Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/1_QmXSAoe0b8taNpxUnZobBZmPQ.roa
File: 1_QmXSAoe0b8taNpxUnZobBZmPQ.roa (raw, json)
Hash identifier: 9SMBjKl9NUPhxIwfFFPsmWL9Xi6y6+eVN85q6Nncpe0=
Subject key identifier: D7:F4:26:5D:20:28:7B:46:FC:B5:A3:69:C5:49:D9:A1:B0:59:98:F4
Certificate issuer: /CN=03db95b436f531c4e602f39610ad53e26fdff153
Certificate serial: 01A07DD585154EBFF8F9E75967D678A4AB78
Authority key identifier: 03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/1_QmXSAoe0b8taNpxUnZobBZmPQ.roa
Signing time: Mon 07 Sep 2026 21:45:40 +0000
ROA not before: Mon 07 Sep 2026 21:45:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210328
IP address blocks: 77.91.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7d:d5:85:15:4e:bf:f8:f9:e7:59:67:d6:78:a4:ab:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03db95b436f531c4e602f39610ad53e26fdff153
Validity
Not Before: Sep 7 21:45:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7f4265d20287b46fcb5a369c549d9a1b05998f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:41:da:95:82:65:48:37:ab:e9:63:02:1c:09:
f7:20:88:04:91:17:4f:84:b8:6b:8b:73:5d:48:3a:
40:31:0b:af:d4:a6:8f:10:4a:8d:d1:cf:d6:c8:94:
68:f3:dc:66:56:5c:85:d3:e2:77:c0:1b:65:74:fa:
59:5c:26:d8:fe:c1:69:84:e1:96:2f:fd:ae:1a:30:
09:3e:32:69:65:72:92:c5:76:c5:31:09:00:cd:45:
f9:92:5c:30:4c:1e:2c:23:b4:78:4e:81:81:25:6f:
45:ea:f1:a7:9c:15:fa:5c:16:1a:f0:9a:f7:66:74:
51:30:bd:f9:c9:85:4a:78:59:72:5f:18:54:e8:94:
8e:6b:b4:bb:d7:8f:c9:ca:f2:14:1d:04:f2:fe:d1:
5e:14:6b:ec:69:eb:62:b3:7f:2c:56:c7:f1:84:d1:
b8:53:dc:8e:58:c9:93:08:ee:8c:57:68:f6:69:04:
ba:a1:14:f7:ad:f9:76:64:84:0d:68:20:51:04:f5:
8c:c8:61:4a:da:38:9a:5e:8e:ce:82:11:3b:5a:8a:
a0:18:29:3f:f2:ab:22:6e:95:a9:6d:f7:b0:b4:7d:
83:77:31:76:28:d8:3f:32:29:2d:83:0c:ba:d6:8a:
60:0a:aa:fa:6e:de:02:56:0b:3c:04:6a:1b:26:48:
bb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F4:26:5D:20:28:7B:46:FC:B5:A3:69:C5:49:D9:A1:B0:59:98:F4
X509v3 Authority Key Identifier:
keyid:03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/1_QmXSAoe0b8taNpxUnZobBZmPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.65.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ad:c7:af:f4:d6:81:c1:90:06:d4:8e:22:40:57:71:0c:9e:
11:4b:3e:61:c7:e7:3c:93:9b:5e:04:01:1d:d5:d2:18:98:30:
13:9f:3e:67:be:e7:d9:9f:c0:3e:1c:85:63:3c:f0:5b:69:80:
be:11:12:f9:ba:28:4a:70:da:ed:c2:9e:4f:1b:7f:2c:48:1f:
37:51:4c:5d:36:bf:c7:17:de:bd:4e:da:3b:40:24:6a:87:4a:
a6:a7:70:e8:61:40:8b:be:6b:cb:f1:ba:8e:e5:e9:05:13:45:
ba:56:6c:05:21:f3:3c:34:a0:83:d3:ea:4a:77:10:5f:57:b4:
ae:a4:13:cc:99:66:48:05:ab:6f:d9:31:ec:b3:61:7e:a7:94:
98:64:07:1e:5b:1f:b3:b3:9b:48:fb:3f:b6:4a:c0:6c:61:f6:
b9:96:75:70:9c:c3:5e:7b:56:e3:ff:b0:0d:df:c9:eb:d3:65:
fa:9a:81:ea:11:ae:05:e0:c4:a0:68:fa:c2:e7:ec:ce:30:69:
6b:45:18:e5:11:3a:a8:c9:ea:32:72:65:ae:3e:70:3c:34:24:
84:13:7c:78:8e:a7:14:8b:20:77:c3:6e:3e:39:e0:f9:ba:39:
a8:71:02:bf:ea:89:1b:f4:78:48:10:af:89:1e:8a:c5:32:83:
45:6c:87:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:37:53 2026 by rpki-client