Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/RZioGEkdzxBHU73GXsa-sPhORmc.roa
File: RZioGEkdzxBHU73GXsa-sPhORmc.roa (raw, json)
Hash identifier: R9EP61oFGnj/m8ivEPgFvJmagWfTr71rhRooJLkDQZI=
Subject key identifier: 45:98:A8:18:49:1D:CF:10:47:53:BD:C6:5E:C6:BE:B0:F8:4E:46:67
Certificate issuer: /CN=a5ad35fccc6e9d7c4ef1762b2045f750f13e14b6
Certificate serial: 01A1539BEE652464C3C300BFB878A3916D04
Authority key identifier: A5:AD:35:FC:CC:6E:9D:7C:4E:F1:76:2B:20:45:F7:50:F1:3E:14:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/RZioGEkdzxBHU73GXsa-sPhORmc.roa
Signing time: Mon 19 Oct 2026 10:01:30 +0000
ROA not before: Mon 19 Oct 2026 10:01:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 91.102.186.0/24 maxlen: 24
91.102.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:9b:ee:65:24:64:c3:c3:00:bf:b8:78:a3:91:6d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ad35fccc6e9d7c4ef1762b2045f750f13e14b6
Validity
Not Before: Oct 19 10:01:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4598a818491dcf104753bdc65ec6beb0f84e4667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:52:b3:3f:87:e0:a5:99:46:fd:a7:d6:37:56:
83:3f:ff:10:34:57:3d:5a:3b:e1:b4:a1:25:78:d5:
1c:83:fc:86:2c:ad:c5:3c:b7:5d:89:48:30:cc:59:
93:d9:dd:c1:38:d5:7c:84:bf:60:03:5f:f8:3e:e8:
a9:9a:6e:72:4e:d0:05:41:2b:f7:2b:df:63:af:41:
b0:27:fd:22:89:4c:5c:dc:2f:8b:5c:99:49:35:42:
6a:ab:dc:e4:d5:86:f6:a1:6c:d2:81:1f:19:2a:20:
1a:54:63:a4:bb:86:7c:68:34:5a:c9:3f:7a:a5:92:
dd:bd:48:20:88:82:8b:33:4f:e6:d3:e4:2e:ea:b6:
a7:59:8b:02:cc:a4:6d:b4:ee:bb:46:a7:63:68:0a:
f5:ad:8d:87:3a:d5:18:9f:9d:39:38:fe:e1:8a:dd:
c6:a9:bf:4a:ab:e8:0e:35:1e:4c:f2:4a:f2:cd:1d:
4a:88:f9:13:52:fd:da:b7:36:a5:5b:65:76:72:61:
3e:aa:4f:5e:af:0a:9e:ba:1c:f5:4e:39:93:0b:2d:
74:e7:98:39:86:94:ba:1f:2c:2d:5c:ca:73:d2:18:
1b:31:14:28:05:f8:39:2e:ce:19:fa:b2:09:a5:fc:
f2:62:f1:47:15:4a:29:17:b8:a4:96:8d:6e:88:ae:
40:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:98:A8:18:49:1D:CF:10:47:53:BD:C6:5E:C6:BE:B0:F8:4E:46:67
X509v3 Authority Key Identifier:
keyid:A5:AD:35:FC:CC:6E:9D:7C:4E:F1:76:2B:20:45:F7:50:F1:3E:14:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/RZioGEkdzxBHU73GXsa-sPhORmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.186.0/23
Signature Algorithm: sha256WithRSAEncryption
63:41:e0:cd:0c:ad:e1:fe:08:a1:30:d0:98:45:de:8f:f0:c7:
85:45:9f:8b:6a:3d:92:56:92:2d:62:44:ef:08:0a:75:42:d0:
46:1c:f8:e3:78:10:10:f2:98:05:07:f3:c3:96:96:8a:dd:87:
c0:95:8c:0f:83:ed:4b:1a:08:3e:7a:0a:eb:84:72:1e:8d:02:
2b:2a:51:11:a9:ee:66:79:fa:0c:3e:86:b5:85:a0:1f:b0:b7:
bd:1b:f1:6f:2d:f2:9b:ed:9a:8d:3f:7a:ce:23:59:51:07:ca:
f1:34:1f:eb:8c:5c:eb:47:5b:2a:6c:3e:39:cb:ce:8d:1f:95:
b8:91:b5:21:a6:e2:3e:8e:bb:95:23:11:de:c2:5d:b4:c2:6f:
ce:60:f3:b9:85:a0:96:5f:cd:46:f3:d6:b2:98:ba:58:07:86:
7f:03:8c:f6:46:62:ee:27:b6:21:64:46:8c:fd:bc:87:7e:ae:
39:18:7e:c0:f3:66:db:0e:68:2a:8d:e9:8d:3f:f7:8f:37:eb:
29:bd:9c:59:f2:29:cb:72:6d:76:4f:25:a6:5d:65:d8:16:ef:
85:e4:dc:fe:d8:f6:10:7b:35:97:7e:a8:01:77:05:12:00:50:
d9:25:9d:39:35:e8:13:0b:b7:bd:6e:27:3c:b0:fe:a7:ba:4a:
27:ba:39:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFTm+5lJGTDwwC/uHijkW0EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YWQzNWZjY2M2ZTlkN2M0ZWYxNzYyYjIwNDVmNzUwZjEz
ZTE0YjYwHhcNMjYxMDE5MTAwMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTk4YTgxODQ5MWRjZjEwNDc1M2JkYzY1ZWM2YmViMGY4NGU0NjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1KzP4fgpZlG/afWN1aDP/8QNFc9
WjvhtKEleNUcg/yGLK3FPLddiUgwzFmT2d3BONV8hL9gA1/4Puipmm5yTtAFQSv3
K99jr0GwJ/0iiUxc3C+LXJlJNUJqq9zk1Yb2oWzSgR8ZKiAaVGOku4Z8aDRayT96
pZLdvUggiIKLM0/m0+Qu6ranWYsCzKRttO67RqdjaAr1rY2HOtUYn505OP7hit3G
qb9Kq+gONR5M8kryzR1KiPkTUv3atzalW2V2cmE+qk9erwqeuhz1TjmTCy1055g5
hpS6HywtXMpz0hgbMRQoBfg5Ls4Z+rIJpfzyYvFHFUopF7iklo1uiK5AywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEWYqBhJHc8QR1O9xl7GvrD4TkZnMB8GA1UdIwQY
MBaAFKWtNfzMbp18TvF2KyBF91DxPhS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGEwMV9NeHVuWHhPOFhZcklFWDNVUEUtRkxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83YTY4M2ItZmE3OC00MTEyLWI2YjYt
MTU1ZmIzZmUyODdlLzEvUlppb0dFa2R6eEJIVTczR1hzYS1zUGhPUm1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny83YTY4M2ItZmE3OC00MTEyLWI2YjYtMTU1ZmIzZmUyODdl
LzEvcGEwMV9NeHVuWHhPOFhZcklFWDNVUEUtRkxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW2a6MA0G
CSqGSIb3DQEBCwUAA4IBAQBjQeDNDK3h/gihMNCYRd6P8MeFRZ+Laj2SVpItYkTv
CAp1QtBGHPjjeBAQ8pgFB/PDlpaK3YfAlYwPg+1LGgg+egrrhHIejQIrKlERqe5m
efoMPoa1haAfsLe9G/FvLfKb7ZqNP3rOI1lRB8rxNB/rjFzrR1sqbD45y86NH5W4
kbUhpuI+jruVIxHewl20wm/OYPO5haCWX81G89aymLpYB4Z/A4z2RmLuJ7YhZEaM
/byHfq45GH7A82bbDmgqjemNP/ePN+spvZxZ8inLcm12TyWmXWXYFu+F5Nz+2PYQ
ezWXfqgBdwUSAFDZJZ05NegTC7e9bic8sP6nukonujlx
-----END CERTIFICATE-----
Generated at Fri Oct 23 02:40:32 2026 by rpki-client