Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/36bkGnZI1sMd2XiaCKELpBZav5c.roa
File: 36bkGnZI1sMd2XiaCKELpBZav5c.roa (raw, json)
Hash identifier: nPCSCpMlug0UaQ74dIMZciLxdtiMlquYZOOv35McBmk=
Subject key identifier: DF:A6:E4:1A:76:48:D6:C3:1D:D9:78:9A:08:A1:0B:A4:16:5A:BF:97
Certificate issuer: /CN=e79e68c147bf941447ee206d60fa9562e4f47e85
Certificate serial: 019F43049CF1D4E932D359CB44FD8D157251
Authority key identifier: E7:9E:68:C1:47:BF:94:14:47:EE:20:6D:60:FA:95:62:E4:F4:7E:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/555owUe_lBRH7iBtYPqVYuT0foU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/36bkGnZI1sMd2XiaCKELpBZav5c.roa
Signing time: Wed 08 Jul 2026 18:36:43 +0000
ROA not before: Wed 08 Jul 2026 18:36:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42241
IP address blocks: 91.102.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.mft
rsync://rpki.ripe.net/repository/DEFAULT/555owUe_lBRH7iBtYPqVYuT0foU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:43:04:9c:f1:d4:e9:32:d3:59:cb:44:fd:8d:15:72:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79e68c147bf941447ee206d60fa9562e4f47e85
Validity
Not Before: Jul 8 18:36:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dfa6e41a7648d6c31dd9789a08a10ba4165abf97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ec:79:b4:ef:15:3f:e3:43:f0:f4:f4:e2:fa:
b5:7d:c9:cb:cd:99:b4:3b:fc:3d:a9:54:ba:f0:c3:
7b:08:3e:26:1d:fc:4c:da:66:61:a5:39:bb:a4:eb:
5f:c4:ef:ae:6f:56:3b:07:8a:60:37:1a:31:a6:e4:
f2:ed:39:75:20:15:12:ef:ee:37:84:6d:74:8a:28:
89:ce:fe:4d:45:23:28:6a:39:94:02:97:5b:22:f2:
bc:81:81:68:25:c5:4e:2e:8d:ba:85:2d:d8:58:98:
99:54:f3:03:5f:3a:12:db:a0:4b:c2:18:7e:85:c2:
ed:ad:94:74:43:f8:e9:f3:f0:41:47:91:0e:8c:2c:
ed:a2:d5:5a:53:c7:e1:5a:d3:c1:fd:d0:22:6b:2a:
1d:b3:50:50:c0:31:44:c7:74:1a:aa:09:9a:ce:85:
ed:21:5e:65:fa:8c:54:c6:55:97:59:02:55:7e:0a:
21:8a:76:3a:e6:70:ac:cd:a1:de:a2:f2:2a:b9:cf:
a3:6f:dc:19:cb:17:3d:96:37:8b:09:0c:d1:35:3e:
c8:d7:6e:33:82:1e:85:8c:c6:e9:2e:98:c8:85:cd:
09:73:8a:3e:87:d3:59:77:bd:17:f2:07:67:d6:f6:
59:12:5e:53:20:e8:f6:43:05:db:a0:10:6a:e3:64:
da:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A6:E4:1A:76:48:D6:C3:1D:D9:78:9A:08:A1:0B:A4:16:5A:BF:97
X509v3 Authority Key Identifier:
keyid:E7:9E:68:C1:47:BF:94:14:47:EE:20:6D:60:FA:95:62:E4:F4:7E:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/555owUe_lBRH7iBtYPqVYuT0foU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/36bkGnZI1sMd2XiaCKELpBZav5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a674ac-4cc6-427c-9856-6a2c20a6d3eb/1/555owUe_lBRH7iBtYPqVYuT0foU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.240.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:10:30:d4:4d:c5:28:44:ed:26:3b:77:27:cb:b2:90:b8:c3:
cc:b1:04:63:8f:2f:0f:72:ce:26:4e:d0:8b:a5:df:16:b5:a1:
3b:79:57:6d:8f:cf:08:28:c5:87:c2:0b:87:23:2f:fd:a4:de:
f6:bd:9f:89:0a:32:68:7b:f9:47:33:1c:8a:a3:f9:fc:21:b3:
23:11:8a:17:05:c1:69:6b:cc:7f:51:98:85:ce:0a:39:a3:40:
be:d1:72:37:21:3b:c8:4e:05:c4:dc:91:b2:b0:54:27:7c:88:
22:bb:ce:d7:78:4a:cc:a3:32:ea:b0:d2:60:37:1b:8d:ea:bc:
0c:f7:8f:04:f8:0c:e0:2b:f5:55:07:39:8d:9f:6f:1f:39:c1:
be:b8:64:e8:1e:89:ec:b7:21:31:88:77:4c:6e:f9:27:3d:76:
55:6d:b0:d3:98:5a:1c:43:83:46:2c:e0:9f:15:86:c2:4f:30:
26:47:2d:c9:93:c8:ce:b8:0e:d8:a4:5b:be:de:9e:fb:ee:60:
86:3a:ed:8b:6c:54:3d:08:91:7c:48:5e:e7:82:9c:c5:48:49:
96:75:26:7b:b0:0b:c8:98:e9:d4:df:9a:04:a2:94:2f:ed:7e:
69:54:10:e9:4e:b3:fb:f9:03:8a:7a:46:5c:a1:92:a5:94:f6:
dd:22:27:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:15:11 2026 by rpki-client