Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/vz9xDUONTQdNGh2H7pR1j8DJb4U.roa
File: vz9xDUONTQdNGh2H7pR1j8DJb4U.roa (raw, json)
Hash identifier: wQlmjv0wxtwfgnsZbxR6Yv1Bicu90n9KXilxDJKClFg=
Subject key identifier: BF:3F:71:0D:43:8D:4D:07:4D:1A:1D:87:EE:94:75:8F:C0:C9:6F:85
Certificate issuer: /CN=d0f0e2c8c14a824b54e00bd9479a485d71bfe474
Certificate serial: 019CAE1C286B03386902C296D8D743EC76D3
Authority key identifier: D0:F0:E2:C8:C1:4A:82:4B:54:E0:0B:D9:47:9A:48:5D:71:BF:E4:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PDiyMFKgktU4AvZR5pIXXG_5HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/vz9xDUONTQdNGh2H7pR1j8DJb4U.roa
Signing time: Mon 02 Mar 2026 10:33:26 +0000
ROA not before: Mon 02 Mar 2026 10:33:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44104
IP address blocks: 91.213.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PDiyMFKgktU4AvZR5pIXXG_5HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:1c:28:6b:03:38:69:02:c2:96:d8:d7:43:ec:76:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f0e2c8c14a824b54e00bd9479a485d71bfe474
Validity
Not Before: Mar 2 10:33:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf3f710d438d4d074d1a1d87ee94758fc0c96f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e3:14:ac:ee:59:52:94:60:30:b7:80:f2:35:
f5:cc:d1:73:37:39:18:18:1a:58:ee:a3:8d:61:d9:
ed:6c:fc:12:4b:b2:cd:a4:cd:94:53:78:c0:31:00:
4a:cc:ab:d3:9f:3e:65:27:57:f2:95:b5:de:e3:10:
f0:ff:a4:e0:be:39:cf:06:9e:b4:c8:fc:73:31:3c:
3a:80:42:19:ba:4e:e4:e0:90:81:d1:9c:e2:ea:26:
97:d7:bc:20:6d:7c:44:dd:49:71:01:6c:1f:e1:f5:
bf:31:87:4d:13:d3:f4:a9:f8:32:9e:e2:98:1f:75:
a6:ae:c4:98:e2:50:f9:d7:67:f7:61:4f:e5:2d:18:
eb:d9:cb:38:d6:64:07:77:bb:6d:2e:fc:07:71:57:
6b:b9:cb:c4:e0:1d:f3:d2:d7:c6:41:ad:18:ab:3b:
c4:fb:10:f1:64:84:db:5a:af:41:b3:c1:5b:da:c4:
02:85:99:16:71:20:0e:aa:fa:2c:a2:37:8e:67:a8:
4b:4f:9c:bc:30:ec:50:1c:eb:e3:81:3c:6d:73:f9:
e8:a3:4a:b9:4e:65:22:d6:cc:31:90:3c:06:83:bc:
b7:d6:b8:4d:0b:d5:30:22:31:8b:50:3b:14:84:ed:
48:6c:09:ac:72:de:03:ca:54:cd:f3:a4:7f:d7:b3:
1f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3F:71:0D:43:8D:4D:07:4D:1A:1D:87:EE:94:75:8F:C0:C9:6F:85
X509v3 Authority Key Identifier:
keyid:D0:F0:E2:C8:C1:4A:82:4B:54:E0:0B:D9:47:9A:48:5D:71:BF:E4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PDiyMFKgktU4AvZR5pIXXG_5HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/vz9xDUONTQdNGh2H7pR1j8DJb4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/217726-2df2-47af-a0ea-d94131da861d/1/0PDiyMFKgktU4AvZR5pIXXG_5HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.122.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:68:65:70:ad:79:5b:86:28:0d:2c:e2:a0:81:48:d0:05:87:
00:31:b0:a0:6d:9b:20:c6:7d:7b:0d:48:d3:7d:bd:2e:ec:df:
d1:fb:c0:65:9a:c3:d4:e3:c5:ca:de:e0:a6:96:24:87:c0:d1:
53:67:bd:59:26:6b:95:f3:22:2a:a9:8c:31:38:05:9d:9d:40:
0a:ef:55:44:0c:94:d3:c2:3c:15:77:2e:9c:e1:13:36:54:e4:
aa:66:98:d5:d6:dc:fb:ab:e9:e1:a6:f0:a7:a1:23:68:ed:8d:
ee:c9:d4:9d:28:9a:78:e1:2d:27:67:10:e2:dd:46:ab:50:5d:
0f:e6:64:48:6d:2f:c4:6c:96:4d:00:93:95:f1:46:c1:e5:88:
f2:d2:62:49:59:1b:33:26:11:26:12:4b:34:29:b5:65:f2:97:
69:30:4a:2b:ce:a8:71:06:21:56:d7:ac:d6:5c:f5:c1:4a:35:
50:7f:e6:4c:74:76:ed:7d:c2:65:64:27:bf:b7:80:d2:e3:4c:
65:e9:31:6a:4b:a6:c1:be:d7:91:44:88:8d:8a:0d:29:a7:db:
3f:e1:52:de:12:99:ce:75:60:69:27:fd:9f:bd:de:8b:9c:79:
04:7b:4b:8d:34:ca:b5:92:15:83:c8:be:94:00:80:a4:9e:7d:
e8:a2:05:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:24:12 2026 by rpki-client