Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/IH7r6TlVfU45qKQI2R1NC9H-FqE.roa
File: IH7r6TlVfU45qKQI2R1NC9H-FqE.roa (raw, json)
Hash identifier: GtnbJaxyWwA621fhkdaRd3CACzs39iPVRXqRT4Cekjc=
Subject key identifier: 20:7E:EB:E9:39:55:7D:4E:39:A8:A4:08:D9:1D:4D:0B:D1:FE:16:A1
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01A024B578EA089089B91C5064FF9A8155EF
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/IH7r6TlVfU45qKQI2R1NC9H-FqE.roa
Signing time: Fri 21 Aug 2026 14:24:27 +0000
ROA not before: Fri 21 Aug 2026 14:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42960
IP address blocks: 91.208.73.0/24 maxlen: 24
91.213.200.0/24 maxlen: 24
2a12:ab80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:b5:78:ea:08:90:89:b9:1c:50:64:ff:9a:81:55:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Aug 21 14:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=207eebe939557d4e39a8a408d91d4d0bd1fe16a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:53:19:0d:7c:14:98:da:d6:ec:38:3d:a4:6e:
fa:52:76:dd:4d:51:47:26:d1:8b:17:af:16:c9:99:
d0:a7:ea:37:5c:e3:2f:15:03:ac:80:61:68:e1:ce:
cd:58:0a:2c:34:c8:5c:35:11:a3:84:02:29:c5:35:
60:51:3a:9b:c4:35:a7:29:ce:dd:27:45:5d:03:98:
ba:0e:7d:a7:83:23:32:b9:b8:bf:f2:85:6d:ba:96:
4f:31:f4:d4:ed:4e:24:09:02:35:be:8f:f6:05:28:
6a:eb:0a:32:6f:d3:7d:75:52:85:93:4e:cc:62:8c:
77:85:66:a8:f2:08:66:8d:e1:1c:17:db:e4:51:a7:
4d:bd:b2:66:18:d8:c7:fa:9a:c9:d8:b6:09:99:22:
d4:36:db:a3:53:46:34:0b:bd:2d:c9:a8:d2:a4:ff:
35:a2:33:c7:59:8e:7e:f8:a2:12:32:51:d2:b6:f2:
e7:f4:47:20:d5:8d:9d:4d:8e:f2:9d:5d:a0:90:31:
07:3d:db:8f:47:b7:10:7d:85:93:28:4c:ce:16:7f:
71:74:fb:54:48:ad:64:8b:09:13:c6:36:1f:1d:bb:
8e:ed:e7:71:be:7a:a8:e3:c1:4a:f0:5b:c0:21:dc:
42:ec:45:73:82:1a:96:27:87:ce:12:0f:c8:08:12:
6e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7E:EB:E9:39:55:7D:4E:39:A8:A4:08:D9:1D:4D:0B:D1:FE:16:A1
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/IH7r6TlVfU45qKQI2R1NC9H-FqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.73.0/24
91.213.200.0/24
IPv6:
2a12:ab80::/48
Signature Algorithm: sha256WithRSAEncryption
27:0c:ed:ba:85:6a:4b:cd:98:0e:40:26:cb:a1:5a:3a:f3:3f:
e5:cf:54:f2:ee:e8:4b:73:ec:33:34:b0:d4:ce:ee:df:d6:78:
85:67:46:e3:a3:41:78:e6:6f:df:b9:d2:92:5f:55:68:c6:ca:
5f:fc:3f:f1:ea:6c:24:f1:c9:ad:0c:cb:5d:36:89:45:12:65:
65:f1:b4:5f:0d:b8:9d:db:6a:bd:f0:bf:e8:47:3a:45:17:b1:
a9:6b:be:1f:3c:8d:ba:8b:d5:6b:1c:0b:0e:e1:32:38:b7:11:
af:7f:9d:66:be:05:80:3e:08:41:66:0d:11:bc:63:0f:98:e3:
14:03:ef:19:1e:7d:76:65:c7:dd:ed:92:4f:94:67:fb:e0:53:
c2:62:09:9c:4b:9f:60:da:08:30:b4:c7:17:b3:b0:8a:99:42:
39:9c:99:46:9e:4d:de:85:52:ea:41:02:58:06:12:cd:c3:a0:
e4:6f:8c:5c:c0:a2:42:3b:3b:07:c9:30:e0:eb:91:b0:dd:5c:
1c:e4:3b:2e:4b:94:95:b8:e9:29:82:a3:4c:05:31:bf:c4:d3:
73:ba:94:f6:66:7e:b9:a8:a5:7a:c1:8e:70:ff:5b:98:96:4b:
81:d3:cf:8d:89:91:6a:1e:eb:05:99:a3:e9:b0:70:4e:86:4e:
9a:47:a6:05
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAaAktXjqCJCJuRxQZP+agVXvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm
YmM0YTkwHhcNMjYwODIxMTQyNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDdlZWJlOTM5NTU3ZDRlMzlhOGE0MDhkOTFkNGQwYmQxZmUxNmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFMZDXwUmNrW7Dg9pG76UnbdTVFH
JtGLF68WyZnQp+o3XOMvFQOsgGFo4c7NWAosNMhcNRGjhAIpxTVgUTqbxDWnKc7d
J0VdA5i6Dn2ngyMyubi/8oVtupZPMfTU7U4kCQI1vo/2BShq6woyb9N9dVKFk07M
Yox3hWao8ghmjeEcF9vkUadNvbJmGNjH+prJ2LYJmSLUNtujU0Y0C70tyajSpP81
ojPHWY5++KISMlHStvLn9Ecg1Y2dTY7ynV2gkDEHPduPR7cQfYWTKEzOFn9xdPtU
SK1kiwkTxjYfHbuO7edxvnqo48FK8FvAIdxC7EVzghqWJ4fOEg/ICBJuHwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFCB+6+k5VX1OOaikCNkdTQvR/hahMB8GA1UdIwQY
MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt
NmM3ZTU2ODU4OTBjLzEvSUg3cjZUbFZmVTQ1cUtRSTJSMU5DOUgtRnFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj
LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW9BJAwQA
W9XIMA8EAgACMAkDBwAqEquAAAAwDQYJKoZIhvcNAQELBQADggEBACcM7bqFakvN
mA5AJsuhWjrzP+XPVPLu6Etz7DM0sNTO7t/WeIVnRuOjQXjmb9+50pJfVWjGyl/8
P/HqbCTxya0My102iUUSZWXxtF8NuJ3bar3wv+hHOkUXsalrvh88jbqL1WscCw7h
Mji3Ea9/nWa+BYA+CEFmDRG8Yw+Y4xQD7xkefXZlx93tkk+UZ/vgU8JiCZxLn2Da
CDC0xxezsIqZQjmcmUaeTd6FUupBAlgGEs3DoORvjFzAokI7OwfJMODrkbDdXBzk
Oy5LlJW46SmCo0wFMb/E03O6lPZmfrmopXrBjnD/W5iWS4HTz42JkWoe6wWZo+mw
cE6GTppHpgU=
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:33:23 2026 by rpki-client