Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/t03EMq-NSzz6z5HQa-GjXWKzoZo.roa
File: t03EMq-NSzz6z5HQa-GjXWKzoZo.roa (raw, json)
Hash identifier: yH0kTbOMtCUA51U3VcVTi8KodU663jCCHRpwjnHIH54=
Subject key identifier: B7:4D:C4:32:AF:8D:4B:3C:FA:CF:91:D0:6B:E1:A3:5D:62:B3:A1:9A
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 019ECA3108EB5E1F2CA032B895BF7C472F4A
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/t03EMq-NSzz6z5HQa-GjXWKzoZo.roa
Signing time: Mon 15 Jun 2026 07:31:11 +0000
ROA not before: Mon 15 Jun 2026 07:31:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215736
IP address blocks: 91.126.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:31:08:eb:5e:1f:2c:a0:32:b8:95:bf:7c:47:2f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Jun 15 07:31:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b74dc432af8d4b3cfacf91d06be1a35d62b3a19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:ce:7a:e4:60:55:14:b8:67:d9:ba:43:4d:
60:40:21:76:4f:a0:d1:f7:86:08:89:bf:b2:22:32:
21:37:70:8b:ce:0a:75:ca:fd:6b:c6:95:db:17:f2:
0a:b2:23:77:e9:e3:00:b4:24:eb:24:5c:db:7f:5b:
ba:0d:ef:65:d5:b8:15:e1:9a:db:35:5b:a7:6e:5e:
a1:c1:b1:ea:74:6c:68:cf:c9:56:2a:30:e7:34:18:
9c:f5:be:25:6b:bb:1f:d4:69:de:d1:82:29:d8:0e:
91:4c:91:67:22:e7:06:75:fa:25:cb:14:f7:18:75:
d0:68:57:0c:9f:50:0b:4b:08:e5:c8:b0:9d:67:b6:
11:7f:75:e7:e0:36:71:26:e2:0b:2c:69:85:3c:09:
2b:f6:8a:85:ce:89:85:fc:8c:89:cc:a2:1c:01:fa:
3c:20:34:ca:7e:32:b1:bc:31:5a:67:ce:c4:79:c9:
d7:db:94:5b:1c:35:88:5a:00:1f:0a:d5:24:17:63:
0c:5c:e4:b2:8b:52:8b:3f:cd:52:43:39:62:5b:4b:
58:e9:4d:03:7f:d2:10:99:5f:2b:e0:5e:c4:6a:58:
57:dc:21:0b:c9:e9:2a:43:9e:84:d5:b7:46:32:96:
de:3c:4d:47:80:1c:1d:98:4f:27:d1:b5:4e:23:33:
b2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4D:C4:32:AF:8D:4B:3C:FA:CF:91:D0:6B:E1:A3:5D:62:B3:A1:9A
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/t03EMq-NSzz6z5HQa-GjXWKzoZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.126.220.0/24
Signature Algorithm: sha256WithRSAEncryption
56:27:9e:91:d2:8e:4b:aa:82:12:d5:fe:d4:b7:be:d5:b1:fe:
20:98:af:81:79:1c:4c:d8:df:1a:55:cc:90:fa:03:f7:ff:e2:
c0:4e:33:e1:87:b8:fc:53:9c:9e:2e:8e:ee:15:9a:fa:d7:46:
e8:81:af:85:ef:6d:74:ee:88:55:0d:05:43:42:eb:fd:68:1f:
d5:bb:ca:80:88:69:30:9f:2a:f2:fe:fb:f6:52:49:a5:a7:61:
16:af:d1:02:48:88:52:71:9a:27:8b:57:8e:12:35:34:c4:60:
0f:ea:5b:8d:14:03:b0:b1:ff:ed:bb:29:8c:a8:18:12:8a:ce:
aa:52:4d:d4:d5:e5:b1:23:de:dd:fd:b6:ec:89:9f:ef:ed:20:
45:34:28:5a:25:97:87:be:e3:69:05:20:ad:7c:fa:18:0b:85:
8c:67:2e:af:f8:f9:98:ea:e1:b0:b9:b1:ca:cc:57:92:04:f1:
83:fe:d0:0d:42:eb:ff:86:ff:46:fe:77:47:a8:fc:4a:57:1f:
9d:32:a4:05:22:90:d8:bf:4f:08:d2:20:b7:90:5f:d0:e6:be:
ed:7a:2c:67:a6:36:fe:46:9f:77:12:4b:0b:d9:2b:3a:16:c7:
cf:4d:d1:a6:ac:eb:b5:68:97:4e:37:b7:2c:ad:ce:a3:44:39:
34:19:8f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:13 2026 by rpki-client