Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/jv0W7SCTBDV-53bE6y5wuR0tMCc.roa
File: jv0W7SCTBDV-53bE6y5wuR0tMCc.roa (raw, json)
Hash identifier: m2zU6Y/u1fPjFOBkKoXsdbUv/jS40o/TC19x5+7xFPs=
Subject key identifier: 8E:FD:16:ED:20:93:04:35:7E:E7:76:C4:EB:2E:70:B9:1D:2D:30:27
Certificate issuer: /CN=1ccf33cf78477313c7382e89b17573ed68588b93
Certificate serial: 019DB44FE02C7DF31D1F084A996E088B7B8C
Authority key identifier: 1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/jv0W7SCTBDV-53bE6y5wuR0tMCc.roa
Signing time: Wed 22 Apr 2026 08:30:26 +0000
ROA not before: Wed 22 Apr 2026 08:30:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213727
IP address blocks: 91.102.127.0/24 maxlen: 24
2a14:ec00::/48 maxlen: 48
2a14:ec00:1::/48 maxlen: 48
2a14:ec00:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b4:4f:e0:2c:7d:f3:1d:1f:08:4a:99:6e:08:8b:7b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccf33cf78477313c7382e89b17573ed68588b93
Validity
Not Before: Apr 22 08:30:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8efd16ed209304357ee776c4eb2e70b91d2d3027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:b5:99:48:37:7b:22:58:fc:64:0c:33:4d:
c5:14:54:66:c7:da:68:80:ae:07:74:0b:18:92:cd:
5c:96:ab:e8:1b:15:d3:e9:89:45:03:27:78:b2:04:
e3:35:c3:65:2a:8d:96:bd:1c:7d:3f:8f:2f:e5:44:
39:61:3f:e2:1c:9c:23:5c:d1:66:62:a3:b9:d3:8b:
74:41:51:5a:b4:7d:87:51:05:9c:dd:f2:20:57:12:
0d:5f:2c:94:ba:8c:5b:a7:e1:73:f6:10:8e:26:de:
e4:1c:35:35:dc:7d:90:45:f0:24:e6:ab:05:cb:5a:
f7:9f:b3:ba:fc:ae:a1:cb:29:27:98:33:8e:2c:d9:
5f:93:c5:88:85:cc:b0:b3:35:57:ef:32:63:32:5a:
7b:89:d2:a1:74:86:04:9e:55:12:66:c0:25:4a:61:
61:95:70:71:36:2a:5f:68:a8:79:23:47:6b:d4:0a:
82:65:ee:71:c7:61:91:a5:a2:f1:94:d8:51:a0:6d:
6a:7f:d7:ca:39:d0:70:8e:5c:d9:6e:86:57:d1:35:
ab:96:f1:8a:50:8b:ff:bb:31:86:11:72:31:7d:27:
d1:d2:ec:11:ca:28:a7:01:a2:4b:70:02:31:aa:c4:
0f:b8:4d:37:6d:7d:16:b9:45:ed:da:b4:ca:8d:1b:
e4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FD:16:ED:20:93:04:35:7E:E7:76:C4:EB:2E:70:B9:1D:2D:30:27
X509v3 Authority Key Identifier:
keyid:1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/jv0W7SCTBDV-53bE6y5wuR0tMCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.127.0/24
IPv6:
2a14:ec00::-2a14:ec00:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8e:0e:4c:cb:36:e3:6b:ef:6c:2f:b8:af:2a:78:2c:e0:42:13:
ba:e9:58:d0:98:c4:8a:e3:cd:16:95:86:18:f5:e1:56:c1:74:
87:d1:96:bf:8d:b0:fc:f0:fd:cb:5d:8c:bd:47:a3:9c:65:38:
ca:ce:95:8e:31:d1:44:b0:7a:62:83:7f:93:9e:f9:85:90:79:
a1:2b:dd:5c:5e:c5:2d:ae:a1:96:6f:23:d1:08:9f:63:bd:9b:
75:65:8f:d9:8c:7c:14:a8:37:05:eb:38:90:a9:43:dc:e9:78:
f2:3d:a3:c8:79:1b:fe:df:ec:ed:da:63:ca:ff:60:73:9c:5f:
90:d1:ab:8e:47:f2:34:fb:0a:90:b7:b5:c1:7b:f7:5c:04:ae:
dd:30:ff:c7:1c:41:8c:73:92:9b:69:2c:e2:69:ea:76:58:d8:
f0:37:1c:c9:58:a9:64:e7:17:87:10:d9:8e:20:73:55:83:99:
d4:38:dc:26:f3:a8:61:4c:00:27:87:3d:fa:ee:d1:6c:14:bd:
32:8a:02:3e:6b:97:5c:42:02:14:27:19:d5:dc:c0:b8:4d:88:
b3:8d:43:fd:5c:00:5a:a8:f9:45:a0:7f:ab:c1:d2:12:ad:af:
76:c1:d3:a9:1a:e6:3f:ea:4b:7c:84:52:fe:2f:e9:1b:0f:e2:
3c:fc:8a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:19 2026 by rpki-client