Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/7c7786-75e6-4760-8390-2dd1b4ee0e63/1/_5Kz249xlvnbhQYdV9jRus4ricw.roa
File: _5Kz249xlvnbhQYdV9jRus4ricw.roa (raw, json)
Hash identifier: VJ6XiAWwRRFVBrYfxjNlzUDq3S4vmUxTlhhkc3Uwgwk=
Subject key identifier: FF:92:B3:DB:8F:71:96:F9:DB:85:06:1D:57:D8:D1:BA:CE:2B:89:CC
Certificate issuer: /CN=9375f2abd9998218c3a45fe17f4427bfcc723f72
Certificate serial: 01A11503086AADA3185A9CF540CFEBF88279
Authority key identifier: 93:75:F2:AB:D9:99:82:18:C3:A4:5F:E1:7F:44:27:BF:CC:72:3F:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3Xyq9mZghjDpF_hf0Qnv8xyP3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/7c7786-75e6-4760-8390-2dd1b4ee0e63/1/_5Kz249xlvnbhQYdV9jRus4ricw.roa
Signing time: Wed 07 Oct 2026 06:18:02 +0000
ROA not before: Wed 07 Oct 2026 06:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41666
IP address blocks: 91.216.79.0/24 maxlen: 24
2001:67c:8e4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/7c7786-75e6-4760-8390-2dd1b4ee0e63/1/k3Xyq9mZghjDpF_hf0Qnv8xyP3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/7c7786-75e6-4760-8390-2dd1b4ee0e63/1/k3Xyq9mZghjDpF_hf0Qnv8xyP3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3Xyq9mZghjDpF_hf0Qnv8xyP3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:03:08:6a:ad:a3:18:5a:9c:f5:40:cf:eb:f8:82:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9375f2abd9998218c3a45fe17f4427bfcc723f72
Validity
Not Before: Oct 7 06:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff92b3db8f7196f9db85061d57d8d1bace2b89cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:db:ab:b0:fe:55:d2:41:c4:5b:9a:89:03:60:
04:f2:a2:fc:4a:b3:fb:6a:5b:d1:60:fc:a9:92:cb:
5a:5f:1a:d6:d7:cc:63:c7:9f:63:42:c7:9a:fa:77:
6f:42:68:9a:c0:10:50:fc:97:8f:14:1b:39:5f:70:
b3:c0:13:ab:b7:36:06:11:cf:b6:0f:e8:ae:ea:c9:
49:4e:22:0d:15:b7:31:18:99:13:a2:7a:71:da:9b:
55:1d:d4:e4:cc:86:ea:6b:42:a1:0a:56:56:42:b7:
87:89:d9:85:64:37:e0:a6:ff:ed:a2:de:e8:71:52:
de:44:a0:a2:e0:2f:2b:9c:a2:d1:f7:ce:21:0e:a4:
1d:8b:24:b8:eb:b0:f8:b2:fb:bc:37:bb:7e:27:1a:
28:b7:41:dc:c8:34:92:e3:98:24:92:66:80:0c:1f:
e9:b9:64:76:60:8e:5d:6f:c1:29:79:0d:ac:82:b6:
d5:25:93:c6:a9:b3:c6:32:a3:a6:93:0f:9e:c1:91:
29:27:5c:56:0a:0e:9a:70:40:64:66:61:df:ce:e1:
58:09:c8:04:ec:be:da:2f:1f:ae:58:ec:15:01:96:
b6:3c:19:fc:32:ec:1f:86:cf:1b:97:89:49:27:4d:
c1:72:a6:d4:03:3b:f7:17:5d:47:fe:a1:b2:0c:45:
78:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:92:B3:DB:8F:71:96:F9:DB:85:06:1D:57:D8:D1:BA:CE:2B:89:CC
X509v3 Authority Key Identifier:
keyid:93:75:F2:AB:D9:99:82:18:C3:A4:5F:E1:7F:44:27:BF:CC:72:3F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3Xyq9mZghjDpF_hf0Qnv8xyP3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7c7786-75e6-4760-8390-2dd1b4ee0e63/1/_5Kz249xlvnbhQYdV9jRus4ricw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7c7786-75e6-4760-8390-2dd1b4ee0e63/1/k3Xyq9mZghjDpF_hf0Qnv8xyP3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.79.0/24
IPv6:
2001:67c:8e4::/48
Signature Algorithm: sha256WithRSAEncryption
91:c3:09:72:b1:e0:f9:19:23:4c:05:2a:5d:9d:f9:39:c1:54:
11:a7:54:be:8a:ef:ad:64:78:bd:4c:38:6d:6c:da:a4:d0:b4:
22:03:5f:db:db:9d:4d:11:da:a8:2c:0a:03:46:58:64:b3:c0:
7e:90:d7:69:d2:f5:0b:aa:c8:8f:78:31:47:32:a1:39:fd:b1:
95:da:26:48:aa:57:8c:13:e3:42:d4:5b:b4:d4:47:6a:b3:c5:
35:65:7c:aa:b3:0c:43:51:f2:0f:c4:76:00:5b:eb:c0:f2:2e:
c9:d0:f1:f9:f3:4c:3a:e8:35:98:98:be:64:32:ba:c0:af:f3:
d9:8b:20:29:e7:c1:7c:fb:40:9e:ef:16:fd:54:f1:7d:21:3d:
be:ec:56:f7:82:cd:d0:f0:3d:35:5f:fe:82:64:30:bc:ea:fd:
41:0b:a9:51:5b:4b:68:b8:5e:c0:9b:2f:88:7f:eb:57:8d:1f:
22:61:3b:12:af:12:71:d0:c6:97:52:ed:27:2f:3b:94:8e:81:
1c:18:07:8e:a3:da:0e:ce:e7:60:28:c4:7b:4b:88:bc:de:2a:
91:f9:40:21:d5:fa:40:fe:49:28:1c:6e:bd:a4:2a:0d:43:b3:
4a:d4:d0:0e:69:f9:d0:90:fa:5e:e4:8f:06:5b:08:48:c1:66:
5a:48:30:96
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAaEVAwhqraMYWpz1QM/r+IJ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNzVmMmFiZDk5OTgyMThjM2E0NWZlMTdmNDQyN2JmY2M3
MjNmNzIwHhcNMjYxMDA3MDYxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjkyYjNkYjhmNzE5NmY5ZGI4NTA2MWQ1N2Q4ZDFiYWNlMmI4OWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNursP5V0kHEW5qJA2AE8qL8SrP7
alvRYPypkstaXxrW18xjx59jQsea+ndvQmiawBBQ/JePFBs5X3CzwBOrtzYGEc+2
D+iu6slJTiINFbcxGJkTonpx2ptVHdTkzIbqa0KhClZWQreHidmFZDfgpv/tot7o
cVLeRKCi4C8rnKLR984hDqQdiyS467D4svu8N7t+Jxoot0HcyDSS45gkkmaADB/p
uWR2YI5db8EpeQ2sgrbVJZPGqbPGMqOmkw+ewZEpJ1xWCg6acEBkZmHfzuFYCcgE
7L7aLx+uWOwVAZa2PBn8Muwfhs8bl4lJJ03BcqbUAzv3F11H/qGyDEV4ZwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFP+Ss9uPcZb524UGHVfY0brOK4nMMB8GA1UdIwQY
MBaAFJN18qvZmYIYw6Rf4X9EJ7/Mcj9yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazNYeXE5bVpnaGpEcEZfaGYwUW52OHh5UDNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy83Yzc3ODYtNzVlNi00NzYwLTgzOTAt
MmRkMWI0ZWUwZTYzLzEvXzVLejI0OXhsdm5iaFFZZFY5alJ1czRyaWN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy83Yzc3ODYtNzVlNi00NzYwLTgzOTAtMmRkMWI0ZWUwZTYz
LzEvazNYeXE5bVpnaGpEcEZfaGYwUW52OHh5UDNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9hPMA8E
AgACMAkDBwAgAQZ8COQwDQYJKoZIhvcNAQELBQADggEBAJHDCXKx4PkZI0wFKl2d
+TnBVBGnVL6K761keL1MOG1s2qTQtCIDX9vbnU0R2qgsCgNGWGSzwH6Q12nS9Quq
yI94MUcyoTn9sZXaJkiqV4wT40LUW7TUR2qzxTVlfKqzDENR8g/EdgBb68DyLsnQ
8fnzTDroNZiYvmQyusCv89mLICnnwXz7QJ7vFv1U8X0hPb7sVveCzdDwPTVf/oJk
MLzq/UELqVFbS2i4XsCbL4h/61eNHyJhOxKvEnHQxpdS7ScvO5SOgRwYB46j2g7O
52AoxHtLiLzeKpH5QCHV+kD+SSgcbr2kKg1Ds0rU0A5p+dCQ+l7kjwZbCEjBZlpI
MJY=
-----END CERTIFICATE-----
Generated at Sun Oct 11 13:36:20 2026 by rpki-client