Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/69w8AqG0QlGDdYLGtlWFSiiHDvY.roa
File: 69w8AqG0QlGDdYLGtlWFSiiHDvY.roa (raw, json)
Hash identifier: 1UEV58sRkYlzIERqqNu2R4Ag1gBBYPAAaxlqrTywEuI=
Subject key identifier: EB:DC:3C:02:A1:B4:42:51:83:75:82:C6:B6:55:85:4A:28:87:0E:F6
Certificate issuer: /CN=560d1e89b4e742e69062a95d351deea96b5178fb
Certificate serial: 019FED1875B3E75DC79CEF4EE6BCECCF7B50
Authority key identifier: 56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/69w8AqG0QlGDdYLGtlWFSiiHDvY.roa
Signing time: Mon 10 Aug 2026 19:13:50 +0000
ROA not before: Mon 10 Aug 2026 19:13:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197769
IP address blocks: 91.231.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ed:18:75:b3:e7:5d:c7:9c:ef:4e:e6:bc:ec:cf:7b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560d1e89b4e742e69062a95d351deea96b5178fb
Validity
Not Before: Aug 10 19:13:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebdc3c02a1b44251837582c6b655854a28870ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:26:7c:5a:09:14:74:6d:22:25:f3:15:a3:4c:
fb:01:02:79:a9:7b:ec:26:c8:0e:e5:c1:7f:f4:af:
1e:17:47:1b:7f:f3:c9:b8:ed:dc:1f:3d:ac:73:95:
3b:20:a3:8f:92:67:c2:2d:c6:eb:c6:61:e2:c8:ea:
88:bf:3e:89:2c:af:01:61:80:2e:6d:5b:c0:43:04:
01:45:97:e8:34:76:95:7e:67:22:25:66:68:b5:b0:
3e:0d:48:a1:83:0f:9d:e7:de:5c:96:12:de:0b:7e:
f8:03:d8:69:cd:a2:47:b7:26:7d:ad:9e:b4:c4:95:
7d:a6:33:85:07:ae:5e:6d:e3:c8:c7:f2:72:24:ba:
2e:e9:61:93:96:21:e5:91:fc:88:32:1f:05:93:46:
10:eb:10:d8:94:a2:f9:ec:3f:ab:92:30:e8:7e:1b:
24:4c:8d:2f:ff:69:90:f3:eb:20:3b:72:64:72:41:
77:42:8c:aa:cc:9c:9e:c7:b4:c7:29:c1:d7:16:07:
ef:0c:80:36:4d:c4:77:13:b6:56:7b:7c:01:bc:9c:
a1:2b:b7:56:4e:85:d8:84:5a:ee:da:3e:9a:ad:5a:
70:b0:e3:b7:08:27:11:4b:2d:67:12:97:f6:28:a1:
84:e7:08:bd:5a:75:dc:86:ed:14:6b:a3:23:e8:ae:
f1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DC:3C:02:A1:B4:42:51:83:75:82:C6:B6:55:85:4A:28:87:0E:F6
X509v3 Authority Key Identifier:
keyid:56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/69w8AqG0QlGDdYLGtlWFSiiHDvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.222.0/24
Signature Algorithm: sha256WithRSAEncryption
76:99:04:83:75:0d:68:0a:72:8d:db:e1:4d:fe:16:12:7a:f2:
ef:d7:a3:55:92:9f:bb:83:6b:7b:79:4e:21:e6:e6:cb:3e:71:
33:c3:4c:12:16:81:70:b7:3f:55:00:95:4c:8e:d8:11:ab:2c:
73:59:4d:63:f9:f6:28:e6:e6:e0:37:55:56:74:d2:79:69:28:
ae:b8:40:f0:aa:ff:78:06:36:e0:14:40:de:7d:dc:8d:b2:96:
43:c4:57:5f:80:93:b6:b4:19:ac:22:e9:66:b5:82:e7:d5:76:
fb:14:90:b2:50:aa:c5:bf:70:06:23:39:9d:ff:44:7c:f9:98:
f0:08:e5:e3:05:c7:52:1b:44:ab:06:1e:11:9b:59:5e:54:61:
b5:71:89:47:24:38:c4:05:f2:ce:66:b9:4e:1c:3a:9c:f6:7d:
5d:11:18:56:76:30:38:42:6f:96:44:46:39:b7:25:db:c6:9c:
17:17:58:73:55:50:65:66:e2:57:ff:7b:37:2b:33:25:af:20:
a3:1b:c3:15:16:e8:e8:d5:7d:0a:61:ba:1b:f7:23:c9:10:23:
1e:d7:e2:d8:6b:19:a6:aa:09:fb:a5:01:2c:e4:ff:e4:cb:5c:
7a:d4:a2:73:d1:f2:68:a2:63:19:94:41:30:0c:fb:64:be:18:
74:e5:5a:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/tGHWz513HnO9O5rzsz3tQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2MGQxZTg5YjRlNzQyZTY5MDYyYTk1ZDM1MWRlZWE5NmI1
MTc4ZmIwHhcNMjYwODEwMTkxMzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmRjM2MwMmExYjQ0MjUxODM3NTgyYzZiNjU1ODU0YTI4ODcwZWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCZ8WgkUdG0iJfMVo0z7AQJ5qXvs
JsgO5cF/9K8eF0cbf/PJuO3cHz2sc5U7IKOPkmfCLcbrxmHiyOqIvz6JLK8BYYAu
bVvAQwQBRZfoNHaVfmciJWZotbA+DUihgw+d595clhLeC374A9hpzaJHtyZ9rZ60
xJV9pjOFB65ebePIx/JyJLou6WGTliHlkfyIMh8Fk0YQ6xDYlKL57D+rkjDofhsk
TI0v/2mQ8+sgO3JkckF3QoyqzJyex7THKcHXFgfvDIA2TcR3E7ZWe3wBvJyhK7dW
ToXYhFru2j6arVpwsOO3CCcRSy1nEpf2KKGE5wi9WnXchu0Ua6Mj6K7xqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOvcPAKhtEJRg3WCxrZVhUoohw72MB8GA1UdIwQY
MBaAFFYNHom050LmkGKpXTUd7qlrUXj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmcwZWliVG5RdWFRWXFsZE5SM3VxV3RSZVBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84YTczNGEtZDJiOC00MTFlLWE1NTct
NTBkNmJhNmFhY2I4LzEvNjl3OEFxRzBRbEdEZFlMR3RsV0ZTaWlIRHZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS84YTczNGEtZDJiOC00MTFlLWE1NTctNTBkNmJhNmFhY2I4
LzEvVmcwZWliVG5RdWFRWXFsZE5SM3VxV3RSZVBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+feMA0G
CSqGSIb3DQEBCwUAA4IBAQB2mQSDdQ1oCnKN2+FN/hYSevLv16NVkp+7g2t7eU4h
5ubLPnEzw0wSFoFwtz9VAJVMjtgRqyxzWU1j+fYo5ubgN1VWdNJ5aSiuuEDwqv94
BjbgFEDefdyNspZDxFdfgJO2tBmsIulmtYLn1Xb7FJCyUKrFv3AGIzmd/0R8+Zjw
COXjBcdSG0SrBh4Rm1leVGG1cYlHJDjEBfLOZrlOHDqc9n1dERhWdjA4Qm+WREY5
tyXbxpwXF1hzVVBlZuJX/3s3KzMlryCjG8MVFujo1X0KYbob9yPJECMe1+LYaxmm
qgn7pQEs5P/ky1x61KJz0fJoomMZlEEwDPtkvhh05Vrl
-----END CERTIFICATE-----
Generated at Thu Sep 10 22:42:59 2026 by rpki-client