Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/pZ9V2IY1voGm3J0lqTj6JXZy-jc.roa
File: pZ9V2IY1voGm3J0lqTj6JXZy-jc.roa (raw, json)
Hash identifier: ftUTgUhlmUu/y5OQmNNSk095RdRMaTOBMZx0Ohtho2s=
Subject key identifier: A5:9F:55:D8:86:35:BE:81:A6:DC:9D:25:A9:38:FA:25:76:72:FA:37
Certificate issuer: /CN=f057844a97539cf57f83cc974d58eed287efd9ab
Certificate serial: 019F23691D18B27267ACFE8E7225A28F4D97
Authority key identifier: F0:57:84:4A:97:53:9C:F5:7F:83:CC:97:4D:58:EE:D2:87:EF:D9:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FeESpdTnPV_g8yXTVju0ofv2as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/pZ9V2IY1voGm3J0lqTj6JXZy-jc.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34177
IP address blocks: 91.209.245.0/24 maxlen: 24
193.200.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/8FeESpdTnPV_g8yXTVju0ofv2as.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/8FeESpdTnPV_g8yXTVju0ofv2as.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FeESpdTnPV_g8yXTVju0ofv2as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1d:18:b2:72:67:ac:fe:8e:72:25:a2:8f:4d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f057844a97539cf57f83cc974d58eed287efd9ab
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a59f55d88635be81a6dc9d25a938fa257672fa37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0d:32:5c:ae:1a:79:b2:d4:e3:3c:c9:6b:40:
f4:59:cf:fa:5b:e1:f7:3c:6b:b8:e1:8a:de:1e:2f:
64:7d:f5:62:09:8e:8c:7c:55:ea:08:35:84:3d:ed:
b5:3c:ee:af:5d:a9:34:f8:cb:0d:c6:b3:0d:41:58:
75:42:65:dc:36:74:7d:55:23:6f:fb:32:73:05:9e:
62:2b:5c:29:cc:63:20:48:23:28:71:15:2a:2a:12:
f5:32:69:4d:70:72:0f:1c:07:ef:47:61:b9:75:24:
1b:b3:e5:d1:0b:94:b0:ef:ab:ea:b9:f4:06:eb:33:
54:fe:80:a7:2c:96:49:98:c0:23:49:fa:d2:20:22:
44:6d:6e:16:68:93:a1:9f:ab:05:5b:31:5f:f1:5d:
2b:02:10:47:a7:20:db:8c:88:20:0a:82:c3:05:2b:
2b:3c:9b:12:10:f7:d6:f7:86:1c:97:1f:61:b7:54:
d6:1b:ee:46:f3:4e:d7:ab:63:cb:41:9d:82:ed:62:
a0:1f:91:2b:5a:98:bf:36:78:f9:76:b5:96:57:c5:
ca:42:64:88:a0:c2:7b:7e:ea:71:06:e3:e2:96:b5:
b0:42:de:77:cc:0c:d0:30:ee:1d:df:c3:1d:fe:ab:
88:25:c7:a2:20:b1:9c:a7:22:b8:ca:97:d7:52:15:
ba:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9F:55:D8:86:35:BE:81:A6:DC:9D:25:A9:38:FA:25:76:72:FA:37
X509v3 Authority Key Identifier:
keyid:F0:57:84:4A:97:53:9C:F5:7F:83:CC:97:4D:58:EE:D2:87:EF:D9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FeESpdTnPV_g8yXTVju0ofv2as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/pZ9V2IY1voGm3J0lqTj6JXZy-jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/8FeESpdTnPV_g8yXTVju0ofv2as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.245.0/24
193.200.171.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:c3:44:94:13:55:6c:b1:e6:9d:a7:79:a3:af:ab:b4:ea:fc:
08:5c:40:87:47:9b:c9:df:d4:be:b7:80:6f:5a:db:a0:9a:8f:
55:73:1f:2c:a6:0e:6f:2f:cc:0e:5f:26:72:df:1e:a5:55:46:
a9:72:60:c2:59:66:b7:b5:66:dd:19:cc:3b:e5:17:69:be:da:
4c:c5:f7:39:96:5b:16:24:cf:47:73:45:16:84:3c:67:71:72:
66:ec:c6:a6:7c:24:24:3a:10:95:39:d0:d5:1a:d4:5d:1c:47:
68:01:37:45:71:c2:25:84:ef:9a:b1:16:d8:d2:a2:e0:4e:8a:
5f:29:d0:a0:7e:0c:06:71:f6:27:c3:08:45:ca:84:ec:f8:4e:
f9:b7:18:7d:9e:f8:81:ba:fb:ab:a6:09:af:f4:2d:a9:76:93:
3d:7a:d1:0f:58:36:b8:f0:86:8f:2c:21:23:0f:69:bb:fd:c8:
76:cc:56:d3:8b:75:a9:4b:40:ab:20:2b:93:6c:4d:39:e4:cc:
6f:84:36:ca:35:8d:ed:84:20:fa:a1:35:72:d5:dd:b0:d8:22:
e3:d2:c4:1d:5a:c1:e2:be:28:a4:64:28:44:33:fa:b7:e1:e2:
24:62:87:1e:5a:3b:48:a8:bb:04:bb:94:14:3b:be:cc:78:c1:
45:1c:42:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:46:59 2026 by rpki-client