Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/59pj5vxlXpnK-XW5WwGqyEvdvU4.roa
File: 59pj5vxlXpnK-XW5WwGqyEvdvU4.roa (raw, json)
Hash identifier: JfG2EIx3IMJpZJW/JIpT9Ra8SYgVicx3XtVxcMb037E=
Subject key identifier: E7:DA:63:E6:FC:65:5E:99:CA:F9:75:B9:5B:01:AA:C8:4B:DD:BD:4E
Certificate issuer: /CN=8c9103d1a934251bb98b11f169cb8b2bdec6a239
Certificate serial: 019F2368DC2B2FAA20073D8C1DB90F7600B9
Authority key identifier: 8C:91:03:D1:A9:34:25:1B:B9:8B:11:F1:69:CB:8B:2B:DE:C6:A2:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJED0ak0JRu5ixHxacuLK97Gojk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/59pj5vxlXpnK-XW5WwGqyEvdvU4.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42199
IP address blocks: 91.189.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJED0ak0JRu5ixHxacuLK97Gojk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:dc:2b:2f:aa:20:07:3d:8c:1d:b9:0f:76:00:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9103d1a934251bb98b11f169cb8b2bdec6a239
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7da63e6fc655e99caf975b95b01aac84bddbd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:50:b5:a1:32:79:d8:c6:9f:7b:64:56:6d:95:
b8:31:d2:3d:fc:52:c3:77:af:4a:ed:3b:08:26:02:
e6:c6:fd:6f:df:11:3c:12:00:43:8c:25:1d:b8:69:
63:0f:48:70:32:eb:1f:e9:f9:fc:41:31:cc:1f:d0:
db:1e:38:b2:ab:b2:3a:0d:80:54:a1:3f:88:0c:2d:
9e:1b:71:54:b3:c2:4b:0c:11:00:a8:1f:38:84:f9:
0d:e9:e7:ff:39:5b:69:b9:1d:25:0c:9d:d6:d2:94:
cb:e7:df:35:83:21:3d:12:9e:24:6a:e1:fd:b3:11:
cc:f2:73:e0:56:c9:5f:a1:10:e9:d1:d1:c1:66:ea:
14:b7:a0:7d:0a:2d:df:97:da:4a:9f:4e:56:ad:98:
f3:10:62:4c:25:e4:44:29:37:47:49:56:71:dd:cc:
ec:17:60:41:9c:e3:09:7d:f9:e3:1a:a4:a3:10:e3:
86:e0:7a:bc:b0:46:b7:70:82:d5:0b:6f:58:d6:2c:
4a:f8:05:0d:da:df:3b:aa:e7:62:19:01:2f:4a:64:
98:60:9e:42:0c:90:c4:47:e7:7d:1c:78:52:76:49:
cb:a4:0d:89:d9:cc:0f:20:17:ad:de:42:06:15:81:
2a:1c:69:75:5c:bd:59:9a:a9:3d:54:ab:ad:17:dc:
9a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DA:63:E6:FC:65:5E:99:CA:F9:75:B9:5B:01:AA:C8:4B:DD:BD:4E
X509v3 Authority Key Identifier:
keyid:8C:91:03:D1:A9:34:25:1B:B9:8B:11:F1:69:CB:8B:2B:DE:C6:A2:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJED0ak0JRu5ixHxacuLK97Gojk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/59pj5vxlXpnK-XW5WwGqyEvdvU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.189.63.0/24
Signature Algorithm: sha256WithRSAEncryption
69:25:eb:e7:4c:01:b4:0c:b4:93:d5:83:99:7c:b6:73:8b:46:
e5:07:80:5f:66:c8:00:28:29:22:26:6e:2b:89:db:de:90:fb:
d0:bd:9e:ea:19:91:9a:fa:d9:dd:1a:dc:f3:1e:5e:fd:11:de:
ae:58:fb:a1:70:03:b3:c3:d6:f2:db:d5:ae:00:dc:d9:f8:39:
76:d0:d6:09:fd:27:16:5e:e8:1f:f7:75:6e:13:6f:08:96:ff:
e9:91:91:66:8e:8d:0e:f0:81:76:97:5a:1d:1d:c4:96:f4:c7:
1d:7f:f0:3d:41:2b:b6:d0:06:3d:24:e7:14:8c:e0:42:e9:a9:
44:e4:bc:9a:a9:1a:49:30:ef:b9:26:dd:3a:78:4c:3c:8a:7b:
69:02:0e:43:29:a8:a1:84:65:b3:69:7c:70:17:87:7b:b2:b8:
e0:59:f3:0c:24:18:ec:9a:98:bb:39:9b:67:d8:76:04:f9:5c:
ae:3b:77:c5:5b:de:d4:0d:ee:6f:c2:6c:9c:ee:52:bd:a0:ed:
6b:92:95:35:98:47:ac:4e:12:f9:ec:a3:23:9d:ae:f3:ee:af:
81:fa:b9:e6:6b:07:9a:66:1b:41:36:bf:7c:1d:59:da:57:a6:
7e:92:b8:b5:22:36:49:44:11:59:f5:95:e3:e3:ca:76:26:0f:
bf:31:45:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:16:02 2026 by rpki-client