Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/1--siGC9v_UvUxOAFafv_Fn5B77s.roa
File: 1--siGC9v_UvUxOAFafv_Fn5B77s.roa (raw, json)
Hash identifier: LDHSvCANEcsAHTe65oB9R5YLbeer2QU8Ak6a9D9BBjk=
Subject key identifier: FB:EB:22:18:2F:6F:FD:4B:D4:C4:E0:05:69:FB:FF:16:7E:41:EF:BB
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F23686804DBAEC5F6055FFAD63A65EFDB
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/1--siGC9v_UvUxOAFafv_Fn5B77s.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204427
IP address blocks: 201.51.14.0/24 maxlen: 24
201.51.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:68:04:db:ae:c5:f6:05:5f:fa:d6:3a:65:ef:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbeb22182f6ffd4bd4c4e00569fbff167e41efbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fe:9a:e2:23:d7:27:dc:1b:b0:2b:6d:db:09:
29:51:68:3b:04:7c:13:69:9e:18:ef:cb:f7:f5:a4:
91:18:9c:ce:da:4c:ca:36:92:92:fe:cd:68:b2:cc:
59:81:af:32:ff:c0:83:5c:a7:33:b4:e1:02:1a:44:
18:4e:d3:08:2d:9a:bd:41:bd:22:20:7c:b7:6f:75:
2c:14:d7:d1:1e:9c:33:d0:ed:2c:ed:cf:f3:ca:3f:
b8:4a:aa:a3:62:34:a3:71:22:74:62:71:1d:97:30:
d2:8b:82:2c:e2:a0:e9:59:8d:56:f2:50:cc:28:b2:
bf:ab:32:dd:db:e6:da:e7:f2:3d:37:83:0a:17:00:
4e:9a:15:f7:17:7b:b0:38:09:e3:c4:df:16:2e:1c:
4c:07:d5:fe:3c:15:a9:1c:6a:6d:cc:1b:4e:3b:e7:
95:47:03:3b:5b:79:39:12:ea:1d:39:e4:a5:97:79:
79:39:d4:df:87:9b:c2:80:ef:c0:87:2b:e4:b3:49:
9b:7f:cf:da:9b:b1:23:a8:17:a1:f3:93:78:42:d0:
ad:32:4a:84:2a:6b:e0:f0:ab:be:be:58:52:f5:0c:
40:e9:16:e2:0a:7f:7f:2e:d9:92:32:65:dc:c9:8c:
fb:00:47:8d:41:d5:13:b1:85:06:32:c8:cd:ee:31:
17:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EB:22:18:2F:6F:FD:4B:D4:C4:E0:05:69:FB:FF:16:7E:41:EF:BB
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/1--siGC9v_UvUxOAFafv_Fn5B77s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.51.14.0/23
Signature Algorithm: sha256WithRSAEncryption
56:db:0b:32:86:6a:d6:b7:3e:10:5d:3f:6c:e6:f7:3b:e9:bb:
ea:a8:4f:57:47:1a:fb:cb:5a:80:ec:66:81:49:18:6d:13:e9:
5a:74:d6:65:48:27:9e:44:90:8e:ba:f0:33:e8:17:f4:5f:88:
3b:08:1b:32:4b:bf:03:98:24:1c:e3:fe:dc:f0:e5:56:b0:6a:
ec:66:d5:6b:f3:24:4a:74:77:1d:65:97:9d:7e:bb:72:23:a7:
3e:00:da:7a:29:9d:14:66:91:42:09:26:65:a0:48:7e:c8:d6:
63:0a:22:b6:59:39:c3:33:42:4b:0c:cb:fe:17:ef:76:90:41:
69:06:1e:da:41:cf:9d:0b:1f:46:89:6e:f0:9a:a1:bf:cf:b1:
0e:13:85:08:62:1b:1e:1e:a7:ed:92:06:45:40:f5:5c:11:14:
35:79:fd:83:df:d7:33:69:42:50:bb:ee:66:da:3f:65:f1:b9:
5b:e2:83:6c:c0:e4:8b:8d:da:20:1e:9e:40:05:59:e7:8a:78:
18:1c:72:12:79:d4:ab:bb:97:dc:f4:75:63:c1:61:8f:c3:0a:
10:01:77:a9:ac:fd:cc:c0:e2:33:64:06:29:a8:8c:3a:d7:d1:
85:42:03:df:9c:5e:de:8d:5b:5f:1d:66:45:67:99:80:17:3f:
de:a6:cc:53
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ8jaGgE267F9gVf+tY6Ze/bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZmEyNjIzYjIyMmQwOGQ5MzU2OTc1MDQ0Yjk0MDdiNWZl
YTQ4YmEwHhcNMjYwNzAyMTUxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmViMjIxODJmNmZmZDRiZDRjNGUwMDU2OWZiZmYxNjdlNDFlZmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP6a4iPXJ9wbsCtt2wkpUWg7BHwT
aZ4Y78v39aSRGJzO2kzKNpKS/s1ossxZga8y/8CDXKcztOECGkQYTtMILZq9Qb0i
IHy3b3UsFNfRHpwz0O0s7c/zyj+4SqqjYjSjcSJ0YnEdlzDSi4Is4qDpWY1W8lDM
KLK/qzLd2+ba5/I9N4MKFwBOmhX3F3uwOAnjxN8WLhxMB9X+PBWpHGptzBtOO+eV
RwM7W3k5EuodOeSll3l5OdTfh5vCgO/Ahyvks0mbf8/am7EjqBeh85N4QtCtMkqE
Kmvg8Ku+vlhS9QxA6RbiCn9/LtmSMmXcyYz7AEeNQdUTsYUGMsjN7jEX0wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPvrIhgvb/1L1MTgBWn7/xZ+Qe+7MB8GA1UdIwQY
MBaAFGn6JiOyItCNk1aXUES5QHtf6ki6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWZvbUk3SWkwSTJUVnBkUVJMbEFlMV9xU0xvLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYt
NzJmYjk3ZDU5Y2U0LzEvMS0tc2lHQzl2X1V2VXhPQUZhZnZfRm41Qjc3cy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTgvZGRiNDI0LTdlYjItNDk1ZS04YmI2LTcyZmI5N2Q1OWNl
NC8xL2Fmb21JN0lpMEkyVFZwZFFSTGxBZTFfcVNMby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAckzDjAN
BgkqhkiG9w0BAQsFAAOCAQEAVtsLMoZq1rc+EF0/bOb3O+m76qhPV0ca+8tagOxm
gUkYbRPpWnTWZUgnnkSQjrrwM+gX9F+IOwgbMku/A5gkHOP+3PDlVrBq7GbVa/Mk
SnR3HWWXnX67ciOnPgDaeimdFGaRQgkmZaBIfsjWYwoitlk5wzNCSwzL/hfvdpBB
aQYe2kHPnQsfRolu8Jqhv8+xDhOFCGIbHh6n7ZIGRUD1XBEUNXn9g9/XM2lCULvu
Zto/ZfG5W+KDbMDki43aIB6eQAVZ54p4GBxyEnnUq7uX3PR1Y8Fhj8MKEAF3qaz9
zMDiM2QGKaiMOtfRhUID35xe3o1bXx1mRWeZgBc/3qbMUw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:35 2026 by rpki-client