Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/76ad5a-d1fc-4c81-961e-9264012007ec/1/i0dMF6hWb7__VnBcM6Bfw7TU4-k.roa
File: i0dMF6hWb7__VnBcM6Bfw7TU4-k.roa (raw, json)
Hash identifier: 7Lcxrz3pL4KuVuQq2l9Onm5o6EFQx/C3rYCwWpNzwMM=
Subject key identifier: 8B:47:4C:17:A8:56:6F:BF:FF:56:70:5C:33:A0:5F:C3:B4:D4:E3:E9
Certificate issuer: /CN=f3bfb88678d5888ec79ed4e0d7d8e89650670201
Certificate serial: 019DD413047878A340E4A4EBF3272F4F07D4
Authority key identifier: F3:BF:B8:86:78:D5:88:8E:C7:9E:D4:E0:D7:D8:E8:96:50:67:02:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87-4hnjViI7HntTg19jollBnAgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/76ad5a-d1fc-4c81-961e-9264012007ec/1/i0dMF6hWb7__VnBcM6Bfw7TU4-k.roa
Signing time: Tue 28 Apr 2026 12:31:49 +0000
ROA not before: Tue 28 Apr 2026 12:31:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 185.91.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/76ad5a-d1fc-4c81-961e-9264012007ec/1/87-4hnjViI7HntTg19jollBnAgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/76ad5a-d1fc-4c81-961e-9264012007ec/1/87-4hnjViI7HntTg19jollBnAgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/87-4hnjViI7HntTg19jollBnAgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:13:04:78:78:a3:40:e4:a4:eb:f3:27:2f:4f:07:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bfb88678d5888ec79ed4e0d7d8e89650670201
Validity
Not Before: Apr 28 12:31:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b474c17a8566fbfff56705c33a05fc3b4d4e3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:70:75:a3:80:7a:a4:e3:5b:00:3c:5c:fe:
b4:a9:d0:54:f4:cb:f8:1a:5f:45:86:74:ff:1c:d2:
e0:f4:98:04:0b:33:08:aa:2d:b0:f8:b9:d7:11:d8:
42:d6:57:b8:7d:36:a6:12:32:81:04:ae:33:67:67:
34:fb:08:21:78:b9:97:84:cf:0c:fe:52:e7:3d:02:
63:25:a4:4c:01:1e:0b:31:ae:15:9c:89:fb:e8:44:
f6:14:4f:58:3a:c2:59:5d:be:0e:c6:e4:b3:6c:41:
60:7e:9c:0d:f2:92:9c:3b:4d:b8:fa:41:0f:c7:75:
25:4c:54:40:b5:f5:0b:49:90:ae:95:1f:1a:21:61:
db:ca:97:bb:24:88:94:8b:8a:4b:c8:8f:87:40:49:
62:82:95:d5:80:1a:9b:56:87:84:0a:c0:da:65:08:
57:a8:1c:3f:c1:80:98:e0:3a:9e:17:fb:0b:f1:7f:
7c:f7:9d:cf:a7:14:71:6d:f6:8a:f3:f1:2f:e5:c8:
7f:e6:20:7a:9d:93:23:73:e0:bd:46:af:ec:f7:e0:
c0:96:8b:f4:38:d5:fb:fa:9b:fe:26:84:ca:0a:89:
a8:8b:cd:22:bc:b1:fa:86:e7:ab:53:3b:3a:17:97:
5f:8d:5b:1d:8a:52:5f:bd:83:08:88:87:26:71:73:
92:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:47:4C:17:A8:56:6F:BF:FF:56:70:5C:33:A0:5F:C3:B4:D4:E3:E9
X509v3 Authority Key Identifier:
keyid:F3:BF:B8:86:78:D5:88:8E:C7:9E:D4:E0:D7:D8:E8:96:50:67:02:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87-4hnjViI7HntTg19jollBnAgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/76ad5a-d1fc-4c81-961e-9264012007ec/1/i0dMF6hWb7__VnBcM6Bfw7TU4-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/76ad5a-d1fc-4c81-961e-9264012007ec/1/87-4hnjViI7HntTg19jollBnAgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.114.0/24
Signature Algorithm: sha256WithRSAEncryption
60:d9:65:37:a3:a0:7f:91:c8:81:f2:e3:36:2a:36:b7:da:40:
f7:41:78:6d:f5:31:2c:0e:e6:41:c5:4e:1a:4c:f9:f7:f2:d7:
9e:55:e9:4b:b6:99:54:89:36:0e:84:3c:86:cc:3f:29:9c:40:
a0:74:24:40:42:08:0b:5c:37:0a:ca:09:5b:81:57:0d:3b:0d:
c7:bb:a6:76:c0:93:6c:7f:0c:b9:8a:65:c9:59:27:c6:19:08:
89:a9:ac:c7:5f:1e:6c:61:59:2c:94:91:c0:71:c5:1f:6c:62:
82:de:59:e3:13:aa:cd:71:ed:78:1f:40:cb:19:6a:a7:60:42:
de:d4:ae:09:ad:16:27:3f:80:9c:13:0d:d6:8b:07:78:b9:de:
2d:5d:84:01:4d:11:15:5c:3c:5f:bc:45:07:e9:1c:52:c8:51:
c8:0e:55:2b:27:44:3a:41:d0:c9:10:7e:32:cc:27:24:25:8e:
35:bd:d7:de:b3:c3:4b:69:b5:14:1b:03:65:37:1b:4b:49:6e:
30:a5:d8:42:98:a3:36:7c:8b:49:71:7a:7a:65:fd:b7:9c:99:
88:d1:ef:0c:97:85:da:ee:c2:30:8c:da:8a:e7:37:43:e1:8d:
95:09:e3:cf:6f:c9:16:b9:0c:98:b8:45:be:53:6a:44:63:00:
ba:d4:be:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3UEwR4eKNA5KTr8ycvTwfUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYmZiODg2NzhkNTg4OGVjNzllZDRlMGQ3ZDhlODk2NTA2
NzAyMDEwHhcNMjYwNDI4MTIzMTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjQ3NGMxN2E4NTY2ZmJmZmY1NjcwNWMzM2EwNWZjM2I0ZDRlM2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwxwdaOAeqTjWwA8XP60qdBU9Mv4
Gl9FhnT/HNLg9JgECzMIqi2w+LnXEdhC1le4fTamEjKBBK4zZ2c0+wgheLmXhM8M
/lLnPQJjJaRMAR4LMa4VnIn76ET2FE9YOsJZXb4OxuSzbEFgfpwN8pKcO024+kEP
x3UlTFRAtfULSZCulR8aIWHbype7JIiUi4pLyI+HQEligpXVgBqbVoeECsDaZQhX
qBw/wYCY4DqeF/sL8X98953PpxRxbfaK8/Ev5ch/5iB6nZMjc+C9Rq/s9+DAlov0
ONX7+pv+JoTKComoi80ivLH6huerUzs6F5dfjVsdilJfvYMIiIcmcXOSmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFItHTBeoVm+//1ZwXDOgX8O01OPpMB8GA1UdIwQY
MBaAFPO/uIZ41YiOx57U4NfY6JZQZwIBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODctNGhualZpSTdIbnRUZzE5am9sbEJuQWdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi83NmFkNWEtZDFmYy00YzgxLTk2MWUt
OTI2NDAxMjAwN2VjLzEvaTBkTUY2aFdiN19fVm5CY002QmZ3N1RVNC1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi83NmFkNWEtZDFmYy00YzgxLTk2MWUtOTI2NDAxMjAwN2Vj
LzEvODctNGhualZpSTdIbnRUZzE5am9sbEJuQWdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVtyMA0G
CSqGSIb3DQEBCwUAA4IBAQBg2WU3o6B/kciB8uM2Kja32kD3QXht9TEsDuZBxU4a
TPn38teeVelLtplUiTYOhDyGzD8pnECgdCRAQggLXDcKyglbgVcNOw3Hu6Z2wJNs
fwy5imXJWSfGGQiJqazHXx5sYVkslJHAccUfbGKC3lnjE6rNce14H0DLGWqnYELe
1K4JrRYnP4CcEw3Wiwd4ud4tXYQBTREVXDxfvEUH6RxSyFHIDlUrJ0Q6QdDJEH4y
zCckJY41vdfes8NLabUUGwNlNxtLSW4wpdhCmKM2fItJcXp6Zf23nJmI0e8Ml4Xa
7sIwjNqK5zdD4Y2VCePPb8kWuQyYuEW+U2pEYwC61L4D
-----END CERTIFICATE-----
Generated at Tue May 5 23:15:49 2026 by rpki-client