Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/eFymynVjt6vNLX6dgR8AMKIzfPY.roa
File: eFymynVjt6vNLX6dgR8AMKIzfPY.roa (raw, json)
Hash identifier: HmoMiqC9o5KMCkBBFDS5GyMpNG5AXy7PpIEPOGUNk+k=
Subject key identifier: 78:5C:A6:CA:75:63:B7:AB:CD:2D:7E:9D:81:1F:00:30:A2:33:7C:F6
Certificate issuer: /CN=f503b683d74086443bd44e6d92b71776c5c35170
Certificate serial: 019F2368FC11A0C42A69338CEFFC3A4F2E37
Authority key identifier: F5:03:B6:83:D7:40:86:44:3B:D4:4E:6D:92:B7:17:76:C5:C3:51:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QO2g9dAhkQ71E5tkrcXdsXDUXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/eFymynVjt6vNLX6dgR8AMKIzfPY.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211085
IP address blocks: 91.198.87.0/24 maxlen: 24
2a02:6c20:7::/48 maxlen: 48
2a10:d4c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/9QO2g9dAhkQ71E5tkrcXdsXDUXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/9QO2g9dAhkQ71E5tkrcXdsXDUXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QO2g9dAhkQ71E5tkrcXdsXDUXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fc:11:a0:c4:2a:69:33:8c:ef:fc:3a:4f:2e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f503b683d74086443bd44e6d92b71776c5c35170
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=785ca6ca7563b7abcd2d7e9d811f0030a2337cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:2b:dd:7b:b7:fd:47:30:c7:2c:9f:07:8c:
cf:c7:7f:72:15:c6:2d:9f:48:30:a3:ea:32:15:db:
21:b7:8a:44:6f:5c:a4:6b:45:66:8a:c7:28:46:06:
06:61:bd:db:d6:b9:53:dd:2b:02:62:dd:db:f3:cb:
dd:0d:b0:ee:ba:5e:a3:c7:aa:e0:41:e7:5a:84:85:
01:8a:9b:3d:09:d8:47:22:f2:6f:bb:4e:a7:30:9d:
61:ad:5a:70:42:cb:85:d4:2e:3d:4f:94:01:f4:6c:
ca:c1:1e:90:29:10:19:a8:2c:76:ec:aa:aa:12:ce:
bb:90:18:c5:bd:e9:9d:00:f8:29:e3:69:8c:9b:00:
3d:ac:38:09:0f:e4:5e:02:8e:7d:7a:5d:d4:e4:10:
dc:5a:9d:ed:11:71:36:7f:07:82:1d:5a:db:4c:32:
15:d0:34:65:cf:ee:a1:e8:23:49:1f:7c:41:13:3f:
f9:de:db:6f:29:5d:fc:81:56:94:8e:d8:da:6b:a4:
d1:65:3f:fe:8f:9e:0c:c9:ff:72:88:06:9e:b1:eb:
79:1d:85:ff:66:cc:b6:99:89:b6:9b:e3:1f:35:27:
05:53:b3:bc:64:19:f7:16:02:a5:57:0a:69:06:b2:
a9:7b:84:fd:4c:ff:1b:c4:25:4c:a2:a4:0d:33:34:
69:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5C:A6:CA:75:63:B7:AB:CD:2D:7E:9D:81:1F:00:30:A2:33:7C:F6
X509v3 Authority Key Identifier:
keyid:F5:03:B6:83:D7:40:86:44:3B:D4:4E:6D:92:B7:17:76:C5:C3:51:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QO2g9dAhkQ71E5tkrcXdsXDUXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/eFymynVjt6vNLX6dgR8AMKIzfPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/9QO2g9dAhkQ71E5tkrcXdsXDUXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.87.0/24
IPv6:
2a02:6c20:7::/48
2a10:d4c0::/29
Signature Algorithm: sha256WithRSAEncryption
53:5b:55:d2:48:2f:ef:b3:b2:8f:e2:e3:0b:5b:b7:ab:57:83:
38:66:5d:b7:a3:a0:3f:68:97:86:02:df:5d:bf:90:e4:0b:a2:
48:dd:6b:4a:37:c9:61:52:fb:a1:45:a8:24:b8:d2:c9:01:69:
33:7f:23:da:e3:1b:af:f2:73:ad:b4:a3:8e:42:fc:e6:0a:f4:
d5:35:8d:95:7a:a6:15:59:74:69:ab:be:9f:da:5a:39:ea:d1:
62:aa:77:47:e7:1f:8d:1b:e3:b0:16:1a:15:e6:39:5b:5f:7b:
8d:a8:1f:70:1a:ac:db:38:3d:66:5d:aa:db:b3:5b:d9:d1:8a:
69:6c:7d:7f:24:b4:1f:5e:fe:d0:ce:88:26:bd:47:88:4d:cb:
ed:f1:f0:72:8e:35:0a:9c:55:82:7c:dd:00:e0:01:cf:44:bc:
e5:b0:8c:8b:65:87:3b:00:42:db:ab:27:31:ed:19:cd:4b:31:
6a:96:4b:a1:23:4a:a3:8f:b7:4e:13:be:fe:37:14:6a:57:71:
45:17:f5:72:ae:ce:d4:d5:74:a3:e0:f9:e1:8f:57:73:00:09:
0d:05:cd:e2:54:a0:2d:84:ec:e7:c3:b3:8f:c2:9c:e0:32:84:
64:6b:c6:10:46:04:10:d0:4d:68:a1:e7:c5:b4:27:ff:af:57:
86:9b:e0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:49 2026 by rpki-client