Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/bi31Q0XO8XBmiMif1MfQZXUKbN8.roa
File: bi31Q0XO8XBmiMif1MfQZXUKbN8.roa (raw, json)
Hash identifier: MAQCwFvg1XrLXK/b8xx9RuAHmqdb0hXt9uketFPnkuo=
Subject key identifier: 6E:2D:F5:43:45:CE:F1:70:66:88:C8:9F:D4:C7:D0:65:75:0A:6C:DF
Certificate issuer: /CN=c90382751c4da66836a70b12e6f5f9f609037097
Certificate serial: 019F236835D806C4801A9FB1F22CD4992BF0
Authority key identifier: C9:03:82:75:1C:4D:A6:68:36:A7:0B:12:E6:F5:F9:F6:09:03:70:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQOCdRxNpmg2pwsS5vX59gkDcJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/bi31Q0XO8XBmiMif1MfQZXUKbN8.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 81.90.143.0/24 maxlen: 24
2a00:e20:143::/48 maxlen: 48
2a00:e20:150::/44 maxlen: 48
2a00:e27:143::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQOCdRxNpmg2pwsS5vX59gkDcJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:35:d8:06:c4:80:1a:9f:b1:f2:2c:d4:99:2b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c90382751c4da66836a70b12e6f5f9f609037097
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e2df54345cef1706688c89fd4c7d065750a6cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a4:92:d3:e1:23:06:65:7e:ed:19:17:62:32:
3c:39:8f:63:f2:c1:4b:76:1e:fa:e0:7f:1d:e0:af:
39:29:78:7d:50:cd:5f:0c:64:5f:ac:14:30:31:d8:
c9:52:93:88:66:be:a1:fd:83:55:3a:58:7a:c6:4d:
6b:3e:22:a4:3e:56:c0:3b:07:f9:86:58:98:a6:1b:
00:23:0a:e4:61:73:0e:5e:8c:a3:8c:0f:e7:91:6f:
01:63:a1:b6:12:5b:33:f5:cf:8b:7b:89:b0:08:74:
2d:f3:d9:57:1b:59:1d:20:1a:81:00:44:03:92:b2:
0b:65:74:ea:9d:fd:47:16:58:46:8c:8c:45:a8:57:
d6:8f:3f:dc:62:d5:0d:69:84:98:2e:58:57:b9:91:
5e:bc:02:c3:52:48:73:c9:48:3b:14:13:86:0f:a1:
5e:05:df:32:dc:24:aa:87:d4:e7:0e:53:d7:48:6c:
e8:df:8e:d5:0a:db:2d:ce:5c:0c:2d:a1:12:a4:18:
61:72:a6:6f:40:60:d5:68:a3:08:be:02:c6:84:5e:
2d:bd:e8:54:31:e9:af:e0:ed:08:8f:67:cf:df:50:
c5:cb:88:ab:1a:0e:71:5b:77:d7:18:f4:7d:a7:64:
d3:87:ab:f3:4a:73:99:44:64:a2:83:59:c8:a3:d2:
96:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2D:F5:43:45:CE:F1:70:66:88:C8:9F:D4:C7:D0:65:75:0A:6C:DF
X509v3 Authority Key Identifier:
keyid:C9:03:82:75:1C:4D:A6:68:36:A7:0B:12:E6:F5:F9:F6:09:03:70:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQOCdRxNpmg2pwsS5vX59gkDcJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/bi31Q0XO8XBmiMif1MfQZXUKbN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.143.0/24
IPv6:
2a00:e20:143::/48
2a00:e20:150::/44
2a00:e27:143::/48
Signature Algorithm: sha256WithRSAEncryption
61:25:cd:2a:00:87:a2:db:25:f6:99:2a:bc:90:70:c3:7a:64:
87:44:04:1f:9b:d8:4c:5a:ba:f9:50:e9:57:7d:dc:6b:a9:70:
28:c0:34:42:23:3d:8b:9d:aa:17:66:cf:b7:e3:3a:69:fd:56:
ec:8d:2e:b4:ea:7d:ec:b2:86:9d:cd:0e:82:9e:ac:7c:cd:9f:
4b:a4:aa:99:8c:7f:f0:16:ae:43:5a:46:93:8d:8e:30:01:9d:
30:37:f7:10:92:1a:f3:f5:7e:ac:dc:d3:7d:c5:a4:5b:24:12:
d7:c9:f4:8a:c7:39:c1:e8:e9:58:d0:92:b9:ed:aa:5e:aa:bc:
50:b0:85:b7:be:d5:1e:d0:58:3a:a6:03:e1:c0:1e:1b:9f:46:
4d:9b:ac:04:8f:b0:7d:28:4d:c6:c1:c8:6a:13:41:a2:04:9b:
c2:e9:94:fe:f8:da:ab:e4:65:d3:9c:4b:84:a2:ad:ec:4f:88:
9d:bd:2d:e4:81:d8:0e:a1:a2:1a:f1:d2:96:49:73:91:5b:78:
8c:0f:01:19:df:dd:e4:35:75:8a:e0:c8:44:40:0d:ba:5e:76:
44:59:04:79:57:9f:3d:b1:fe:ac:8e:cb:1c:72:8c:d8:9e:04:
be:64:22:9d:c2:0c:5b:b4:c8:c0:45:a6:eb:9b:5d:34:ec:d4:
ea:aa:0f:3c
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZ8jaDXYBsSAGp+x8izUmSvwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MDM4Mjc1MWM0ZGE2NjgzNmE3MGIxMmU2ZjVmOWY2MDkw
MzcwOTcwHhcNMjYwNzAyMTUxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTJkZjU0MzQ1Y2VmMTcwNjY4OGM4OWZkNGM3ZDA2NTc1MGE2Y2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06SS0+EjBmV+7RkXYjI8OY9j8sFL
dh764H8d4K85KXh9UM1fDGRfrBQwMdjJUpOIZr6h/YNVOlh6xk1rPiKkPlbAOwf5
hliYphsAIwrkYXMOXoyjjA/nkW8BY6G2Elsz9c+Le4mwCHQt89lXG1kdIBqBAEQD
krILZXTqnf1HFlhGjIxFqFfWjz/cYtUNaYSYLlhXuZFevALDUkhzyUg7FBOGD6Fe
Bd8y3CSqh9TnDlPXSGzo347VCtstzlwMLaESpBhhcqZvQGDVaKMIvgLGhF4tvehU
Memv4O0Ij2fP31DFy4irGg5xW3fXGPR9p2TTh6vzSnOZRGSig1nIo9KW1wIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFG4t9UNFzvFwZojIn9TH0GV1CmzfMB8GA1UdIwQY
MBaAFMkDgnUcTaZoNqcLEub1+fYJA3CXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVFPQ2RSeE5wbWcycHdzUzV2WDU5Z2tEY0pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYt
NDA2MGU5ZWVlYjllLzEvYmkzMVEwWE84WEJtaU1pZjFNZlFaWFVLYk44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYtNDA2MGU5ZWVlYjll
LzEveVFPQ2RSeE5wbWcycHdzUzV2WDU5Z2tEY0pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQAUVqPMCEE
AgACMBsDBwAqAA4gAUMDBwQqAA4gAVADBwAqAA4nAUMwDQYJKoZIhvcNAQELBQAD
ggEBAGElzSoAh6LbJfaZKryQcMN6ZIdEBB+b2ExauvlQ6Vd93GupcCjANEIjPYud
qhdmz7fjOmn9VuyNLrTqfeyyhp3NDoKerHzNn0ukqpmMf/AWrkNaRpONjjABnTA3
9xCSGvP1fqzc033FpFskEtfJ9IrHOcHo6VjQkrntql6qvFCwhbe+1R7QWDqmA+HA
HhufRk2brASPsH0oTcbByGoTQaIEm8LplP742qvkZdOcS4SirexPiJ29LeSB2A6h
ohrx0pZJc5FbeIwPARnf3eQ1dYrgyERADbpedkRZBHlXnz2x/qyOyxxyjNieBL5k
Ip3CDFu0yMBFpuubXTTs1OqqDzw=
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:54:53 2026 by rpki-client