Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/xnOGv6tQRxHcvaugZBbY2118Zzk.roa
File: xnOGv6tQRxHcvaugZBbY2118Zzk.roa (raw, json)
Hash identifier: O4YWxbU/3fPET1eHT64GDXgkT1S9zSgi4NLlsKzdn9M=
Subject key identifier: C6:73:86:BF:AB:50:47:11:DC:BD:AB:A0:64:16:D8:DB:5D:7C:67:39
Certificate issuer: /CN=28e56c68dc09fbc503c6b671b57a04a267e82b91
Certificate serial: 019F23692E8A2F59725F5A9DF1687DED0071
Authority key identifier: 28:E5:6C:68:DC:09:FB:C5:03:C6:B6:71:B5:7A:04:A2:67:E8:2B:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KOVsaNwJ-8UDxrZxtXoEomfoK5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/xnOGv6tQRxHcvaugZBbY2118Zzk.roa
Signing time: Thu 02 Jul 2026 15:18:43 +0000
ROA not before: Thu 02 Jul 2026 15:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39704
IP address blocks: 91.208.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/KOVsaNwJ-8UDxrZxtXoEomfoK5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/KOVsaNwJ-8UDxrZxtXoEomfoK5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/KOVsaNwJ-8UDxrZxtXoEomfoK5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2e:8a:2f:59:72:5f:5a:9d:f1:68:7d:ed:00:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28e56c68dc09fbc503c6b671b57a04a267e82b91
Validity
Not Before: Jul 2 15:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c67386bfab504711dcbdaba06416d8db5d7c6739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ab:a1:8f:ea:89:2f:a9:db:c2:8c:4a:57:20:
65:6b:c9:09:21:e1:8f:eb:28:d1:cd:33:d4:85:44:
f3:a0:7a:ff:be:c9:5c:a2:1a:ce:36:19:b3:24:85:
30:f5:d5:8c:66:11:ac:a9:40:9e:fb:c7:80:b8:98:
07:09:38:66:77:e4:0c:56:25:a8:d6:b3:d9:74:c8:
69:50:8c:70:16:36:86:34:6c:59:50:bb:55:39:ac:
8f:fd:54:40:22:ee:05:32:29:b7:4c:19:b8:31:d5:
87:c2:70:41:7c:b2:5d:68:ae:a6:15:8a:2a:06:eb:
c2:a8:59:aa:44:f6:c8:a2:5e:48:8c:51:12:32:43:
6c:ad:62:6e:07:a9:94:86:e0:69:f7:78:fd:2b:7d:
fe:0a:c4:6b:28:4a:b0:4a:5f:ec:14:4e:96:6d:40:
e9:a3:58:d5:63:a1:90:9d:53:5b:2c:1f:b4:53:17:
d7:7c:c1:b6:7c:82:24:96:89:a1:c6:f2:05:d6:85:
17:78:1e:78:e1:7f:ce:28:9a:84:7d:01:de:4a:45:
f6:b9:a1:94:d3:9b:85:3f:8e:f5:b6:c8:ce:e4:8d:
2c:f7:c8:63:e2:29:be:ed:46:09:3f:aa:ca:3e:db:
3c:02:3d:a8:04:60:f7:c9:bf:01:5d:97:06:0f:dc:
4f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:73:86:BF:AB:50:47:11:DC:BD:AB:A0:64:16:D8:DB:5D:7C:67:39
X509v3 Authority Key Identifier:
keyid:28:E5:6C:68:DC:09:FB:C5:03:C6:B6:71:B5:7A:04:A2:67:E8:2B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KOVsaNwJ-8UDxrZxtXoEomfoK5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/xnOGv6tQRxHcvaugZBbY2118Zzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/KOVsaNwJ-8UDxrZxtXoEomfoK5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.60.0/24
Signature Algorithm: sha256WithRSAEncryption
33:f4:24:a9:25:a9:cc:d8:45:3f:b4:55:68:66:d3:05:11:d5:
c8:e5:17:da:78:ac:61:45:7b:36:23:59:2c:0f:03:8d:17:72:
68:2c:a9:e1:35:41:47:a4:dc:89:69:09:29:f0:a5:4b:05:09:
dd:46:7a:c5:c8:b4:53:8a:94:a7:39:e2:ce:c9:65:48:80:92:
5a:34:0f:14:96:dd:cb:e3:3e:02:ce:65:f7:e5:d4:14:cb:73:
bd:18:1d:ac:d0:4a:22:18:1a:64:1b:f5:86:41:26:ae:14:04:
a2:5c:3c:d2:ad:bb:c9:cd:c5:4b:99:e5:51:75:c2:70:10:67:
68:08:e6:4a:59:3f:5c:6b:50:1f:df:06:e1:f1:fe:90:d3:cb:
80:7c:be:7e:75:65:15:03:a6:c4:32:03:8c:27:4f:20:13:20:
69:e1:70:96:14:5a:be:7e:1c:f0:40:da:7f:99:7d:60:3a:4a:
85:0b:59:91:6e:92:7c:3e:93:50:f3:7a:08:df:f8:c1:89:78:
44:65:a5:83:be:de:d0:30:e8:f7:8e:eb:62:ed:4f:ed:fc:d9:
22:a8:72:8d:74:97:f8:69:9f:36:94:67:80:41:d0:19:5c:96:
70:f1:57:2a:45:34:3f:cf:89:0d:ac:c9:81:b1:2d:57:6d:fa:
c0:3c:8a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:22:55 2026 by rpki-client