Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/FMdfV4nkPXYjOT-AFl4Xp5RkC9M.roa
File: FMdfV4nkPXYjOT-AFl4Xp5RkC9M.roa (raw, json)
Hash identifier: OGRtgq+HhCARMlMAH6aYfG5S29jUfJNp4DytBHG5EeA=
Subject key identifier: 14:C7:5F:57:89:E4:3D:76:23:39:3F:80:16:5E:17:A7:94:64:0B:D3
Certificate issuer: /CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Certificate serial: 01A15E3DB0EF1EF018FC6D64699B3468514D
Authority key identifier: 94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/FMdfV4nkPXYjOT-AFl4Xp5RkC9M.roa
Signing time: Wed 21 Oct 2026 11:34:23 +0000
ROA not before: Wed 21 Oct 2026 11:34:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47376
IP address blocks: 91.192.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:3d:b0:ef:1e:f0:18:fc:6d:64:69:9b:34:68:51:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Validity
Not Before: Oct 21 11:34:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14c75f5789e43d7623393f80165e17a794640bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:f2:91:02:9c:c6:1e:62:5c:c4:6f:2d:f8:
2e:44:72:92:17:45:9a:d0:d9:db:22:23:d3:7f:34:
02:1d:6a:ee:9d:57:c6:09:4f:07:d9:53:c9:29:13:
17:0e:7e:e4:6a:5f:7a:c6:07:ee:a3:3c:ca:e4:7d:
1a:66:11:e4:c1:1c:71:cf:54:0f:e3:b5:dd:6a:de:
02:d0:93:99:98:dd:88:85:30:d4:06:51:d8:25:82:
a7:31:35:35:67:3d:9d:fb:7b:dc:cf:99:5a:6a:ff:
1d:5a:30:13:44:8b:8d:d0:d9:71:c4:52:5d:18:61:
05:35:0e:6e:34:c5:d9:9a:11:d5:47:2b:f5:9d:3f:
8d:85:3a:3b:1d:2e:a7:12:b0:86:35:71:8d:a2:fe:
4f:15:2d:aa:a5:e8:4c:5e:c2:aa:54:c3:36:c0:e8:
bb:3e:d1:7f:57:fc:2d:59:87:08:43:82:80:e3:b9:
36:9f:08:07:41:a7:5b:4b:ee:fd:4d:e8:57:36:15:
56:a3:11:0e:b1:8e:ca:84:49:30:e9:2e:f9:0a:67:
07:65:77:a5:17:b6:67:ff:5a:2c:5e:ce:e8:4b:59:
b7:38:6a:82:59:ed:53:2d:9c:ef:06:99:79:9c:31:
d6:da:f9:65:65:9f:b6:6a:ea:4f:a4:ba:03:d3:66:
d9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C7:5F:57:89:E4:3D:76:23:39:3F:80:16:5E:17:A7:94:64:0B:D3
X509v3 Authority Key Identifier:
keyid:94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/FMdfV4nkPXYjOT-AFl4Xp5RkC9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.160.0/24
Signature Algorithm: sha256WithRSAEncryption
46:d8:87:36:59:f4:79:d9:79:b7:c4:51:25:45:e0:6a:2e:b4:
7c:82:44:31:d0:34:db:50:07:19:93:65:f3:4c:e9:94:2e:0a:
50:be:0f:fb:92:79:87:91:8c:f2:32:97:ed:d4:56:5a:b4:85:
83:63:bb:13:de:b8:3c:77:93:b2:c5:c1:5c:6e:c4:65:b8:e0:
e1:13:a0:be:81:1a:d4:44:43:5b:51:81:7d:42:5f:c9:b1:de:
32:f4:49:12:80:15:4c:23:c7:c5:81:45:7a:bf:86:bd:36:55:
d8:9d:48:a7:80:fd:c5:6d:f0:3e:33:24:3e:2f:dd:c2:bb:a8:
dd:16:e5:77:c7:0e:c0:99:34:38:b5:b3:e5:b6:68:4c:00:c6:
3e:31:3d:83:d6:2d:bd:35:80:ef:51:c6:6a:91:12:57:df:be:
3d:5c:98:0f:65:62:48:6f:ee:d0:04:0d:57:57:2c:6a:8e:85:
85:5a:48:6c:12:c2:59:f3:5d:e2:b5:df:0d:90:47:26:49:ed:
ba:3c:66:fa:83:25:08:74:a0:7f:10:c7:2a:bc:08:30:c6:2a:
b7:05:ba:56:84:95:e9:8d:de:09:32:ed:ad:bb:24:87:88:42:
16:a6:ae:f6:e2:5e:08:4a:f3:fa:13:5b:2d:de:17:50:eb:43:
db:06:98:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFePbDvHvAY/G1kaZs0aFFNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZjhiZjlmMzA1NTI3NTIxNTA4Njk3ZTJlYWEzYmUxYzdh
MTg0NTQwHhcNMjYxMDIxMTEzNDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGM3NWY1Nzg5ZTQzZDc2MjMzOTNmODAxNjVlMTdhNzk0NjQwYmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUzykQKcxh5iXMRvLfguRHKSF0Wa
0NnbIiPTfzQCHWrunVfGCU8H2VPJKRMXDn7kal96xgfuozzK5H0aZhHkwRxxz1QP
47Xdat4C0JOZmN2IhTDUBlHYJYKnMTU1Zz2d+3vcz5laav8dWjATRIuN0NlxxFJd
GGEFNQ5uNMXZmhHVRyv1nT+NhTo7HS6nErCGNXGNov5PFS2qpehMXsKqVMM2wOi7
PtF/V/wtWYcIQ4KA47k2nwgHQadbS+79TehXNhVWoxEOsY7KhEkw6S75CmcHZXel
F7Zn/1osXs7oS1m3OGqCWe1TLZzvBpl5nDHW2vllZZ+2aupPpLoD02bZzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBTHX1eJ5D12Izk/gBZeF6eUZAvTMB8GA1UdIwQY
MBaAFJT4v58wVSdSFQhpfi6qO+HHoYRUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFBpX256QlZKMUlWQ0dsLUxxbzc0Y2VoaEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNzNlOTUtYzNjOS00OWFlLWEyZDkt
YTdiODU0NjBmMzY2LzEvRk1kZlY0bmtQWFlqT1QtQUZsNFhwNVJrQzlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNzNlOTUtYzNjOS00OWFlLWEyZDktYTdiODU0NjBmMzY2
LzEvbFBpX256QlZKMUlWQ0dsLUxxbzc0Y2VoaEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8CgMA0G
CSqGSIb3DQEBCwUAA4IBAQBG2Ic2WfR52Xm3xFElReBqLrR8gkQx0DTbUAcZk2Xz
TOmULgpQvg/7knmHkYzyMpft1FZatIWDY7sT3rg8d5OyxcFcbsRluODhE6C+gRrU
RENbUYF9Ql/Jsd4y9EkSgBVMI8fFgUV6v4a9NlXYnUingP3FbfA+MyQ+L93Cu6jd
FuV3xw7AmTQ4tbPltmhMAMY+MT2D1i29NYDvUcZqkRJX3749XJgPZWJIb+7QBA1X
VyxqjoWFWkhsEsJZ813itd8NkEcmSe26PGb6gyUIdKB/EMcqvAgwxiq3BbpWhJXp
jd4JMu2tuySHiEIWpq724l4ISvP6E1st3hdQ60PbBpgf
-----END CERTIFICATE-----
Generated at Tue Oct 27 08:30:26 2026 by rpki-client