Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/DXFnpgsoAJDSh1GQIY3dLsC542M.roa
File: DXFnpgsoAJDSh1GQIY3dLsC542M.roa (raw, json)
Hash identifier: aPR1e33+9EP8BG3ZvfZllvca2KoUBSV0RYS/0Gf7RO0=
Subject key identifier: 0D:71:67:A6:0B:28:00:90:D2:87:51:90:21:8D:DD:2E:C0:B9:E3:63
Certificate issuer: /CN=8cc44984c686f2018c48102a284ab5a80f52a646
Certificate serial: 01A085E895029986B705314C30BB54015494
Authority key identifier: 8C:C4:49:84:C6:86:F2:01:8C:48:10:2A:28:4A:B5:A8:0F:52:A6:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/DXFnpgsoAJDSh1GQIY3dLsC542M.roa
Signing time: Wed 09 Sep 2026 11:23:27 +0000
ROA not before: Wed 09 Sep 2026 11:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57066
IP address blocks: 91.229.137.0/24 maxlen: 24
91.229.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:e8:95:02:99:86:b7:05:31:4c:30:bb:54:01:54:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cc44984c686f2018c48102a284ab5a80f52a646
Validity
Not Before: Sep 9 11:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d7167a60b280090d2875190218ddd2ec0b9e363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:b9:fa:e4:53:bb:6c:ee:b3:ff:1a:3f:05:
5a:bb:cc:a3:05:c9:d8:a2:e5:87:c6:20:e4:19:8e:
0b:e0:fa:2c:d0:0d:43:67:a7:52:3b:03:ac:aa:ef:
e1:64:ce:63:85:eb:7c:ca:49:eb:c1:70:c4:7b:fa:
91:48:a1:d9:fb:49:b6:b9:6a:b8:92:ab:95:fe:9c:
44:9c:4e:39:ef:a5:45:af:5a:5f:83:7e:fc:50:04:
f7:5b:e2:e8:0b:70:e1:19:63:d7:bf:a5:b1:cb:c1:
ec:b6:3a:91:05:0f:0c:c7:53:99:76:39:1d:34:5b:
ec:0b:8f:dd:97:9e:d9:f8:5d:64:b7:cb:4d:e7:a5:
15:fd:92:c1:1d:6d:eb:35:3d:99:be:28:ca:5b:21:
e0:d9:a3:61:29:f0:76:83:cd:47:de:95:e5:c7:2d:
30:97:1b:0a:7a:54:d7:3a:fc:d3:45:7f:1c:c6:08:
54:74:b7:fc:2c:b0:e3:5f:2a:7f:25:e4:f4:f1:ed:
9f:4a:fd:bd:85:7f:e6:06:c8:d3:fe:0d:fa:f8:46:
4b:25:00:25:5a:65:ce:eb:5e:42:b4:e5:dd:46:eb:
88:8c:a9:ef:1d:ae:01:9c:2b:b1:74:14:b5:65:bf:
23:75:b8:f4:87:1a:27:e9:79:9f:18:77:a5:c3:ca:
c8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:71:67:A6:0B:28:00:90:D2:87:51:90:21:8D:DD:2E:C0:B9:E3:63
X509v3 Authority Key Identifier:
keyid:8C:C4:49:84:C6:86:F2:01:8C:48:10:2A:28:4A:B5:A8:0F:52:A6:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/DXFnpgsoAJDSh1GQIY3dLsC542M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.137.0-91.229.139.255
Signature Algorithm: sha256WithRSAEncryption
10:4d:16:f0:01:b8:5c:d8:0b:98:bf:1e:f9:6c:6b:bf:10:43:
f3:00:7a:77:be:40:f5:8d:ca:54:e4:82:6b:30:63:b7:e1:59:
de:4d:08:0b:ab:ab:8e:7c:a9:55:94:fa:bd:87:c7:81:f3:74:
6a:39:5b:c7:f6:e6:aa:a4:3c:2b:f4:64:2c:5b:6a:9c:08:81:
63:41:01:19:54:c5:29:22:e2:61:ef:dc:a8:11:19:ee:43:99:
8d:97:ce:80:db:d4:4f:47:dc:6d:0e:b8:7b:4c:9c:e7:15:b0:
05:39:2e:bd:e1:48:ed:db:6c:ae:6a:9d:48:9f:b2:a0:69:1a:
c5:42:d9:37:e4:1a:98:64:e0:6a:55:13:1c:df:7e:a2:52:71:
b3:2a:b9:bb:19:c0:36:c8:40:37:8e:65:bc:83:2c:0b:75:39:
3f:8f:fa:7b:06:f3:6c:28:74:a2:36:b2:c9:ba:60:14:8c:5e:
a7:48:c9:71:c8:99:1e:3d:0f:76:33:67:d5:96:ed:8d:61:d8:
46:a5:9e:bd:2d:df:89:86:5c:ef:02:41:a5:f1:d1:e3:01:70:
ec:9d:8c:56:ff:d4:06:01:bf:4e:9f:21:48:00:34:58:51:c9:
55:65:78:3e:39:9e:a1:b9:1c:f3:88:82:57:cf:4d:fa:18:bf:
50:d0:20:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:30:08 2026 by rpki-client