Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/tBJ6g2XuB0MmvtUrV3mMYaonUfs.roa
File: tBJ6g2XuB0MmvtUrV3mMYaonUfs.roa (raw, json)
Hash identifier: jt5pW5SGqOIlEHsV/lDRSmGfV+5btvSi3I+Lq6T23f0=
Subject key identifier: B4:12:7A:83:65:EE:07:43:26:BE:D5:2B:57:79:8C:61:AA:27:51:FB
Certificate issuer: /CN=d019f415fc29cc12fa026ac83d3100f6e2092148
Certificate serial: 019F23684FB7F9FAE63879878E75301069F5
Authority key identifier: D0:19:F4:15:FC:29:CC:12:FA:02:6A:C8:3D:31:00:F6:E2:09:21:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/tBJ6g2XuB0MmvtUrV3mMYaonUfs.roa
Signing time: Thu 02 Jul 2026 15:17:46 +0000
ROA not before: Thu 02 Jul 2026 15:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3303
IP address blocks: 91.220.99.0/24 maxlen: 24
185.176.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4f:b7:f9:fa:e6:38:79:87:8e:75:30:10:69:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d019f415fc29cc12fa026ac83d3100f6e2092148
Validity
Not Before: Jul 2 15:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4127a8365ee074326bed52b57798c61aa2751fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:79:c6:25:64:71:e6:a2:ce:e7:7a:cd:3c:4c:
39:93:ee:d5:d8:27:8d:78:d3:d5:7c:3c:90:a0:15:
c2:36:e4:4a:36:da:a6:70:39:c4:d8:42:d7:ba:c6:
fe:a1:7d:74:d0:77:5d:0b:ab:c6:3c:b0:9d:59:01:
e4:25:4e:1b:d0:51:03:09:b4:f5:1f:1d:ee:a2:93:
e2:75:e3:b2:1a:6c:70:6c:d7:a2:9f:74:3f:84:95:
7b:38:b1:c6:06:24:42:f6:f7:d7:12:3f:4c:1a:62:
08:e2:81:31:62:eb:eb:6a:8a:c8:c6:f6:20:9e:28:
5f:6f:38:f0:3a:ab:25:22:ee:c5:5b:41:c4:1d:7b:
63:c0:b5:9f:1d:62:22:a1:20:f2:af:50:9b:37:bc:
78:6e:85:4b:25:89:9b:72:83:c9:28:2c:ca:14:8e:
99:b1:14:50:c4:83:70:f2:5a:b6:61:47:1c:9f:cd:
27:30:7d:4e:6c:bf:df:1d:91:5b:3d:1c:df:11:7e:
14:2d:73:84:a6:86:7d:b8:01:57:57:8e:61:be:5b:
e0:ba:2f:bc:e5:44:b4:26:4b:6a:81:0d:ae:37:84:
85:85:9c:21:7d:67:71:70:1c:30:2c:15:fa:5d:94:
5e:a3:81:df:4c:41:a7:89:c2:76:f1:8b:e4:a2:ed:
84:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:12:7A:83:65:EE:07:43:26:BE:D5:2B:57:79:8C:61:AA:27:51:FB
X509v3 Authority Key Identifier:
keyid:D0:19:F4:15:FC:29:CC:12:FA:02:6A:C8:3D:31:00:F6:E2:09:21:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/tBJ6g2XuB0MmvtUrV3mMYaonUfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/0Bn0FfwpzBL6AmrIPTEA9uIJIUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.99.0/24
185.176.236.0/22
Signature Algorithm: sha256WithRSAEncryption
57:42:d0:29:71:f1:0e:92:78:06:59:7a:74:72:e1:79:8f:a1:
db:0d:55:49:dd:33:13:62:59:e3:29:5b:d2:ed:33:f1:e4:73:
a1:29:84:a7:73:43:d7:65:9c:ff:e0:09:02:93:19:e8:d8:35:
1d:4d:03:f5:f2:4a:4e:74:1a:a9:28:13:aa:ad:b7:a6:63:10:
bb:a1:2d:17:11:93:56:1b:4a:b7:ac:d3:1b:6f:32:7d:c4:a8:
d1:d7:28:ca:e7:06:ad:3e:26:d3:28:5c:3b:28:1e:69:c3:4b:
db:da:92:7f:c8:e5:c5:6c:f7:be:6b:fe:9e:7f:fb:49:c0:bb:
77:98:05:08:c1:10:93:ee:b7:62:40:fb:35:38:c6:91:a7:06:
6c:aa:f9:15:de:39:e7:bb:c2:53:fc:60:9d:58:bc:54:dd:f6:
85:5d:58:c1:a0:a5:05:94:d5:5d:03:8c:42:82:72:97:76:04:
f5:98:6e:92:90:b0:e6:3a:26:f0:e3:55:89:74:ea:d2:41:19:
4f:55:0b:8f:27:2a:5b:d4:f4:7d:ab:5e:c7:cd:7b:af:98:2e:
60:9a:4f:e3:14:96:1b:b9:16:d9:b9:2f:71:7b:bb:8d:49:cf:
b2:cb:3d:ad:20:e8:ea:7b:f6:90:e0:7b:f2:c0:43:94:ab:42:
83:75:73:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:32 2026 by rpki-client