Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/pdv56zaEJ9mRbrRBEwgNZcGH6CY.roa
File: pdv56zaEJ9mRbrRBEwgNZcGH6CY.roa (raw, json)
Hash identifier: nBOAy5CPDcItDwXemTNgV+jnGvA8HHTlGKSlk/4UJ2Y=
Subject key identifier: A5:DB:F9:EB:36:84:27:D9:91:6E:B4:41:13:08:0D:65:C1:87:E8:26
Certificate issuer: /CN=7c7c311e8eeebbcda289062d63ac0e2ed61db1df
Certificate serial: 019B7A5B9731136FA444C54A22C0828CAF47
Authority key identifier: 7C:7C:31:1E:8E:EE:BB:CD:A2:89:06:2D:63:AC:0E:2E:D6:1D:B1:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHwxHo7uu82iiQYtY6wOLtYdsd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/pdv56zaEJ9mRbrRBEwgNZcGH6CY.roa
Signing time: Thu 01 Jan 2026 16:19:41 +0000
ROA not before: Thu 01 Jan 2026 16:19:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28734
IP address blocks: 91.205.224.0/23 maxlen: 23
91.205.226.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/fHwxHo7uu82iiQYtY6wOLtYdsd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/fHwxHo7uu82iiQYtY6wOLtYdsd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHwxHo7uu82iiQYtY6wOLtYdsd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:97:31:13:6f:a4:44:c5:4a:22:c0:82:8c:af:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7c311e8eeebbcda289062d63ac0e2ed61db1df
Validity
Not Before: Jan 1 16:19:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5dbf9eb368427d9916eb44113080d65c187e826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:25:48:53:7b:6d:b9:6b:d8:60:3e:79:44:7d:
3e:d7:c6:12:42:e4:90:e9:b6:c8:c8:2b:92:d2:e0:
75:73:58:14:90:74:f7:31:f1:74:d4:72:2c:95:e7:
b2:83:2b:b5:9b:05:7e:11:cf:03:cd:56:be:4e:ce:
6b:69:93:58:9e:93:f5:98:c1:bb:46:33:86:bd:09:
ec:0d:5f:7d:83:c2:e3:00:04:75:0f:11:bf:17:43:
f1:d5:fe:bb:59:87:01:1f:87:fe:50:81:47:07:37:
14:9d:0c:16:34:d4:fb:4e:5c:ea:42:67:e4:7b:67:
b5:de:f5:f3:71:fe:56:94:69:86:b9:82:93:66:c6:
75:3a:90:db:52:d2:f3:59:38:18:f6:61:35:a0:cb:
e6:7d:09:64:b6:45:2a:2c:54:8b:10:54:7a:f2:08:
14:28:e8:c7:db:06:05:fe:b3:39:b9:ae:3b:da:04:
9e:f2:84:1f:d7:b8:3b:3e:87:49:10:26:eb:60:81:
4f:a5:ad:b0:36:59:43:a9:14:fb:e4:1f:7f:35:4d:
53:a8:db:73:b8:9b:61:cf:e1:1a:c8:f5:65:e9:f7:
dc:33:07:57:d7:49:26:09:88:e8:b1:6f:a1:c3:33:
7e:09:55:9d:f3:5d:a0:3f:fa:bf:28:bb:ac:f7:43:
26:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DB:F9:EB:36:84:27:D9:91:6E:B4:41:13:08:0D:65:C1:87:E8:26
X509v3 Authority Key Identifier:
keyid:7C:7C:31:1E:8E:EE:BB:CD:A2:89:06:2D:63:AC:0E:2E:D6:1D:B1:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHwxHo7uu82iiQYtY6wOLtYdsd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/pdv56zaEJ9mRbrRBEwgNZcGH6CY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/fHwxHo7uu82iiQYtY6wOLtYdsd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.224.0/22
Signature Algorithm: sha256WithRSAEncryption
44:c4:76:79:45:88:1d:5a:45:fe:3f:e1:dc:31:5e:1a:2d:c6:
bf:1f:29:04:8e:b7:ce:06:6e:d4:5a:ee:59:46:b6:93:80:4c:
2b:e3:a5:9d:76:cf:3a:8f:55:d1:2c:7b:b1:49:78:b5:ab:00:
d5:43:34:6a:38:68:8e:87:10:47:72:43:2d:ea:e7:66:47:ba:
19:d2:3a:9b:47:7d:7a:c4:5b:17:23:40:bf:55:97:53:49:9f:
06:ff:ed:01:e6:cf:de:b5:6e:8b:8b:0a:70:cf:6e:b4:53:0b:
9a:83:1c:a2:e9:3f:67:ca:44:a3:38:b4:b4:30:9b:f8:2c:b8:
88:be:37:e8:66:50:fa:5b:99:65:79:f9:eb:bb:68:18:08:51:
70:ce:03:14:c1:16:40:b8:5b:d5:84:83:80:e5:4a:7a:14:d3:
d9:63:f1:74:17:41:69:19:d6:25:84:94:ef:38:71:e7:fa:68:
35:41:e8:f6:36:46:5e:e7:8b:e3:e3:d2:63:02:2a:a8:60:68:
94:70:94:31:1d:5b:d6:75:a0:4e:c3:34:ed:1c:fc:59:cb:75:
bf:23:95:36:53:ea:62:87:c5:2e:b3:fd:e1:5d:8b:a5:3c:84:
7a:ee:ad:f9:ad:5e:5d:57:e9:f8:eb:db:aa:39:ee:08:36:98:
48:ad:cd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:23:24 2026 by rpki-client