Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/rPzbphQ7hSaP-mBEYCTEXpwW11Q.roa
File: rPzbphQ7hSaP-mBEYCTEXpwW11Q.roa (raw, json)
Hash identifier: lLarn7yxxi9uME4ugayt7nYIZmjyTGZ3vzJyeQkWW7Q=
Subject key identifier: AC:FC:DB:A6:14:3B:85:26:8F:FA:60:44:60:24:C4:5E:9C:16:D7:54
Certificate issuer: /CN=eee36eba8d5b3fe95f3201ab2d11675ea01c781c
Certificate serial: 019B76EB79FE1A74BEE8DD0763252B14DD06
Authority key identifier: EE:E3:6E:BA:8D:5B:3F:E9:5F:32:01:AB:2D:11:67:5E:A0:1C:78:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uNuuo1bP-lfMgGrLRFnXqAceBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/rPzbphQ7hSaP-mBEYCTEXpwW11Q.roa
Signing time: Thu 01 Jan 2026 00:18:22 +0000
ROA not before: Thu 01 Jan 2026 00:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43867
IP address blocks: 91.198.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7uNuuo1bP-lfMgGrLRFnXqAceBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:79:fe:1a:74:be:e8:dd:07:63:25:2b:14:dd:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eee36eba8d5b3fe95f3201ab2d11675ea01c781c
Validity
Not Before: Jan 1 00:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=acfcdba6143b85268ffa60446024c45e9c16d754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:03:65:d8:35:1a:9d:fe:51:28:9a:62:02:0e:
9f:de:dd:f8:8d:33:8b:b9:55:38:6a:b8:f2:98:1b:
a6:39:24:6e:73:47:a1:1a:3e:f1:ac:57:48:2f:bd:
a9:7c:7b:e9:cd:86:f7:b6:54:61:86:45:bc:17:e1:
95:24:cc:e9:c7:e1:44:09:49:49:b7:19:5d:5f:73:
63:fb:19:0c:1c:4c:88:66:4e:ca:f9:06:00:e3:0e:
65:6d:ad:4b:a9:8d:58:a7:72:33:ca:c5:78:a2:46:
eb:82:2d:fa:79:24:e5:40:89:74:47:92:f7:e4:05:
a8:ef:5b:3a:53:3d:0f:e0:1e:09:72:63:dd:8f:24:
f9:11:0a:84:b2:d8:da:52:d1:6b:8b:d6:59:42:10:
83:cd:e6:d8:af:30:17:52:c0:5c:e3:dd:b8:a7:7f:
a2:61:b6:0d:e4:ed:ce:6e:e8:32:2d:a7:12:b8:5b:
2e:da:da:46:0a:98:74:73:c5:d2:e2:a2:31:53:4b:
91:22:52:07:7e:af:a8:39:ad:c2:bf:a3:95:16:93:
e9:8f:b0:d6:d9:d0:80:2b:e0:09:ee:d1:c3:33:e7:
69:be:0a:14:f9:44:d8:8a:6a:02:c8:3d:b4:af:c0:
27:4e:4c:fe:57:32:ad:98:84:c7:10:81:70:ee:de:
69:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FC:DB:A6:14:3B:85:26:8F:FA:60:44:60:24:C4:5E:9C:16:D7:54
X509v3 Authority Key Identifier:
keyid:EE:E3:6E:BA:8D:5B:3F:E9:5F:32:01:AB:2D:11:67:5E:A0:1C:78:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uNuuo1bP-lfMgGrLRFnXqAceBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/rPzbphQ7hSaP-mBEYCTEXpwW11Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.194.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:79:5e:c7:b1:a3:70:a8:c5:4a:fb:87:9f:10:86:9b:66:a0:
b5:ae:2a:32:83:08:97:6b:18:3f:fd:39:d3:9e:2a:1a:f2:13:
58:c4:ff:45:73:71:42:be:a7:20:c4:8d:2c:cb:74:41:06:9f:
07:53:ae:f3:19:78:a8:f5:5d:d3:93:0d:37:22:3d:68:d4:a2:
5d:48:2f:d2:0d:d9:56:4b:b0:61:cb:83:29:f8:e0:f9:40:05:
8e:3a:ec:9e:5b:b7:13:98:83:75:0c:02:42:16:58:15:d3:91:
27:1f:3e:96:ae:f0:a7:cd:5e:3b:bf:bf:1b:4d:b8:78:50:86:
cb:1b:9e:64:c4:2c:1f:af:fe:a9:ce:f5:b9:e7:57:a8:50:5e:
c0:c5:8c:50:cc:f1:f6:44:b8:b8:9e:bf:72:24:d2:82:e2:f6:
96:d7:b3:58:0f:ba:f1:77:94:49:46:32:70:60:7a:d2:71:2e:
5d:97:30:43:15:28:c6:9b:e2:93:af:cb:57:79:b5:3d:63:9e:
89:56:48:35:3f:7c:a0:ff:0b:ea:57:12:fe:da:25:4b:6b:16:
1c:1e:00:2a:96:6b:27:48:4c:3e:e2:92:f2:16:b6:cc:10:89:
7a:fb:5b:fc:c7:c2:9b:8b:33:cd:64:32:b2:06:d2:08:40:5a:
4a:e1:91:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:06:17 2026 by rpki-client