Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/996d4d-b1f9-482f-ad7d-8104512f6813/1/Phk-Sg6j1S3n1D3P_ywSvIjcPJY.roa
File: Phk-Sg6j1S3n1D3P_ywSvIjcPJY.roa (raw, json)
Hash identifier: Ol5VD2GffHOmtHk0PUaK5mza4YOy3L2LT9+gE3CB8/s=
Subject key identifier: 3E:19:3E:4A:0E:A3:D5:2D:E7:D4:3D:CF:FF:2C:12:BC:88:DC:3C:96
Certificate issuer: /CN=1462dd268cbef077954d84fffaf2e0102c951335
Certificate serial: 019CEB3E82A46A814E811D731EEA990CD91F
Authority key identifier: 14:62:DD:26:8C:BE:F0:77:95:4D:84:FF:FA:F2:E0:10:2C:95:13:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGLdJoy-8HeVTYT_-vLgECyVEzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/996d4d-b1f9-482f-ad7d-8104512f6813/1/Phk-Sg6j1S3n1D3P_ywSvIjcPJY.roa
Signing time: Sat 14 Mar 2026 07:27:48 +0000
ROA not before: Sat 14 Mar 2026 07:27:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210795
IP address blocks: 91.217.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/996d4d-b1f9-482f-ad7d-8104512f6813/1/FGLdJoy-8HeVTYT_-vLgECyVEzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/996d4d-b1f9-482f-ad7d-8104512f6813/1/FGLdJoy-8HeVTYT_-vLgECyVEzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGLdJoy-8HeVTYT_-vLgECyVEzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:eb:3e:82:a4:6a:81:4e:81:1d:73:1e:ea:99:0c:d9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1462dd268cbef077954d84fffaf2e0102c951335
Validity
Not Before: Mar 14 07:27:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e193e4a0ea3d52de7d43dcfff2c12bc88dc3c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e4:a4:53:ea:a4:17:10:1d:50:5d:b2:8f:86:
19:56:5f:13:a1:5b:43:e8:a1:bf:b7:73:98:5c:83:
8d:5f:11:ac:fa:26:a7:dd:58:28:2b:b8:3e:1a:df:
aa:30:ce:07:c5:d8:9d:60:f4:d2:90:49:01:04:89:
57:49:8a:9e:61:94:b9:dd:6a:3b:eb:3a:82:b5:6a:
f7:39:b1:03:a5:e8:ea:71:29:a8:c1:91:38:22:34:
5c:41:2a:5d:bd:66:8a:4a:4f:68:73:8a:56:9e:36:
96:c5:b3:2b:d5:1e:8b:4c:c4:9c:ef:cc:91:70:9c:
ba:8a:40:e3:e3:92:32:26:ba:c0:81:f1:d4:fc:9f:
d6:73:13:5b:ba:8e:b8:f5:79:7b:ce:70:57:f4:e0:
eb:ca:a0:35:82:fd:c3:5d:2c:e5:6b:b6:80:09:7a:
fd:f5:90:63:2b:b4:8a:d2:f7:34:26:68:61:f3:c8:
bd:28:4b:ff:41:8e:24:d3:f9:3a:a5:1a:05:81:48:
a7:85:d6:72:a9:9c:64:13:78:7b:d6:cb:a9:44:a4:
7b:6c:f5:93:69:28:b9:c3:76:36:c8:51:ec:92:5d:
87:8a:08:93:fe:9c:72:0d:55:f2:df:47:e2:b2:2d:
bd:6f:79:c3:69:dd:87:1f:be:89:08:18:08:90:f0:
07:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:19:3E:4A:0E:A3:D5:2D:E7:D4:3D:CF:FF:2C:12:BC:88:DC:3C:96
X509v3 Authority Key Identifier:
keyid:14:62:DD:26:8C:BE:F0:77:95:4D:84:FF:FA:F2:E0:10:2C:95:13:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGLdJoy-8HeVTYT_-vLgECyVEzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/996d4d-b1f9-482f-ad7d-8104512f6813/1/Phk-Sg6j1S3n1D3P_ywSvIjcPJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/996d4d-b1f9-482f-ad7d-8104512f6813/1/FGLdJoy-8HeVTYT_-vLgECyVEzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.192.0/24
Signature Algorithm: sha256WithRSAEncryption
56:c4:f8:c3:54:8a:80:58:90:27:10:82:43:15:73:c5:94:9f:
8d:f8:d2:2d:29:0e:67:c0:50:4c:62:97:f6:92:5c:d7:77:34:
63:41:a7:c4:49:ec:1b:a2:5c:ba:dc:91:e3:f9:68:60:17:fb:
a3:c3:d9:33:e8:b9:5f:5f:b6:34:b1:f3:8c:77:44:d3:46:1b:
f3:24:91:6a:bb:f1:a4:08:98:17:c9:77:96:d9:22:16:70:af:
85:41:57:18:51:c3:b1:36:01:22:c9:c5:f8:03:19:e4:83:ac:
e3:a5:a3:0c:77:cb:f8:ad:8d:2f:53:71:7e:fd:ac:99:03:4c:
b4:4b:00:88:7d:60:a9:9a:4a:b0:ff:95:06:ab:e6:f5:1e:2d:
fd:56:8c:15:b1:26:16:87:21:df:03:72:7b:3a:de:15:bd:06:
36:f8:71:54:c4:ff:f7:f8:5a:2e:40:a7:fe:8d:67:d9:0f:c0:
fd:85:ae:9f:86:86:9b:a0:a7:4a:f6:3d:0b:0f:2b:63:37:6e:
33:da:fa:07:e8:9b:58:ea:d9:2c:2d:1c:c9:ce:f5:f6:46:d1:
e4:61:f5:61:4e:59:2e:49:34:9f:d1:08:cb:3f:0e:09:c0:53:
cf:ef:0f:6f:06:4b:90:4c:0a:fe:76:71:cd:17:39:58:a4:fa:
5f:f4:13:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:44 2026 by rpki-client