Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/AcP7JE9k0_Nz5fFv3kJCDQhlgm4.roa
File: AcP7JE9k0_Nz5fFv3kJCDQhlgm4.roa (raw, json)
Hash identifier: /xkgYNVDBtLC88fxRmIeqBVLBwwlx87rKcoHwgUu3dI=
Subject key identifier: 01:C3:FB:24:4F:64:D3:F3:73:E5:F1:6F:DE:42:42:0D:08:65:82:6E
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 019EE1C4C02A1DC4DC7CE8FBFDA7CDB27721
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/AcP7JE9k0_Nz5fFv3kJCDQhlgm4.roa
Signing time: Fri 19 Jun 2026 21:23:48 +0000
ROA not before: Fri 19 Jun 2026 21:23:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62257
IP address blocks: 91.243.119.0/24 maxlen: 24
185.105.238.0/24 maxlen: 24
194.36.172.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e1:c4:c0:2a:1d:c4:dc:7c:e8:fb:fd:a7:cd:b2:77:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Jun 19 21:23:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01c3fb244f64d3f373e5f16fde42420d0865826e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3b:c9:40:20:69:64:2d:3d:bb:3f:60:5a:40:
16:38:a7:fc:61:e0:75:ea:1d:9b:9a:4f:f1:56:b1:
4d:de:9a:c0:9e:03:d6:25:87:bc:4e:84:be:d3:fd:
3b:12:07:d4:dc:22:cf:57:63:73:ef:51:a9:67:cc:
c0:06:f9:ce:b1:2a:0b:15:29:fc:cc:37:10:47:38:
28:f8:dd:eb:3c:89:1e:a8:10:bd:40:f3:fd:f7:7f:
48:dd:b8:cf:c6:a7:4a:a5:fc:7e:b0:2a:70:74:c5:
45:37:02:1a:3f:4f:a5:6d:bd:92:f0:f2:10:5f:2b:
17:72:14:19:58:df:40:57:08:82:4d:9b:49:0e:cb:
0f:8d:c2:94:90:0d:7b:df:dc:38:a7:0e:30:df:16:
2f:58:f9:39:f8:95:03:8f:33:c3:53:64:e3:df:66:
30:c2:4a:cb:4a:3b:41:2b:fd:fe:21:73:8b:06:e0:
9d:b3:0e:75:87:62:f0:a5:00:7f:05:c9:8d:5c:b5:
b4:0f:d9:73:99:e7:90:0f:4c:58:70:8f:16:aa:b6:
33:eb:d4:00:67:70:b0:9d:c4:2c:af:b4:17:b2:43:
a7:e1:08:77:14:40:bb:7a:a2:51:8c:b1:77:3f:77:
27:f8:50:88:91:31:fc:ee:a4:4e:65:43:82:34:65:
76:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C3:FB:24:4F:64:D3:F3:73:E5:F1:6F:DE:42:42:0D:08:65:82:6E
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/AcP7JE9k0_Nz5fFv3kJCDQhlgm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.119.0/24
185.105.238.0/24
194.36.172.0/23
Signature Algorithm: sha256WithRSAEncryption
88:88:68:5a:2a:98:ed:37:2a:ab:92:65:93:61:b8:f6:14:4c:
2b:4b:f6:cd:3e:61:6a:b5:ef:11:c6:34:78:6a:96:59:01:a6:
de:88:5d:8b:6f:44:ea:11:13:7d:ef:1a:66:05:58:ff:89:1c:
e6:44:0c:8c:d8:db:f8:cb:ea:e7:f6:74:70:d2:e9:68:2a:2b:
6b:f3:0e:f0:c1:2c:cc:d6:da:7d:c8:26:5d:0d:7d:80:ab:ce:
9f:d1:77:41:43:a2:ce:ed:60:14:be:2d:a5:03:57:6b:82:9d:
a9:7b:39:35:bd:67:ff:fa:52:a8:bc:3c:49:6f:1d:c2:4a:33:
38:1e:87:98:18:38:dc:7b:29:ae:28:9e:09:41:44:b8:d8:20:
21:df:1b:2b:8c:b1:c7:bb:77:6a:f6:b5:f6:84:e5:d2:86:59:
5c:d5:c8:07:62:fe:35:df:a7:b0:38:c0:3e:8d:66:32:72:87:
f3:86:7b:70:14:2c:d7:f1:92:c6:bf:13:1f:fd:e7:a6:00:cb:
5b:8b:85:93:a1:73:cf:ea:a6:49:08:37:3c:42:c5:d8:05:14:
10:05:60:49:06:05:17:23:2f:3a:93:b5:05:32:ba:59:15:89:
f3:6f:a3:a8:27:39:8a:57:5d:f7:82:ab:e7:44:e3:85:a1:2a:
42:f1:25:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:01 2026 by rpki-client