Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/c2cpLShv5rQ9tAnCfLPQGcIi9zQ.roa
File: c2cpLShv5rQ9tAnCfLPQGcIi9zQ.roa (raw, json)
Hash identifier: keHfC6hFIV+uXABwxXoJHILHVWnfDzah70mShL6VTc4=
Subject key identifier: 73:67:29:2D:28:6F:E6:B4:3D:B4:09:C2:7C:B3:D0:19:C2:22:F7:34
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 01A0C41ECA07CE8D874626838EBCD64ECA67
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/c2cpLShv5rQ9tAnCfLPQGcIi9zQ.roa
Signing time: Mon 21 Sep 2026 13:19:07 +0000
ROA not before: Mon 21 Sep 2026 13:19:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204275
IP address blocks: 91.120.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:1e:ca:07:ce:8d:87:46:26:83:8e:bc:d6:4e:ca:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Sep 21 13:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7367292d286fe6b43db409c27cb3d019c222f734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:a4:8b:34:39:f2:5f:30:47:84:2a:0e:01:
46:31:2c:af:26:31:20:44:92:1a:15:9f:c5:b0:a4:
cb:14:0e:96:3f:ba:13:89:17:52:ae:6f:c5:59:a5:
47:1b:cf:f8:d1:76:7c:3a:19:ab:38:15:f8:e1:71:
63:dd:d9:76:da:1a:61:9b:74:3b:7f:bf:bb:2c:0e:
85:03:0b:5a:f7:ff:d6:79:c5:aa:25:7e:6e:45:00:
bd:1c:7d:5f:94:3d:88:30:98:59:83:22:cc:23:5e:
82:aa:4b:ee:a9:69:88:ad:ca:5a:e1:1e:d6:9a:9e:
47:86:05:44:76:28:80:89:be:7c:b6:d5:9c:be:f8:
6e:19:99:4f:0f:8f:e8:e9:86:9f:94:c6:7c:de:f8:
4b:dc:44:3e:b1:76:cd:91:a0:72:1f:d2:f6:7a:ea:
79:78:0b:7a:9b:73:d2:05:53:a0:b5:ac:51:66:19:
19:0b:57:ef:50:5b:1b:78:fb:21:b2:78:27:30:cd:
4b:3a:01:77:05:c9:fa:5f:9e:df:e9:bf:71:0a:3b:
ad:41:cf:90:26:ba:13:40:9e:b0:b3:8c:68:67:4f:
48:bd:a8:ee:f1:11:22:c4:8a:79:c8:e2:12:64:4e:
5a:39:dc:65:a1:46:67:7c:af:ab:42:b3:b1:37:e9:
ed:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:67:29:2D:28:6F:E6:B4:3D:B4:09:C2:7C:B3:D0:19:C2:22:F7:34
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/c2cpLShv5rQ9tAnCfLPQGcIi9zQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.120.47.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:36:a6:3d:ee:d9:40:4a:01:f8:9e:5f:e7:b9:de:5d:65:85:
7f:2a:af:68:44:2a:6f:08:3a:a2:a3:6d:19:4c:bc:6b:fd:4b:
b5:6d:ce:67:b0:ef:2e:b1:98:5b:c0:a2:12:9d:89:54:ab:12:
98:68:ad:77:08:60:0a:3e:d2:aa:f6:ed:3a:51:aa:39:c2:92:
06:c0:7e:10:75:46:e7:f1:8a:9d:ce:44:93:31:1f:22:e7:a5:
8f:dd:27:93:47:f3:98:05:26:6f:5f:c7:65:c6:ac:66:e0:a5:
a5:62:24:2d:ab:e2:61:6d:73:83:b5:75:d3:2a:19:3b:19:08:
0d:19:a9:bc:73:c1:f3:d5:22:66:26:8c:39:16:e5:6b:28:b8:
ed:22:65:19:cd:82:33:da:a0:2b:9d:9b:f0:ca:ef:a8:44:36:
31:90:62:14:12:45:d9:35:3f:c9:e1:72:09:95:a5:77:f4:23:
0b:f3:60:5e:1f:ee:84:02:86:a4:4f:b1:bc:93:f0:f6:6e:e7:
34:98:84:f4:5b:a4:90:1c:5f:0f:63:8c:91:3b:9e:11:bc:84:
5b:25:3c:99:c6:6d:b7:83:ea:0f:54:67:45:10:2f:dd:da:4a:
45:be:04:0a:48:23:4c:7d:d9:fc:90:b3:2f:9e:1d:ca:2f:23:
fc:fb:3d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:57:32 2026 by rpki-client