Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/fJB8oRf1C6vKaO7myZ7LMHrSK0E.roa
File: fJB8oRf1C6vKaO7myZ7LMHrSK0E.roa (raw, json)
Hash identifier: Z3DT4Iuv/+d3kQTawlogZW0GVTOl0W6XRptIt8v4Yuc=
Subject key identifier: 7C:90:7C:A1:17:F5:0B:AB:CA:68:EE:E6:C9:9E:CB:30:7A:D2:2B:41
Certificate issuer: /CN=4459120809c23bf3033e3f573995276f0c7a2533
Certificate serial: 019F236889912EA789BCAEB68E08611860B8
Authority key identifier: 44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/fJB8oRf1C6vKaO7myZ7LMHrSK0E.roa
Signing time: Thu 02 Jul 2026 15:18:01 +0000
ROA not before: Thu 02 Jul 2026 15:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204957
IP address blocks: 91.204.182.0/24 maxlen: 24
91.204.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:89:91:2e:a7:89:bc:ae:b6:8e:08:61:18:60:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459120809c23bf3033e3f573995276f0c7a2533
Validity
Not Before: Jul 2 15:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c907ca117f50babca68eee6c99ecb307ad22b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0c:b3:dc:41:3d:4e:ff:bb:ca:b0:16:50:fd:
53:eb:50:18:5a:2c:0a:b8:6d:63:3e:0a:87:d2:ec:
e3:a3:cf:0a:4f:dc:38:35:27:78:fe:8a:f2:ef:18:
7f:dc:c9:3c:39:02:d9:7b:ee:e9:5c:91:d9:13:4d:
18:a2:94:bc:38:b7:c6:81:ec:45:bd:74:ae:95:b9:
45:92:67:77:58:a5:ff:72:5f:b2:61:6d:37:21:38:
0b:28:34:df:cf:c6:dd:e0:4c:50:26:34:b1:9c:03:
1d:f4:01:ed:a3:7a:54:2b:22:7e:f6:7a:d1:a1:26:
77:b6:ea:88:61:5b:76:df:a0:c0:f9:55:59:d4:8d:
a3:b7:59:1b:92:53:66:80:7e:d8:8a:aa:0c:7d:d1:
e7:00:aa:d4:64:1b:1c:80:d3:0c:a5:cc:2f:78:2f:
55:31:d2:6c:09:58:78:dd:c2:4c:81:5b:04:9d:4b:
62:a7:6d:57:2d:ca:ce:f7:d8:23:b4:a8:0d:b7:e9:
b9:84:81:71:11:2b:d1:5f:a7:4b:5d:40:ce:00:66:
d8:51:b4:c4:6f:2e:95:eb:09:0e:ac:f0:00:b5:ee:
a2:5a:05:d2:94:e1:e2:33:10:e7:db:9b:0d:0f:c7:
d0:e2:83:ac:df:5a:bb:56:b2:b6:be:82:ed:2c:82:
bf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:90:7C:A1:17:F5:0B:AB:CA:68:EE:E6:C9:9E:CB:30:7A:D2:2B:41
X509v3 Authority Key Identifier:
keyid:44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/fJB8oRf1C6vKaO7myZ7LMHrSK0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.182.0/23
Signature Algorithm: sha256WithRSAEncryption
13:5c:58:83:7c:86:54:79:d3:84:4f:c7:bb:c4:1c:f0:39:99:
96:57:b9:8c:e1:92:4f:cb:ec:b5:71:6a:13:74:94:f9:9a:85:
4e:f0:3d:17:67:89:4f:29:a5:f6:c9:3d:e9:a6:37:6f:30:a2:
6a:21:e6:97:25:67:e0:79:d1:94:b0:9a:09:6e:18:da:99:ec:
f5:a5:0f:28:ec:bf:20:97:45:dd:f4:01:4c:a8:29:49:6c:e3:
88:2e:63:31:12:e6:9a:bf:76:a3:a8:1d:a7:73:39:35:7f:14:
61:5a:2b:a7:ad:6b:9d:a1:a9:ed:ba:d8:04:dd:4c:40:8b:0d:
b6:6d:d0:42:1b:f4:02:41:1f:c7:47:87:e5:22:94:5f:9a:41:
38:7c:2e:47:cf:bb:7e:a5:3f:71:b2:af:68:0c:f2:f2:6e:a9:
79:14:95:af:e4:8a:1b:69:a3:53:d7:9b:5b:74:45:23:23:d1:
4a:66:ef:6d:e5:80:54:a2:e7:4f:78:db:9d:dc:63:56:f4:33:
df:d7:6b:aa:3c:95:05:bc:e1:1e:fc:22:fa:14:f8:63:6c:e6:
b4:59:3d:9a:c5:59:03:74:12:2e:6e:e6:42:ca:39:08:dc:22:
b8:bf:49:cc:9d:64:64:e8:13:f0:25:5a:f3:9c:cc:ae:25:ea:
01:52:14:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaImRLqeJvK62jghhGGC4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTkxMjA4MDljMjNiZjMwMzNlM2Y1NzM5OTUyNzZmMGM3
YTI1MzMwHhcNMjYwNzAyMTUxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzkwN2NhMTE3ZjUwYmFiY2E2OGVlZTZjOTllY2IzMDdhZDIyYjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugyz3EE9Tv+7yrAWUP1T61AYWiwK
uG1jPgqH0uzjo88KT9w4NSd4/ory7xh/3Mk8OQLZe+7pXJHZE00YopS8OLfGgexF
vXSulblFkmd3WKX/cl+yYW03ITgLKDTfz8bd4ExQJjSxnAMd9AHto3pUKyJ+9nrR
oSZ3tuqIYVt236DA+VVZ1I2jt1kbklNmgH7YiqoMfdHnAKrUZBscgNMMpcwveC9V
MdJsCVh43cJMgVsEnUtip21XLcrO99gjtKgNt+m5hIFxESvRX6dLXUDOAGbYUbTE
by6V6wkOrPAAte6iWgXSlOHiMxDn25sND8fQ4oOs31q7VrK2voLtLIK/KwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHyQfKEX9Qurymju5smeyzB60itBMB8GA1UdIwQY
MBaAFERZEggJwjvzAz4/VzmVJ28MeiUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZrU0NBbkNPX01EUGo5WE9aVW5id3g2SlRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEt
Y2NhNzlhNjk4MjBhLzEvZkpCOG9SZjFDNnZLYU83bXlaN0xNSHJTSzBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEtY2NhNzlhNjk4MjBh
LzEvUkZrU0NBbkNPX01EUGo5WE9aVW5id3g2SlRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8y2MA0G
CSqGSIb3DQEBCwUAA4IBAQATXFiDfIZUedOET8e7xBzwOZmWV7mM4ZJPy+y1cWoT
dJT5moVO8D0XZ4lPKaX2yT3ppjdvMKJqIeaXJWfgedGUsJoJbhjamez1pQ8o7L8g
l0Xd9AFMqClJbOOILmMxEuaav3ajqB2nczk1fxRhWiunrWudoantutgE3UxAiw22
bdBCG/QCQR/HR4flIpRfmkE4fC5Hz7t+pT9xsq9oDPLybql5FJWv5IobaaNT15tb
dEUjI9FKZu9t5YBUoudPeNud3GNW9DPf12uqPJUFvOEe/CL6FPhjbOa0WT2axVkD
dBIubuZCyjkI3CK4v0nMnWRk6BPwJVrznMyuJeoBUhTd
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:54:30 2026 by rpki-client