Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/Icm9ESp5ph7zpNuNarX6lg0DpGE.roa
File: Icm9ESp5ph7zpNuNarX6lg0DpGE.roa (raw, json)
Hash identifier: nNCoiYiBmNCQLMy18qh9Bz3KnZl3zdKCel7uMEGSCeI=
Subject key identifier: 21:C9:BD:11:2A:79:A6:1E:F3:A4:DB:8D:6A:B5:FA:96:0D:03:A4:61
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019CB2FDDBB2B9E66E32E612164678BAD4D4
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/Icm9ESp5ph7zpNuNarX6lg0DpGE.roa
Signing time: Tue 03 Mar 2026 09:18:27 +0000
ROA not before: Tue 03 Mar 2026 09:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 553
IP address blocks: 178.251.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b2:fd:db:b2:b9:e6:6e:32:e6:12:16:46:78:ba:d4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Mar 3 09:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21c9bd112a79a61ef3a4db8d6ab5fa960d03a461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:e6:75:ae:0e:c0:c3:d0:87:2c:18:46:86:
6c:f7:5c:39:03:86:33:e5:f1:47:e8:95:9f:42:c7:
81:84:a9:d6:d4:30:40:79:f1:06:03:51:a2:a0:a4:
b1:99:01:96:82:2f:06:92:27:e5:42:a4:b3:63:00:
cf:5d:50:8a:c9:de:8c:dc:31:34:d4:12:11:e2:b1:
70:6a:a3:3f:8c:d3:7b:98:85:b1:04:c7:7e:d6:86:
f5:bb:f8:c1:6d:64:12:db:2d:ac:c4:ce:8e:63:1f:
c6:ce:e4:27:46:65:3a:e3:f7:cd:1a:af:92:dd:5e:
08:48:04:4c:02:29:dc:f8:97:cf:7b:aa:23:59:b8:
cf:ad:4b:e6:88:3f:77:b8:71:fd:f3:49:d8:b8:ba:
87:66:17:87:e7:c2:df:f4:11:91:2a:6e:14:e0:49:
39:f1:ca:59:b0:00:e2:8f:8b:50:47:a2:51:b7:01:
77:67:f9:d7:ce:93:3f:35:08:11:5c:ad:33:2f:e0:
2b:dd:aa:05:a5:df:f6:e8:30:c9:c8:b7:3c:c5:c4:
b8:f2:f1:7e:ae:95:7c:8c:df:82:92:9b:4a:95:df:
30:86:1b:3c:c4:74:f7:97:0c:4a:b8:c4:60:6f:7b:
71:09:d4:40:32:16:a9:62:f8:6f:46:ff:cf:09:b6:
e3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C9:BD:11:2A:79:A6:1E:F3:A4:DB:8D:6A:B5:FA:96:0D:03:A4:61
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/Icm9ESp5ph7zpNuNarX6lg0DpGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ef:d8:04:12:fc:1d:95:1b:95:40:5e:d2:9b:c6:2a:18:0f:
13:f0:0a:fa:6f:70:83:7b:fd:83:b7:d4:91:5a:3b:10:7a:ab:
d8:7d:81:1c:25:96:d6:6a:a9:4f:63:95:48:a7:a3:e1:0a:5e:
e3:5f:be:a6:db:6c:df:5e:12:6e:ee:52:49:f5:61:b6:ea:4e:
55:25:e8:a8:02:f5:2a:b7:f7:8a:01:0c:66:14:a2:d8:9c:43:
00:e8:70:07:6b:a5:72:7b:85:7b:ca:99:af:ce:1b:11:cb:c1:
f3:7a:be:c8:58:20:cc:24:3b:52:4d:9a:75:e6:db:cc:bd:68:
c1:f4:0c:6e:e8:7f:6e:4d:33:02:f8:80:7b:cf:a2:c9:81:96:
7d:34:8f:a9:f1:6e:a3:a0:6d:9a:a9:bf:8c:44:5a:db:51:17:
65:0c:ae:49:73:27:cd:47:d8:61:47:af:71:db:57:7d:6f:34:
43:13:7c:d7:bf:0d:58:fd:59:2a:73:8c:e9:46:07:3a:58:a9:
ea:ca:a4:80:85:da:ae:9b:de:ee:24:13:53:fd:87:de:8b:55:
fb:05:b5:6d:70:27:92:23:4b:14:e5:e4:6b:a6:87:4a:88:79:
87:60:c7:a8:ff:c5:70:69:1b:e6:e1:9c:29:b7:ff:36:f5:c1:
9b:bb:88:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZyy/duyueZuMuYSFkZ4utTUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi
MGZhZGIwHhcNMjYwMzAzMDkxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWM5YmQxMTJhNzlhNjFlZjNhNGRiOGQ2YWI1ZmE5NjBkMDNhNDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhvmda4OwMPQhywYRoZs91w5A4Yz
5fFH6JWfQseBhKnW1DBAefEGA1GioKSxmQGWgi8GkiflQqSzYwDPXVCKyd6M3DE0
1BIR4rFwaqM/jNN7mIWxBMd+1ob1u/jBbWQS2y2sxM6OYx/GzuQnRmU64/fNGq+S
3V4ISARMAinc+JfPe6ojWbjPrUvmiD93uHH980nYuLqHZheH58Lf9BGRKm4U4Ek5
8cpZsADij4tQR6JRtwF3Z/nXzpM/NQgRXK0zL+Ar3aoFpd/26DDJyLc8xcS48vF+
rpV8jN+CkptKld8whhs8xHT3lwxKuMRgb3txCdRAMhapYvhvRv/PCbbjzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCHJvREqeaYe86TbjWq1+pYNA6RhMB8GA1UdIwQY
MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt
NThiMzhmNWFjODBiLzEvSWNtOUVTcDVwaDd6cE51TmFyWDZsZzBEcEdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi
LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsvvnMA0G
CSqGSIb3DQEBCwUAA4IBAQAt79gEEvwdlRuVQF7Sm8YqGA8T8Ar6b3CDe/2Dt9SR
WjsQeqvYfYEcJZbWaqlPY5VIp6PhCl7jX76m22zfXhJu7lJJ9WG26k5VJeioAvUq
t/eKAQxmFKLYnEMA6HAHa6Vye4V7ypmvzhsRy8Hzer7IWCDMJDtSTZp15tvMvWjB
9Axu6H9uTTMC+IB7z6LJgZZ9NI+p8W6joG2aqb+MRFrbURdlDK5JcyfNR9hhR69x
21d9bzRDE3zXvw1Y/Vkqc4zpRgc6WKnqyqSAhdqum97uJBNT/Yfei1X7BbVtcCeS
I0sU5eRrpodKiHmHYMeo/8VwaRvm4Zwpt/829cGbu4gB
-----END CERTIFICATE-----
Generated at Sat Mar 7 07:58:01 2026 by rpki-client