Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/udGpBfyEqQK2qBRdIM_Jn6yyk2c.roa
File: udGpBfyEqQK2qBRdIM_Jn6yyk2c.roa (raw, json)
Hash identifier: LlCGXj+e4eawxgsW0Cgi60/0a++kVnyUihfcM7VuJvY=
Subject key identifier: B9:D1:A9:05:FC:84:A9:02:B6:A8:14:5D:20:CF:C9:9F:AC:B2:93:67
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 01A01E31613AD94009860D49A4A944CEC734
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/udGpBfyEqQK2qBRdIM_Jn6yyk2c.roa
Signing time: Thu 20 Aug 2026 08:02:27 +0000
ROA not before: Thu 20 Aug 2026 08:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209829
IP address blocks: 91.221.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:35:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:31:61:3a:d9:40:09:86:0d:49:a4:a9:44:ce:c7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Aug 20 08:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9d1a905fc84a902b6a8145d20cfc99facb29367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0b:c0:0f:ab:7e:f3:c3:d7:db:d3:aa:36:ab:
78:9f:14:f4:35:e3:33:bf:b6:c0:73:78:b2:03:03:
5a:57:d8:9e:a7:69:f6:b2:29:bd:00:3a:70:99:70:
18:dc:3d:b4:59:b5:b5:61:52:1a:4d:30:3c:6b:72:
55:88:0a:cf:25:8c:65:a3:88:7e:29:51:1e:ad:69:
87:37:54:f4:04:9f:85:ad:6e:bd:b2:cb:40:94:40:
89:cd:45:d8:a9:48:96:2e:30:04:1f:e3:28:0d:d5:
da:e2:60:37:89:bf:47:a7:8e:c1:ea:7e:1f:e0:0c:
49:51:4c:a7:30:83:d8:c3:4a:5f:23:5c:ab:2e:68:
82:f5:ff:12:2b:47:09:79:85:4b:ca:bb:ba:cd:62:
25:63:ab:e4:d7:69:09:9f:bd:17:09:65:2b:84:f6:
da:9a:8d:87:42:48:d9:f8:6b:a2:88:b7:12:30:54:
63:1f:f9:fe:68:4a:9b:3a:23:c3:83:34:1f:9d:6e:
89:7d:c8:19:7a:97:d4:99:4a:0a:d7:75:cd:4f:52:
66:17:35:7d:a3:e2:d8:a8:46:86:22:49:ab:2e:56:
1d:8b:44:68:b3:7c:72:d7:c6:0d:2d:7e:9b:e1:8c:
c2:04:b4:1d:5d:c6:68:c8:ca:5d:c6:30:52:e6:1e:
b9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D1:A9:05:FC:84:A9:02:B6:A8:14:5D:20:CF:C9:9F:AC:B2:93:67
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/udGpBfyEqQK2qBRdIM_Jn6yyk2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.117.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f3:51:5e:27:be:57:e4:bf:44:53:a5:ea:85:d2:1c:50:76:
e6:7a:36:a1:59:72:6e:58:1b:70:73:2e:28:6a:04:86:b7:22:
a7:0d:d7:3e:ca:21:8b:54:4a:de:29:35:a2:78:f9:e9:3e:4a:
5c:fe:82:09:cf:05:77:41:05:93:69:c3:9f:0c:30:e5:67:30:
b5:4c:57:a0:cb:7b:2b:10:94:38:aa:14:15:81:7b:02:2a:5d:
22:15:a1:39:f7:79:78:c3:6e:9c:6f:80:5e:ab:e7:f0:21:1d:
dd:ba:5d:07:f6:a7:fe:17:1d:7d:eb:0a:fc:da:46:58:03:b8:
f2:86:59:c3:36:17:12:b0:df:32:65:e9:52:26:da:2d:9a:b6:
24:9d:26:67:53:39:06:0f:1e:04:93:02:22:b0:9e:3d:dc:ec:
81:ae:81:ed:f5:c3:e5:d2:e5:9d:8e:cc:e2:ae:ef:79:3b:fc:
86:f7:44:5d:21:3b:94:b3:9e:ea:45:79:89:21:66:ee:f4:de:
2a:98:82:60:a7:f6:7e:0d:b4:ab:24:4d:ae:4f:b4:85:b6:57:
b0:c1:35:af:69:94:d3:7d:35:5d:20:eb:09:fb:4f:56:db:29:
d8:91:05:a5:6c:e1:97:09:f1:98:84:31:1d:f4:80:ef:a6:e4:
d0:e9:c8:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAeMWE62UAJhg1JpKlEzsc0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl
MmExY2EwHhcNMjYwODIwMDgwMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWQxYTkwNWZjODRhOTAyYjZhODE0NWQyMGNmYzk5ZmFjYjI5MzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AvAD6t+88PX29OqNqt4nxT0NeMz
v7bAc3iyAwNaV9iep2n2sim9ADpwmXAY3D20WbW1YVIaTTA8a3JViArPJYxlo4h+
KVEerWmHN1T0BJ+FrW69sstAlECJzUXYqUiWLjAEH+MoDdXa4mA3ib9Hp47B6n4f
4AxJUUynMIPYw0pfI1yrLmiC9f8SK0cJeYVLyru6zWIlY6vk12kJn70XCWUrhPba
mo2HQkjZ+GuiiLcSMFRjH/n+aEqbOiPDgzQfnW6JfcgZepfUmUoK13XNT1JmFzV9
o+LYqEaGIkmrLlYdi0Ros3xy18YNLX6b4YzCBLQdXcZoyMpdxjBS5h65twIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLnRqQX8hKkCtqgUXSDPyZ+sspNnMB8GA1UdIwQY
MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt
YTZjYTQ1NGRiMmQ3LzEvdWRHcEJmeUVxUUsycUJSZElNX0puNnl5azJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3
LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW911MA0G
CSqGSIb3DQEBCwUAA4IBAQAg81FeJ75X5L9EU6XqhdIcUHbmejahWXJuWBtwcy4o
agSGtyKnDdc+yiGLVEreKTWiePnpPkpc/oIJzwV3QQWTacOfDDDlZzC1TFegy3sr
EJQ4qhQVgXsCKl0iFaE593l4w26cb4Beq+fwIR3dul0H9qf+Fx196wr82kZYA7jy
hlnDNhcSsN8yZelSJtotmrYknSZnUzkGDx4EkwIisJ493OyBroHt9cPl0uWdjszi
ru95O/yG90RdITuUs57qRXmJIWbu9N4qmIJgp/Z+DbSrJE2uT7SFtlewwTWvaZTT
fTVdIOsJ+09W2ynYkQWlbOGXCfGYhDEd9IDvpuTQ6cig
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:34:43 2026 by rpki-client