Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/4qI9_3D7FStZrjTyErzB89Dvziw.roa
File: 4qI9_3D7FStZrjTyErzB89Dvziw.roa (raw, json)
Hash identifier: py3HZWLJ6Y0uCncNiM+cpfYs3j4MsmEznJWXu2MHbYI=
Subject key identifier: E2:A2:3D:FF:70:FB:15:2B:59:AE:34:F2:12:BC:C1:F3:D0:EF:CE:2C
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 019F467386816B1B27DF4AB401822F6F4723
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/4qI9_3D7FStZrjTyErzB89Dvziw.roa
Signing time: Thu 09 Jul 2026 10:36:43 +0000
ROA not before: Thu 09 Jul 2026 10:36:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211709
IP address blocks: 91.93.184.0/24 maxlen: 24
213.14.231.0/24 maxlen: 24
213.14.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:73:86:81:6b:1b:27:df:4a:b4:01:82:2f:6f:47:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jul 9 10:36:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2a23dff70fb152b59ae34f212bcc1f3d0efce2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:24:9b:9c:02:21:d9:8f:ba:1a:75:59:51:e3:
6a:1f:00:5d:d1:59:67:37:fe:39:5c:ba:a5:2c:a0:
5c:12:23:1c:a1:b7:2b:90:a6:2f:ff:41:40:44:91:
71:8f:fc:e0:e0:78:2d:e8:4e:e6:8d:c3:87:7f:35:
52:4c:26:e2:0c:dc:18:55:3b:e1:52:b3:9a:77:75:
b2:28:e4:67:66:c1:e9:2a:ea:02:cf:be:6f:bb:eb:
38:93:bb:c0:0b:06:9b:cf:49:72:55:96:7c:d4:cf:
eb:d7:6e:3c:9f:30:da:d9:ba:79:b6:64:4c:78:9e:
51:eb:0c:15:4c:e4:be:2b:a9:11:b8:fb:cc:6c:ff:
8a:89:2d:05:9f:3e:f6:2d:7e:83:e0:e3:4f:95:8b:
7d:03:03:58:89:75:b8:35:ae:0c:1b:a7:d0:b6:30:
a7:51:33:bf:41:07:a4:eb:41:5a:51:da:c6:e4:9d:
de:d3:60:a9:fa:96:a4:92:10:e9:6d:f9:25:82:c5:
6f:41:e5:d4:18:e4:a6:02:12:d1:7e:bb:c9:4c:67:
98:89:96:bb:41:8e:ce:07:8e:bd:36:bf:78:9e:d6:
26:4b:46:bf:2f:b6:06:c8:2c:fb:9b:c1:55:26:10:
6c:b4:2c:12:4f:8b:18:a4:eb:9e:f8:ef:02:57:89:
1f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A2:3D:FF:70:FB:15:2B:59:AE:34:F2:12:BC:C1:F3:D0:EF:CE:2C
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/4qI9_3D7FStZrjTyErzB89Dvziw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.93.184.0/24
213.14.231.0/24
213.14.233.0/24
Signature Algorithm: sha256WithRSAEncryption
67:da:01:6d:2a:1a:21:bd:04:49:1b:ac:43:73:b9:7d:06:fe:
64:c6:9a:26:f1:0c:99:28:89:cb:44:85:e9:d9:5e:41:45:96:
a0:97:81:6e:92:b9:10:cb:e0:9d:23:fb:6a:4e:88:ed:73:11:
83:f4:31:bf:36:62:55:2f:23:91:0d:bc:d5:18:54:00:68:8d:
4c:30:29:a3:ee:9e:60:6a:24:8f:40:e0:ea:44:6f:39:42:f0:
cf:44:e2:4e:ae:87:e6:fb:4a:ad:7c:ed:57:9a:69:14:08:fd:
ac:cc:a2:90:83:59:a0:fc:a4:65:20:dc:5b:89:63:a7:ea:d3:
d5:ed:08:72:46:88:12:bd:d0:3f:0f:cc:e9:78:c5:35:2c:90:
44:89:df:70:6e:9f:66:c0:20:e8:2f:ed:bf:36:5b:d4:46:fc:
a6:de:8b:e2:75:5c:52:aa:40:69:54:1d:cd:15:b1:8f:42:2e:
5c:b4:17:b2:2e:78:2f:36:c3:da:7e:8c:33:e0:b0:c8:8f:08:
e1:be:28:97:0e:34:56:6c:38:e9:83:c2:d0:aa:9d:9a:5c:e2:
7c:da:d1:fe:80:33:13:42:f2:a7:ae:26:0f:55:86:23:d5:0a:
21:f0:84:aa:2b:cc:99:93:37:05:86:73:f3:26:37:45:a9:43:
df:89:40:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:22:10 2026 by rpki-client