Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/aqK2yV13pktyyVa6pRyNZueOCTI.roa
File: aqK2yV13pktyyVa6pRyNZueOCTI.roa (raw, json)
Hash identifier: WeiFnY8BGtV7+1lMlp9uKyJPDrkxhq8o+eMa1t7FgGw=
Subject key identifier: 6A:A2:B6:C9:5D:77:A6:4B:72:C9:56:BA:A5:1C:8D:66:E7:8E:09:32
Certificate issuer: /CN=c27b7337834047dfeaa98702532be8c375dd077a
Certificate serial: 019F2368E82E1AE4BC07117098DA5BB9C6AB
Authority key identifier: C2:7B:73:37:83:40:47:DF:EA:A9:87:02:53:2B:E8:C3:75:DD:07:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wntzN4NAR9_qqYcCUyvow3XdB3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/aqK2yV13pktyyVa6pRyNZueOCTI.roa
Signing time: Thu 02 Jul 2026 15:18:25 +0000
ROA not before: Thu 02 Jul 2026 15:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198515
IP address blocks: 91.235.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/wntzN4NAR9_qqYcCUyvow3XdB3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/wntzN4NAR9_qqYcCUyvow3XdB3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/wntzN4NAR9_qqYcCUyvow3XdB3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e8:2e:1a:e4:bc:07:11:70:98:da:5b:b9:c6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27b7337834047dfeaa98702532be8c375dd077a
Validity
Not Before: Jul 2 15:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aa2b6c95d77a64b72c956baa51c8d66e78e0932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:1b:8b:b8:eb:bf:07:0d:13:94:c2:6b:02:
67:cd:25:69:79:40:12:f4:d8:d7:6e:12:41:0e:14:
ff:7d:31:b3:3e:0e:6e:3c:10:f5:8a:c0:77:3a:e9:
cd:f8:33:83:a6:75:64:e1:16:85:ee:66:ac:63:94:
4e:22:0b:e7:af:aa:13:3e:8a:21:4f:a5:53:e7:ff:
f7:fd:9c:8b:2a:c2:3d:58:68:db:4f:ec:8d:5a:1d:
19:45:b0:d0:51:d9:92:93:be:56:92:b0:d2:75:cb:
cd:7c:75:99:57:53:f7:1d:e1:a2:2b:c7:7d:69:40:
98:59:63:91:30:35:db:c2:61:b1:d7:fa:65:ac:2a:
d0:48:6e:7a:f5:8b:bc:d8:36:75:2d:c4:37:1b:7c:
a6:9c:1d:f4:2f:3b:d4:3b:14:9e:74:42:20:ac:6d:
ad:fa:e1:c1:3f:58:98:24:de:c6:72:7f:64:63:8c:
d3:c0:33:16:ab:af:fb:e5:aa:7a:01:ce:8d:70:f4:
93:cc:b8:8d:f7:ab:a4:91:64:07:66:d6:0e:e7:a7:
88:bf:75:5c:b9:c1:85:09:d4:98:b2:bd:0b:f5:07:
24:24:a0:a9:4a:a9:69:1c:d8:e9:ef:ca:13:56:c2:
ce:33:43:f9:3c:40:54:69:80:e1:9e:61:ef:ed:50:
7c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A2:B6:C9:5D:77:A6:4B:72:C9:56:BA:A5:1C:8D:66:E7:8E:09:32
X509v3 Authority Key Identifier:
keyid:C2:7B:73:37:83:40:47:DF:EA:A9:87:02:53:2B:E8:C3:75:DD:07:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wntzN4NAR9_qqYcCUyvow3XdB3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/aqK2yV13pktyyVa6pRyNZueOCTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/wntzN4NAR9_qqYcCUyvow3XdB3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.213.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:55:a9:38:57:ee:b7:dc:a6:a5:e0:b3:76:ee:aa:8e:7e:51:
12:9d:7d:47:73:0b:72:92:e0:af:bb:a9:63:de:95:8d:72:29:
42:e9:df:ad:17:af:ac:d9:d5:c5:6b:65:23:90:58:9f:dc:b5:
83:88:5f:39:ba:74:81:2b:70:93:a9:4d:13:3b:16:f3:2a:d6:
6d:9d:b1:26:34:21:65:bc:2e:e9:6f:83:d5:45:25:55:e0:75:
f9:a6:4d:db:46:6c:10:99:23:d7:10:e6:a6:e0:82:2e:2a:5b:
04:c7:19:db:b3:d6:f3:ae:e7:d9:ea:7b:58:ab:e5:05:4f:45:
a5:a7:29:bd:6c:e3:63:3e:88:7b:9e:14:37:44:e4:f7:27:52:
77:94:31:ec:6a:c7:19:f0:81:f6:9a:3e:42:a0:36:9f:f5:f6:
e3:59:04:30:37:1e:41:c1:a1:74:0c:36:06:7e:ba:4f:ea:bb:
01:96:3d:f1:ad:95:29:a0:f7:52:80:d8:73:8d:e7:8e:ed:d6:
54:7a:27:57:45:0e:a0:31:86:37:ff:61:9e:d1:e5:aa:9b:4f:
fa:9b:f6:f3:e2:fd:92:b2:16:e4:f6:c0:ad:47:35:4a:9a:65:
84:cb:eb:d4:4c:82:f7:e9:13:6d:57:c4:b0:2e:e1:35:15:c0:
16:dd:03:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaOguGuS8BxFwmNpbucarMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyN2I3MzM3ODM0MDQ3ZGZlYWE5ODcwMjUzMmJlOGMzNzVk
ZDA3N2EwHhcNMjYwNzAyMTUxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWEyYjZjOTVkNzdhNjRiNzJjOTU2YmFhNTFjOGQ2NmU3OGUwOTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIkbi7jrvwcNE5TCawJnzSVpeUAS
9NjXbhJBDhT/fTGzPg5uPBD1isB3OunN+DODpnVk4RaF7masY5ROIgvnr6oTPooh
T6VT5//3/ZyLKsI9WGjbT+yNWh0ZRbDQUdmSk75WkrDSdcvNfHWZV1P3HeGiK8d9
aUCYWWORMDXbwmGx1/plrCrQSG569Yu82DZ1LcQ3G3ymnB30LzvUOxSedEIgrG2t
+uHBP1iYJN7Gcn9kY4zTwDMWq6/75ap6Ac6NcPSTzLiN96ukkWQHZtYO56eIv3Vc
ucGFCdSYsr0L9QckJKCpSqlpHNjp78oTVsLOM0P5PEBUaYDhnmHv7VB8uwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGqitsldd6ZLcslWuqUcjWbnjgkyMB8GA1UdIwQY
MBaAFMJ7czeDQEff6qmHAlMr6MN13Qd6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd250ek40TkFSOV9xcVljQ1V5dm93M1hkQjNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My83MzE1MWQtYjExYy00MWM1LTllYmUt
MDA3Y2Y2NmM2ZjM5LzEvYXFLMnlWMTNwa3R5eVZhNnBSeU5adWVPQ1RJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My83MzE1MWQtYjExYy00MWM1LTllYmUtMDA3Y2Y2NmM2ZjM5
LzEvd250ek40TkFSOV9xcVljQ1V5dm93M1hkQjNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+vVMA0G
CSqGSIb3DQEBCwUAA4IBAQB9Vak4V+633Kal4LN27qqOflESnX1HcwtykuCvu6lj
3pWNcilC6d+tF6+s2dXFa2UjkFif3LWDiF85unSBK3CTqU0TOxbzKtZtnbEmNCFl
vC7pb4PVRSVV4HX5pk3bRmwQmSPXEOam4IIuKlsExxnbs9bzrufZ6ntYq+UFT0Wl
pym9bONjPoh7nhQ3ROT3J1J3lDHsascZ8IH2mj5CoDaf9fbjWQQwNx5BwaF0DDYG
frpP6rsBlj3xrZUpoPdSgNhzjeeO7dZUeidXRQ6gMYY3/2Ge0eWqm0/6m/bz4v2S
shbk9sCtRzVKmmWEy+vUTIL36RNtV8SwLuE1FcAW3QOD
-----END CERTIFICATE-----
Generated at Mon Jul 27 16:11:45 2026 by rpki-client