Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/ClNTDam_70jKvcn4OYWWEW7ft4E.roa
File: ClNTDam_70jKvcn4OYWWEW7ft4E.roa (raw, json)
Hash identifier: EEGKWPZuaCIM5vih2IIiC1YkYBe/NCB2ymSJTTH6bpI=
Subject key identifier: 0A:53:53:0D:A9:BF:EF:48:CA:BD:C9:F8:39:85:96:11:6E:DF:B7:81
Certificate issuer: /CN=2fa7b79445598b42eecbbe828dd894dfaf1dfcaa
Certificate serial: 01A14A284160B70EF5ADCC9AD50B47295236
Authority key identifier: 2F:A7:B7:94:45:59:8B:42:EE:CB:BE:82:8D:D8:94:DF:AF:1D:FC:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6e3lEVZi0Luy76CjdiU368d_Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/ClNTDam_70jKvcn4OYWWEW7ft4E.roa
Signing time: Sat 17 Oct 2026 13:58:34 +0000
ROA not before: Sat 17 Oct 2026 13:58:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202
IP address blocks: 91.229.92.0/24 maxlen: 24
185.84.20.0/24 maxlen: 24
185.84.21.0/24 maxlen: 24
185.84.22.0/24 maxlen: 24
185.84.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6e3lEVZi0Luy76CjdiU368d_Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:28:41:60:b7:0e:f5:ad:cc:9a:d5:0b:47:29:52:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa7b79445598b42eecbbe828dd894dfaf1dfcaa
Validity
Not Before: Oct 17 13:58:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a53530da9bfef48cabdc9f8398596116edfb781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2d:44:f3:91:b3:61:ae:16:67:c5:f7:49:be:
16:a1:02:ed:0a:bf:5f:8a:9d:43:a4:c7:95:f0:17:
2b:28:cb:3c:60:d1:d7:c0:29:97:ae:7d:47:84:d6:
7f:89:0d:68:0c:39:56:c2:dd:7e:42:8c:2f:ba:1d:
6f:39:12:22:c5:38:f1:96:68:0a:a9:80:fe:0d:5b:
d0:82:2b:b1:fc:d5:72:3b:1d:98:e9:cc:04:47:2a:
80:4d:02:9c:80:a2:71:c1:e8:99:69:c9:b7:f9:f3:
4b:f2:ff:32:2a:2f:ee:6d:69:bf:2d:10:9b:e0:94:
e1:4f:46:60:e8:da:21:e3:bc:a0:aa:9b:6b:38:ec:
3a:54:ff:67:77:88:9f:3b:eb:4d:41:4f:32:4a:d1:
7c:5f:48:af:e4:16:06:e3:a7:f3:0b:92:ea:44:3d:
f7:d6:55:c0:0d:27:aa:e1:57:69:00:38:31:66:f8:
55:c8:b4:47:88:07:42:58:06:e3:fc:f0:97:05:de:
b5:c2:72:01:93:cd:04:64:c2:bc:13:e9:93:74:fd:
80:96:3b:39:29:93:22:a3:8e:cc:d9:b6:f5:bf:ee:
11:b3:fb:6a:46:22:77:1c:64:52:1a:3c:95:3d:3e:
cc:fc:74:a9:a2:6a:ba:76:78:96:af:ba:0d:5a:7f:
80:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:53:53:0D:A9:BF:EF:48:CA:BD:C9:F8:39:85:96:11:6E:DF:B7:81
X509v3 Authority Key Identifier:
keyid:2F:A7:B7:94:45:59:8B:42:EE:CB:BE:82:8D:D8:94:DF:AF:1D:FC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6e3lEVZi0Luy76CjdiU368d_Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/ClNTDam_70jKvcn4OYWWEW7ft4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5cae26-45b5-4fd8-9de5-4b44083d6122/1/L6e3lEVZi0Luy76CjdiU368d_Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.92.0/24
185.84.20.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:10:1b:b1:e2:e3:f5:a5:b4:ed:a0:86:40:43:31:93:0b:00:
5d:a2:24:a7:fa:2d:42:fe:02:ff:d7:56:b0:1f:0e:78:8e:a1:
4a:58:7e:76:fa:3f:72:ce:39:30:8a:95:be:df:c7:5a:67:1f:
01:ee:2b:73:1b:91:6c:37:11:36:53:50:ef:0e:e4:e2:d3:34:
ed:5c:bc:ab:55:cf:3a:71:e3:18:ee:27:3c:1e:bd:59:e6:72:
0e:fb:cc:77:79:54:a8:6b:2f:a6:a5:e5:d0:f8:41:c4:68:21:
39:89:92:79:a6:9b:fd:94:58:fb:ea:df:f0:09:44:17:52:26:
bc:65:2e:73:d4:5a:89:dc:bf:82:20:75:17:c8:0f:0e:6b:ce:
46:1a:be:ec:e3:3f:9f:ee:5b:9f:51:ae:77:ad:af:94:18:9e:
e5:8f:3a:1e:63:b6:a2:91:21:0b:3f:cf:d8:a2:d3:83:2a:d9:
9c:bf:10:9f:e1:f2:9e:c0:c6:50:50:ba:55:d0:fe:ed:80:53:
ee:6d:57:09:08:a9:7c:af:ed:4b:5c:e9:72:a5:b4:d3:37:f9:
2e:52:03:08:b9:73:1e:1e:66:1e:00:92:b5:a9:c4:41:bf:7f:
55:9a:88:02:85:53:53:72:26:d1:fa:ac:a7:75:4e:4f:71:f7:
c8:b8:92:b4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaFKKEFgtw71rcya1QtHKVI2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTdiNzk0NDU1OThiNDJlZWNiYmU4MjhkZDg5NGRmYWYx
ZGZjYWEwHhcNMjYxMDE3MTM1ODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTUzNTMwZGE5YmZlZjQ4Y2FiZGM5ZjgzOTg1OTYxMTZlZGZiNzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy1E85GzYa4WZ8X3Sb4WoQLtCr9f
ip1DpMeV8BcrKMs8YNHXwCmXrn1HhNZ/iQ1oDDlWwt1+Qowvuh1vORIixTjxlmgK
qYD+DVvQgiux/NVyOx2Y6cwERyqATQKcgKJxweiZacm3+fNL8v8yKi/ubWm/LRCb
4JThT0Zg6Noh47ygqptrOOw6VP9nd4ifO+tNQU8yStF8X0iv5BYG46fzC5LqRD33
1lXADSeq4VdpADgxZvhVyLRHiAdCWAbj/PCXBd61wnIBk80EZMK8E+mTdP2Aljs5
KZMio47M2bb1v+4Rs/tqRiJ3HGRSGjyVPT7M/HSpomq6dniWr7oNWn+AQQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFApTUw2pv+9Iyr3J+DmFlhFu37eBMB8GA1UdIwQY
MBaAFC+nt5RFWYtC7su+go3YlN+vHfyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZlM2xFVlppMEx1eTc2Q2pkaVUzNjhkX0tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81Y2FlMjYtNDViNS00ZmQ4LTlkZTUt
NGI0NDA4M2Q2MTIyLzEvQ2xOVERhbV83MGpLdmNuNE9ZV1dFVzdmdDRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My81Y2FlMjYtNDViNS00ZmQ4LTlkZTUtNGI0NDA4M2Q2MTIy
LzEvTDZlM2xFVlppMEx1eTc2Q2pkaVUzNjhkX0tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+VcAwQC
uVQUMA0GCSqGSIb3DQEBCwUAA4IBAQCmEBux4uP1pbTtoIZAQzGTCwBdoiSn+i1C
/gL/11awHw54jqFKWH52+j9yzjkwipW+38daZx8B7itzG5FsNxE2U1DvDuTi0zTt
XLyrVc86ceMY7ic8Hr1Z5nIO+8x3eVSoay+mpeXQ+EHEaCE5iZJ5ppv9lFj76t/w
CUQXUia8ZS5z1FqJ3L+CIHUXyA8Oa85GGr7s4z+f7lufUa53ra+UGJ7ljzoeY7ai
kSELP8/YotODKtmcvxCf4fKewMZQULpV0P7tgFPubVcJCKl8r+1LXOlypbTTN/ku
UgMIuXMeHmYeAJK1qcRBv39VmogChVNTcibR+qyndU5PcffIuJK0
-----END CERTIFICATE-----
Generated at Sat Oct 24 14:29:49 2026 by rpki-client