Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/ofbntN5B2PaQ2qY_-I_tLGYYjhg.roa
File: ofbntN5B2PaQ2qY_-I_tLGYYjhg.roa (raw, json)
Hash identifier: H4gD4m9vsqK2ECIn6QzYNPIe9nKZuWgiHiBZseyCf0E=
Subject key identifier: A1:F6:E7:B4:DE:41:D8:F6:90:DA:A6:3F:F8:8F:ED:2C:66:18:8E:18
Certificate issuer: /CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Certificate serial: 019CFCDEDBBE2C56EEC0923A21C93FA62B8B
Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/ofbntN5B2PaQ2qY_-I_tLGYYjhg.roa
Signing time: Tue 17 Mar 2026 17:36:29 +0000
ROA not before: Tue 17 Mar 2026 17:36:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213466
IP address blocks: 91.135.176.0/24 maxlen: 24
91.135.177.0/24 maxlen: 24
91.135.182.0/23 maxlen: 23
91.135.182.0/24 maxlen: 24
91.135.183.0/24 maxlen: 24
91.135.188.0/24 maxlen: 24
91.135.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fc:de:db:be:2c:56:ee:c0:92:3a:21:c9:3f:a6:2b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Validity
Not Before: Mar 17 17:36:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1f6e7b4de41d8f690daa63ff88fed2c66188e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c1:4b:27:bf:09:4a:06:0e:c6:96:50:6b:bc:
5c:b2:bb:eb:ed:dd:bf:bd:57:ac:34:32:bf:86:7b:
60:52:ce:63:2f:e7:e7:45:fe:4e:43:25:aa:38:19:
4a:53:62:c5:f4:2b:dc:74:c3:b6:89:0d:9b:e5:af:
2e:74:3d:b9:f5:ef:0b:a3:5a:9d:17:bf:5f:4a:1f:
4a:47:e3:74:7c:91:53:f9:f9:98:0a:e2:82:c2:0d:
bf:9f:cb:cf:56:66:34:17:40:52:00:f0:f1:8e:90:
ce:3e:1d:35:bf:48:cd:fa:5f:20:ea:41:4a:bb:58:
ce:1a:14:36:40:17:8c:da:43:71:1b:a0:72:e7:0d:
58:dc:62:b6:c3:e3:c4:57:da:14:46:ac:5f:60:07:
ba:03:9e:a3:a6:90:20:d2:2d:55:af:dd:48:4b:85:
97:67:0d:66:d9:15:98:f0:61:8e:df:7d:00:be:ce:
b0:45:1b:4c:7a:04:18:fa:b0:89:ec:53:45:2e:36:
60:ae:89:2e:66:43:07:d6:35:e3:3a:38:9b:60:83:
84:33:a2:61:43:93:e3:a8:f7:0c:32:0f:fb:62:84:
4a:7a:0c:c4:0f:b1:ec:cf:5d:07:cb:3c:82:03:59:
f2:c8:95:7a:0c:1c:32:af:fe:06:ae:35:0d:63:35:
78:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F6:E7:B4:DE:41:D8:F6:90:DA:A6:3F:F8:8F:ED:2C:66:18:8E:18
X509v3 Authority Key Identifier:
keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/ofbntN5B2PaQ2qY_-I_tLGYYjhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.135.176.0/23
91.135.182.0/23
91.135.188.0/23
Signature Algorithm: sha256WithRSAEncryption
30:69:3a:39:4c:19:9c:3c:e5:69:73:be:61:cf:7e:c7:eb:90:
3a:1a:e2:65:e4:68:c0:cc:7c:31:9c:09:ff:ef:36:c8:ae:7d:
f6:a4:65:81:b6:5a:cf:7a:8c:2f:d3:36:82:8f:c3:f3:dc:98:
bf:61:3f:40:07:1c:de:9c:5d:6a:ff:27:c8:71:c3:ff:25:c0:
c6:82:0b:10:10:3e:f3:c2:4a:4b:c7:93:5a:d2:85:12:9e:ad:
b1:29:47:a2:d1:26:a8:f4:c5:c8:59:63:7e:2c:b1:c4:cc:ef:
ad:e6:6f:94:2e:57:67:76:40:4e:0a:e1:b5:63:4e:39:52:90:
52:0b:21:7a:b0:0c:13:08:9a:d4:3c:56:4f:b7:e5:c1:b9:6a:
c5:38:ff:23:ba:2c:12:f0:ff:73:b0:47:84:d7:43:f2:98:83:
87:aa:c7:87:cd:42:e2:ac:2e:2f:a6:f0:c2:61:1e:a8:de:dd:
46:ad:16:b3:96:3b:62:f7:ef:0f:f3:9f:3c:5c:a9:fb:de:06:
7b:92:32:b2:d8:56:f5:b8:0e:46:09:2e:7c:41:d3:ea:77:c0:
d6:6c:1b:54:78:42:5d:d3:96:1f:88:20:a3:fc:01:f1:3c:5d:
cf:eb:c7:d1:28:20:0b:11:cc:b4:e6:cd:b3:2a:54:3a:5e:dc:
a4:41:60:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:03:39 2026 by rpki-client