Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/91IHOy5Nc4CWoy_eWfl9yWFO4Ww.roa
File: 91IHOy5Nc4CWoy_eWfl9yWFO4Ww.roa (raw, json)
Hash identifier: 90s5uXSV7H+9vRaDDjLOzlHZrSmJ3myWDf1NIkj6TiE=
Subject key identifier: F7:52:07:3B:2E:4D:73:80:96:A3:2F:DE:59:F9:7D:C9:61:4E:E1:6C
Certificate issuer: /CN=1201cc343074102efa7f0c30f29499e1ad56e29f
Certificate serial: 019F1D9B4803112A10D860EA2DE2F35C2790
Authority key identifier: 12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/91IHOy5Nc4CWoy_eWfl9yWFO4Ww.roa
Signing time: Wed 01 Jul 2026 12:15:43 +0000
ROA not before: Wed 01 Jul 2026 12:15:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200159
IP address blocks: 185.41.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:9b:48:03:11:2a:10:d8:60:ea:2d:e2:f3:5c:27:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1201cc343074102efa7f0c30f29499e1ad56e29f
Validity
Not Before: Jul 1 12:15:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f752073b2e4d738096a32fde59f97dc9614ee16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:26:37:80:e9:39:91:7f:cd:ff:66:10:20:
0e:97:47:b4:8c:1d:7d:c5:34:e8:a1:15:68:bf:53:
90:c9:94:f5:86:d0:0b:a3:fc:1e:39:59:91:40:1f:
51:c3:7b:05:1e:84:02:11:cd:73:a0:95:12:33:e4:
f8:84:88:55:44:d9:c4:de:17:13:3f:ab:76:74:bf:
45:59:79:7b:4f:c9:cf:8e:81:e9:9d:40:23:70:49:
a3:3d:91:06:29:9a:75:f3:83:a6:19:24:da:24:85:
7a:b8:b1:14:08:51:c3:3e:ff:80:6b:cd:fe:2f:11:
d0:ed:08:51:91:2b:31:93:f5:07:f4:ef:f1:76:82:
33:c5:f5:e5:6e:4e:75:59:44:18:62:34:9c:b5:80:
73:9e:85:8f:a4:6b:88:d2:af:41:dc:85:18:af:e9:
0b:f0:6f:f4:85:6d:9c:e2:e6:da:7c:93:75:b5:13:
86:83:7e:97:3f:b9:51:00:2e:5c:81:31:1c:ed:85:
f5:ce:d2:2d:51:0a:f8:c7:d6:38:44:d5:56:e9:8e:
5f:58:7f:93:fa:ae:14:58:be:0c:86:52:9d:1b:da:
85:5f:d6:14:ec:4b:47:d2:f8:a1:d7:ce:7f:ac:5d:
19:6b:2c:80:f7:b8:12:9b:0c:75:15:50:bc:4b:b8:
99:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:52:07:3B:2E:4D:73:80:96:A3:2F:DE:59:F9:7D:C9:61:4E:E1:6C
X509v3 Authority Key Identifier:
keyid:12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/91IHOy5Nc4CWoy_eWfl9yWFO4Ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.12.0/24
Signature Algorithm: sha256WithRSAEncryption
51:e0:83:10:ee:95:70:74:71:3e:94:9f:be:42:b8:dd:2d:ad:
ff:a6:4d:7d:f5:57:fd:c8:5f:fc:d9:1a:f4:d2:dc:ba:9e:e2:
54:63:b9:b8:a4:f6:d2:45:af:33:6a:d0:ea:1b:91:cc:f8:71:
04:94:9d:cd:2d:21:6d:0c:46:3f:0f:84:86:57:e6:29:f4:b1:
ad:01:17:bb:e0:01:d7:e3:04:37:f2:cd:dd:4b:de:58:08:8e:
4c:0a:7e:30:12:eb:80:e0:43:ae:ef:37:3c:61:8a:86:f1:31:
86:2e:68:fa:22:91:dd:1b:da:65:64:6e:92:4f:33:b8:45:8d:
b6:8f:0d:98:3d:22:55:4a:87:f1:43:71:ad:45:08:ea:2a:91:
a3:30:eb:0c:62:9a:b6:ee:e8:65:62:5f:45:17:fc:31:04:76:
35:61:be:a6:9f:83:ee:4f:73:9b:e2:d2:01:31:a4:06:5f:3f:
1e:67:a4:1d:b8:cf:b8:d8:62:c0:91:11:2d:c9:20:50:f4:c8:
fc:fd:70:e0:6b:72:50:60:57:28:7a:cd:0c:ed:2c:b6:91:ad:
c8:c9:d8:07:f5:37:0c:dd:c0:c6:e6:cb:3a:f0:1e:fb:e5:4d:
f0:15:e9:5c:72:2b:cb:72:55:95:60:69:6d:18:30:28:74:73:
c4:7b:44:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:19:54 2026 by rpki-client