Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/h9XQo9sfSkFCznhFBhUYj0IPxa8.roa
File: h9XQo9sfSkFCznhFBhUYj0IPxa8.roa (raw, json)
Hash identifier: zxh5OD7tf1cu+nIhR68MGPvOj/rjhARaVJK2XbbAHBI=
Subject key identifier: 87:D5:D0:A3:DB:1F:4A:41:42:CE:78:45:06:15:18:8F:42:0F:C5:AF
Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Certificate serial: 019F226AAB63B62BC960C4FD26E363AF8548
Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/h9XQo9sfSkFCznhFBhUYj0IPxa8.roa
Signing time: Thu 02 Jul 2026 10:40:43 +0000
ROA not before: Thu 02 Jul 2026 10:40:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42861
IP address blocks: 77.91.96.0/23 maxlen: 23
91.214.78.0/24 maxlen: 24
2a00:1e68::/32 maxlen: 32
2a00:1e68:100::/47 maxlen: 47
2a00:1e68:100::/48 maxlen: 48
2a00:1e68:101::/48 maxlen: 48
2a00:1e68:112::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:6a:ab:63:b6:2b:c9:60:c4:fd:26:e3:63:af:85:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Validity
Not Before: Jul 2 10:40:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87d5d0a3db1f4a4142ce78450615188f420fc5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:1e:d2:30:6d:d6:07:6f:65:c7:2a:8c:0d:
47:14:47:ba:15:ae:5c:a0:a7:e8:01:19:ad:a3:04:
48:63:58:e0:92:ff:bf:93:5a:cc:39:6a:2c:bf:c3:
74:ae:26:c0:ca:39:92:27:63:46:93:29:e7:b8:57:
ad:64:e3:0e:77:24:09:48:b8:a7:64:53:c8:bd:95:
1d:2d:bc:15:85:61:d7:f1:a3:17:0a:35:2e:01:ef:
d2:fa:3c:8b:45:a2:c1:3d:95:e6:25:3e:35:0a:99:
68:93:f9:49:4e:12:85:34:79:bb:3e:53:29:ff:ee:
1c:66:aa:52:01:b2:85:81:ca:7b:35:36:d9:18:74:
54:16:e2:d6:c6:77:ec:b0:eb:82:13:2d:94:d6:a9:
59:2f:ea:0f:00:4c:54:f9:0e:46:6e:c2:c5:9e:3a:
c4:a0:ef:b5:0d:bd:a7:c1:1f:5f:5e:31:7a:4e:4d:
fd:1b:a4:4d:8e:e8:ff:97:08:dc:eb:f6:a5:b0:47:
76:24:50:2a:01:f9:a1:4c:23:7d:6a:c4:96:b3:50:
16:64:d4:9f:7e:57:52:b1:1b:6d:06:4a:9a:d9:50:
00:99:44:22:88:02:16:3b:4f:a2:38:4e:51:9e:8a:
89:6d:df:05:4f:e4:36:ae:eb:50:68:ff:a0:79:5f:
d1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D5:D0:A3:DB:1F:4A:41:42:CE:78:45:06:15:18:8F:42:0F:C5:AF
X509v3 Authority Key Identifier:
keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/h9XQo9sfSkFCznhFBhUYj0IPxa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.96.0/23
91.214.78.0/24
IPv6:
2a00:1e68::/32
Signature Algorithm: sha256WithRSAEncryption
ce:ed:84:4d:53:7e:0e:b5:3c:1d:b1:5c:d7:d2:82:61:65:d5:
f0:9e:83:07:4e:a7:b7:e9:a6:0e:dd:74:b5:a3:3a:ba:42:6f:
30:1d:f8:1c:14:1e:3d:8d:bb:2b:d1:f1:bb:e1:5e:2b:a6:c6:
19:4a:4d:f1:62:20:d0:94:56:2c:f8:ee:76:07:8f:7e:90:df:
60:67:6a:9c:37:50:89:f1:8f:dd:f6:33:c2:3d:f4:81:42:15:
84:44:4d:81:54:cd:ff:cb:58:64:88:f4:18:f1:77:06:b4:8f:
8f:72:21:37:b7:26:99:fd:56:29:ad:6a:34:91:39:32:a4:ed:
10:7a:10:ca:aa:10:fe:a3:99:e9:29:99:da:78:0e:18:06:60:
33:28:1f:b7:dc:8d:c7:3e:a2:5e:13:1d:53:56:d9:7b:5b:0e:
6c:83:49:0f:58:b5:0c:25:53:4d:dd:52:ef:d5:78:44:42:0b:
d4:bd:d4:aa:a8:25:d0:3e:57:52:ce:1f:13:05:74:0e:a3:45:
4a:7e:82:06:68:91:bf:35:e7:34:d5:1e:80:2d:40:01:c9:d8:
bf:7a:03:77:b5:8a:0f:be:46:0c:9c:2c:f4:8d:94:90:10:f8:
3b:7e:f8:6b:dd:5b:e1:7e:b7:e6:ac:1a:a6:06:c6:52:e1:fa:
b9:7a:ff:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:55:47 2026 by rpki-client