Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/bPh4Giu5Nq3sZFM8_B9KWlRAEqs.roa
File: bPh4Giu5Nq3sZFM8_B9KWlRAEqs.roa (raw, json)
Hash identifier: 12lV/CjP2LLIfjb5WGBw4B60ICGZb4X5UeRE2osFO3o=
Subject key identifier: 6C:F8:78:1A:2B:B9:36:AD:EC:64:53:3C:FC:1F:4A:5A:54:40:12:AB
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 019F48BF4A07F9AD03EF689886EA553D0319
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/bPh4Giu5Nq3sZFM8_B9KWlRAEqs.roa
Signing time: Thu 09 Jul 2026 21:18:43 +0000
ROA not before: Thu 09 Jul 2026 21:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209372
IP address blocks: 91.108.192.0/24 maxlen: 24
91.108.193.0/24 maxlen: 24
91.108.194.0/24 maxlen: 24
91.108.195.0/24 maxlen: 24
91.108.196.0/22 maxlen: 22
91.108.200.0/22 maxlen: 22
91.108.200.0/24 maxlen: 24
91.108.204.0/22 maxlen: 22
91.108.204.0/24 maxlen: 24
91.108.208.0/22 maxlen: 22
91.108.208.0/24 maxlen: 24
91.108.212.0/22 maxlen: 22
91.108.216.0/22 maxlen: 22
91.108.216.0/24 maxlen: 24
91.108.220.0/22 maxlen: 22
91.108.220.0/24 maxlen: 24
91.108.224.0/24 maxlen: 24
91.108.228.0/22 maxlen: 22
91.108.232.0/22 maxlen: 22
91.108.236.0/24 maxlen: 24
91.108.238.0/24 maxlen: 24
91.108.246.0/24 maxlen: 24
91.108.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:48:bf:4a:07:f9:ad:03:ef:68:98:86:ea:55:3d:03:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Jul 9 21:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6cf8781a2bb936adec64533cfc1f4a5a544012ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cf:47:ee:d4:b0:d1:7c:50:a7:76:b7:5f:04:
02:73:9e:33:45:4a:72:70:f7:c7:07:a9:f7:9b:ae:
24:a6:e1:ae:39:80:74:42:e5:d2:e8:ca:dd:64:74:
4b:96:8e:c2:3e:1e:c1:da:ee:20:c1:ce:83:4c:df:
3f:68:ea:c9:15:04:43:a8:3c:d3:1c:0c:2b:01:c1:
02:e7:d1:2f:c2:e5:72:63:0b:30:8d:20:eb:15:a7:
d9:9d:01:d4:c9:5a:38:ea:be:a8:3c:16:39:1a:30:
90:64:d2:f8:83:c7:5b:e7:69:9f:c1:76:eb:0b:0f:
be:4a:d4:c7:a6:75:a9:30:ad:e4:bf:9c:ea:c9:01:
63:d1:51:50:75:8f:ed:96:90:11:81:03:c0:6d:8a:
04:21:31:43:84:0c:5e:a0:ef:57:19:6a:29:3f:a5:
76:ae:a2:69:1f:ba:8d:87:53:4c:91:4a:b1:a6:34:
13:e0:f7:9b:fc:e2:c0:a6:08:c7:73:ca:91:15:c1:
8b:90:74:41:75:15:c9:c5:12:0c:57:ed:4b:d5:1b:
95:bd:bc:13:ef:73:14:0a:95:e4:99:c6:6e:cb:85:
75:36:a4:b8:4b:ad:3a:57:30:6e:6b:bc:24:26:bd:
e2:eb:11:bf:1e:fa:39:2b:44:9b:a8:f8:c4:8c:23:
13:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F8:78:1A:2B:B9:36:AD:EC:64:53:3C:FC:1F:4A:5A:54:40:12:AB
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/bPh4Giu5Nq3sZFM8_B9KWlRAEqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.192.0-91.108.224.255
91.108.228.0-91.108.236.255
91.108.238.0/24
91.108.246.0/24
91.108.255.0/24
Signature Algorithm: sha256WithRSAEncryption
40:1d:66:7c:44:5c:be:97:9e:f3:2b:e2:8d:f2:59:cf:3e:c3:
1f:48:1f:2c:82:e9:5b:c0:23:ca:6b:6d:26:5d:e2:c4:c2:bb:
9a:39:44:68:40:0d:68:6f:8d:cc:ec:74:5c:a8:8f:4f:01:0e:
ac:52:2f:72:0c:29:d1:7b:54:53:12:40:96:32:45:a6:43:a0:
9e:a9:16:55:f0:dd:4e:af:e1:0b:8e:2f:14:e2:99:f2:08:b8:
8a:af:6c:6b:cd:a6:59:fd:5c:0d:ee:5f:7c:ff:5d:1e:62:f6:
80:66:14:ff:3d:6e:a9:06:66:32:9f:8a:c2:4d:57:78:d7:93:
26:80:4f:16:92:1a:3b:4a:d4:ef:eb:e5:c5:5a:b3:37:7a:fb:
28:c3:0d:27:c7:9a:e9:68:e3:5c:d8:b6:15:05:28:b8:c7:2c:
09:63:51:90:f3:fb:b5:16:0c:70:9c:22:ba:52:84:3d:df:c4:
71:b2:33:11:aa:67:d3:bf:91:76:0b:62:d9:0e:cc:00:8f:44:
fa:b1:83:72:52:02:e1:41:11:d7:ca:47:1c:75:50:93:4c:32:
97:39:30:2b:8c:ec:55:42:e6:47:50:ec:95:36:3f:7a:53:6a:
87:1b:20:ad:c2:2b:fb:51:e3:23:d2:73:e5:92:49:73:a6:7d:
24:34:02:c9
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZ9Iv0oH+a0D72iYhupVPQMZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm
NzMzMzkwHhcNMjYwNzA5MjExODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2Y4NzgxYTJiYjkzNmFkZWM2NDUzM2NmYzFmNGE1YTU0NDAxMmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc9H7tSw0XxQp3a3XwQCc54zRUpy
cPfHB6n3m64kpuGuOYB0QuXS6MrdZHRLlo7CPh7B2u4gwc6DTN8/aOrJFQRDqDzT
HAwrAcEC59EvwuVyYwswjSDrFafZnQHUyVo46r6oPBY5GjCQZNL4g8db52mfwXbr
Cw++StTHpnWpMK3kv5zqyQFj0VFQdY/tlpARgQPAbYoEITFDhAxeoO9XGWopP6V2
rqJpH7qNh1NMkUqxpjQT4Peb/OLApgjHc8qRFcGLkHRBdRXJxRIMV+1L1RuVvbwT
73MUCpXkmcZuy4V1NqS4S606VzBua7wkJr3i6xG/Hvo5K0SbqPjEjCMThwIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFGz4eBoruTat7GRTPPwfSlpUQBKrMB8GA1UdIwQY
MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt
ZGE3NTQzMGIxNmY2LzEvYlBoNEdpdTVOcTNzWkZNOF9COUtXbFJBRXFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2
LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBAZbbMAD
BABbbOAwDAMEAlts5AMEAFts7AMEAFts7gMEAFts9gMEAFts/zANBgkqhkiG9w0B
AQsFAAOCAQEAQB1mfERcvpee8yvijfJZzz7DH0gfLILpW8AjymttJl3ixMK7mjlE
aEANaG+NzOx0XKiPTwEOrFIvcgwp0XtUUxJAljJFpkOgnqkWVfDdTq/hC44vFOKZ
8gi4iq9sa82mWf1cDe5ffP9dHmL2gGYU/z1uqQZmMp+Kwk1XeNeTJoBPFpIaO0rU
7+vlxVqzN3r7KMMNJ8ea6WjjXNi2FQUouMcsCWNRkPP7tRYMcJwiulKEPd/EcbIz
Eapn07+Rdgti2Q7MAI9E+rGDclIC4UER18pHHHVQk0wylzkwK4zsVULmR1DslTY/
elNqhxsgrcIr+1HjI9Jz5ZJJc6Z9JDQCyQ==
-----END CERTIFICATE-----
Generated at Wed Jul 22 21:39:08 2026 by rpki-client