Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/kF__trkxnSoai5YPHEuion9F5-M.roa
File: kF__trkxnSoai5YPHEuion9F5-M.roa (raw, json)
Hash identifier: tWmn9E+rdr18LE8axfsyGzfbkAEBv9XZf3xK1lkaYrs=
Subject key identifier: 90:5F:FF:B6:B9:31:9D:2A:1A:8B:96:0F:1C:4B:A2:A2:7F:45:E7:E3
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 019F409D62B9D560D028598A950E1DF3A918
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/kF__trkxnSoai5YPHEuion9F5-M.roa
Signing time: Wed 08 Jul 2026 07:24:44 +0000
ROA not before: Wed 08 Jul 2026 07:24:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.234.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:9d:62:b9:d5:60:d0:28:59:8a:95:0e:1d:f3:a9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Jul 8 07:24:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=905fffb6b9319d2a1a8b960f1c4ba2a27f45e7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ba:60:8a:91:48:20:e8:e9:69:fd:2d:ef:71:
fd:32:1a:33:a1:c3:9d:89:a3:fc:f6:54:e1:4b:09:
21:c4:71:18:39:28:b2:4c:cb:47:23:c2:16:17:68:
e7:7b:d3:e2:d4:1c:00:47:c0:f5:f9:6e:75:84:e9:
7a:3e:c5:23:a7:c0:61:d1:be:42:13:57:ef:9b:2c:
3e:45:ab:54:2e:05:30:ea:23:07:9f:92:8d:bd:3b:
ab:ef:93:6b:8d:0d:84:c0:b2:e0:26:61:19:95:7c:
a1:0e:57:1a:06:3b:5d:1f:bd:94:35:95:66:09:85:
a8:14:f9:88:dc:25:51:6c:02:45:53:43:a2:b0:03:
4f:bd:3a:af:16:11:a8:c9:9c:19:5e:f7:e4:91:c7:
54:1b:33:24:6c:de:41:4a:3e:f1:ba:6c:e6:80:3b:
fd:66:d0:7b:95:01:f7:4b:7a:71:e9:54:f7:3f:cb:
41:5b:6a:f9:08:12:73:ae:11:15:dc:9f:38:37:db:
c2:ef:e8:5b:9c:7d:8a:94:1d:0a:5c:67:64:88:af:
df:c2:99:8f:36:9f:02:59:f1:4f:1b:44:95:e3:0d:
12:82:e3:94:b6:09:0c:bc:36:b5:64:02:2f:e9:99:
26:1d:e0:c6:9e:33:30:75:0b:73:2e:2b:8c:29:f8:
f1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5F:FF:B6:B9:31:9D:2A:1A:8B:96:0F:1C:4B:A2:A2:7F:45:E7:E3
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/kF__trkxnSoai5YPHEuion9F5-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.22.0/24
Signature Algorithm: sha256WithRSAEncryption
00:18:4b:8f:ec:93:ea:ed:08:a5:4c:10:45:6f:84:18:0d:7b:
76:5f:bd:55:5a:5f:39:d8:b5:a2:9b:fc:b3:10:51:3d:33:32:
fe:06:0a:0e:23:c0:7a:c0:00:02:c1:29:76:1a:9d:0f:1c:c9:
69:d1:57:ae:b2:42:ee:1e:1f:06:04:d5:ee:33:cf:ba:1e:e7:
81:bd:5a:0e:39:d1:7d:ff:d3:3c:20:b1:ae:c7:0d:3d:73:f5:
88:97:9e:70:5f:bf:8b:5b:ae:2c:a7:19:c5:14:a1:00:43:26:
ba:14:29:47:20:a5:cf:e1:e3:85:69:89:6a:5c:ec:1a:a2:85:
60:e3:a1:39:10:3f:18:53:0d:4c:7d:c8:41:df:12:0f:ac:82:
54:93:00:b8:ae:c0:03:a8:0b:59:7e:01:42:5d:97:7b:80:a9:
ec:4e:4c:01:70:48:36:86:45:54:d8:2d:95:cf:a5:3f:72:d4:
82:99:8f:60:51:37:54:7c:67:25:0a:2e:ab:50:db:0d:6f:26:
f7:ee:70:66:d2:5f:73:ec:3f:61:41:00:7d:57:5f:3d:84:b9:
b9:ac:fe:c4:e1:0f:93:ac:8a:ce:d1:07:26:2b:03:0b:e0:b8:
9e:83:eb:33:44:33:33:d8:c9:c2:26:31:a1:f2:c9:04:b5:f3:
25:41:62:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:25 2026 by rpki-client