Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/SI0QDKFm0SI-12L1Nly9DEQqBuw.roa
File: SI0QDKFm0SI-12L1Nly9DEQqBuw.roa (raw, json)
Hash identifier: j4qkwCxErZFJNhrQnq0NGuUYLIF9b3Ux4MvpqdzxqWo=
Subject key identifier: 48:8D:10:0C:A1:66:D1:22:3E:D7:62:F5:36:5C:BD:0C:44:2A:06:EC
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 01A13E561D48F12E897DC174397058B90544
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/SI0QDKFm0SI-12L1Nly9DEQqBuw.roa
Signing time: Thu 15 Oct 2026 06:53:13 +0000
ROA not before: Thu 15 Oct 2026 06:53:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19855
IP address blocks: 91.246.172.0/22 maxlen: 22
93.120.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:56:1d:48:f1:2e:89:7d:c1:74:39:70:58:b9:05:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Oct 15 06:53:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=488d100ca166d1223ed762f5365cbd0c442a06ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9c:30:57:fc:97:60:79:a4:34:18:7c:ee:33:
e4:36:1c:79:05:21:15:38:88:4d:24:24:31:bb:88:
45:ca:0d:1e:56:90:fc:66:64:b9:de:20:1f:f1:9b:
1b:59:2f:71:58:5c:ae:92:30:b5:02:f7:21:c1:6e:
8c:51:2a:ac:7b:fd:d8:97:fe:33:9d:0d:df:b1:c7:
39:b2:7b:ee:a1:c8:af:3f:de:9a:bf:a1:63:53:d1:
21:6b:28:93:7e:ca:28:83:eb:0e:5f:5c:48:ef:d3:
27:b8:5e:1b:0b:ea:81:d4:6e:8d:2a:96:34:a3:9d:
ed:92:67:30:19:02:63:ab:40:44:85:a6:e0:f3:f9:
6c:d4:9d:38:b9:ad:48:b1:d2:c9:47:ca:77:2d:0f:
5a:82:5f:ae:76:ea:60:82:56:1d:71:b5:e2:ce:bc:
89:07:d1:c9:f0:25:35:42:20:59:bb:da:28:d6:d1:
45:4f:fd:80:6e:5c:27:9c:d5:72:b5:db:44:e7:5c:
6a:31:c9:56:15:0b:0f:56:75:84:96:43:89:d2:32:
65:3f:5e:aa:e5:bf:95:3e:f0:25:eb:d6:3f:49:c8:
de:31:1e:4f:f4:cf:f0:7c:81:a8:e8:97:32:86:61:
fb:c5:3d:d0:99:c0:72:79:5d:74:fb:d1:27:a3:49:
53:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8D:10:0C:A1:66:D1:22:3E:D7:62:F5:36:5C:BD:0C:44:2A:06:EC
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/SI0QDKFm0SI-12L1Nly9DEQqBuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.172.0/22
93.120.16.0/22
Signature Algorithm: sha256WithRSAEncryption
92:86:7c:d2:72:b0:3a:3a:4d:7b:57:43:0e:e6:db:98:fd:09:
14:ae:af:7b:a7:63:7c:d6:b1:66:d5:a7:2f:7c:5f:59:cd:66:
67:a4:29:94:ce:b1:08:11:0c:5e:37:6a:7c:09:b9:48:31:4b:
12:0e:db:2a:cd:50:1c:85:a2:7c:dc:b2:2d:f2:cf:84:2d:a0:
72:7b:da:b8:e1:2a:60:fd:6c:45:c8:24:ad:54:3e:c8:fd:86:
f7:e2:7e:9c:52:8f:7b:e6:21:3f:9a:1d:05:25:78:4b:48:79:
59:bd:9c:b1:1f:44:e3:a1:91:52:d9:d6:3b:35:04:ca:75:87:
66:2b:f3:12:f0:6a:d6:64:8b:30:ae:49:36:2a:d8:22:8a:96:
16:45:75:e0:8a:ba:e0:b0:9a:71:2a:46:52:2b:24:de:0b:18:
53:8d:cf:42:1a:6a:dc:de:2c:37:d2:31:f8:94:7d:80:51:b5:
27:92:90:55:86:a7:97:2f:52:ca:73:93:82:db:6d:e0:a7:52:
cd:ea:92:19:67:c1:71:2d:d2:ce:7b:85:fd:cc:0f:4e:98:be:
6b:a2:13:b5:af:03:5e:2a:a2:1b:83:80:bd:d3:58:de:dd:6f:
8d:f0:ea:a4:4b:0e:f7:4c:75:1a:85:3e:62:b7:cb:bf:3a:1d:
63:1e:26:cf
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaE+Vh1I8S6JfcF0OXBYuQVEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MDc4ZDIyNjk4Y2RkMWU2YTIzZDcwYzE3ZmZmZTMyMWRl
ZjNiMzAwHhcNMjYxMDE1MDY1MzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODhkMTAwY2ExNjZkMTIyM2VkNzYyZjUzNjVjYmQwYzQ0MmEwNmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZwwV/yXYHmkNBh87jPkNhx5BSEV
OIhNJCQxu4hFyg0eVpD8ZmS53iAf8ZsbWS9xWFyukjC1AvchwW6MUSqse/3Yl/4z
nQ3fscc5snvuocivP96av6FjU9EhayiTfsoog+sOX1xI79MnuF4bC+qB1G6NKpY0
o53tkmcwGQJjq0BEhabg8/ls1J04ua1IsdLJR8p3LQ9agl+udupgglYdcbXizryJ
B9HJ8CU1QiBZu9oo1tFFT/2AblwnnNVytdtE51xqMclWFQsPVnWElkOJ0jJlP16q
5b+VPvAl69Y/ScjeMR5P9M/wfIGo6JcyhmH7xT3QmcByeV10+9Eno0lT4QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEiNEAyhZtEiPtdi9TZcvQxEKgbsMB8GA1UdIwQY
MBaAFCkHjSJpjN0eaiPXDBf//jId7zswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1FlTkltbU0zUjVxSTljTUZfXy1NaDN2T3pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt
ZGMwNmRkODA1OTYwLzEvU0kwUURLRm0wU0ktMTJMMU5seTlERVFxQnV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw
LzEvS1FlTkltbU0zUjVxSTljTUZfXy1NaDN2T3pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW/asAwQC
XXgQMA0GCSqGSIb3DQEBCwUAA4IBAQCShnzScrA6Ok17V0MO5tuY/QkUrq97p2N8
1rFm1acvfF9ZzWZnpCmUzrEIEQxeN2p8CblIMUsSDtsqzVAchaJ83LIt8s+ELaBy
e9q44Spg/WxFyCStVD7I/Yb34n6cUo975iE/mh0FJXhLSHlZvZyxH0TjoZFS2dY7
NQTKdYdmK/MS8GrWZIswrkk2KtgiipYWRXXgirrgsJpxKkZSKyTeCxhTjc9CGmrc
3iw30jH4lH2AUbUnkpBVhqeXL1LKc5OC223gp1LN6pIZZ8FxLdLOe4X9zA9OmL5r
ohO1rwNeKqIbg4C901je3W+N8OqkSw73THUahT5it8u/Oh1jHibP
-----END CERTIFICATE-----
Generated at Thu Oct 22 11:54:02 2026 by rpki-client