Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/dJOVZhFoAVQ7QvEgQLVQwNsqqd8.roa
File: dJOVZhFoAVQ7QvEgQLVQwNsqqd8.roa (raw, json)
Hash identifier: eBxeDXSsEBdbyXQmGwMrPJVa9st/vuZ7R99emmZ2iNc=
Subject key identifier: 74:93:95:66:11:68:01:54:3B:42:F1:20:40:B5:50:C0:DB:2A:A9:DF
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019CBE7E30FE4F00931C81B212CD78FE1008
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/dJOVZhFoAVQ7QvEgQLVQwNsqqd8.roa
Signing time: Thu 05 Mar 2026 14:54:26 +0000
ROA not before: Thu 05 Mar 2026 14:54:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 91.234.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:7e:30:fe:4f:00:93:1c:81:b2:12:cd:78:fe:10:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Mar 5 14:54:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74939566116801543b42f12040b550c0db2aa9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:16:73:42:ee:0e:b9:3b:21:5c:96:8e:bb:
63:67:84:b6:2d:f9:e1:8a:62:34:2f:31:ee:f4:47:
1c:ee:70:8b:06:34:56:61:59:e1:45:e1:5e:fb:5a:
9c:27:6b:4b:a5:4b:26:7e:d6:4b:99:9b:e6:d8:0b:
ec:eb:91:1d:8e:f3:fd:b3:13:22:95:e7:54:f7:d5:
17:5b:d8:16:b0:c2:ff:a0:c3:f1:6d:af:5d:e8:4e:
b7:d6:7f:57:68:14:17:45:49:b8:e8:cb:7e:2f:04:
08:c8:c4:6a:9f:b8:e5:b2:eb:65:9c:76:59:ae:0d:
f7:02:31:30:35:5a:4d:9d:f4:02:78:93:00:e0:d0:
20:e5:8a:87:51:36:c6:2b:a9:0d:f3:5b:20:b2:72:
10:53:3b:68:da:63:3f:50:fa:37:a2:60:dc:4a:73:
3f:c7:09:1b:2c:d5:00:b6:ba:ee:a1:25:55:b3:30:
ca:e5:e5:b7:b1:3c:36:0e:c2:e4:20:43:f7:71:53:
19:8c:34:37:3f:e5:34:be:5f:f3:a5:64:89:80:de:
45:5e:d4:4b:e9:3a:03:6b:9b:f7:5b:37:b8:d0:6d:
52:1e:a6:48:ac:d0:61:76:0c:76:dc:72:7f:9c:0e:
c6:96:c9:1b:5e:19:da:c6:3c:04:4a:4d:07:88:84:
9d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:93:95:66:11:68:01:54:3B:42:F1:20:40:B5:50:C0:DB:2A:A9:DF
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/dJOVZhFoAVQ7QvEgQLVQwNsqqd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.202.0/24
Signature Algorithm: sha256WithRSAEncryption
64:3e:dd:51:aa:08:88:e4:cb:ed:47:2e:60:9f:31:59:9c:29:
c3:ed:9f:45:6a:0d:95:b0:dc:0d:0c:c7:4f:49:5e:59:bf:a8:
ad:6c:dd:a9:2c:2c:dd:40:e1:25:b9:c5:dc:3e:80:a9:8d:99:
a3:95:16:73:4b:06:84:e6:f3:37:75:2d:f0:65:e6:f2:b4:89:
ac:fb:7a:81:ab:5c:61:59:29:26:a1:6b:78:a6:09:43:b4:53:
84:aa:5d:dd:cc:e9:8d:d2:5c:d9:62:b6:5f:57:5d:5e:5d:c1:
e6:47:ae:81:59:24:55:d0:ea:c9:a1:10:1d:a5:8c:07:7d:14:
59:2c:cd:95:2d:4c:45:63:6c:aa:a6:bf:23:8e:56:7e:3e:da:
5d:61:b6:49:41:42:5e:8e:cc:ba:26:ce:54:25:6c:d0:f1:70:
dd:f1:35:ee:48:84:62:67:72:cf:d9:f7:00:a8:b0:1c:b2:ee:
5b:52:87:47:d2:e1:fe:66:cd:8b:33:16:2f:f3:6d:e3:b8:0a:
dc:39:11:eb:3f:4a:c4:d5:b1:4d:b8:aa:6f:a6:3c:48:4b:b2:
2c:e8:1e:77:4e:21:d7:76:19:c9:cb:65:23:c4:a8:5f:7e:be:
b1:94:9a:9d:19:b2:b3:6d:54:2d:f0:9d:28:8d:0c:31:69:be:
87:5e:18:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZy+fjD+TwCTHIGyEs14/hAIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy
NTFkYWQwHhcNMjYwMzA1MTQ1NDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDkzOTU2NjExNjgwMTU0M2I0MmYxMjA0MGI1NTBjMGRiMmFhOWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNkWc0LuDrk7IVyWjrtjZ4S2Lfnh
imI0LzHu9Ecc7nCLBjRWYVnhReFe+1qcJ2tLpUsmftZLmZvm2Avs65EdjvP9sxMi
ledU99UXW9gWsML/oMPxba9d6E631n9XaBQXRUm46Mt+LwQIyMRqn7jlsutlnHZZ
rg33AjEwNVpNnfQCeJMA4NAg5YqHUTbGK6kN81sgsnIQUzto2mM/UPo3omDcSnM/
xwkbLNUAtrruoSVVszDK5eW3sTw2DsLkIEP3cVMZjDQ3P+U0vl/zpWSJgN5FXtRL
6ToDa5v3Wze40G1SHqZIrNBhdgx23HJ/nA7GlskbXhnaxjwESk0HiISdTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHSTlWYRaAFUO0LxIEC1UMDbKqnfMB8GA1UdIwQY
MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt
YjdjNTc4Yjc0ZTM1LzEvZEpPVlpoRm9BVlE3UXZFZ1FMVlF3TnNxcWQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1
LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+rKMA0G
CSqGSIb3DQEBCwUAA4IBAQBkPt1RqgiI5MvtRy5gnzFZnCnD7Z9Fag2VsNwNDMdP
SV5Zv6itbN2pLCzdQOElucXcPoCpjZmjlRZzSwaE5vM3dS3wZebytIms+3qBq1xh
WSkmoWt4pglDtFOEql3dzOmN0lzZYrZfV11eXcHmR66BWSRV0OrJoRAdpYwHfRRZ
LM2VLUxFY2yqpr8jjlZ+PtpdYbZJQUJejsy6Js5UJWzQ8XDd8TXuSIRiZ3LP2fcA
qLAcsu5bUodH0uH+Zs2LMxYv823juArcORHrP0rE1bFNuKpvpjxIS7Is6B53TiHX
dhnJy2UjxKhffr6xlJqdGbKzbVQt8J0ojQwxab6HXhhD
-----END CERTIFICATE-----
Generated at Fri Mar 13 11:13:39 2026 by rpki-client