrh6Ly84/RXY
EG1hLy0qUg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:48:21 2026 by rpki-client