Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/84nImxweqqr5ryKumI1pSxwnVkY.roa
File: 84nImxweqqr5ryKumI1pSxwnVkY.roa (raw, json)
Hash identifier: +HbQ4MWmkmjb64P4pJWJRCcWwhVgoZJ30TVPJhtlbcM=
Subject key identifier: F3:89:C8:9B:1C:1E:AA:AA:F9:AF:22:AE:98:8D:69:4B:1C:27:56:46
Certificate issuer: /CN=47cce086271b4949a509f1e37180e98a80a454e5
Certificate serial: 019F23689AD636074C885CF374B7F9B7AC3E
Authority key identifier: 47:CC:E0:86:27:1B:49:49:A5:09:F1:E3:71:80:E9:8A:80:A4:54:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8zghicbSUmlCfHjcYDpioCkVOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/84nImxweqqr5ryKumI1pSxwnVkY.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200826
IP address blocks: 91.234.241.0/24 maxlen: 24
91.234.242.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8zghicbSUmlCfHjcYDpioCkVOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9a:d6:36:07:4c:88:5c:f3:74:b7:f9:b7:ac:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47cce086271b4949a509f1e37180e98a80a454e5
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f389c89b1c1eaaaaf9af22ae988d694b1c275646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3a:b4:fa:b4:95:18:62:7b:96:03:f5:df:6f:
9b:c2:c8:5c:9a:fd:93:9d:53:67:95:5c:0a:77:94:
ce:10:3f:20:57:ee:d4:37:af:01:49:78:99:62:a6:
8a:03:f9:23:08:2b:09:c4:9d:fc:8a:5c:9b:f4:da:
16:73:a7:39:ec:28:7f:c5:76:57:5e:aa:50:8b:fa:
0c:14:7e:52:66:6e:a4:96:65:30:73:77:2e:60:23:
ba:12:30:b4:40:1f:a3:87:e6:c5:f6:65:3c:aa:77:
b1:7e:9e:8e:fa:bf:6f:9e:bf:f6:f4:c6:b4:19:f7:
73:4c:5a:03:77:16:0f:e6:45:69:4e:10:44:58:2f:
77:81:a4:9b:91:ab:b2:f7:04:ab:27:3a:44:dd:c2:
d7:9f:ff:d5:27:b4:ae:04:8f:46:26:ab:67:2f:43:
8e:86:d7:29:d1:d5:bd:28:18:fb:36:fd:0e:24:05:
c3:3c:45:c8:04:21:f4:17:a2:3b:41:a9:b8:25:69:
0f:89:7f:dc:72:8c:8e:2b:13:4a:ad:1e:b4:4c:41:
3a:1a:c4:9c:39:8d:06:06:a9:66:06:7c:eb:4c:33:
c6:36:df:c3:87:43:ac:1e:96:c8:8d:ec:5b:81:6d:
96:b6:3a:4f:93:0f:f7:c9:2f:13:55:f2:27:9a:c7:
6e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:89:C8:9B:1C:1E:AA:AA:F9:AF:22:AE:98:8D:69:4B:1C:27:56:46
X509v3 Authority Key Identifier:
keyid:47:CC:E0:86:27:1B:49:49:A5:09:F1:E3:71:80:E9:8A:80:A4:54:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8zghicbSUmlCfHjcYDpioCkVOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/84nImxweqqr5ryKumI1pSxwnVkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/R8zghicbSUmlCfHjcYDpioCkVOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.241.0-91.234.243.255
Signature Algorithm: sha256WithRSAEncryption
35:bc:ac:40:d3:70:e5:66:ad:4b:af:98:4c:35:e3:0b:e4:90:
0e:2a:35:13:c4:3a:31:6e:4b:a0:97:e8:56:57:9e:48:df:d8:
ce:17:84:58:b8:3a:0d:26:e8:87:ad:03:1a:8f:8f:51:9c:16:
8b:93:f7:fc:24:b4:bc:52:5b:b2:42:82:84:f5:da:77:65:31:
a2:78:c0:87:25:38:9d:5f:27:95:79:1e:5f:e4:9a:0a:1c:9c:
37:2e:5d:ca:8e:0e:dd:24:da:14:d6:7e:1e:ce:8f:16:6f:d4:
c2:f2:51:17:06:b8:76:ad:6a:fe:9a:0f:23:4e:04:f6:fb:6a:
a3:24:5f:74:a2:2c:25:ef:30:11:cb:9b:28:1a:4c:20:74:bb:
be:33:fb:fb:87:60:09:9e:83:be:bd:bc:a8:58:fb:47:2d:1c:
9a:fe:ae:b1:7f:4d:20:51:a3:68:6f:9e:35:6c:94:e2:57:4c:
5f:52:9d:80:6d:91:3e:b5:3c:04:94:48:67:4f:90:56:fa:06:
68:77:19:9b:5d:7b:8d:68:22:a9:ad:aa:b0:1f:e9:df:28:e1:
48:1b:cf:3f:a4:93:92:ad:79:bc:8c:14:92:b0:ad:e0:88:ab:
07:a7:48:52:df:39:b6:96:43:c4:65:b1:3e:b2:38:7b:9f:58:
04:bb:9a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:27:07 2026 by rpki-client