Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/rOXM7w2Bi2wjKDx3UdCCEn_XoNc.roa
File: rOXM7w2Bi2wjKDx3UdCCEn_XoNc.roa (raw, json)
Hash identifier: jO75JoginvMuRlRlIbd+oIuJpNIVudUke0+lCckHlKk=
Subject key identifier: AC:E5:CC:EF:0D:81:8B:6C:23:28:3C:77:51:D0:82:12:7F:D7:A0:D7
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 01A06B031A9CEAEC2A8A58E9068230215684
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/rOXM7w2Bi2wjKDx3UdCCEn_XoNc.roa
Signing time: Fri 04 Sep 2026 06:02:40 +0000
ROA not before: Fri 04 Sep 2026 06:02:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 273232
IP address blocks: 91.190.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:03:1a:9c:ea:ec:2a:8a:58:e9:06:82:30:21:56:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Sep 4 06:02:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ace5ccef0d818b6c23283c7751d082127fd7a0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:46:9d:4a:91:93:d6:4f:f0:b7:03:74:34:44:
5b:55:a5:5d:3f:68:1a:1a:9c:e0:d5:b9:30:45:e4:
08:df:98:40:e3:d9:b3:52:da:cf:a8:38:e1:16:90:
8a:92:e2:a4:24:47:0e:49:44:e7:28:7d:fd:a9:29:
d9:a2:16:47:4e:60:75:f9:81:2e:91:6d:4d:0e:d4:
41:1f:f3:c9:f7:7c:0f:5d:3e:d7:e5:3d:a8:4f:cf:
e6:75:8a:04:b1:25:a3:1b:8e:33:b2:99:fd:07:34:
59:3d:2d:79:af:4f:c4:00:ea:ac:b6:44:2a:59:f2:
c5:96:50:26:17:5f:5c:fe:80:f5:af:5f:be:7e:89:
9a:ae:11:ad:c6:d2:33:63:49:df:ac:02:39:7a:57:
1c:2d:67:a2:4f:00:a9:07:09:c6:04:9a:fe:de:b0:
40:52:03:25:aa:06:06:13:cf:13:8f:49:d4:33:7c:
40:e0:86:2a:f7:8c:23:a7:9f:04:8f:07:8d:3c:c3:
ac:47:6e:4d:b1:69:12:8b:3b:4e:7c:84:0b:9a:fd:
ef:02:eb:d5:0d:c1:4a:f0:a9:36:dc:86:72:f3:6b:
fb:54:2c:a4:73:49:45:1b:4a:40:59:fa:ac:00:34:
29:31:6d:f0:e7:e6:c8:64:a0:9b:2c:98:d0:00:51:
d9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E5:CC:EF:0D:81:8B:6C:23:28:3C:77:51:D0:82:12:7F:D7:A0:D7
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/rOXM7w2Bi2wjKDx3UdCCEn_XoNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.189.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:00:d5:2c:9f:71:06:17:9a:a6:43:de:41:8f:da:a5:93:96:
c1:31:91:43:d7:9e:1f:e9:0e:8c:82:66:27:5c:de:6c:5f:9e:
bb:27:0b:d7:1f:41:a3:1e:d9:02:a7:ae:77:e0:f0:ce:e7:3f:
d7:d6:41:40:32:aa:28:c8:aa:b6:0f:04:99:63:c2:c9:50:47:
a7:47:32:4f:a7:33:1d:74:8a:34:ea:82:1f:70:c7:84:51:5d:
ef:66:ff:4d:cc:cb:9a:56:e8:9a:94:cc:b6:a6:fc:33:68:79:
9a:fb:85:d1:21:87:fa:62:c3:a3:e2:86:32:d4:3a:ff:e9:fb:
87:6d:58:c2:7a:1e:3d:e2:60:a4:ee:ae:c0:2b:18:5c:f6:40:
94:48:a9:77:a8:4f:f4:fd:99:4d:8d:e7:7b:f4:fa:83:69:a4:
7b:fd:50:18:15:70:f1:b3:4f:d4:07:4a:70:1a:47:fd:fe:0f:
d9:b5:06:e7:f5:fd:b3:78:f9:ca:c4:a5:0b:36:7f:d7:30:bb:
09:90:e3:c5:ca:49:48:bc:17:53:72:c5:c9:a9:0e:a5:22:4b:
0a:30:7a:63:a6:58:7a:c5:ba:c6:e8:0b:29:ee:83:99:b8:42:
54:bd:12:91:45:83:11:bd:1c:22:97:b8:7b:8b:b5:be:17:e7:
4b:50:7a:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBrAxqc6uwqiljpBoIwIVaEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw
YzZmYzMwHhcNMjYwOTA0MDYwMjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2U1Y2NlZjBkODE4YjZjMjMyODNjNzc1MWQwODIxMjdmZDdhMGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UadSpGT1k/wtwN0NERbVaVdP2ga
Gpzg1bkwReQI35hA49mzUtrPqDjhFpCKkuKkJEcOSUTnKH39qSnZohZHTmB1+YEu
kW1NDtRBH/PJ93wPXT7X5T2oT8/mdYoEsSWjG44zspn9BzRZPS15r0/EAOqstkQq
WfLFllAmF19c/oD1r1++fomarhGtxtIzY0nfrAI5elccLWeiTwCpBwnGBJr+3rBA
UgMlqgYGE88Tj0nUM3xA4IYq94wjp58EjweNPMOsR25NsWkSiztOfIQLmv3vAuvV
DcFK8Kk23IZy82v7VCykc0lFG0pAWfqsADQpMW3w5+bIZKCbLJjQAFHZIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKzlzO8NgYtsIyg8d1HQghJ/16DXMB8GA1UdIwQY
MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt
ZjFjMzNhYTJmZDUwLzEvck9YTTd3MkJpMndqS0R4M1VkQ0NFbl9Yb05jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw
LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW769MA0G
CSqGSIb3DQEBCwUAA4IBAQDBANUsn3EGF5qmQ95Bj9qlk5bBMZFD154f6Q6MgmYn
XN5sX567JwvXH0GjHtkCp6534PDO5z/X1kFAMqooyKq2DwSZY8LJUEenRzJPpzMd
dIo06oIfcMeEUV3vZv9NzMuaVuialMy2pvwzaHma+4XRIYf6YsOj4oYy1Dr/6fuH
bVjCeh494mCk7q7AKxhc9kCUSKl3qE/0/ZlNjed79PqDaaR7/VAYFXDxs0/UB0pw
Gkf9/g/ZtQbn9f2zePnKxKULNn/XMLsJkOPFyklIvBdTcsXJqQ6lIksKMHpjplh6
xbrG6Asp7oOZuEJUvRKRRYMRvRwil7h7i7W+F+dLUHpC
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:13:40 2026 by rpki-client