Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/Xwqqp3SPpvDNyBAEMp0e_66cQro.roa
File: Xwqqp3SPpvDNyBAEMp0e_66cQro.roa (raw, json)
Hash identifier: tn/0MbER8l+l1ARfId/kyPTPuy7cjy7LSRHD6/peBik=
Subject key identifier: 5F:0A:AA:A7:74:8F:A6:F0:CD:C8:10:04:32:9D:1E:FF:AE:9C:42:BA
Certificate issuer: /CN=bd73232047e9f9701d81f711bc73d5da7bfa1352
Certificate serial: 019F9343E44E5152E819CC021338DD4F9F5A
Authority key identifier: BD:73:23:20:47:E9:F9:70:1D:81:F7:11:BC:73:D5:DA:7B:FA:13:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXMjIEfp-XAdgfcRvHPV2nv6E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/Xwqqp3SPpvDNyBAEMp0e_66cQro.roa
Signing time: Fri 24 Jul 2026 08:35:27 +0000
ROA not before: Fri 24 Jul 2026 08:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52153
IP address blocks: 91.222.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXMjIEfp-XAdgfcRvHPV2nv6E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:43:e4:4e:51:52:e8:19:cc:02:13:38:dd:4f:9f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd73232047e9f9701d81f711bc73d5da7bfa1352
Validity
Not Before: Jul 24 08:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f0aaaa7748fa6f0cdc81004329d1effae9c42ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8d:ed:8e:12:bf:39:6f:38:08:a3:36:ca:ab:
7c:c5:6c:27:bd:e6:11:3f:8c:96:6b:5e:01:c0:77:
29:38:a1:2a:2c:8b:29:83:97:41:5b:46:3c:83:64:
85:55:d4:4c:9a:0b:95:e0:a4:31:ff:16:b9:61:7b:
00:95:d7:ed:90:bb:31:8c:ab:c1:f9:e4:b0:dd:7a:
b9:02:3b:38:c7:ed:08:a4:f8:10:d4:9d:1c:7d:7c:
45:a7:7c:e0:bd:7a:dc:7d:73:d9:d9:9a:ed:6f:8e:
27:83:7d:56:e4:3a:f7:a5:7b:20:23:63:f4:70:c7:
74:a9:a5:86:65:8f:86:54:05:75:e0:15:f6:a0:db:
c1:05:f2:37:4a:e8:d1:8c:73:f7:3c:4b:1c:98:4a:
ab:05:83:68:5e:65:7c:54:89:04:40:a6:51:42:9c:
5b:a9:bf:46:82:3d:86:93:41:2a:76:a8:47:aa:8d:
c1:c3:cc:f2:48:6c:97:8e:e6:b3:29:2e:b1:81:c4:
83:43:3a:f5:be:7b:2b:d1:16:a1:fb:9d:36:4c:66:
13:20:7f:c4:80:6c:ad:44:cf:a7:79:67:90:b4:8e:
ba:e3:39:82:04:99:42:25:33:7b:b8:bb:ca:cc:3c:
06:06:b8:35:ea:e5:3a:96:01:1f:4c:3b:c6:dc:aa:
c6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0A:AA:A7:74:8F:A6:F0:CD:C8:10:04:32:9D:1E:FF:AE:9C:42:BA
X509v3 Authority Key Identifier:
keyid:BD:73:23:20:47:E9:F9:70:1D:81:F7:11:BC:73:D5:DA:7B:FA:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXMjIEfp-XAdgfcRvHPV2nv6E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/Xwqqp3SPpvDNyBAEMp0e_66cQro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/vXMjIEfp-XAdgfcRvHPV2nv6E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.192.0/22
Signature Algorithm: sha256WithRSAEncryption
37:0f:67:d4:af:6b:0f:82:2d:f3:eb:ea:ec:dc:11:97:fb:8b:
58:83:26:a1:80:f2:6d:ab:1a:f5:d5:99:41:fa:83:bb:db:5d:
15:7b:03:3b:5e:5a:a2:36:ca:61:59:4e:dd:f1:52:b6:ec:ff:
1f:eb:91:70:b6:84:ae:cc:57:b1:9c:11:04:63:ad:42:d5:7b:
4b:21:4a:d2:a6:61:03:4e:a0:58:fc:db:69:31:92:77:01:45:
42:c3:bb:32:50:66:98:95:0f:91:66:cf:77:75:2b:8b:e5:bc:
43:15:2c:d6:77:2d:a1:cd:e9:55:12:9c:1b:cf:03:20:9e:e2:
1b:e7:e1:20:b3:89:63:23:41:da:66:b6:b0:1f:f7:03:d1:93:
20:8a:12:7b:39:eb:65:23:7a:45:9a:b5:00:50:85:7f:b3:4d:
3c:a9:e0:c7:a1:59:f7:84:16:89:b7:3e:f2:72:6e:aa:08:87:
40:4a:3d:b5:f3:4a:93:f1:28:ea:f7:f0:47:6c:b7:85:52:f8:
7c:f8:78:c8:93:9d:4c:82:f4:17:f9:0f:33:f3:29:1c:f9:2a:
a7:19:8b:0a:c4:d2:61:90:4c:5b:83:76:71:0d:c8:02:1c:2c:
45:d6:f8:d3:34:01:88:b1:c6:28:4e:a7:92:b4:92:cb:80:8d:
3d:ce:b3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:36 2026 by rpki-client