Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/k2lMS0v-8ZOf1E11BS_9RMujfm8.roa
File: k2lMS0v-8ZOf1E11BS_9RMujfm8.roa (raw, json)
Hash identifier: JibFIlzou9UGAFwxOZbWBeEjMFoRGWPGctFSJs0fRL0=
Subject key identifier: 93:69:4C:4B:4B:FE:F1:93:9F:D4:4D:75:05:2F:FD:44:CB:A3:7E:6F
Certificate issuer: /CN=d019f415fc29cc12fa026ac83d3100f6e2092148
Certificate serial: 019F236851D4D0545DB46AC78BD13CBF89C1
Authority key identifier: D0:19:F4:15:FC:29:CC:12:FA:02:6A:C8:3D:31:00:F6:E2:09:21:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/k2lMS0v-8ZOf1E11BS_9RMujfm8.roa
Signing time: Thu 02 Jul 2026 15:17:46 +0000
ROA not before: Thu 02 Jul 2026 15:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51768
IP address blocks: 91.220.99.0/24 maxlen: 24
185.176.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:51:d4:d0:54:5d:b4:6a:c7:8b:d1:3c:bf:89:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d019f415fc29cc12fa026ac83d3100f6e2092148
Validity
Not Before: Jul 2 15:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93694c4b4bfef1939fd44d75052ffd44cba37e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:d0:ca:89:83:6d:64:17:29:f7:fb:9f:e7:
a3:16:33:a8:f4:28:d0:5b:02:1e:0a:3c:b1:cd:cd:
2c:ed:21:d8:7c:4d:1f:22:ad:53:65:f9:cb:8f:a5:
91:42:c7:67:f0:6d:1d:32:d4:4c:36:2c:8f:03:88:
64:70:c1:b0:04:30:28:92:7d:93:f4:fb:d2:2e:2e:
e4:99:d9:dc:45:eb:6c:8f:ae:d9:61:58:f9:a1:36:
83:a0:59:20:0e:02:09:81:21:d4:35:3e:c9:4c:0f:
dc:e9:96:0a:20:b3:2c:a2:c5:de:7c:2e:bd:29:42:
41:b7:65:b0:7b:97:81:fe:13:50:f2:5b:6f:bf:5b:
54:ea:e0:ba:ef:51:b8:8c:2a:68:51:81:31:fd:bb:
c7:0e:db:5c:1d:0d:e4:88:8a:21:26:a2:5a:9f:3c:
df:e4:52:4a:08:47:35:d2:53:7f:40:76:70:fa:15:
23:b9:93:53:52:7e:62:a2:c5:96:36:dc:cc:e5:04:
1e:a8:de:5e:05:71:5f:d3:8a:90:2a:a9:f9:ac:ae:
34:1c:ab:8a:5d:69:25:8d:7b:b6:dc:ba:78:46:58:
05:ce:83:85:2b:d3:78:62:29:28:bb:02:a6:a4:2f:
c4:09:5d:cc:39:c8:47:2a:d0:71:1f:ca:34:69:4b:
52:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:69:4C:4B:4B:FE:F1:93:9F:D4:4D:75:05:2F:FD:44:CB:A3:7E:6F
X509v3 Authority Key Identifier:
keyid:D0:19:F4:15:FC:29:CC:12:FA:02:6A:C8:3D:31:00:F6:E2:09:21:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/k2lMS0v-8ZOf1E11BS_9RMujfm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.99.0/24
185.176.236.0/22
Signature Algorithm: sha256WithRSAEncryption
72:77:e7:6b:2b:95:a0:75:14:51:05:7b:f9:76:e5:62:bb:35:
bc:5b:26:ee:85:b2:c3:4e:d5:92:e7:bd:58:dc:e8:e6:5c:fd:
97:05:9b:bd:a8:e7:c2:2c:07:3b:c1:ea:d6:71:2f:0f:65:c6:
c1:4f:26:b7:08:9b:04:9e:c7:ed:b3:37:39:39:ca:2f:c5:d3:
81:95:54:07:75:d5:26:c1:a1:d6:f5:b6:fb:fc:9b:50:a2:75:
48:76:b0:22:72:04:df:7b:09:1e:26:2f:2a:3e:ab:6c:94:af:
98:cb:08:c6:bd:3a:de:61:32:2b:b6:94:15:96:46:88:3f:02:
c5:75:dd:7f:3e:97:9b:d4:46:75:c2:a3:d8:81:63:24:82:14:
86:d6:a4:6a:ed:3f:6d:68:7c:56:25:f3:6d:dd:e4:ac:e8:d3:
fb:3b:33:8b:15:1f:dc:20:88:bb:79:77:8f:f3:ac:10:a9:1d:
9f:53:61:dc:54:74:e6:08:5e:86:9f:e2:44:55:27:d4:fa:9b:
a1:61:a4:75:2d:48:cf:20:28:91:33:7e:cc:13:3c:69:97:c4:
7b:b3:86:5b:b2:7c:ee:69:d6:50:04:6d:d6:b3:e6:6b:0d:1a:
d7:0a:31:84:63:f3:20:d5:6c:e5:48:38:7d:25:63:90:7d:2d:
cb:b0:92:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:28 2026 by rpki-client