Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/whrEFYh55PfP3rH9r88LFTEnY0U.roa
File: whrEFYh55PfP3rH9r88LFTEnY0U.roa (raw, json)
Hash identifier: TH01oABU19/I/IoXNBdj7bjG3uEgkQpDazrpyE0JmkM=
Subject key identifier: C2:1A:C4:15:88:79:E4:F7:CF:DE:B1:FD:AF:CF:0B:15:31:27:63:45
Certificate issuer: /CN=b59b654b42833d36688e379a921bebaecc307762
Certificate serial: 019F2368CC4CC57A1931134A3A46BE715F21
Authority key identifier: B5:9B:65:4B:42:83:3D:36:68:8E:37:9A:92:1B:EB:AE:CC:30:77:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZtlS0KDPTZojjeakhvrrswwd2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/whrEFYh55PfP3rH9r88LFTEnY0U.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197735
IP address blocks: 91.226.26.0/23 maxlen: 23
91.226.26.0/24 maxlen: 24
91.226.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZtlS0KDPTZojjeakhvrrswwd2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cc:4c:c5:7a:19:31:13:4a:3a:46:be:71:5f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59b654b42833d36688e379a921bebaecc307762
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c21ac4158879e4f7cfdeb1fdafcf0b1531276345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:13:d0:93:64:69:3f:ed:9e:52:cc:94:82:49:
55:85:5a:41:26:9f:49:4c:6e:f9:dd:9b:3a:e0:82:
c0:7f:1f:cf:98:71:af:c6:e2:40:27:13:55:25:d2:
86:0b:77:d2:dd:60:a6:ca:61:0f:35:27:75:9c:a8:
cc:bc:86:95:e4:75:6c:b1:94:d8:bd:a3:64:73:3e:
80:23:56:1d:53:c0:9a:cc:e8:62:54:32:9c:49:7b:
dd:57:fb:1d:76:87:64:1e:d7:29:ec:e9:bc:a3:9c:
41:29:8e:7a:2a:d3:3f:b2:38:14:64:5f:c4:75:ef:
5c:34:15:ae:5b:08:39:6d:3f:16:1d:1b:9e:14:05:
7a:9b:f6:88:57:3d:17:2b:23:cb:f1:07:82:e7:c7:
24:ba:da:04:e7:a1:aa:3b:fa:77:ca:2d:20:93:7a:
dc:7f:d7:45:17:9a:a1:0c:6c:57:1c:f4:83:c3:74:
af:4d:ef:46:6d:28:d7:cc:97:96:aa:43:9a:1d:82:
a6:fd:62:66:84:de:9b:19:3f:07:3e:4e:14:06:7f:
9d:50:d4:23:cd:95:e7:c5:79:ef:93:10:c3:d9:41:
84:cd:84:4d:f9:15:17:d9:65:b4:d4:06:53:11:bf:
3c:4e:a2:14:80:ac:43:08:49:2b:4f:b6:ce:07:0e:
6e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1A:C4:15:88:79:E4:F7:CF:DE:B1:FD:AF:CF:0B:15:31:27:63:45
X509v3 Authority Key Identifier:
keyid:B5:9B:65:4B:42:83:3D:36:68:8E:37:9A:92:1B:EB:AE:CC:30:77:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZtlS0KDPTZojjeakhvrrswwd2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/whrEFYh55PfP3rH9r88LFTEnY0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.26.0/23
Signature Algorithm: sha256WithRSAEncryption
65:90:6d:9a:91:fb:14:89:43:f1:12:b2:cd:61:a1:4f:9d:4b:
4a:ad:30:26:ee:c4:18:c5:0e:bd:2b:69:00:08:cd:da:39:f8:
25:41:47:0f:c0:e7:5c:c8:8c:f0:aa:5b:bb:cb:f6:7d:05:1c:
14:3c:ec:26:d1:9e:e2:d5:e3:87:55:fa:a8:d9:e8:72:05:bf:
0e:45:06:2b:54:e8:47:32:ce:5a:1b:88:ce:75:56:60:1c:96:
2b:44:2e:fe:22:b0:5a:15:4c:cd:a3:9c:a2:09:3e:6e:c0:1c:
0c:d9:d2:38:fe:95:8f:fd:5e:90:10:d6:66:7b:64:91:2d:7f:
30:9f:6e:8e:16:d5:68:3c:98:59:1b:62:98:0a:34:a2:2c:71:
5c:79:b9:a6:9c:87:11:08:7c:41:96:fc:a4:14:1f:ff:74:2f:
90:03:0c:62:d7:39:63:52:08:cd:65:19:e0:7e:3b:1e:9e:a5:
39:34:bc:3e:c8:01:d8:c0:00:4d:68:8e:2d:0f:fc:6a:44:c7:
b9:8d:5a:ca:9b:15:66:f3:d6:df:db:02:7c:67:d3:ca:a7:b9:
6b:15:20:6d:d1:42:60:45:be:09:16:4a:2e:8e:32:db:90:df:
7c:60:1d:97:a4:77:f7:83:d0:bc:09:7c:52:52:d1:d7:b8:ba:
5b:5a:07:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:24:52 2026 by rpki-client