Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/1-amM62GeyiqIA7h6L1VIqXMpg_k.roa
File: 1-amM62GeyiqIA7h6L1VIqXMpg_k.roa (raw, json)
Hash identifier: e3ELaeWiUzpv6kgXisd23pTHNP7qazPkpsbKCjsJosQ=
Subject key identifier: F9:A9:8C:EB:61:9E:CA:2A:88:03:B8:7A:2F:55:48:A9:73:29:83:F9
Certificate issuer: /CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Certificate serial: 01A0E8AE07836AB817B5B862A78F2AA93DF7
Authority key identifier: F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/1-amM62GeyiqIA7h6L1VIqXMpg_k.roa
Signing time: Mon 28 Sep 2026 15:41:54 +0000
ROA not before: Mon 28 Sep 2026 15:41:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198356
IP address blocks: 91.244.128.0/24 maxlen: 24
91.244.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:ae:07:83:6a:b8:17:b5:b8:62:a7:8f:2a:a9:3d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Validity
Not Before: Sep 28 15:41:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9a98ceb619eca2a8803b87a2f5548a9732983f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f7:5f:63:28:e7:87:1e:f7:07:66:5f:5e:d8:
b4:9d:17:9d:6c:85:ae:3e:b1:3f:42:e5:cd:9e:40:
0d:42:eb:8a:14:b0:b8:a7:73:51:b6:37:85:a7:fd:
39:cb:ea:5e:9b:8e:c8:cd:05:1b:6e:a3:da:f5:a4:
eb:cf:91:99:34:9d:e2:e2:28:4b:c8:56:a7:64:37:
19:3c:d7:3a:61:b2:17:03:b9:ae:a7:e5:60:2d:b1:
5d:16:53:bd:e4:dc:4f:9e:a5:69:23:d2:60:43:29:
de:43:3a:79:af:5d:ce:5e:ca:7d:e0:41:d9:26:39:
16:eb:0e:85:8e:0f:70:f1:2e:b4:7c:f5:be:fe:96:
43:60:22:ad:60:72:70:9e:ae:e3:2c:55:7c:4f:32:
01:a4:4f:1c:fc:55:1c:71:66:b6:38:cb:a3:48:70:
d9:fd:00:58:5c:b3:14:23:56:e1:b7:24:df:ff:b7:
09:2c:54:3b:31:06:60:e8:b0:ad:07:f2:a0:ca:9c:
47:83:9f:fc:bd:92:11:af:79:35:5d:dc:a9:2e:f3:
35:1c:eb:2f:8d:96:1d:b4:46:51:72:33:80:cc:7d:
3e:6e:20:57:6e:65:b3:ba:af:8b:ab:d9:10:23:ef:
71:c6:bb:a1:43:0a:22:aa:29:2b:db:59:06:cd:8e:
c7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A9:8C:EB:61:9E:CA:2A:88:03:B8:7A:2F:55:48:A9:73:29:83:F9
X509v3 Authority Key Identifier:
keyid:F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/1-amM62GeyiqIA7h6L1VIqXMpg_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.128.0/23
Signature Algorithm: sha256WithRSAEncryption
86:07:41:15:be:88:23:1d:f2:f0:35:7d:b3:1f:0e:06:73:f4:
cf:f3:c2:f1:74:fe:7d:95:bc:8a:25:2a:e7:75:ef:ef:66:f1:
89:2a:75:66:ea:8f:3d:90:a1:a0:5b:0c:ad:59:b4:92:c4:53:
29:ac:22:95:9f:29:aa:2a:78:c0:e1:ef:68:e1:f4:0d:15:f9:
1e:8a:a3:7e:a3:ac:53:ff:a3:8f:fb:09:1c:d5:b8:35:99:f0:
e8:f4:17:bd:2c:ef:73:6d:4a:c9:f2:2f:60:c3:bf:12:65:21:
15:bf:27:20:65:80:45:9b:15:a4:b7:f8:31:65:88:1a:0b:82:
94:40:a1:77:b3:e9:c5:d2:d0:75:7c:26:63:2f:08:d2:14:99:
36:bb:f2:0c:3c:fc:72:cb:66:bd:ef:85:86:be:aa:f7:0a:e0:
44:b6:ed:ac:4b:39:ce:d0:3a:b6:ed:88:3c:d1:5c:21:77:4e:
5d:40:23:6a:5d:5a:1e:c7:3c:4e:59:1a:8e:83:67:cd:e3:43:
3d:a6:74:68:75:c3:a3:0c:ae:12:0b:b0:0b:03:ae:ea:cd:58:
2e:65:06:7e:e4:92:78:6d:d2:86:8d:e7:3e:65:09:a7:aa:15:
99:ff:18:ec:8c:98:81:3e:3c:b0:ca:2e:25:bb:2d:30:64:ae:
d3:3c:f7:1d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaDorgeDargXtbhip48qqT33MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZGEzMTU4ZWIxYmM2YTBhOTAyN2NmNTllNjAzNjg3ZDZk
M2U5NzQwHhcNMjYwOTI4MTU0MTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWE5OGNlYjYxOWVjYTJhODgwM2I4N2EyZjU1NDhhOTczMjk4M2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/dfYyjnhx73B2ZfXti0nRedbIWu
PrE/QuXNnkANQuuKFLC4p3NRtjeFp/05y+pem47IzQUbbqPa9aTrz5GZNJ3i4ihL
yFanZDcZPNc6YbIXA7mup+VgLbFdFlO95NxPnqVpI9JgQyneQzp5r13OXsp94EHZ
JjkW6w6Fjg9w8S60fPW+/pZDYCKtYHJwnq7jLFV8TzIBpE8c/FUccWa2OMujSHDZ
/QBYXLMUI1bhtyTf/7cJLFQ7MQZg6LCtB/KgypxHg5/8vZIRr3k1XdypLvM1HOsv
jZYdtEZRcjOAzH0+biBXbmWzuq+Lq9kQI+9xxruhQwoiqikr21kGzY7HEQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPmpjOthnsoqiAO4ei9VSKlzKYP5MB8GA1UdIwQY
MBaAFPHaMVjrG8agqQJ89Z5gNofW0+l0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRveFdPc2J4cUNwQW56MW5tQTJoOWJUNlhRLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iODg0N2EtYjBmNS00YWZmLTk5ZGMt
YTllOThiNzNiNTU2LzEvMS1hbU02MkdleWlxSUE3aDZMMVZJcVhNcGdfay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYTAvYjg4NDdhLWIwZjUtNGFmZi05OWRjLWE5ZTk4YjczYjU1
Ni8xLzhkb3hXT3NieHFDcEFuejFubUEyaDliVDZYUS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVv0gDAN
BgkqhkiG9w0BAQsFAAOCAQEAhgdBFb6IIx3y8DV9sx8OBnP0z/PC8XT+fZW8iiUq
53Xv72bxiSp1ZuqPPZChoFsMrVm0ksRTKawilZ8pqip4wOHvaOH0DRX5HoqjfqOs
U/+jj/sJHNW4NZnw6PQXvSzvc21KyfIvYMO/EmUhFb8nIGWARZsVpLf4MWWIGguC
lEChd7PpxdLQdXwmYy8I0hSZNrvyDDz8cstmve+Fhr6q9wrgRLbtrEs5ztA6tu2I
PNFcIXdOXUAjal1aHsc8TlkajoNnzeNDPaZ0aHXDowyuEguwCwOu6s1YLmUGfuSS
eG3Sho3nPmUJp6oVmf8Y7IyYgT48sMouJbstMGSu0zz3HQ==
-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:42 2026 by rpki-client