Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/TEXm9KrsMUEKUPk1jEnmZgD0IK0.roa
File: TEXm9KrsMUEKUPk1jEnmZgD0IK0.roa (raw, json)
Hash identifier: eO/8L9pLcpErOVloeSJcO/Ypgo8LgxO3Ojcx2J5Fa8g=
Subject key identifier: 4C:45:E6:F4:AA:EC:31:41:0A:50:F9:35:8C:49:E6:66:00:F4:20:AD
Certificate issuer: /CN=59dd05746f9a288756c30afa8c45995b775055f8
Certificate serial: 019B7EA526129C7ED08956AEC3618B8C2855
Authority key identifier: 59:DD:05:74:6F:9A:28:87:56:C3:0A:FA:8C:45:99:5B:77:50:55:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/TEXm9KrsMUEKUPk1jEnmZgD0IK0.roa
Signing time: Fri 02 Jan 2026 12:18:31 +0000
ROA not before: Fri 02 Jan 2026 12:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210234
IP address blocks: 91.233.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a5:26:12:9c:7e:d0:89:56:ae:c3:61:8b:8c:28:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd05746f9a288756c30afa8c45995b775055f8
Validity
Not Before: Jan 2 12:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c45e6f4aaec31410a50f9358c49e66600f420ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:6a:45:38:be:e7:07:fe:b3:c1:cc:81:39:
7e:a4:ee:db:fd:36:4d:51:b9:d7:89:fd:47:95:53:
32:c0:f9:f0:2a:2a:ac:a2:9f:d4:bd:d6:d3:0e:36:
29:62:90:4c:4b:9c:d2:27:f3:08:ed:97:5b:24:ba:
57:35:d8:bf:20:2c:b4:32:7e:0a:16:ea:24:e1:18:
fc:36:e4:29:12:ce:ad:21:c9:60:ba:a9:47:15:4e:
a0:73:2b:b0:ec:c8:1f:7d:83:41:80:72:47:73:0a:
bb:26:5d:29:f8:85:25:1b:a8:a0:13:83:f5:d9:7e:
9d:e1:23:81:0e:62:b7:35:81:80:61:57:2d:07:6a:
c5:10:aa:d1:82:d8:91:00:1d:1a:1f:61:3f:6f:fa:
d3:f7:8f:0d:34:9f:b9:af:bb:fb:2e:c7:f0:58:ad:
a1:23:17:bf:1c:76:32:96:8c:35:3c:e6:87:4a:5d:
04:fb:04:9c:db:20:23:53:1f:e8:f7:23:0f:ef:ea:
f6:55:01:d9:c8:5c:17:c6:a1:79:0b:b9:e0:bb:cf:
f8:b2:69:4f:2d:6d:b1:70:62:34:0f:e2:a8:c5:0b:
b5:8d:43:8f:f7:8a:cc:30:cc:9d:7b:07:6a:1c:a6:
df:a3:f1:80:27:e1:b0:96:6b:2c:de:da:ee:fb:4c:
d2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:45:E6:F4:AA:EC:31:41:0A:50:F9:35:8C:49:E6:66:00:F4:20:AD
X509v3 Authority Key Identifier:
keyid:59:DD:05:74:6F:9A:28:87:56:C3:0A:FA:8C:45:99:5B:77:50:55:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/TEXm9KrsMUEKUPk1jEnmZgD0IK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.104.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:fa:5a:25:e4:dd:16:b1:46:68:1b:cb:30:51:dd:45:c9:59:
a5:4f:9c:d6:bf:9a:c1:c3:12:13:e4:36:b6:c6:07:a8:4f:c4:
13:ae:5f:63:9c:fa:a6:44:ad:7f:ab:59:78:43:12:62:c6:45:
87:dd:02:05:87:94:40:f1:f7:e1:07:4e:1c:4d:8d:ed:78:98:
b5:f4:9c:1d:ee:8a:53:fc:6d:14:a4:c5:f7:38:e1:9c:ec:00:
72:1d:65:d2:a4:fe:9c:9c:6a:2b:af:ed:d7:fa:e4:98:8c:45:
62:8e:b4:14:ab:b5:f2:8c:91:01:58:7a:40:17:91:fe:2a:5c:
44:19:a7:94:52:79:d6:49:93:68:f3:a2:30:d2:9e:9c:76:3e:
71:b8:8a:07:dd:82:43:4b:cc:3c:f0:ba:29:29:39:ba:02:49:
6a:32:27:b5:31:5c:94:c0:f5:a1:06:02:29:7c:c2:8f:bb:db:
30:dd:50:9e:d3:23:76:17:9f:35:34:f1:38:80:4b:ef:a9:86:
43:f3:7f:df:57:0c:6a:c4:9e:dc:c9:c0:cc:f1:d6:b3:ac:b9:
c1:35:7f:f6:cb:7b:b5:8d:d9:52:f5:d6:76:ce:08:8a:82:75:
f6:c8:91:6e:f0:9b:30:73:c2:f2:9d:23:42:ad:d4:5e:b4:44:
df:4a:d3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:45:53 2026 by rpki-client