Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/npKzb3PFUxX4Bw57jliQikbaLcw.roa
File: npKzb3PFUxX4Bw57jliQikbaLcw.roa (raw, json)
Hash identifier: M9IdE7WGGhfZFQSXJAA+dif3VflTqRbAIN9CrkGm2Uw=
Subject key identifier: 9E:92:B3:6F:73:C5:53:15:F8:07:0E:7B:8E:58:90:8A:46:DA:2D:CC
Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial: 019EE4E317B90CC0F55F9AE8F3FBA5F4028F
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/npKzb3PFUxX4Bw57jliQikbaLcw.roa
Signing time: Sat 20 Jun 2026 11:55:48 +0000
ROA not before: Sat 20 Jun 2026 11:55:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214697
IP address blocks: 77.91.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e4:e3:17:b9:0c:c0:f5:5f:9a:e8:f3:fb:a5:f4:02:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Validity
Not Before: Jun 20 11:55:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e92b36f73c55315f8070e7b8e58908a46da2dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4f:21:21:18:e3:6f:a4:eb:1c:e1:c0:66:1f:
43:7a:e7:3e:87:7d:de:c2:a0:77:7c:b3:f7:c9:99:
e8:4c:8c:2d:8b:df:3e:3f:4d:bf:32:6c:f0:52:29:
de:60:86:5f:42:7c:33:30:da:b6:36:0b:fb:c5:16:
59:5f:33:8a:e9:ad:8e:16:ea:fd:d0:cb:70:33:d4:
b3:78:66:6f:e4:c8:1f:1d:97:d7:11:94:55:b8:fd:
1b:b8:fe:02:18:61:6e:05:76:93:c5:15:2c:7f:0d:
e5:a3:c4:59:d9:3e:cb:55:ca:cb:85:6e:5f:1b:3c:
bb:47:df:b7:79:1d:2f:9b:31:15:70:82:23:dc:7c:
0b:e5:4c:b0:d9:a8:5f:a8:54:13:49:96:95:57:9f:
c5:92:43:f3:9b:56:3e:c0:13:21:3e:05:86:fc:88:
a8:ce:22:d1:6c:83:11:18:68:75:54:9c:d2:02:9b:
37:2c:ca:b9:a5:dd:b1:34:c3:e6:98:98:04:89:fb:
be:94:a0:5e:21:09:0a:78:25:49:3c:1b:70:e4:c0:
0a:21:e1:97:c5:8a:4e:5a:cf:be:fa:c5:8b:10:1f:
06:69:81:1d:9c:d9:94:85:46:8d:97:e6:ea:e8:31:
e7:0d:3d:81:6a:98:51:b4:c7:29:77:ee:74:6d:be:
17:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:92:B3:6F:73:C5:53:15:F8:07:0E:7B:8E:58:90:8A:46:DA:2D:CC
X509v3 Authority Key Identifier:
keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/npKzb3PFUxX4Bw57jliQikbaLcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.88.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:86:28:12:65:cc:b7:95:a4:80:45:71:2f:16:dd:43:da:32:
08:17:3c:05:7b:bc:7c:8c:0f:ba:f8:16:c0:41:de:a2:eb:c7:
27:2e:28:e9:54:dc:78:7e:4a:82:c4:26:c2:78:5c:92:30:ec:
2f:73:f5:e4:94:7c:ea:88:1d:63:62:ba:40:85:09:74:ab:4c:
49:65:a8:e9:4e:18:38:18:4d:4a:2d:56:66:45:3e:37:1d:6d:
f3:17:dd:fc:65:2b:ad:e2:08:f5:6b:3f:b4:11:e2:f7:56:7f:
8c:98:8c:c1:40:62:62:1a:75:97:6c:cb:29:d7:ec:b0:31:89:
b7:f0:bf:1b:6a:36:58:8a:07:1d:b6:1a:ec:c3:9b:3f:0f:e5:
a1:3b:b8:41:df:c5:f5:74:e9:bd:06:eb:b4:12:6d:4c:2d:39:
b7:69:ea:e8:af:1c:e0:7b:56:aa:60:ad:3f:be:ad:14:e3:9b:
59:2e:d7:a5:f9:f8:f8:b5:aa:50:a7:a6:0f:f0:ef:27:3c:1d:
9c:a5:78:56:d7:52:a3:8e:f7:50:ff:47:55:a3:4b:4e:ef:71:
07:ef:91:b4:8e:b8:80:6e:8d:db:89:be:66:65:c8:62:f0:f2:
d0:94:c6:80:66:2b:04:c5:90:50:2c:ab:2a:b9:48:99:70:d3:
70:dc:e3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:27 2026 by rpki-client