Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/9Gtt5eeKTUtgifwndomooO-S8r0.roa
File: 9Gtt5eeKTUtgifwndomooO-S8r0.roa (raw, json)
Hash identifier: eWx11YPUtargCkr7MB+6RawH622O8MQjIWustjTUiPc=
Subject key identifier: F4:6B:6D:E5:E7:8A:4D:4B:60:89:FC:27:76:89:A8:A0:EF:92:F2:BD
Certificate issuer: /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Certificate serial: 019EF47E418CADBF6FDABC168CBBC5CE93D3
Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/9Gtt5eeKTUtgifwndomooO-S8r0.roa
Signing time: Tue 23 Jun 2026 12:39:35 +0000
ROA not before: Tue 23 Jun 2026 12:39:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197979
IP address blocks: 91.231.24.0/24 maxlen: 24
91.231.25.0/24 maxlen: 24
91.231.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:7e:41:8c:ad:bf:6f:da:bc:16:8c:bb:c5:ce:93:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Validity
Not Before: Jun 23 12:39:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f46b6de5e78a4d4b6089fc277689a8a0ef92f2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:31:f2:59:8d:18:3e:a1:aa:91:fb:b9:0b:1b:
06:7f:9e:24:63:bd:aa:41:7d:ec:e4:e6:5e:e2:58:
50:c9:22:1c:17:b9:fb:ef:40:66:17:61:20:c2:2f:
51:7f:b9:2f:b6:d8:d3:7f:bf:be:06:eb:3b:52:5d:
7d:bb:95:19:d8:1f:a0:79:9f:42:fa:32:b5:f8:7c:
40:e1:7f:c0:ab:f4:02:85:e5:9b:ad:fc:f4:6a:ff:
25:86:7a:0c:73:2b:d1:2a:a3:09:36:82:83:c9:ce:
fc:08:87:3d:5b:b7:48:90:56:d6:e9:3d:47:81:78:
92:2e:8a:c4:46:9c:d3:6a:43:57:a7:08:b1:37:50:
d5:8f:4c:44:33:a5:1b:9e:30:a0:c2:5f:86:f9:b1:
6e:07:21:79:3b:9a:c6:26:56:72:e3:50:1a:68:18:
f3:40:8b:32:19:b0:3f:9f:26:77:60:75:91:97:18:
16:a4:95:91:a3:91:b7:ce:08:e1:19:5b:11:b4:6b:
03:f9:2c:ad:c4:47:bd:08:6e:37:41:7f:eb:b3:f5:
54:6e:4a:da:fa:bc:74:21:58:fb:47:77:1c:f0:d3:
51:1f:cf:e7:be:68:7d:3c:d4:e3:9b:20:2a:90:36:
88:97:3f:5e:b4:91:e6:7d:08:00:a1:3b:39:66:5b:
02:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6B:6D:E5:E7:8A:4D:4B:60:89:FC:27:76:89:A8:A0:EF:92:F2:BD
X509v3 Authority Key Identifier:
keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/9Gtt5eeKTUtgifwndomooO-S8r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.24.0/23
91.231.27.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:1b:b4:51:e1:ee:6d:aa:63:b4:f1:c0:07:99:9d:6d:82:e7:
65:8e:89:93:1f:84:54:ab:62:ac:1c:e0:49:d4:24:a1:bd:29:
ad:42:e7:c2:8a:d9:3a:a4:c5:5e:ad:c0:10:53:07:38:f5:1e:
eb:03:91:d9:e8:f1:66:49:f8:15:9c:ba:31:a3:a3:fd:1d:d1:
5e:4d:de:d6:8e:c6:fe:06:c2:36:ee:52:cb:2a:7d:69:1e:18:
a4:7c:5e:3b:d3:36:22:39:81:09:2d:2b:32:c2:0b:df:a9:b3:
f9:1d:c2:66:ef:d8:7c:1e:61:d3:eb:55:4b:37:5a:2d:37:0b:
73:1a:1f:20:87:94:6c:75:8f:05:c6:cd:59:27:db:9b:de:8e:
82:ba:aa:1e:bd:48:30:4e:9c:b2:c0:d3:f7:8c:ec:33:0e:ef:
e9:12:58:f3:6a:21:51:33:ca:5b:da:24:a8:cf:5d:75:52:a5:
19:34:6a:b9:10:09:d0:b2:ae:13:5f:be:cd:52:62:65:c4:6a:
49:f6:06:e1:76:a9:29:aa:3e:47:c8:1b:cf:d9:c7:38:18:80:
65:73:ec:2d:ed:ce:22:72:74:42:ee:d4:41:89:4c:44:a2:91:
c0:74:2f:cc:ee:db:e2:e2:a4:84:9f:f7:ef:ae:f9:bb:12:01:
1e:ba:9f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:42 2026 by rpki-client