Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/dHFk08gJmB0tFkgpJNYQpeItYJE.roa
File: dHFk08gJmB0tFkgpJNYQpeItYJE.roa (raw, json)
Hash identifier: T5a0svL8hEV805qPD4BMTFrTEgZKRlATlMErknBPEjk=
Subject key identifier: 74:71:64:D3:C8:09:98:1D:2D:16:48:29:24:D6:10:A5:E2:2D:60:91
Certificate issuer: /CN=60a971da57e54e4c3e530a0f7a492fdeea389a08
Certificate serial: 019F236880FB6697D37E4C5C12D59008AB8F
Authority key identifier: 60:A9:71:DA:57:E5:4E:4C:3E:53:0A:0F:7A:49:2F:DE:EA:38:9A:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKlx2lflTkw-UwoPekkv3uo4mgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/dHFk08gJmB0tFkgpJNYQpeItYJE.roa
Signing time: Thu 02 Jul 2026 15:17:59 +0000
ROA not before: Thu 02 Jul 2026 15:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61336
IP address blocks: 91.247.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKlx2lflTkw-UwoPekkv3uo4mgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:80:fb:66:97:d3:7e:4c:5c:12:d5:90:08:ab:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a971da57e54e4c3e530a0f7a492fdeea389a08
Validity
Not Before: Jul 2 15:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=747164d3c809981d2d16482924d610a5e22d6091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f1:27:08:fd:54:54:2a:b0:72:24:79:8e:19:
b6:66:13:4a:6b:67:7a:f6:ad:0b:b2:75:cf:24:e0:
0f:cc:50:1f:52:8b:10:3b:e9:8c:69:54:84:72:96:
ca:58:f4:e4:69:4f:b1:4f:2b:57:d6:76:38:95:65:
a3:b4:a5:b1:19:2f:14:6a:f3:dc:93:90:b0:6c:c5:
6d:34:b7:64:a2:15:88:98:06:dd:b3:bd:e4:ac:e0:
9b:11:28:02:58:1d:69:2f:d9:56:62:18:5e:50:10:
7f:6b:51:31:da:96:81:67:bb:27:4f:f2:39:2f:de:
7a:78:e7:dc:3d:48:f7:cd:5f:a2:60:c9:40:b8:cf:
34:17:c7:76:fa:e3:d4:12:b4:f7:f3:05:f3:13:f6:
b6:a8:57:7f:10:25:df:ec:dd:3b:70:d0:b0:18:f6:
db:72:55:43:b7:34:a4:b3:b9:f8:2e:59:ac:22:8b:
6a:e3:b2:c0:04:94:e0:52:6d:ba:68:ce:2d:96:cc:
d1:9f:ea:7a:39:83:bc:f4:25:94:50:c1:07:ed:9c:
06:4f:b5:2b:3f:60:59:f1:94:00:01:f7:3e:c4:09:
f9:77:ad:26:89:9c:45:67:0d:e3:8c:3b:f7:1c:91:
12:0c:d4:f7:43:87:59:c4:ff:79:38:88:e0:af:f3:
49:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:71:64:D3:C8:09:98:1D:2D:16:48:29:24:D6:10:A5:E2:2D:60:91
X509v3 Authority Key Identifier:
keyid:60:A9:71:DA:57:E5:4E:4C:3E:53:0A:0F:7A:49:2F:DE:EA:38:9A:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKlx2lflTkw-UwoPekkv3uo4mgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/dHFk08gJmB0tFkgpJNYQpeItYJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/YKlx2lflTkw-UwoPekkv3uo4mgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.38.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:c8:0b:e4:dd:4c:ed:9d:f1:15:62:07:89:da:3e:57:93:d5:
3a:ec:d8:58:43:6b:4d:bd:3c:cb:54:3e:9a:07:73:50:3f:a0:
cc:2b:3a:7d:85:6e:14:8f:03:bd:c5:b1:e8:ad:7e:5b:db:d8:
b8:99:39:22:66:dd:6f:b4:f8:53:64:e7:04:15:1a:80:9c:78:
0b:16:3f:46:75:00:61:96:2e:84:9a:72:2b:44:72:e4:bd:4a:
7a:4a:b0:b4:b4:c2:2c:f2:1e:f0:84:07:96:21:4a:92:95:0a:
28:3e:06:f3:46:46:bd:57:e4:fd:c0:5f:fb:06:30:6b:8c:e3:
62:8b:f6:5b:c6:39:a5:7b:76:fd:c9:fc:c8:5c:a6:c6:eb:e1:
ed:f3:58:d0:98:1f:1b:66:03:a3:2d:f9:2b:01:a2:ae:0a:87:
98:fa:08:a9:05:c3:56:44:a8:fc:2b:6d:fd:80:99:5d:d9:07:
1a:d4:f4:e0:7b:24:a9:97:5a:f8:01:5e:fe:75:66:d1:be:90:
76:7e:0d:a9:1b:03:bd:0d:ee:52:8e:70:e5:d6:4c:04:cf:c7:
a0:a6:68:2b:69:8e:09:da:82:18:a7:dc:8c:39:a9:40:1f:e5:
56:89:ba:5c:4c:ee:ea:8e:f7:3e:44:52:d9:6c:c8:78:d0:93:
9b:12:f7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:40:43 2026 by rpki-client