Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/THfbU74ywtQ8sKspPoGoe7QN1LQ.roa
File: THfbU74ywtQ8sKspPoGoe7QN1LQ.roa (raw, json)
Hash identifier: cZXszgxvNHrOfZXBgPIvxUmNlIbSPNniYOHYtr5et54=
Subject key identifier: 4C:77:DB:53:BE:32:C2:D4:3C:B0:AB:29:3E:81:A8:7B:B4:0D:D4:B4
Certificate issuer: /CN=dfecad56eaae1235fa788e4ead3922c296e283a5
Certificate serial: 019EB5B88E4FA7D1ED80D3AAED2D5741DA4C
Authority key identifier: DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/THfbU74ywtQ8sKspPoGoe7QN1LQ.roa
Signing time: Thu 11 Jun 2026 08:07:11 +0000
ROA not before: Thu 11 Jun 2026 08:07:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202391
IP address blocks: 91.237.255.0/24 maxlen: 24
91.238.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:b8:8e:4f:a7:d1:ed:80:d3:aa:ed:2d:57:41:da:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfecad56eaae1235fa788e4ead3922c296e283a5
Validity
Not Before: Jun 11 08:07:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c77db53be32c2d43cb0ab293e81a87bb40dd4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:57:5d:9f:e9:ff:5f:e3:d1:0e:62:83:6d:dd:
bd:5d:5f:61:c8:5c:26:e7:03:a5:88:41:17:a4:16:
80:29:be:29:51:61:48:ab:bb:a0:c6:1d:55:04:55:
1b:87:10:96:17:46:aa:57:04:c3:27:81:4e:02:87:
01:5b:23:a6:f0:d4:f6:6a:be:dd:41:10:e0:df:79:
1f:85:19:ab:f1:0b:e0:04:5e:a1:46:dd:c4:d1:00:
ff:a2:9c:e2:d9:a6:26:18:5d:91:b4:c8:74:9b:a8:
22:6c:07:82:4b:cb:d2:b2:31:79:05:8a:8e:02:fb:
76:7e:ad:01:68:7e:29:40:6b:5a:76:c0:87:13:a9:
07:d3:07:7a:d1:6a:c8:fb:e7:9c:f0:ba:65:36:e0:
d3:c9:78:5e:35:5f:b5:d5:04:a0:a1:05:36:d0:45:
6f:0c:47:1e:dc:89:3f:5b:3b:13:cb:4d:17:12:60:
cc:a6:5b:6e:e3:a3:ac:ac:15:04:54:28:d3:33:9e:
90:10:36:b6:53:b7:3f:c1:32:5d:66:3b:08:21:dd:
23:93:d7:0f:cf:31:c9:74:03:b2:17:06:16:b1:63:
bf:47:d5:9f:73:2a:d4:a5:05:ab:ee:a1:5f:ce:9d:
d5:e1:71:ed:33:a8:43:44:55:a7:20:1b:eb:89:e8:
a6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:77:DB:53:BE:32:C2:D4:3C:B0:AB:29:3E:81:A8:7B:B4:0D:D4:B4
X509v3 Authority Key Identifier:
keyid:DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/THfbU74ywtQ8sKspPoGoe7QN1LQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.255.0-91.238.0.255
Signature Algorithm: sha256WithRSAEncryption
87:c6:d1:eb:25:41:24:94:0c:37:90:c2:8c:6e:62:9f:6c:99:
16:13:98:bd:c9:6e:51:63:ae:35:8a:21:79:ea:98:64:94:55:
a0:3a:69:2a:ab:29:63:80:d9:42:79:cf:78:d6:00:7c:80:f6:
64:ee:7e:59:b5:ef:53:a2:21:97:26:96:5e:db:1c:fc:17:24:
3f:1e:74:5f:64:90:41:30:7d:51:0a:38:0f:2d:23:51:4f:3c:
15:d9:e1:6e:8c:10:f0:4e:c5:75:17:27:99:8f:cb:62:05:75:
ba:68:13:d5:20:55:be:72:67:8f:05:a7:d6:48:f1:29:69:f7:
da:b1:97:3c:19:7a:cf:7c:d6:90:4e:8a:ba:d8:d5:74:32:fb:
b1:5e:40:e6:e4:c6:4b:60:e3:21:f8:8d:3c:c1:0f:bb:2e:a0:
b2:51:52:25:09:40:5b:a1:51:d5:de:5f:46:0b:f5:42:14:31:
74:d2:1a:1f:82:69:fe:c0:a5:30:07:26:0e:97:96:94:5a:30:
61:df:fb:bd:cf:54:fc:b3:31:9d:1d:2e:44:1f:dc:a6:73:92:
c8:ef:bd:59:ee:7e:f0:63:53:b7:61:bc:14:e4:c1:53:75:d0:
2d:a0:5c:10:83:28:d5:cc:d2:26:76:18:51:e2:d7:09:ad:82:
4b:0a:dd:8d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ61uI5Pp9HtgNOq7S1XQdpMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZWNhZDU2ZWFhZTEyMzVmYTc4OGU0ZWFkMzkyMmMyOTZl
MjgzYTUwHhcNMjYwNjExMDgwNzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Yzc3ZGI1M2JlMzJjMmQ0M2NiMGFiMjkzZTgxYTg3YmI0MGRkNGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFddn+n/X+PRDmKDbd29XV9hyFwm
5wOliEEXpBaAKb4pUWFIq7ugxh1VBFUbhxCWF0aqVwTDJ4FOAocBWyOm8NT2ar7d
QRDg33kfhRmr8QvgBF6hRt3E0QD/opzi2aYmGF2RtMh0m6gibAeCS8vSsjF5BYqO
Avt2fq0BaH4pQGtadsCHE6kH0wd60WrI++ec8LplNuDTyXheNV+11QSgoQU20EVv
DEce3Ik/WzsTy00XEmDMpltu46OsrBUEVCjTM56QEDa2U7c/wTJdZjsIId0jk9cP
zzHJdAOyFwYWsWO/R9WfcyrUpQWr7qFfzp3V4XHtM6hDRFWnIBvrieimDwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFEx321O+MsLUPLCrKT6BqHu0DdS0MB8GA1UdIwQY
MBaAFN/srVbqrhI1+niOTq05IsKW4oOlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMy15dFZ1cXVFalg2ZUk1T3JUa2l3cGJpZzZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9kNjcwODctNzY1Yi00NmViLTgwOGMt
Njc3YmFiNjEzYWZmLzEvVEhmYlU3NHl3dFE4c0tzcFBvR29lN1FOMUxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9kNjcwODctNzY1Yi00NmViLTgwOGMtNjc3YmFiNjEzYWZm
LzEvMy15dFZ1cXVFalg2ZUk1T3JUa2l3cGJpZzZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABb7f8D
BABb7gAwDQYJKoZIhvcNAQELBQADggEBAIfG0eslQSSUDDeQwoxuYp9smRYTmL3J
blFjrjWKIXnqmGSUVaA6aSqrKWOA2UJ5z3jWAHyA9mTuflm171OiIZcmll7bHPwX
JD8edF9kkEEwfVEKOA8tI1FPPBXZ4W6MEPBOxXUXJ5mPy2IFdbpoE9UgVb5yZ48F
p9ZI8Slp99qxlzwZes981pBOirrY1XQy+7FeQObkxktg4yH4jTzBD7suoLJRUiUJ
QFuhUdXeX0YL9UIUMXTSGh+Caf7ApTAHJg6XlpRaMGHf+73PVPyzMZ0dLkQf3KZz
ksjvvVnufvBjU7dhvBTkwVN10C2gXBCDKNXM0iZ2GFHi1wmtgksK3Y0=
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:42:29 2026 by rpki-client