Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/jnoYXUWkNRBwE55gU3cUjhKnM9w.roa
File: jnoYXUWkNRBwE55gU3cUjhKnM9w.roa (raw, json)
Hash identifier: GkOFMkSHJrr+Ph9/Sr5URt6WqLmo1u32CGBeLjwbWR4=
Subject key identifier: 8E:7A:18:5D:45:A4:35:10:70:13:9E:60:53:77:14:8E:12:A7:33:DC
Certificate issuer: /CN=220f2767315875ec0efc2e255856f586a4ddf99c
Certificate serial: 019F88E3BCF39BC6B5ADD8DA8D8176DC7F07
Authority key identifier: 22:0F:27:67:31:58:75:EC:0E:FC:2E:25:58:56:F5:86:A4:DD:F9:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/jnoYXUWkNRBwE55gU3cUjhKnM9w.roa
Signing time: Wed 22 Jul 2026 08:14:14 +0000
ROA not before: Wed 22 Jul 2026 08:14:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197275
IP address blocks: 91.219.56.0/22 maxlen: 24
91.219.56.0/23 maxlen: 24
91.219.56.0/24 maxlen: 24
91.219.57.0/24 maxlen: 24
91.219.58.0/23 maxlen: 24
91.219.58.0/24 maxlen: 24
91.219.59.0/24 maxlen: 24
176.115.144.0/21 maxlen: 24
176.115.144.0/22 maxlen: 24
176.115.144.0/23 maxlen: 24
176.115.144.0/24 maxlen: 24
176.115.146.0/23 maxlen: 24
176.115.148.0/22 maxlen: 24
176.115.148.0/23 maxlen: 24
176.115.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:88:e3:bc:f3:9b:c6:b5:ad:d8:da:8d:81:76:dc:7f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220f2767315875ec0efc2e255856f586a4ddf99c
Validity
Not Before: Jul 22 08:14:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e7a185d45a4351070139e605377148e12a733dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:95:5a:18:36:17:67:93:dd:a7:8e:20:1b:74:
fc:e3:28:0e:b0:2f:ba:29:b0:b9:70:9e:85:21:05:
3b:a9:b6:00:f2:f4:3b:81:6e:42:99:2e:01:f3:9b:
04:a1:0c:91:04:36:7f:b6:2e:99:55:5d:e2:82:16:
2e:0f:74:65:6f:1b:b1:18:3b:48:58:6d:6e:af:84:
71:b2:10:45:39:27:5b:b1:d3:b0:f8:cd:02:65:9a:
a7:d1:8e:41:c5:a8:54:7e:0a:e5:04:98:1f:96:02:
74:50:42:3c:e1:50:af:51:da:6f:61:08:77:21:da:
3a:93:1c:dc:6f:95:55:1d:6b:78:dc:d8:e8:d9:95:
2d:3c:14:9d:13:99:16:5d:ed:d2:ee:7c:fb:d5:ca:
62:e5:01:4f:00:70:8d:83:ba:20:58:94:ba:06:e5:
22:c1:90:f7:da:12:41:92:be:5d:d8:df:fd:b8:f7:
69:b5:c1:e9:d5:1d:23:a2:7b:17:1b:36:fb:29:68:
fe:28:7e:ea:cb:29:5d:a6:bd:96:d6:6a:db:6d:db:
c1:ed:dc:4e:0f:30:3f:96:db:bc:2e:2c:d4:7f:d7:
aa:5a:c5:62:59:63:19:fd:c6:a4:7a:17:ba:ab:25:
fc:a3:f1:e4:e4:16:dd:12:3e:78:ff:b9:74:9a:92:
29:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7A:18:5D:45:A4:35:10:70:13:9E:60:53:77:14:8E:12:A7:33:DC
X509v3 Authority Key Identifier:
keyid:22:0F:27:67:31:58:75:EC:0E:FC:2E:25:58:56:F5:86:A4:DD:F9:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/jnoYXUWkNRBwE55gU3cUjhKnM9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.56.0/22
176.115.144.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:69:e9:59:b2:53:a2:ef:f4:96:59:3d:36:81:ab:fa:e1:0f:
2f:3a:d2:7e:2d:be:78:ac:a2:6f:bd:fc:3d:0b:59:ae:ee:a9:
6d:cb:4c:81:72:7e:3f:b1:00:bc:6f:3c:9b:cb:5a:54:18:0f:
c8:7f:3f:7a:4d:0c:65:2c:50:d8:c9:3b:49:be:c1:77:b2:f7:
16:8e:25:80:5e:a5:7a:dd:9f:17:33:0a:01:cd:a6:c0:b6:2c:
10:0b:3a:c3:2e:d5:6c:1d:00:a0:bf:dd:63:59:38:1e:92:ed:
b3:62:4e:91:c3:74:7f:0e:4e:5e:f0:6f:32:47:05:3e:b0:a5:
f3:98:2a:fd:39:b7:28:05:25:35:1a:5c:d6:3b:dc:bc:05:28:
47:b4:bc:c8:e7:e6:92:6c:e5:eb:56:c2:db:1d:2f:87:74:73:
8b:58:14:34:aa:e8:84:d9:c4:32:45:55:72:9e:db:09:5c:32:
99:37:30:17:4b:27:98:07:aa:51:08:b7:e0:8d:9a:0b:62:f4:
4b:ad:2c:a7:f8:08:26:53:52:b4:89:62:8f:3f:13:58:0d:67:
1a:7a:0a:c3:ee:fe:4c:f6:72:0d:1f:a5:9a:b9:c1:1e:61:7f:
dc:70:2e:5d:e4:40:1c:37:09:14:cf:30:d0:6b:99:3b:be:09:
4c:35:37:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:32:17 2026 by rpki-client