Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/JTb4e3DUii0zPLQ9Ckw5esCwjG0.roa
File: JTb4e3DUii0zPLQ9Ckw5esCwjG0.roa (raw, json)
Hash identifier: byIs4fDxzbStmpUulXvsLFDQrTroJupl22yHc01W9sA=
Subject key identifier: 25:36:F8:7B:70:D4:8A:2D:33:3C:B4:3D:0A:4C:39:7A:C0:B0:8C:6D
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 019CE68E9942F5DF518AA22F0B67DA4972E7
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/JTb4e3DUii0zPLQ9Ckw5esCwjG0.roa
Signing time: Fri 13 Mar 2026 09:37:10 +0000
ROA not before: Fri 13 Mar 2026 09:37:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 213.46.192.0/24 maxlen: 24
2a00:18b0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:8e:99:42:f5:df:51:8a:a2:2f:0b:67:da:49:72:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: Mar 13 09:37:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2536f87b70d48a2d333cb43d0a4c397ac0b08c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:09:0c:b2:9b:0c:8d:82:45:33:8c:61:a2:
2d:dd:78:df:d4:fc:fc:5d:6a:fc:56:ee:05:44:91:
4a:d6:c4:7c:e6:79:9f:f6:43:95:e3:30:99:11:30:
6b:55:41:52:92:ea:c0:14:91:48:c8:36:5e:c1:9b:
93:eb:a7:25:9b:b4:f2:a7:65:bb:e5:a0:05:e9:fa:
0d:a0:be:eb:56:13:81:70:4e:59:0f:c5:5f:a3:b8:
f0:94:ee:a1:c4:48:bf:a3:21:fd:86:6f:9d:0c:1d:
78:34:92:50:14:e6:73:d8:00:02:92:96:42:af:7a:
f0:16:f7:1d:73:10:db:20:f5:26:67:df:bf:c0:67:
de:c6:60:dd:b7:b4:92:88:11:0c:ce:bf:26:e2:ce:
ce:fb:22:d4:d5:03:b5:ec:6c:3e:92:4c:bf:ed:3b:
c4:2a:5d:a1:c0:57:60:f1:cb:75:b6:5d:38:3d:62:
8c:ec:98:17:32:87:09:28:8a:7d:54:f0:7f:bc:b9:
ce:de:7d:68:d2:7e:ac:44:58:1c:02:d2:f9:63:10:
3a:92:c5:64:ad:8b:00:b8:c0:90:58:08:95:8a:2c:
35:36:57:04:00:4f:f7:60:74:0b:71:90:6e:4a:fe:
86:41:84:c5:17:52:d0:51:37:5e:3c:2a:50:b8:6d:
43:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:36:F8:7B:70:D4:8A:2D:33:3C:B4:3D:0A:4C:39:7A:C0:B0:8C:6D
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/JTb4e3DUii0zPLQ9Ckw5esCwjG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.46.192.0/24
IPv6:
2a00:18b0::/29
Signature Algorithm: sha256WithRSAEncryption
00:87:d5:13:bc:c2:ad:16:5b:96:16:8c:9d:2a:ee:b7:89:fe:
53:e0:e0:5e:16:e5:fe:4b:39:32:98:04:f9:cb:f7:a0:05:78:
bc:e6:92:96:2e:47:3c:cb:72:2d:0c:f6:df:da:d5:37:3f:fd:
9e:b6:87:15:1a:b6:9e:fb:30:43:9d:e8:a5:ec:7d:0e:f4:0b:
18:05:cb:e4:e4:c8:20:ef:1a:0e:37:fc:de:3d:45:45:0a:48:
15:0b:90:a7:d6:04:db:b8:8a:a7:7f:2b:d0:0c:cb:4e:cc:fe:
40:1f:d1:a1:a9:24:68:d9:59:d3:1a:f5:9f:46:8c:8d:99:5b:
45:ae:07:3c:0d:73:8b:c1:95:10:46:79:89:c8:40:89:82:34:
fe:89:77:39:8b:11:5a:ce:b9:9f:66:c3:b8:4d:17:3c:d3:a8:
b1:6f:ad:ce:5d:e5:87:fa:dc:22:e2:1b:33:da:bd:97:94:0d:
86:12:ca:cf:3e:d5:59:50:e8:ae:bd:35:42:a0:7b:93:89:81:
17:05:73:60:f9:e7:bb:33:e6:3c:17:9a:80:da:4c:0e:90:b5:
4c:b1:d4:95:fa:ab:36:81:70:ce:eb:d8:4d:de:a5:9d:78:a8:
66:8c:fc:9e:af:bb:ba:cd:ce:3b:15:fa:eb:98:40:e0:f8:cc:
38:b4:6f:ca
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZzmjplC9d9RiqIvC2faSXLnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYzEwYmZkZTU4MTNhYjQ3YzM4YzVjMTkwNGVjMjZiMzJj
MmEwOTUwHhcNMjYwMzEzMDkzNzEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTM2Zjg3YjcwZDQ4YTJkMzMzY2I0M2QwYTRjMzk3YWMwYjA4YzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVcJDLKbDI2CRTOMYaIt3Xjf1Pz8
XWr8Vu4FRJFK1sR85nmf9kOV4zCZETBrVUFSkurAFJFIyDZewZuT66clm7Typ2W7
5aAF6foNoL7rVhOBcE5ZD8Vfo7jwlO6hxEi/oyH9hm+dDB14NJJQFOZz2AACkpZC
r3rwFvcdcxDbIPUmZ9+/wGfexmDdt7SSiBEMzr8m4s7O+yLU1QO17Gw+kky/7TvE
Kl2hwFdg8ct1tl04PWKM7JgXMocJKIp9VPB/vLnO3n1o0n6sRFgcAtL5YxA6ksVk
rYsAuMCQWAiViiw1NlcEAE/3YHQLcZBuSv6GQYTFF1LQUTdePCpQuG1DhwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCU2+Htw1IotMzy0PQpMOXrAsIxtMB8GA1UdIwQY
MBaAFJHBC/3lgTq0fDjFwZBOwmsywqCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTct
MDRkNzRmMzY4Njk4LzEvSlRiNGUzRFVpaTB6UExROUNrdzVlc0N3akcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTctMDRkNzRmMzY4Njk4
LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA1S7AMA0E
AgACMAcDBQMqABiwMA0GCSqGSIb3DQEBCwUAA4IBAQAAh9UTvMKtFluWFoydKu63
if5T4OBeFuX+SzkymAT5y/egBXi85pKWLkc8y3ItDPbf2tU3P/2etocVGrae+zBD
neil7H0O9AsYBcvk5Mgg7xoON/zePUVFCkgVC5Cn1gTbuIqnfyvQDMtOzP5AH9Gh
qSRo2VnTGvWfRoyNmVtFrgc8DXOLwZUQRnmJyECJgjT+iXc5ixFazrmfZsO4TRc8
06ixb63OXeWH+twi4hsz2r2XlA2GEsrPPtVZUOiuvTVCoHuTiYEXBXNg+ee7M+Y8
F5qA2kwOkLVMsdSV+qs2gXDO69hN3qWdeKhmjPyer7u6zc47FfrrmEDg+Mw4tG/K
-----END CERTIFICATE-----
Generated at Fri Mar 13 13:00:39 2026 by rpki-client