Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/M7dFFOSrBzaFUq5ZdNNPk7yi3KU.roa
File: M7dFFOSrBzaFUq5ZdNNPk7yi3KU.roa (raw, json)
Hash identifier: aN1v+vWZ8n+oFtkV0A9nvgZo2rsfdgBQkD7A/r57KeE=
Subject key identifier: 33:B7:45:14:E4:AB:07:36:85:52:AE:59:74:D3:4F:93:BC:A2:DC:A5
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 01A12002C7B86D2CC81CD18EE92F7C5220F1
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/M7dFFOSrBzaFUq5ZdNNPk7yi3KU.roa
Signing time: Fri 09 Oct 2026 09:33:35 +0000
ROA not before: Fri 09 Oct 2026 09:33:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198831
IP address blocks: 91.209.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 19:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:02:c7:b8:6d:2c:c8:1c:d1:8e:e9:2f:7c:52:20:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Oct 9 09:33:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33b74514e4ab07368552ae5974d34f93bca2dca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:44:ff:0f:f8:92:5b:01:ed:e2:e7:10:25:3c:
7e:45:44:7c:18:4f:aa:bc:10:2b:53:a3:23:14:73:
51:55:f2:cb:fb:c7:8d:ab:76:71:f7:84:c6:40:a9:
d4:09:f3:b1:0c:8b:a3:1b:f6:23:65:45:02:4a:b2:
f1:f1:eb:b3:88:80:5e:7d:58:f0:bf:22:50:6a:8b:
5f:53:5f:41:22:0f:34:e6:75:dd:ba:27:b8:ad:68:
4b:3d:e3:64:c4:fe:57:f2:89:f1:eb:b1:03:1a:29:
54:f8:db:f7:4b:4a:8c:ba:2b:b0:d9:fd:19:52:36:
91:f6:3a:cd:b3:7e:b2:04:f5:0c:c9:be:74:a7:6a:
0c:d8:52:23:b3:f7:bf:c1:c7:7f:58:9e:58:d4:bd:
e3:0f:87:1a:05:93:19:3c:e3:af:df:65:cd:02:90:
72:26:d5:07:bf:9d:a0:71:96:aa:5d:5d:1f:e5:a3:
bc:46:e2:24:f1:1f:6e:70:5f:9c:09:c7:d5:01:0a:
b3:b9:72:d7:0e:1e:d5:af:c8:77:b7:4a:43:d0:61:
28:71:61:38:ae:5a:5c:59:2c:f5:3a:9e:86:7e:01:
28:84:8a:a5:a6:95:5e:70:43:b6:49:62:c5:74:3d:
30:4f:4d:05:97:ca:1b:57:f3:a9:3f:ec:56:87:63:
e2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B7:45:14:E4:AB:07:36:85:52:AE:59:74:D3:4F:93:BC:A2:DC:A5
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/M7dFFOSrBzaFUq5ZdNNPk7yi3KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.125.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:e7:a1:bd:c3:51:54:c6:a1:46:11:58:78:cd:61:43:bd:5a:
4a:5b:8f:bc:a2:74:4a:78:07:05:06:aa:c1:eb:70:cb:3a:ea:
59:df:f3:93:c7:25:ee:4a:9c:df:b8:0a:dc:a8:8e:6f:90:44:
f2:3a:97:69:2b:b2:38:38:f7:d9:20:1a:b8:9d:67:39:47:5d:
9b:8a:35:74:4c:03:78:25:b0:a8:88:07:3b:6a:80:5b:8c:7a:
57:83:de:aa:ce:d3:d8:eb:fc:10:98:9a:88:01:1b:8e:b8:37:
64:be:30:86:26:a4:1f:61:e2:a0:13:d5:6e:71:bf:2e:c0:40:
6e:44:18:40:7c:18:08:68:ac:fa:7c:38:11:9f:60:5b:3c:86:
20:26:fb:a7:ba:23:a3:a4:82:87:63:15:76:bd:e1:8a:e2:85:
17:d2:2f:8d:d2:ce:f2:dc:74:e0:e8:f7:7e:58:e3:c2:d4:35:
95:66:66:fd:63:c8:b9:b8:af:45:74:a3:76:1b:b8:88:6f:8b:
a7:6f:ee:b4:49:23:9d:38:09:bc:1e:75:0a:99:fe:7e:9c:8a:
cd:d7:a6:75:a4:cb:96:d1:ab:dd:b1:c4:05:31:ac:d4:8d:e0:
bd:55:71:df:65:a0:94:05:46:f7:05:05:26:e8:10:91:80:2f:
c1:f6:3d:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEgAse4bSzIHNGO6S98UiDxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3
OGE1NzkwHhcNMjYxMDA5MDkzMzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2I3NDUxNGU0YWIwNzM2ODU1MmFlNTk3NGQzNGY5M2JjYTJkY2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UT/D/iSWwHt4ucQJTx+RUR8GE+q
vBArU6MjFHNRVfLL+8eNq3Zx94TGQKnUCfOxDIujG/YjZUUCSrLx8euziIBefVjw
vyJQaotfU19BIg805nXduie4rWhLPeNkxP5X8onx67EDGilU+Nv3S0qMuiuw2f0Z
UjaR9jrNs36yBPUMyb50p2oM2FIjs/e/wcd/WJ5Y1L3jD4caBZMZPOOv32XNApBy
JtUHv52gcZaqXV0f5aO8RuIk8R9ucF+cCcfVAQqzuXLXDh7Vr8h3t0pD0GEocWE4
rlpcWSz1Op6GfgEohIqlppVecEO2SWLFdD0wT00Fl8obV/OpP+xWh2Pi+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDO3RRTkqwc2hVKuWXTTT5O8otylMB8GA1UdIwQY
MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt
YTM5YWMyNTM5ZmM1LzEvTTdkRkZPU3JCemFGVXE1WmROTlBrN3lpM0tVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1
LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9F9MA0G
CSqGSIb3DQEBCwUAA4IBAQCo56G9w1FUxqFGEVh4zWFDvVpKW4+8onRKeAcFBqrB
63DLOupZ3/OTxyXuSpzfuArcqI5vkETyOpdpK7I4OPfZIBq4nWc5R12bijV0TAN4
JbCoiAc7aoBbjHpXg96qztPY6/wQmJqIARuOuDdkvjCGJqQfYeKgE9Vucb8uwEBu
RBhAfBgIaKz6fDgRn2BbPIYgJvunuiOjpIKHYxV2veGK4oUX0i+N0s7y3HTg6Pd+
WOPC1DWVZmb9Y8i5uK9FdKN2G7iIb4unb+60SSOdOAm8HnUKmf5+nIrN16Z1pMuW
0avdscQFMazUjeC9VXHfZaCUBUb3BQUm6BCRgC/B9j1l
-----END CERTIFICATE-----
Generated at Wed Oct 14 06:44:33 2026 by rpki-client