Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/91sagGL807dFWyb_xc8Ir81BNXY.roa
File: 91sagGL807dFWyb_xc8Ir81BNXY.roa (raw, json)
Hash identifier: 44SeTYivk7setzAfj/YcZ65NHA48BzCF/cH4WG2sv9g=
Subject key identifier: F7:5B:1A:80:62:FC:D3:B7:45:5B:26:FF:C5:CF:08:AF:CD:41:35:76
Certificate issuer: /CN=09d290bc6838862855e19cdbdc109cbb48e08cff
Certificate serial: 019F2368521466191C6376CFA3F1D9CD95F8
Authority key identifier: 09:D2:90:BC:68:38:86:28:55:E1:9C:DB:DC:10:9C:BB:48:E0:8C:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdKQvGg4hihV4Zzb3BCcu0jgjP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/91sagGL807dFWyb_xc8Ir81BNXY.roa
Signing time: Thu 02 Jul 2026 15:17:46 +0000
ROA not before: Thu 02 Jul 2026 15:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42484
IP address blocks: 81.13.111.0/24 maxlen: 24
81.13.112.0/24 maxlen: 24
194.67.129.0/24 maxlen: 24
194.67.139.0/24 maxlen: 24
213.252.101.0/24 maxlen: 24
213.252.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CdKQvGg4hihV4Zzb3BCcu0jgjP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:52:14:66:19:1c:63:76:cf:a3:f1:d9:cd:95:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d290bc6838862855e19cdbdc109cbb48e08cff
Validity
Not Before: Jul 2 15:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f75b1a8062fcd3b7455b26ffc5cf08afcd413576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:36:dd:9d:62:21:e6:0e:8a:e0:60:12:9a:c7:
1b:39:b3:3d:8a:22:0a:bd:c8:de:b1:89:60:d6:f2:
dc:1e:62:2a:e2:fa:76:3d:f3:48:b3:c2:44:7d:37:
a0:c8:23:5d:f6:2e:e4:fc:c0:59:ed:9f:bc:b2:f8:
58:49:08:dc:4d:49:f2:0f:d3:c6:2b:f0:88:cb:84:
d1:47:2e:a3:27:10:d6:72:8a:09:91:57:5b:37:cd:
22:bb:04:d3:ce:e2:72:64:46:9e:25:5c:5a:06:4d:
f7:cf:d7:8b:c7:df:c7:d4:6c:cf:c9:b8:64:7a:1f:
76:29:27:81:20:0e:64:b1:72:e1:19:0c:04:ac:93:
bf:31:f7:73:c6:a5:ed:f8:f9:41:e2:a4:64:38:f1:
f1:fe:6a:2a:c8:b8:53:aa:3b:6f:7f:17:1e:b9:6f:
3a:27:bb:4f:49:20:6f:82:a9:6d:5e:9f:81:74:ce:
a5:57:8b:ad:aa:47:eb:19:ed:45:6e:7e:e8:8d:d9:
79:2c:10:10:36:52:b7:92:89:46:4a:e8:3b:23:65:
a5:dd:2b:ef:95:09:98:36:a4:40:8d:ba:d2:5f:ca:
ea:ae:e6:dd:bd:35:15:24:17:8b:de:e2:2c:f1:5d:
b8:60:8b:51:f6:07:55:be:2a:6d:f4:d0:db:f7:dd:
41:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5B:1A:80:62:FC:D3:B7:45:5B:26:FF:C5:CF:08:AF:CD:41:35:76
X509v3 Authority Key Identifier:
keyid:09:D2:90:BC:68:38:86:28:55:E1:9C:DB:DC:10:9C:BB:48:E0:8C:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdKQvGg4hihV4Zzb3BCcu0jgjP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/91sagGL807dFWyb_xc8Ir81BNXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/CdKQvGg4hihV4Zzb3BCcu0jgjP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.13.111.0-81.13.112.255
194.67.129.0/24
194.67.139.0/24
213.252.101.0/24
213.252.108.0/24
Signature Algorithm: sha256WithRSAEncryption
76:9a:ce:e1:6b:d6:e4:3b:b5:9f:6a:a9:5e:58:ce:29:dd:1c:
35:e0:a9:f5:a3:51:3b:a9:79:7b:44:f4:79:ee:6d:21:3f:c7:
de:7e:e5:6b:e7:65:4d:94:4d:80:0f:bf:f7:dd:0c:40:03:64:
16:e1:f1:87:c5:25:b0:6c:4b:da:10:b5:d5:e2:64:e2:bc:97:
38:61:ca:2a:b9:e3:b3:49:3c:23:06:05:3f:14:ac:be:32:21:
ce:97:1e:9c:ba:4c:9d:00:be:99:91:69:c0:40:de:0f:67:53:
f2:46:b4:74:ec:e1:2c:98:37:87:cd:6d:af:7c:0e:cf:ef:2c:
a4:39:3f:91:a4:77:e4:a4:da:99:db:18:84:97:e6:6e:8c:79:
6e:aa:b5:f0:5f:15:de:d2:fb:27:27:ad:ae:6f:72:c0:1a:ff:
d1:4c:58:8a:58:24:bd:3a:23:2f:c0:c0:88:cd:33:5c:b0:d4:
bd:c1:80:47:c0:15:16:bf:91:65:62:9b:ca:a5:c7:48:a5:fc:
9b:cc:ee:ca:df:83:90:80:26:4b:d0:55:c0:f1:e4:62:f2:49:
4c:39:bc:59:c7:fb:74:63:1e:45:f0:e6:29:b0:37:7c:de:dd:
a0:50:47:12:7a:09:7c:63:a9:fd:b2:d5:48:dd:d5:6f:90:86:
1a:e0:d2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:29 2026 by rpki-client