Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/L5cQ5SJUyLN7drpYYBzPM81Qf1g.roa
File: L5cQ5SJUyLN7drpYYBzPM81Qf1g.roa (raw, json)
Hash identifier: /FF+sHYB7i2p1F+LkGmyZupdIg1ihT2WUmRZqDaJdeg=
Subject key identifier: 2F:97:10:E5:22:54:C8:B3:7B:76:BA:58:60:1C:CF:33:CD:50:7F:58
Certificate issuer: /CN=0b85c33bc0242c52f08a5c143c6b1bd20d0cf807
Certificate serial: 019F23687962C30F1F3D18C97339FC8843EC
Authority key identifier: 0B:85:C3:3B:C0:24:2C:52:F0:8A:5C:14:3C:6B:1B:D2:0D:0C:F8:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4XDO8AkLFLwilwUPGsb0g0M-Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/L5cQ5SJUyLN7drpYYBzPM81Qf1g.roa
Signing time: Thu 02 Jul 2026 15:17:56 +0000
ROA not before: Thu 02 Jul 2026 15:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51838
IP address blocks: 91.220.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/C4XDO8AkLFLwilwUPGsb0g0M-Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/C4XDO8AkLFLwilwUPGsb0g0M-Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4XDO8AkLFLwilwUPGsb0g0M-Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:79:62:c3:0f:1f:3d:18:c9:73:39:fc:88:43:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b85c33bc0242c52f08a5c143c6b1bd20d0cf807
Validity
Not Before: Jul 2 15:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f9710e52254c8b37b76ba58601ccf33cd507f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:0e:27:0a:dd:0e:4f:57:f2:82:c2:f1:a5:
2e:57:76:06:e2:2d:f7:35:a2:2c:c9:0e:7d:16:91:
68:cf:24:a4:11:2e:d2:9a:f6:e0:4c:f5:ae:5a:2b:
ee:46:2f:7f:7b:7c:25:3a:d9:d6:e8:25:7a:ac:fe:
76:f4:15:ef:d9:95:16:16:ee:34:14:0a:19:d2:9d:
74:4e:36:f1:34:aa:ff:51:51:ec:6a:6f:12:24:95:
98:92:2b:21:40:e7:18:48:03:bf:8b:5b:74:56:89:
53:66:16:de:ea:48:e0:31:a7:63:ac:3d:a9:5d:8e:
4a:6e:97:02:e4:21:45:f5:c1:bd:b8:74:d0:0e:9f:
a9:40:a1:1c:4f:be:9a:30:22:08:6a:de:08:c2:e2:
94:ef:b4:7d:32:8b:d1:62:5c:a2:ad:ca:22:c8:61:
da:93:e2:7a:51:cf:65:e2:34:50:ee:61:68:1d:fa:
b4:9f:c8:1a:f5:88:0c:a3:de:9f:78:ff:eb:03:dc:
f5:56:46:2c:f1:1d:62:1c:83:a7:52:35:d7:50:ae:
87:be:1d:74:71:f1:08:16:4d:e9:df:b9:1c:86:93:
2f:50:cd:aa:e0:b8:01:d2:8e:16:7b:8c:fb:fd:7f:
ff:a1:92:27:e3:1f:c8:cb:a5:cd:35:96:72:dd:19:
c9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:97:10:E5:22:54:C8:B3:7B:76:BA:58:60:1C:CF:33:CD:50:7F:58
X509v3 Authority Key Identifier:
keyid:0B:85:C3:3B:C0:24:2C:52:F0:8A:5C:14:3C:6B:1B:D2:0D:0C:F8:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4XDO8AkLFLwilwUPGsb0g0M-Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/L5cQ5SJUyLN7drpYYBzPM81Qf1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/C4XDO8AkLFLwilwUPGsb0g0M-Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.145.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:f9:65:e7:d7:be:42:db:5c:6d:f5:05:c2:8c:aa:05:6a:88:
c0:d3:cb:28:81:0f:a8:67:7e:74:3f:61:d2:4f:92:63:9f:73:
09:e8:37:dc:ca:5f:2a:6c:c5:f8:b6:99:17:e1:4e:d5:45:44:
14:d9:d6:91:f3:25:03:19:6e:70:56:cb:58:4e:70:c4:95:c5:
f5:56:31:b4:2e:d9:c1:cc:5a:be:b0:32:68:dc:08:46:4a:7f:
ed:7c:ac:cb:11:73:b6:0b:16:c9:dc:59:5a:c3:35:b0:6d:3a:
1e:56:1c:25:6f:08:d8:bc:22:a8:6b:2b:4e:ff:44:73:19:82:
b1:ba:bf:ae:12:0c:a8:4c:79:0e:ea:83:e8:f9:1d:70:57:31:
1a:be:90:12:a7:e0:33:2c:0e:d4:98:e2:78:b2:38:cd:a1:98:
21:6c:d4:7e:19:c6:a5:03:35:2c:ae:0d:5b:b9:dd:49:62:04:
67:43:21:20:85:fd:a9:55:7a:0f:ac:41:e2:69:17:9c:d7:f4:
7c:90:91:3e:c6:6f:00:27:9f:4b:53:51:be:40:4f:d1:63:e2:
06:8d:bc:ed:90:76:66:ef:3d:2e:30:f2:6b:3e:6c:f8:61:73:
ab:08:5d:b0:a3:84:a8:49:11:19:bc:fb:13:ea:b8:ce:3c:18:
74:56:53:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:52 2026 by rpki-client