Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/pvc-B_3QixFPowWlmBysdManies.roa
File: pvc-B_3QixFPowWlmBysdManies.roa (raw, json)
Hash identifier: smzWblNFTzaELYi0qGSnhdt1o2cjyEz4ffgvHQy8gQY=
Subject key identifier: A6:F7:3E:07:FD:D0:8B:11:4F:A3:05:A5:98:1C:AC:74:C6:A7:89:EB
Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial: 019F4227F8F2EB13384B546204C371F4944F
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/pvc-B_3QixFPowWlmBysdManies.roa
Signing time: Wed 08 Jul 2026 14:35:43 +0000
ROA not before: Wed 08 Jul 2026 14:35:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48729
IP address blocks: 77.91.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:27:f8:f2:eb:13:38:4b:54:62:04:c3:71:f4:94:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Validity
Not Before: Jul 8 14:35:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6f73e07fdd08b114fa305a5981cac74c6a789eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0c:88:cd:0c:f3:e3:e9:61:ba:e1:6b:01:2b:
36:a7:05:6c:0c:a1:cd:ca:3f:55:2f:b8:9a:64:01:
40:5e:33:98:e0:8c:ff:e6:75:9a:f2:eb:fe:10:27:
10:86:b1:3a:a0:d4:d7:c3:67:87:21:21:c9:d0:8a:
a9:59:44:64:67:55:bd:f1:81:1e:8a:a2:98:60:b9:
13:87:e1:40:26:08:16:3e:d8:ff:4e:8c:99:35:c3:
70:e6:fc:71:c0:78:7a:f1:b0:19:e1:48:73:56:c4:
5f:e8:63:1d:f1:83:9a:7b:55:ac:8b:9a:3c:52:09:
67:e8:5d:97:11:0b:f5:4c:f5:e9:38:79:52:61:ae:
25:c2:a3:cf:12:e4:59:48:18:35:b9:66:19:9b:e5:
59:71:a6:2a:20:92:69:bc:5b:b1:ab:30:10:a1:f0:
28:3b:cf:7d:b9:08:1d:03:b6:4f:b5:ec:50:8b:b6:
e7:7b:a3:76:a4:1a:60:d0:d6:30:92:7a:c9:cf:80:
87:fb:df:49:26:6c:06:af:61:a4:ed:91:81:7a:ef:
d5:9e:c2:a2:8d:fb:20:15:67:fa:96:98:7e:6e:80:
3e:37:0e:ed:e0:6e:8f:36:4b:97:5b:80:e9:9d:19:
a8:67:94:58:ee:aa:18:97:62:e8:4e:4d:40:c6:1a:
82:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F7:3E:07:FD:D0:8B:11:4F:A3:05:A5:98:1C:AC:74:C6:A7:89:EB
X509v3 Authority Key Identifier:
keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/pvc-B_3QixFPowWlmBysdManies.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.91.0/24
Signature Algorithm: sha256WithRSAEncryption
88:4d:b9:47:5b:a8:b1:a3:80:8b:35:88:5b:38:66:9e:b2:e9:
70:df:07:04:33:d4:12:dc:b7:14:78:68:d0:ae:66:f2:3b:fb:
b4:cf:f4:64:0e:34:be:9b:1d:75:49:e7:91:e3:50:d2:81:a2:
09:b9:47:99:c7:6e:fc:d5:f6:98:c6:04:3a:bd:9c:95:3c:39:
18:a7:62:a9:ed:dd:82:40:0e:b6:4d:df:08:ba:d3:ec:8e:f9:
a6:47:2b:5b:f3:70:51:ac:28:56:95:fc:fe:3a:cf:fe:af:92:
a1:6a:59:06:67:fa:c4:c4:6d:6a:d8:03:c3:96:2f:f2:20:6a:
1f:08:2f:60:bc:5a:df:eb:48:f7:e7:61:7e:6a:46:db:aa:0e:
51:17:eb:5e:15:6b:e6:77:03:55:f3:94:24:7b:72:c1:ba:0f:
a8:88:c1:b8:91:04:91:3d:99:8c:a9:52:c8:61:10:9a:5b:27:
7d:3e:c7:1d:64:be:66:c8:1e:ec:73:f7:ed:20:ca:ba:6c:8d:
a6:f7:a1:3a:55:b7:1b:fb:ed:b3:3a:cd:9a:a8:52:1e:09:c5:
42:41:ea:5b:21:87:4e:a9:30:ac:07:64:95:9e:22:5f:d6:41:
f4:b4:92:2a:a0:9a:8d:fe:fa:a9:2c:08:fb:1d:9b:38:a5:23:
e7:a6:1a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:34 2026 by rpki-client