Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/p99ek5h_NiaIc1Xgl4eynqWoArM.roa
File: p99ek5h_NiaIc1Xgl4eynqWoArM.roa (raw, json)
Hash identifier: thPK67TM9mcPq/inOJ7i7O8y//gb6Ir+uTzObahyNQo=
Subject key identifier: A7:DF:5E:93:98:7F:36:26:88:73:55:E0:97:87:B2:9E:A5:A8:02:B3
Certificate issuer: /CN=767eb661936dc95da3ecc4ca3eaf581389c0d855
Certificate serial: 01A019DAFB261906CA60EAFA62971FDFBD37
Authority key identifier: 76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/p99ek5h_NiaIc1Xgl4eynqWoArM.roa
Signing time: Wed 19 Aug 2026 11:49:35 +0000
ROA not before: Wed 19 Aug 2026 11:49:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39855
IP address blocks: 91.192.85.0/24 maxlen: 24
91.192.86.0/24 maxlen: 24
91.192.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:da:fb:26:19:06:ca:60:ea:fa:62:97:1f:df:bd:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767eb661936dc95da3ecc4ca3eaf581389c0d855
Validity
Not Before: Aug 19 11:49:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7df5e93987f3626887355e09787b29ea5a802b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:4c:3c:20:50:01:e9:b9:7d:2f:24:98:f1:
b4:fe:be:8b:cf:d7:c4:aa:17:79:94:70:e2:f8:39:
0d:2b:af:97:35:f0:3e:72:ad:43:ca:d9:bf:88:d7:
16:38:d1:31:4e:10:5a:ce:ec:24:e2:8a:c9:00:18:
21:cf:59:47:c4:d9:6b:a0:f9:fe:89:9c:5b:bc:d7:
bd:6e:39:65:a4:fb:89:45:2c:81:05:99:0e:a1:d0:
e5:18:68:a0:ae:ff:cb:22:c8:94:46:35:b7:d7:ec:
5f:9b:08:24:2c:fe:4e:fb:d4:80:9b:0b:c9:e1:be:
f0:35:90:17:ee:d4:eb:71:7f:0c:d0:20:95:14:98:
7c:68:9e:c9:59:84:bf:78:40:48:6b:a6:dd:bb:de:
a9:83:f5:4a:fa:ef:55:a2:84:f4:07:7e:5e:5b:03:
cf:f3:51:c7:77:5f:89:a2:62:30:d8:05:68:a5:b7:
6e:2f:63:50:86:34:54:fb:0b:2a:7a:23:1f:1a:09:
ac:8c:02:42:f1:55:7e:e2:10:07:bc:62:25:92:bc:
f5:6c:47:3c:49:22:fa:93:ae:8c:c9:30:e0:b0:52:
cd:7f:da:c1:6c:8f:ac:95:77:eb:8d:1a:1d:e8:c2:
32:5b:13:d8:2a:90:cf:1b:18:1f:85:e0:51:3e:07:
75:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DF:5E:93:98:7F:36:26:88:73:55:E0:97:87:B2:9E:A5:A8:02:B3
X509v3 Authority Key Identifier:
keyid:76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/p99ek5h_NiaIc1Xgl4eynqWoArM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.85.0-91.192.87.255
Signature Algorithm: sha256WithRSAEncryption
a4:40:03:44:4a:c4:1c:f2:0a:2e:34:7b:bf:49:65:75:8e:31:
d0:b2:20:17:c9:f2:00:cb:96:45:f9:37:46:e6:de:c9:13:44:
b6:0f:9c:53:6d:61:42:ab:0a:04:5a:88:89:d2:82:85:a8:a8:
02:a1:d1:c8:ff:d7:f3:67:99:e5:d3:74:99:02:44:95:86:66:
6e:7f:da:68:5d:2f:af:65:93:c6:21:0e:c7:89:2d:41:cc:18:
af:c8:e5:9a:cd:72:d8:f2:cd:78:18:c5:f4:f9:a3:70:25:de:
75:16:57:c5:08:ae:74:83:aa:b1:e7:58:40:41:a6:34:62:cd:
c0:f5:ad:3e:17:e7:66:7e:fe:03:99:2d:b2:2b:8e:be:ba:4d:
b7:dc:b5:c7:29:a7:4a:66:fd:ae:c3:5b:47:a9:eb:a9:47:7e:
b1:fa:cf:7b:f5:09:4e:25:e0:59:61:11:03:08:e6:09:93:a5:
4f:2a:a0:4a:dd:c3:76:2f:39:06:59:e8:f2:33:53:09:de:ba:
1b:83:12:38:91:32:75:80:ec:be:5c:fa:aa:69:a7:df:da:86:
b8:f4:06:79:3a:fe:b4:ab:aa:46:8b:c8:e7:e1:a4:8d:c3:0e:
93:89:05:c0:09:4e:97:ad:a6:3e:c9:85:db:6f:95:3c:29:cb:
15:dd:b6:a5
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAaAZ2vsmGQbKYOr6Ypcf3703MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2ViNjYxOTM2ZGM5NWRhM2VjYzRjYTNlYWY1ODEzODlj
MGQ4NTUwHhcNMjYwODE5MTE0OTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2RmNWU5Mzk4N2YzNjI2ODg3MzU1ZTA5Nzg3YjI5ZWE1YTgwMmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiRMPCBQAem5fS8kmPG0/r6Lz9fE
qhd5lHDi+DkNK6+XNfA+cq1Dytm/iNcWONExThBazuwk4orJABghz1lHxNlroPn+
iZxbvNe9bjllpPuJRSyBBZkOodDlGGigrv/LIsiURjW31+xfmwgkLP5O+9SAmwvJ
4b7wNZAX7tTrcX8M0CCVFJh8aJ7JWYS/eEBIa6bdu96pg/VK+u9VooT0B35eWwPP
81HHd1+JomIw2AVopbduL2NQhjRU+wsqeiMfGgmsjAJC8VV+4hAHvGIlkrz1bEc8
SSL6k66MyTDgsFLNf9rBbI+slXfrjRod6MIyWxPYKpDPGxgfheBRPgd1UwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKffXpOYfzYmiHNV4JeHsp6lqAKzMB8GA1UdIwQY
MBaAFHZ+tmGTbcldo+zEyj6vWBOJwNhVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG42MllaTnR5VjJqN01US1BxOVlFNG5BMkZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yYTVhOWMtYmRmOS00ZWQwLWFkMzMt
ZjQ1NzU0NDM2M2VmLzEvcDk5ZWs1aF9OaWFJYzFYZ2w0ZXlucVdvQXJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8yYTVhOWMtYmRmOS00ZWQwLWFkMzMtZjQ1NzU0NDM2M2Vm
LzEvZG42MllaTnR5VjJqN01US1BxOVlFNG5BMkZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABbwFUD
BANbwFAwDQYJKoZIhvcNAQELBQADggEBAKRAA0RKxBzyCi40e79JZXWOMdCyIBfJ
8gDLlkX5N0bm3skTRLYPnFNtYUKrCgRaiInSgoWoqAKh0cj/1/NnmeXTdJkCRJWG
Zm5/2mhdL69lk8YhDseJLUHMGK/I5ZrNctjyzXgYxfT5o3Al3nUWV8UIrnSDqrHn
WEBBpjRizcD1rT4X52Z+/gOZLbIrjr66Tbfctccpp0pm/a7DW0ep66lHfrH6z3v1
CU4l4FlhEQMI5gmTpU8qoErdw3YvOQZZ6PIzUwneuhuDEjiRMnWA7L5c+qppp9/a
hrj0Bnk6/rSrqkaLyOfhpI3DDpOJBcAJTpetpj7JhdtvlTwpyxXdtqU=
-----END CERTIFICATE-----
Generated at Sat Aug 22 02:34:35 2026 by rpki-client