Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/IioJCPvNdNGLMAa_qgwnTe7OHHA.roa
File: IioJCPvNdNGLMAa_qgwnTe7OHHA.roa (raw, json)
Hash identifier: 6db291fyuLEJb9GA//u7Cn1OZhghcTilKR1drZ7PPM8=
Subject key identifier: 22:2A:09:08:FB:CD:74:D1:8B:30:06:BF:AA:0C:27:4D:EE:CE:1C:70
Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial: 019C15C6694930E23AA64D3EFF240EE1B6E9
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/IioJCPvNdNGLMAa_qgwnTe7OHHA.roa
Signing time: Sat 31 Jan 2026 20:37:30 +0000
ROA not before: Sat 31 Jan 2026 20:37:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397477
IP address blocks: 91.200.138.0/23 maxlen: 23
91.210.120.0/22 maxlen: 22
193.33.236.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Feb 2026 01:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:15:c6:69:49:30:e2:3a:a6:4d:3e:ff:24:0e:e1:b6:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Validity
Not Before: Jan 31 20:37:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=222a0908fbcd74d18b3006bfaa0c274deece1c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:48:f8:1d:bf:f6:f7:91:98:43:1c:af:64:2d:
43:57:74:a7:34:fb:1e:b6:b5:06:93:e1:0e:c8:28:
18:1d:5c:58:1c:7e:71:bc:84:63:6f:ac:b6:c8:1d:
72:d8:50:18:3c:21:c3:00:51:61:71:f9:22:ab:54:
b3:ed:cb:4f:62:fb:8b:de:98:2e:0c:cf:72:53:de:
d9:b4:13:4c:2a:f6:93:88:5d:9f:ff:32:31:8a:d5:
74:26:4c:a2:1a:10:47:01:ca:97:d6:e9:3e:30:46:
9a:96:95:4f:12:98:0f:2c:e3:96:28:ab:a1:99:7d:
2e:86:aa:bc:cd:12:f5:54:a1:f9:3b:26:58:2c:21:
d8:2f:da:b4:6e:a8:14:ae:a3:89:cd:b0:f5:16:7e:
d4:e7:f8:6f:37:91:3e:5e:7d:1e:e6:a5:09:54:fd:
9f:40:45:e0:c6:a3:3d:2b:71:56:10:e2:09:97:ca:
9b:3b:27:28:6c:c2:1f:3a:a3:3b:4e:a9:37:bb:ca:
a5:03:52:9f:e0:32:59:fc:d0:84:4a:78:3f:35:e0:
c9:6f:47:b1:d2:00:5d:2f:ad:62:8f:58:55:e8:e6:
32:2e:0d:ed:1f:ff:be:03:c5:57:ed:92:3e:b1:19:
50:e6:0e:e9:d8:36:d5:d6:20:ee:52:d0:0b:34:83:
ba:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2A:09:08:FB:CD:74:D1:8B:30:06:BF:AA:0C:27:4D:EE:CE:1C:70
X509v3 Authority Key Identifier:
keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/IioJCPvNdNGLMAa_qgwnTe7OHHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.138.0/23
91.210.120.0/22
193.33.236.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:a9:9b:53:3d:9e:08:f8:a3:a4:3f:9c:b3:fc:1a:98:70:c8:
25:66:a1:59:0b:63:07:0a:34:02:f2:d3:0c:c3:2d:f4:ce:58:
24:0a:d3:ad:7d:91:69:33:39:99:ba:93:a9:c7:cc:ef:ff:dc:
21:9d:f0:7b:67:30:2b:17:f6:9e:5e:b2:e8:77:51:ab:38:4f:
c8:63:38:67:d4:35:21:f6:ba:a0:fd:3b:22:0e:55:9c:d4:62:
01:2e:58:4f:9d:21:1e:4e:e7:b7:1d:6f:d2:94:db:47:ce:c6:
34:c1:44:2c:b2:25:82:64:6a:4b:aa:fa:59:19:49:25:d0:f1:
c7:c3:1c:20:6e:b6:32:1b:a8:8e:3d:ec:cb:27:54:1b:5d:58:
83:a9:2d:e1:27:bb:9b:9b:3b:ea:72:0d:c8:51:bc:ad:5c:19:
bc:81:42:b6:77:aa:50:bf:2b:f3:d3:e7:f3:94:cb:f3:69:6a:
ed:e7:2f:28:2a:2e:0a:1a:e2:a6:4f:d9:37:b7:c0:8e:03:1f:
2b:e8:3e:b5:f2:f5:90:5c:4e:56:c5:27:86:20:b7:da:ae:7b:
50:43:33:8a:65:e3:cc:26:08:db:d3:82:9b:d8:b1:f5:15:d9:
86:d6:8a:22:e0:00:68:9c:08:ed:25:09:60:27:20:9f:3b:80:
b7:a1:55:06
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZwVxmlJMOI6pk0+/yQO4bbpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MWNiNTFjYmE2OGViN2VmOTg2N2E3NWQxN2FiMjgwMTgx
OTZhYTEwHhcNMjYwMTMxMjAzNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjJhMDkwOGZiY2Q3NGQxOGIzMDA2YmZhYTBjMjc0ZGVlY2UxYzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ej4Hb/295GYQxyvZC1DV3SnNPse
trUGk+EOyCgYHVxYHH5xvIRjb6y2yB1y2FAYPCHDAFFhcfkiq1Sz7ctPYvuL3pgu
DM9yU97ZtBNMKvaTiF2f/zIxitV0JkyiGhBHAcqX1uk+MEaalpVPEpgPLOOWKKuh
mX0uhqq8zRL1VKH5OyZYLCHYL9q0bqgUrqOJzbD1Fn7U5/hvN5E+Xn0e5qUJVP2f
QEXgxqM9K3FWEOIJl8qbOycobMIfOqM7Tqk3u8qlA1Kf4DJZ/NCESng/NeDJb0ex
0gBdL61ij1hV6OYyLg3tH/++A8VX7ZI+sRlQ5g7p2DbV1iDuUtALNIO6ZwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCIqCQj7zXTRizAGv6oMJ03uzhxwMB8GA1UdIwQY
MBaAFFcctRy6aOt++YZ6ddF6soAYGWqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3Yzkt
ZGQ4NjI3NzRhMDkyLzEvSWlvSkNQdk5kTkdMTUFhX3Fnd25UZTdPSEhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3YzktZGQ4NjI3NzRhMDky
LzEvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW8iKAwQC
W9J4AwQBwSHsMA0GCSqGSIb3DQEBCwUAA4IBAQC4qZtTPZ4I+KOkP5yz/BqYcMgl
ZqFZC2MHCjQC8tMMwy30zlgkCtOtfZFpMzmZupOpx8zv/9whnfB7ZzArF/aeXrLo
d1GrOE/IYzhn1DUh9rqg/TsiDlWc1GIBLlhPnSEeTue3HW/SlNtHzsY0wUQssiWC
ZGpLqvpZGUkl0PHHwxwgbrYyG6iOPezLJ1QbXViDqS3hJ7ubmzvqcg3IUbytXBm8
gUK2d6pQvyvz0+fzlMvzaWrt5y8oKi4KGuKmT9k3t8COAx8r6D618vWQXE5WxSeG
ILfarntQQzOKZePMJgjb04Kb2LH1FdmG1ooi4ABonAjtJQlgJyCfO4C3oVUG
-----END CERTIFICATE-----
Generated at Wed Feb 18 07:33:24 2026 by rpki-client