Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/22kXg7xf4hDGwOoAw5-fWOWJfAA.roa
File: 22kXg7xf4hDGwOoAw5-fWOWJfAA.roa (raw, json)
Hash identifier: cpOr11AfreVHBfuYQClf+ALOc3Cqd07MrEUHhvuSD7Y=
Subject key identifier: DB:69:17:83:BC:5F:E2:10:C6:C0:EA:00:C3:9F:9F:58:E5:89:7C:00
Certificate issuer: /CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Certificate serial: 019DB3FA1F95618E81F914800630FCFD0AE4
Authority key identifier: 20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/22kXg7xf4hDGwOoAw5-fWOWJfAA.roa
Signing time: Wed 22 Apr 2026 06:56:46 +0000
ROA not before: Wed 22 Apr 2026 06:56:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 91.234.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:fa:1f:95:61:8e:81:f9:14:80:06:30:fc:fd:0a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Validity
Not Before: Apr 22 06:56:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db691783bc5fe210c6c0ea00c39f9f58e5897c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ea:a3:18:25:4a:f9:10:ac:5c:47:df:59:3f:
08:60:fe:6b:fc:80:27:82:f9:63:05:69:3f:59:44:
ed:e8:09:79:d4:fc:6a:91:59:ca:82:39:40:b9:48:
2c:32:a2:69:fd:07:57:82:ec:e7:50:86:09:f8:73:
5d:c9:e6:8c:72:cc:42:ec:be:c7:d0:e8:15:18:f6:
b6:7d:cb:c2:52:49:ef:51:51:8f:44:2a:ec:23:32:
a5:5c:e4:af:42:ab:53:e6:f3:ac:32:e4:71:93:90:
1f:9a:48:06:63:17:5d:fc:36:7c:d8:ef:7a:79:7b:
5a:1c:e8:39:14:43:4a:8a:54:43:14:4c:2d:a0:1a:
0b:7f:4d:54:c4:51:3c:3b:7d:e2:2f:c1:ab:77:ad:
c1:0f:7e:f5:b7:8a:59:b9:9b:68:52:0d:70:f3:57:
de:e8:51:81:5e:ba:34:12:e9:6c:c2:d0:21:60:da:
38:68:81:a7:ff:2c:75:80:6d:87:4f:1e:91:2f:98:
25:f1:e6:74:7a:18:d7:61:43:40:bd:09:75:fe:cc:
5f:8a:6a:44:5d:4e:a4:23:f4:6c:4f:67:e7:35:a7:
fe:3d:1f:c4:63:0c:d1:d1:a6:8f:26:63:b2:ba:ee:
8b:e5:f6:fb:2e:8e:9a:27:14:36:cf:66:f2:d9:bb:
cd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:69:17:83:BC:5F:E2:10:C6:C0:EA:00:C3:9F:9F:58:E5:89:7C:00
X509v3 Authority Key Identifier:
keyid:20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/22kXg7xf4hDGwOoAw5-fWOWJfAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.147.0/24
Signature Algorithm: sha256WithRSAEncryption
59:a3:33:03:d0:c1:ff:7b:13:d2:d2:bd:61:2e:35:69:84:0c:
21:43:9c:02:34:c7:ca:ac:59:6a:42:49:2c:e5:42:50:45:70:
24:ce:05:b7:d7:89:f7:c1:60:4a:0f:6d:42:54:bb:72:23:4f:
2f:1e:bf:16:d4:da:b8:00:74:9a:b2:ce:1a:64:ac:8d:25:66:
1a:08:03:a3:df:7a:43:4a:54:11:1a:b5:b8:d1:93:f2:d4:15:
b7:95:aa:a0:7f:35:84:44:8b:f5:29:58:f3:99:3b:86:18:a6:
25:99:97:e8:28:a9:f2:7d:7b:a3:ce:01:1c:0e:d3:ea:68:4f:
0f:3f:88:02:5f:43:2f:fe:00:33:61:ed:d3:38:12:6a:ad:1d:
c2:ba:ca:b6:51:02:89:04:7e:12:de:9c:6f:10:cf:2c:16:a9:
9b:f8:ca:3b:a9:51:45:12:e1:d8:db:15:14:fe:2b:4d:72:1f:
e4:b6:5c:12:c3:4f:30:3f:db:f1:f2:3a:ab:4e:10:45:85:93:
ed:1c:5a:23:a3:2c:68:fd:07:49:c2:ff:bd:16:3d:25:d9:8c:
de:f0:ea:78:07:63:77:b8:a1:25:e1:19:3e:65:f9:6b:8b:7e:
3a:12:69:99:c4:4f:1b:05:a1:be:43:5d:f6:6e:41:11:eb:a7:
1f:48:83:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 02:40:42 2026 by rpki-client