Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/4fg-sy7rSWNy5WiQ0bxk2W6GE9o.roa
File: 4fg-sy7rSWNy5WiQ0bxk2W6GE9o.roa (raw, json)
Hash identifier: sBj1mmW9S9rLm3x6oh/b0GK+0Aox7He2vMF3BoCLssM=
Subject key identifier: E1:F8:3E:B3:2E:EB:49:63:72:E5:68:90:D1:BC:64:D9:6E:86:13:DA
Certificate issuer: /CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Certificate serial: 01A105CD1C2EDF02B9ADBCB327D2526CCEB0
Authority key identifier: FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/4fg-sy7rSWNy5WiQ0bxk2W6GE9o.roa
Signing time: Sun 04 Oct 2026 07:24:50 +0000
ROA not before: Sun 04 Oct 2026 07:24:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8274
IP address blocks: 91.203.232.0/24 maxlen: 24
91.203.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:cd:1c:2e:df:02:b9:ad:bc:b3:27:d2:52:6c:ce:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Validity
Not Before: Oct 4 07:24:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1f83eb32eeb496372e56890d1bc64d96e8613da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:b9:c1:2c:29:c9:dd:ad:b0:ff:d4:14:79:
3e:1b:51:cd:ad:74:cd:eb:c8:4e:85:36:51:8b:cd:
21:1a:fa:b6:68:bc:88:39:31:2d:f4:d4:8c:5b:c2:
57:b5:aa:c8:64:e9:88:65:9f:fa:3d:fa:0c:21:6b:
07:d2:e8:8c:35:f3:f4:c3:d0:e1:e5:9b:c3:28:26:
16:f2:7f:65:32:9f:f5:01:49:22:9c:36:26:46:22:
08:55:b0:ed:f1:f4:d0:ba:0c:92:62:8e:ca:b0:a2:
47:cb:7b:b1:60:27:a4:23:ad:4f:88:40:0b:8c:da:
34:ad:75:65:51:93:72:36:5b:86:29:5e:e8:bd:13:
3e:c3:f8:49:af:14:51:be:72:43:4c:5c:e8:92:23:
a7:9d:59:de:c5:3c:c9:f0:6e:e0:fa:0f:72:df:93:
a2:e7:f0:67:5f:6d:0f:d7:ef:15:2e:42:8e:f1:63:
3c:b3:d7:8f:8e:3a:29:df:d8:76:4a:d1:24:64:24:
78:69:73:e2:94:cb:d5:f7:71:2a:ea:7c:f3:88:37:
60:8b:3c:7a:5c:3f:95:64:4b:c8:6d:fc:8e:75:ae:
de:cd:1c:4a:b8:fc:a3:e4:fc:47:aa:2c:63:9d:2e:
f7:66:67:de:5b:36:c5:5a:7b:75:49:15:5e:73:88:
cd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F8:3E:B3:2E:EB:49:63:72:E5:68:90:D1:BC:64:D9:6E:86:13:DA
X509v3 Authority Key Identifier:
keyid:FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/4fg-sy7rSWNy5WiQ0bxk2W6GE9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.232.0/23
Signature Algorithm: sha256WithRSAEncryption
46:91:09:7a:20:be:97:ad:7f:88:37:f1:df:a9:d7:da:96:80:
7f:86:09:03:3f:50:1d:6f:c6:7f:ce:07:92:29:91:d2:bb:00:
95:5e:6e:53:4e:44:6e:db:6e:14:75:81:25:b8:b1:ed:93:8c:
f7:11:6f:db:57:11:8c:50:49:59:89:c4:41:92:d2:11:d8:75:
d6:ac:be:1c:aa:50:b4:11:e1:63:6d:e2:99:f7:61:4d:ff:f0:
8e:92:62:98:e4:cf:5a:72:af:e3:54:d9:24:17:97:d5:23:d9:
a2:2c:f6:e8:31:b9:8f:de:7c:83:4b:b3:6d:50:36:bd:9c:a7:
ef:81:57:e1:97:cc:a0:d8:3b:c5:4f:9b:40:1d:74:d1:4a:30:
88:2c:6e:1a:99:ff:31:a1:d1:49:71:c3:ac:84:00:be:41:bd:
22:5c:93:93:f8:12:c7:3d:bc:61:26:c9:fc:dc:fc:9b:7b:b1:
70:a0:16:71:a0:3b:75:e5:41:c4:d0:95:55:65:54:d5:4e:67:
13:85:8b:9c:2d:23:fe:3a:3b:a2:29:b0:86:be:11:00:64:f6:
c9:61:26:39:5b:cc:e9:2b:94:e6:07:a1:48:55:88:6a:e3:36:
6e:24:6f:de:3d:40:fe:c1:f8:6d:72:35:f9:ab:20:61:05:c4:
fb:52:8a:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEFzRwu3wK5rbyzJ9JSbM6wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOTEyOGE3NjJjZWViNmI1OWY1NDMxNTY4YmMxM2ZjZTQx
YWJhMTIwHhcNMjYxMDA0MDcyNDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWY4M2ViMzJlZWI0OTYzNzJlNTY4OTBkMWJjNjRkOTZlODYxM2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxv25wSwpyd2tsP/UFHk+G1HNrXTN
68hOhTZRi80hGvq2aLyIOTEt9NSMW8JXtarIZOmIZZ/6PfoMIWsH0uiMNfP0w9Dh
5ZvDKCYW8n9lMp/1AUkinDYmRiIIVbDt8fTQugySYo7KsKJHy3uxYCekI61PiEAL
jNo0rXVlUZNyNluGKV7ovRM+w/hJrxRRvnJDTFzokiOnnVnexTzJ8G7g+g9y35Oi
5/BnX20P1+8VLkKO8WM8s9ePjjop39h2StEkZCR4aXPilMvV93Eq6nzziDdgizx6
XD+VZEvIbfyOda7ezRxKuPyj5PxHqixjnS73ZmfeWzbFWnt1SRVec4jN2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOH4PrMu60ljcuVokNG8ZNluhhPaMB8GA1UdIwQY
MBaAFPyRKKdizutrWfVDFWi8E/zkGroSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0pFb3AyTE82MnRaOVVNVmFMd1RfT1FhdWhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yMWU2OGMtMWM0Yy00NTU5LTllMzAt
MTM1ZDcwOWI1OWUwLzEvNGZnLXN5N3JTV055NVdpUTBieGsyVzZHRTlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yMWU2OGMtMWM0Yy00NTU5LTllMzAtMTM1ZDcwOWI1OWUw
LzEvX0pFb3AyTE82MnRaOVVNVmFMd1RfT1FhdWhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8voMA0G
CSqGSIb3DQEBCwUAA4IBAQBGkQl6IL6XrX+IN/HfqdfaloB/hgkDP1Adb8Z/zgeS
KZHSuwCVXm5TTkRu224UdYEluLHtk4z3EW/bVxGMUElZicRBktIR2HXWrL4cqlC0
EeFjbeKZ92FN//COkmKY5M9acq/jVNkkF5fVI9miLPboMbmP3nyDS7NtUDa9nKfv
gVfhl8yg2DvFT5tAHXTRSjCILG4amf8xodFJccOshAC+Qb0iXJOT+BLHPbxhJsn8
3Pybe7FwoBZxoDt15UHE0JVVZVTVTmcThYucLSP+OjuiKbCGvhEAZPbJYSY5W8zp
K5TmB6FIVYhq4zZuJG/ePUD+wfhtcjX5qyBhBcT7Uop6
-----END CERTIFICATE-----
Generated at Wed Oct 14 08:48:17 2026 by rpki-client