Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/_rBqzPfjRDsJ7EEWItYo-yE9cKM.roa
File: _rBqzPfjRDsJ7EEWItYo-yE9cKM.roa (raw, json)
Hash identifier: x3wKcrHHQjcKLemAztYhsd24sb3DtvRDQ56NuxQjYpk=
Subject key identifier: FE:B0:6A:CC:F7:E3:44:3B:09:EC:41:16:22:D6:28:FB:21:3D:70:A3
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 019EE5023907B4CAF44CFE74EEA9A3A8E092
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/_rBqzPfjRDsJ7EEWItYo-yE9cKM.roa
Signing time: Sat 20 Jun 2026 12:29:48 +0000
ROA not before: Sat 20 Jun 2026 12:29:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49418
IP address blocks: 77.91.72.0/24 maxlen: 24
91.209.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e5:02:39:07:b4:ca:f4:4c:fe:74:ee:a9:a3:a8:e0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Jun 20 12:29:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=feb06accf7e3443b09ec411622d628fb213d70a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:78:1f:5c:94:32:75:35:56:0a:74:f4:e6:ff:
82:41:11:9b:0b:9c:ea:a9:cf:da:80:a8:25:10:ea:
1a:9d:41:0c:df:ee:f4:f0:b0:25:c8:a4:27:a1:ea:
d2:bf:45:44:0b:9a:53:35:60:9d:b6:50:6a:24:51:
22:71:6c:b0:ec:3f:01:0c:17:62:15:49:b0:b0:21:
55:58:42:c0:c1:d6:fe:0a:32:f8:8f:6a:fe:cf:f6:
ec:45:8a:a9:d5:b5:75:b6:16:39:ae:44:ba:30:c0:
0d:b6:ba:5e:6b:1d:05:06:10:5a:35:57:1f:f1:ef:
a3:c1:01:5e:63:46:a5:cb:5d:d5:2f:f7:f1:4d:c3:
19:e9:68:7f:c6:f5:13:a1:03:ff:8f:09:46:8a:0e:
70:d6:35:fc:5c:53:ae:06:0b:21:aa:02:15:ed:42:
47:24:d0:7b:bb:8f:ee:e5:b4:3c:85:37:7a:ac:0b:
77:0d:21:df:53:0a:ed:58:7b:92:28:e3:f6:b2:39:
95:9d:f9:d3:1e:75:b2:b3:6d:9f:22:9e:d7:85:b1:
52:14:05:1e:3f:9a:b4:49:2d:c1:75:d3:c7:4d:43:
f4:f2:3c:53:27:0e:d5:6e:c9:c3:39:8d:59:a9:bb:
09:e1:04:44:18:e0:86:77:a2:d4:06:df:2b:1b:5d:
24:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B0:6A:CC:F7:E3:44:3B:09:EC:41:16:22:D6:28:FB:21:3D:70:A3
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/_rBqzPfjRDsJ7EEWItYo-yE9cKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.72.0/24
91.209.135.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:a6:1c:4c:f4:6a:8c:58:c6:9d:b5:59:7c:7d:e8:e2:8f:29:
99:ca:83:d4:7a:8b:84:ab:6c:15:5c:96:f5:d7:18:8b:f2:90:
18:6c:d4:3f:f2:a3:6c:d4:8c:5a:9e:36:01:18:f8:ba:c5:1f:
1d:ac:1e:bd:40:68:74:ab:bd:67:bc:b0:b0:79:de:77:60:4f:
e0:05:27:ca:c1:d7:90:b1:66:16:bf:ce:93:f3:e7:bd:52:f8:
08:24:a6:d5:fe:09:a8:71:b8:b9:44:92:6f:bd:7c:79:ab:eb:
a4:1b:e3:c4:04:25:ae:6d:00:75:7f:b1:c4:64:7e:25:7a:96:
dd:5a:76:be:00:54:b8:35:f4:1e:b1:74:00:32:80:36:33:13:
ee:b6:c4:03:a2:bf:04:85:f9:be:fe:51:3a:d3:bf:32:31:1b:
1c:e1:50:c7:33:6d:60:49:1f:64:44:f3:6b:97:76:8f:c3:7e:
e2:7b:b2:f0:2e:77:28:6e:c1:4d:63:68:2d:49:a6:36:72:fe:
86:62:f4:36:ec:84:3e:82:4a:14:fa:1b:b5:27:6a:df:13:43:
11:6b:13:b6:6a:53:2e:b3:fe:d9:26:59:c3:8d:0a:d9:07:f6:
e7:a1:e2:5e:18:c0:2f:42:96:8a:53:a4:35:4e:a3:32:4c:cd:
9d:dd:a5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:47 2026 by rpki-client