Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/fa3O09oifhKcJ_tQtoNf8G2505I.roa
File: fa3O09oifhKcJ_tQtoNf8G2505I.roa (raw, json)
Hash identifier: QYV9oeMjliiCTgBXs84l22mNFzkEKsXRy5ZLHA/ZeC4=
Subject key identifier: 7D:AD:CE:D3:DA:22:7E:12:9C:27:FB:50:B6:83:5F:F0:6D:B9:D3:92
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019FEBCB36667BAF181BFD68EA07C715A9FE
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/fa3O09oifhKcJ_tQtoNf8G2505I.roa
Signing time: Mon 10 Aug 2026 13:09:51 +0000
ROA not before: Mon 10 Aug 2026 13:09:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31863
IP address blocks: 91.200.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:cb:36:66:7b:af:18:1b:fd:68:ea:07:c7:15:a9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Aug 10 13:09:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7dadced3da227e129c27fb50b6835ff06db9d392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:71:55:6a:bb:25:e5:3f:6b:49:3d:7c:d8:7c:
ec:93:94:70:cc:c8:25:20:b7:ad:11:56:ed:58:c1:
e3:c8:d2:6f:70:82:39:51:11:15:ad:62:38:90:1a:
7f:ef:30:d9:98:22:66:2d:bc:57:b6:6e:49:79:a3:
d2:7c:a3:f1:5c:a7:c3:9f:4e:91:65:e2:0f:87:2a:
96:1b:c6:90:65:e1:f5:7d:83:1f:1d:b8:08:00:7a:
27:89:f1:de:ef:32:1d:99:5c:b2:b3:eb:4d:c3:8a:
1a:16:b0:c4:38:04:16:95:d1:e8:99:28:72:e8:d5:
ef:54:ec:9a:f4:93:89:bc:dc:e6:88:ae:73:36:e4:
ec:ca:ea:e8:fb:fc:50:fb:c8:70:b2:d6:8f:89:de:
c2:62:98:85:9d:ed:1d:16:06:7a:51:40:b6:06:19:
67:98:71:80:e0:2b:7f:b7:94:df:50:2e:bc:25:54:
c4:3d:01:fd:09:0b:14:fe:d6:99:05:6b:5c:e2:d8:
cf:ad:9e:30:ed:68:b0:ab:fa:7c:f4:29:a9:b6:c0:
a4:9c:8d:f8:56:33:5b:30:fb:db:df:51:95:0a:2d:
9c:bb:49:ac:52:aa:16:b0:f5:10:4c:54:f1:d7:5f:
91:c4:69:8f:b4:63:c3:91:48:88:9c:03:61:c4:82:
a4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AD:CE:D3:DA:22:7E:12:9C:27:FB:50:B6:83:5F:F0:6D:B9:D3:92
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/fa3O09oifhKcJ_tQtoNf8G2505I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.221.0/24
Signature Algorithm: sha256WithRSAEncryption
61:23:26:51:b1:65:02:e8:22:37:f9:af:0f:07:22:fa:3e:e2:
d4:fa:8c:39:e7:da:26:fb:da:09:bd:1a:36:2f:b6:9c:ac:49:
67:07:04:db:2b:8f:9c:9e:56:cc:4a:07:2d:ea:ac:ed:87:04:
ca:a9:88:87:94:8f:f6:ca:af:19:f3:ca:f7:64:6c:58:de:36:
0b:27:c5:30:8e:51:82:5e:5f:04:60:22:e7:78:aa:fb:eb:46:
51:a3:8e:e3:62:0d:42:b3:61:8d:27:c9:53:72:9b:a2:c2:35:
7f:6e:fb:3d:35:f6:51:bc:2d:b7:9d:1f:a2:8c:86:a7:93:28:
0c:9e:bb:42:63:14:79:91:e9:67:85:8d:1e:18:47:db:84:dd:
ca:3e:47:3b:c7:72:28:b7:3f:a4:e8:3d:61:15:a9:61:ca:f0:
d9:4c:89:8b:c6:94:7f:d9:b1:02:ab:23:53:9a:70:5b:d3:2f:
34:bf:e6:ea:24:4d:b2:6d:60:07:b9:78:b5:6d:92:ba:c4:2a:
e9:a1:38:10:59:bb:1b:26:93:64:a5:04:6f:15:ef:a9:c5:8e:
13:87:71:77:2f:56:f0:f9:9e:b8:06:91:79:78:0d:ba:46:54:
f9:1c:f1:0d:b8:ca:de:a3:85:1d:b5:51:62:12:b6:db:59:3f:
88:3f:c6:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/ryzZme68YG/1o6gfHFan+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjYwODEwMTMwOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGFkY2VkM2RhMjI3ZTEyOWMyN2ZiNTBiNjgzNWZmMDZkYjlkMzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynFVarsl5T9rST182Hzsk5RwzMgl
ILetEVbtWMHjyNJvcII5UREVrWI4kBp/7zDZmCJmLbxXtm5JeaPSfKPxXKfDn06R
ZeIPhyqWG8aQZeH1fYMfHbgIAHonifHe7zIdmVyys+tNw4oaFrDEOAQWldHomShy
6NXvVOya9JOJvNzmiK5zNuTsyuro+/xQ+8hwstaPid7CYpiFne0dFgZ6UUC2Bhln
mHGA4Ct/t5TfUC68JVTEPQH9CQsU/taZBWtc4tjPrZ4w7Wiwq/p89CmptsCknI34
VjNbMPvb31GVCi2cu0msUqoWsPUQTFTx11+RxGmPtGPDkUiInANhxIKk3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH2tztPaIn4SnCf7ULaDX/BtudOSMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvZmEzTzA5b2lmaEtjSl90UXRvTmY4RzI1MDVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8jdMA0G
CSqGSIb3DQEBCwUAA4IBAQBhIyZRsWUC6CI3+a8PByL6PuLU+ow559om+9oJvRo2
L7acrElnBwTbK4+cnlbMSgct6qzthwTKqYiHlI/2yq8Z88r3ZGxY3jYLJ8UwjlGC
Xl8EYCLneKr760ZRo47jYg1Cs2GNJ8lTcpuiwjV/bvs9NfZRvC23nR+ijIankygM
nrtCYxR5kelnhY0eGEfbhN3KPkc7x3Iotz+k6D1hFalhyvDZTImLxpR/2bECqyNT
mnBb0y80v+bqJE2ybWAHuXi1bZK6xCrpoTgQWbsbJpNkpQRvFe+pxY4Th3F3L1bw
+Z64BpF5eA26RlT5HPENuMreo4UdtVFiErbbWT+IP8bj
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:41:31 2026 by rpki-client